last executing test programs:

20.08705376s ago: executing program 1 (id=2940):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000010000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01", 0x53}], 0x1)

19.185435027s ago: executing program 1 (id=2947):
r0 = socket$inet(0x2, 0x2, 0x1)
pipe(0x0)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000002c0))
getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x48}}], 0x1, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28)
setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@empty}, &(0x7f0000000240)=0x14)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="0ea1c9fd099bcf481f7c31cffe2319f500b00a99bc5e7bdc2f670d2dcbcb66ca601b22770f7bda0527c86a75f453375350935e72949d50853ed0fade81be7511ec8b1e16f682daf5c52b8b5f7bbca92a37fe23c100da9ad5c145475dd6bb9b7e79f70d71a1008fb4cc2a8e32448e287dfaac74d448f59cc2a6d4"}, {&(0x7f0000001340)="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"}], 0x4, &(0x7f0000000180)=[@ip_ttl={{0x0, 0x0, 0x2, 0xc0}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x12}}}}]}, 0x40014)

18.84955843s ago: executing program 1 (id=2949):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8585000000710000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd6401c1db5051b3edbfd8a4a60", 0x0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

18.674825541s ago: executing program 1 (id=2951):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={r1, r2/1000+10000}, 0x10)
write(r0, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x104, 0x5, 0x40, 0x11, 0x1, @random='=[3{;='}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff2}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
getsockopt(r3, 0x28, 0x800001, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f000000a600)={0x0, 0x0, &(0x7f000000a5c0)={&(0x7f000000a540)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)

7.97377358s ago: executing program 4 (id=3010):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000000000000700"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c481abccf61b80bc8ffa10a4a800"/32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0x864}], 0x2}}], 0x1, 0x11)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

6.971059362s ago: executing program 4 (id=3014):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x44004)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x1, @local, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

5.931205928s ago: executing program 0 (id=3019):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

5.827604582s ago: executing program 0 (id=3020):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000001280)=@in6={0x21, 0x20, 0x2, 0x1c, {0xa, 0x0, 0x8000, @mcast1}}, 0x24)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xa, 0x8}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2a}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x800)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xf2ff, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x0, 0x8, 0x40, r3, 0x6, '\x00', r7, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20)
ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0)
recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2)

5.374691067s ago: executing program 2 (id=3022):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x52004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x6, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x2)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x31, 0x0, 0x0, 0x8, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="212df7927f6a7354cb0000dfffff00000601000008000500fc66e1e74a85bb15", @ANYRES32=r4, @ANYBLOB="000400"/20, @ANYRES32=r5, @ANYBLOB="000000000100"/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r4}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)="af", 0x0, 0x2, r4}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r8=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x1c, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x14, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffffff9, 0xf1, &(0x7f0000000540)=""/241, 0x41000, 0x8, '\x00', r8, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x7, &(0x7f0000000880)=[r2, r9, r10, r11], &(0x7f00000008c0)=[{0x1, 0x4, 0x8, 0x3}, {0x0, 0x4, 0xb, 0xb}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x4, 0x10, 0x9}, {0x1, 0x4, 0x0, 0x9}, {0x2, 0x4, 0x0, 0xa}, {0x3, 0x1, 0xc, 0x7}]}, 0x94)

5.176003735s ago: executing program 2 (id=3023):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000000000000700"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c481abccf61b80bc8ffa10a4a800"/32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282e3430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206ec227e6e9050c1efa1a1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fb00c9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027a", 0x864}], 0x2}}], 0x1, 0x11)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

4.830629169s ago: executing program 0 (id=3024):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket(0x1, 0x80802, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x20002007})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

4.292030915s ago: executing program 3 (id=3026):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="05000000010000", 0x7)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r5 = socket(0x10, 0x803, 0x2)
sendmsg$nl_route(r5, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@ipv6_delrule={0x1c, 0x21, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x14, 0x3, 0x3, 0x0, 0x0, 0x8, 0x10009}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004044)
getsockname$netrom(r5, &(0x7f00000006c0)={{0x3, @default}, [@bcast, @netrom, @bcast, @default, @rose, @bcast, @remote, @default]}, &(0x7f0000000200)=0x48)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)
readv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1)

4.226975646s ago: executing program 2 (id=3027):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000b, 0x12, r1, 0xa6d63000)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x880)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xcf4b, 0xfffc}}}, {{@ipv6={@remote, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'netpci0\x00', 'veth1_to_hsr\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200, 0x0, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

4.104545799s ago: executing program 3 (id=3028):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000081289064820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

3.914839211s ago: executing program 3 (id=3029):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0065000000000000000000000000000000000000029e5b862db9000040c4f100"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x7d, 0x4)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r5 = socket$packet(0x11, 0x2, 0x300)
unshare(0x62040200)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
setsockopt(r5, 0x10001, 0x0, &(0x7f0000000400)="a21a80702439c6427415eebb8aaf26dc366422fafe0f49ccdfdbabe7ae602fba4139497b15b6ca86c3197d2aae330df4fc58456403762fb57797eab2068b58b22db2f0a6e1ad8788339924a237b6e8faa19ca050067fbf5739fb5c923113bac0c204f93b59e7091c7f404ce3eccc44963b0d9a7783c1dd6609d37fad008282a081c78f30246450686e99382b0ecf76d33d49b0faf91159", 0x97)
close(0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100))
getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r9 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000005c0)={<r10=>0x0, 0xba, "5a2a30093d1068ef7f1c6de043ef12279471c12383e419292b22aa9eaa80b5954dfd2273585e8c29d2480b5f118633052f0ca0f087dd2ce8a419bf5cf0dbfbf2f2d33b997a84972fc7e4f34e5350945237fca72fa904478e0d014628c8e5fa5de7f4e7d84453762602298385e84428002e1c70b8a73b570523915256fc23e8dabf97a3d1d1ded587bb633c4eb15b61d00021d5315486fbbf55373fe7f027fbe56cca8bb0493741d2c0512ba41526e950fa3cc222cf5b6affd3fe"}, &(0x7f0000000040)=0xc2)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000006c0)={r10, 0xe9, "66fe239fb8b0a2d4abec6841fa8c13acac4d6a1c8a2dc1e086ad08be4da460c705f19a37d683417a5b297d0e97acbea12cf2fcdd5fe0fc2a87f22005d518ec04bd6fce7039819c2d84e5770eb663dcbd2c423a100ce56f5b0f7fd1f99d3a52c7400a96567a0cc4ffa1d753d0e5dfc054f1145657c4e2184fc191a1da96e9c9e1cd0226571c3555af825ec95964712d173682e95d6399d1d2e3537f557cc9f0162a66d33d89beefa87e2a562fe4c46c8aa8ed1a4c0026ff1c04aae57ebfbcb89546abd40589ace70df27c12608aa436393b0a46cb06958c3a31b85455e997fddee067b79038d9e91294"}, &(0x7f0000000200)=0xf1)

3.91371633s ago: executing program 2 (id=3030):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x7fffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x61}, 0x4010004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x20000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000890)
sendmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec90964", 0x3e}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79b", 0x84}, {&(0x7f0000000880)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r8, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$inet_udplite(0x2, 0x2, 0x88)

3.306188382s ago: executing program 4 (id=3031):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000c00)="cd79ba1336cd3dd5bc50bede3f20", 0x0, 0x55, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.290569801s ago: executing program 2 (id=3032):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000001c40)=ANY=[@ANYBLOB='-cpu  +'], 0x19) (async, rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0x6}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 64)
close(0x3) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x0) (async, rerun: 32)
getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) (async, rerun: 32)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0xffffffff, 0x3}, &(0x7f00000000c0)=0x10)
close(r0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

3.045885831s ago: executing program 4 (id=3033):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket(0x1, 0x80802, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x20002007})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

2.830573295s ago: executing program 2 (id=3034):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @initdev}})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "0094b2e15c57dcdb63a644e1ba2c2be1b3fcf447"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)
recvmmsg(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000ac0)=""/214, 0xd6}, {&(0x7f0000000bc0)=""/151, 0x97}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000600)=""/85, 0x55}], 0x9, &(0x7f0000000140)=""/36, 0x24}, 0xa}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e40)=""/194, 0xc2}, {&(0x7f0000000f40)=""/182, 0xb6}, {&(0x7f0000001000)=""/140, 0x8c}, {&(0x7f00000001c0)}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f00000010c0)=""/234, 0xea}], 0x6, &(0x7f0000001300)=""/214, 0xd6}, 0x3ff}, {{&(0x7f0000001240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001840), 0x0, &(0x7f00000018c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000028c0)=@nl, 0x80, 0x0, 0x0, &(0x7f00000029c0)=""/22, 0x16}, 0xc0}, {{&(0x7f0000002a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002a80)=""/108, 0x6c}, {&(0x7f0000002b00)=""/30, 0x1e}, {&(0x7f0000002b40)=""/237, 0xed}, {&(0x7f0000002d40)=""/199, 0xc7}, {&(0x7f0000002c40)=""/6, 0x6}, {&(0x7f0000002f40)=""/149, 0x95}], 0x6, &(0x7f0000003080)=""/35, 0x23}, 0x9e9}, {{&(0x7f00000030c0)=@ax25={{0x3, @rose}, [@rose, @remote, @rose, @remote, @remote, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000005680)=[{&(0x7f0000003140)=""/249, 0xf9}, {&(0x7f0000003240)=""/98, 0x62}, {&(0x7f00000032c0)=""/96, 0x60}, {&(0x7f0000003340)=""/202, 0xca}, {&(0x7f0000003440)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005440)=""/168, 0xa8}, {&(0x7f0000005500)=""/243, 0xf3}, {&(0x7f0000005600)=""/42, 0x2a}, {&(0x7f0000005640)=""/60, 0x3c}], 0xa, &(0x7f0000005740)=""/4096, 0x1000}, 0x1}], 0x6, 0x20, &(0x7f00000068c0)={0x77359400})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x30, 0x26, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0xd}, {0xfff1, 0x9}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x20040084)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004)
pipe(&(0x7f0000000200))
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000002de449881e0000000000000000000000294c4ccc518e210bdb619df452e6914e07bf43255d3abd7c663111d336f7111e7b702c2fa690a3791dade3af73fa644e257ea04ce343ae7c8319a3bf5cb66faf50777bd9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000c6080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r10], 0x38}}, 0x50)
unshare(0x44000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.532250742s ago: executing program 0 (id=3035):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.329693074s ago: executing program 0 (id=3036):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22030f00)
r3 = socket(0x0, 0x3, 0x1ffffffa)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b04000000000000fe827ead681c9ac004802800018007000100637400001c000280080001400000000208000240000000050500030001000000028008000240000000050000004000309b15b79f00000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f00000000c0))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088008000c80040007808f6abf5f52b214981da8755db5a3d5c95f75ebc456d09d40aa0b47ccec36da0668930dd5d1305f47a500be26ccd17abf69ef4aa9c004156251f74a5207138c66a7468d37d07ba11c82202e21381b6e28fcf38e3a9ba11a9b2abb67d928deaa4cebc03490eae97a5355"], 0x34}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd6001410000108800000000000000fe8000000000000000000000000000aa00000000000890788b00"/70], 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000001000)={'syztnl2\x00', <r8=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @rand_addr=0x64010102}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r8, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2.253647798s ago: executing program 1 (id=2971):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22030f00)
socket(0x0, 0x3, 0x1ffffffa)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b04000000000000fe827ead681c9ac004802800018007000100637400001c000280080001400000000208000240000000050500030001000000028008000240000000050000004000309b15b79f00000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f00000000c0))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd6001410000108800000000000000fe8000000000000000000000000000aa00000000000890788b00"/70], 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.429655353s ago: executing program 0 (id=3037):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@ipv6_getrule={0x1c, 0x22, 0x302, 0x70b52a, 0x25dfdbff, {0xa, 0x20, 0x14, 0xd, 0x1, 0x0, 0x0, 0x5, 0x10}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4}, 0x3c)
syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2500}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
unshare(0x68040200)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8}}, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)

1.308929957s ago: executing program 1 (id=3038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x8, 0x8, 0x4}]}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
unshare(0x22020600)
unshare(0x2a020400)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000df16dc28a7476b727f78e7501fe2b0ddb68dff2807b3b2756b4ae1f9c034d64301f4e8332a5cea0a3fbfbaae3cfbef9d923d3aeca867a91db3a51d62cdea398a2df49af37aeeaad602fa58f59936c2c1e438f1"], 0x4c}}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x8010)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r10, 0x0, 0x0}, 0x20)

1.254921196s ago: executing program 3 (id=3039):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x22, 0x2, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0x88, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24000805)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}}, 0x0)

1.180200496s ago: executing program 3 (id=3040):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES16], 0x38}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x25, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0xc, &(0x7f00000001c0)="2aacc4ee3f81f7293cee071e"})
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004001a"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="20002b80080001"], 0x3c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4)
sendto$inet(r6, 0x0, 0x0, 0x24008010, 0x0, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000b80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000540))

581.924732ms ago: executing program 3 (id=3041):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)

311.367891ms ago: executing program 4 (id=3042):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x2, 0x5, 0xffefffff}]}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, 0x0, 0x35, 0x0, 0x1, 0x9}, 0x1b)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r5)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd65, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xc2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008004}, 0x80)

0s ago: executing program 4 (id=3043):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff000000002f0000000e0001006e6574646576f94a73696d0000000f0002006e6574646576"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f0000001b00)=ANY=[@ANYBLOB="3c000000080603000000000000000000020000050900020073797a31000000000500010007000073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x44}}, 0x4000)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000080), 0x4)
r8 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000202009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000700000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20)
recvmmsg$unix(r8, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xffffff8e}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400})
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10)
write(r8, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb4700", 0x13)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), 0xffffffffffffffff)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r11, 0x2000000, 0x9, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

kernel console output (not intermixed with test programs):

ead failed.
[  369.287988][T11959] Dev nbd4: unable to read RDB block 0
[  369.296293][T11959]  nbd4: unable to read partition table
[  369.302659][T13890] 8021q: adding VLAN 0 to HW filter on device bond16
[  369.328593][T11959] ldm_validate_partition_table(): Disk read failed.
[  369.357643][T11959] Dev nbd4: unable to read RDB block 0
[  369.366599][T11959]  nbd4: unable to read partition table
[  369.497802][T13836] lo speed is unknown, defaulting to 1000
[  370.058802][T13845] lo speed is unknown, defaulting to 1000
[  370.210540][T13909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2290'.
[  370.339392][T13913] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2293'.
[  370.348704][T13913] netlink: 'syz.4.2293': attribute type 9 has an invalid length.
[  370.360147][T13913] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2293'.
[  370.369781][T13913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2293'.
[  370.382466][T13913] ieee802154 phy1 wpan1: encryption failed: -90
[  371.233150][T13942] syz_tun: entered allmulticast mode
[  371.243983][T13942] syz_tun: left allmulticast mode
[  371.501488][T13947] pim6reg: entered allmulticast mode
[  371.655057][T13954] nbd1: detected capacity change from 0 to 63
[  371.661616][T13956] block nbd1: NBD_DISCONNECT
[  371.667094][T13956] block nbd1: Disconnected due to user request.
[  371.673353][T13956] block nbd1: shutting down sockets
[  371.714747][    C0] blk_print_req_error: 428 callbacks suppressed
[  371.714767][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.730231][    C0] buffer_io_error: 434 callbacks suppressed
[  371.730252][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  371.744824][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.753885][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  371.761774][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.770852][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  371.778699][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.787768][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  371.795785][T11959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.809369][T11959] Buffer I/O error on dev nbd1, logical block 0, async page read
[  371.869054][T11959] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.871598][T13954] bond23: entered promiscuous mode
[  371.878233][T11959] Buffer I/O error on dev nbd1, logical block 1, async page read
[  371.884334][T13954] bond23: entered allmulticast mode
[  371.891366][T11959] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.891396][T11959] Buffer I/O error on dev nbd1, logical block 2, async page read
[  371.891559][T11959] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.912134][T13954] 8021q: adding VLAN 0 to HW filter on device bond23
[  371.913868][T11959] Buffer I/O error on dev nbd1, logical block 3, async page read
[  371.938530][T11959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.947776][T11959] Buffer I/O error on dev nbd1, logical block 0, async page read
[  371.955885][T11959] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  371.965856][T11959] Buffer I/O error on dev nbd1, logical block 1, async page read
[  371.990433][T13966] __nla_validate_parse: 2 callbacks suppressed
[  371.990450][T13966] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2311'.
[  371.992009][T11959] ldm_validate_partition_table(): Disk read failed.
[  372.018496][T13959] nbd3: detected capacity change from 0 to 63
[  372.031525][T13965] block nbd3: NBD_DISCONNECT
[  372.053089][T11959] Dev nbd1: unable to read RDB block 0
[  372.058955][T13965] block nbd3: Disconnected due to user request.
[  372.067918][T13965] block nbd3: shutting down sockets
[  372.069485][T11959]  nbd1: unable to read partition table
[  372.089351][T11341] ldm_validate_partition_table(): Disk read failed.
[  372.102193][T11341] Dev nbd3: unable to read RDB block 0
[  372.116208][T11959] ldm_validate_partition_table(): Disk read failed.
[  372.119104][T13964] bond21: entered promiscuous mode
[  372.125352][T11341]  nbd3: unable to read partition table
[  372.128137][T13964] bond21: entered allmulticast mode
[  372.136070][T11959] Dev nbd1: unable to read RDB block 0
[  372.141305][T13964] 8021q: adding VLAN 0 to HW filter on device bond21
[  372.152627][T11959]  nbd1: unable to read partition table
[  372.166815][T11341] ldm_validate_partition_table(): Disk read failed.
[  372.181604][T11341] Dev nbd3: unable to read RDB block 0
[  372.190300][T11341]  nbd3: unable to read partition table
[  372.524844][T13979] netlink: 'syz.4.2315': attribute type 5 has an invalid length.
[  372.593836][T13983] syzkaller0: entered promiscuous mode
[  372.599598][T13983] syzkaller0: entered allmulticast mode
[  372.618330][T13985] ip6tnl1: entered allmulticast mode
[  372.903984][T13994] syzkaller1: entered promiscuous mode
[  372.923758][T13994] syzkaller1: entered allmulticast mode
[  372.968644][T13993] FAULT_INJECTION: forcing a failure.
[  372.968644][T13993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  373.018234][T13993] CPU: 1 UID: 0 PID: 13993 Comm: syz.1.2320 Not tainted syzkaller #0 PREEMPT(full) 
[  373.018260][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  373.018272][T13993] Call Trace:
[  373.018280][T13993]  <TASK>
[  373.018288][T13993]  dump_stack_lvl+0x189/0x250
[  373.018324][T13993]  ? __pfx____ratelimit+0x10/0x10
[  373.018347][T13993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.018370][T13993]  ? __pfx__printk+0x10/0x10
[  373.018402][T13993]  should_fail_ex+0x414/0x560
[  373.018433][T13993]  _copy_to_user+0x31/0xb0
[  373.018457][T13993]  simple_read_from_buffer+0xe1/0x170
[  373.018488][T13993]  proc_fail_nth_read+0x1b3/0x220
[  373.018514][T13993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  373.018540][T13993]  ? rw_verify_area+0x2a6/0x4d0
[  373.018563][T13993]  ? __lock_acquire+0xab9/0xd20
[  373.018579][T13993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  373.018603][T13993]  vfs_read+0x200/0xa30
[  373.018626][T13993]  ? fdget_pos+0x247/0x320
[  373.018648][T13993]  ? __pfx___mutex_lock+0x10/0x10
[  373.018672][T13993]  ? __pfx_vfs_read+0x10/0x10
[  373.018698][T13993]  ? __fget_files+0x2a/0x420
[  373.018720][T13993]  ? __fget_files+0x3a0/0x420
[  373.018736][T13993]  ? __fget_files+0x2a/0x420
[  373.018763][T13993]  ksys_read+0x145/0x250
[  373.018788][T13993]  ? __pfx_ksys_read+0x10/0x10
[  373.018815][T13993]  ? do_syscall_64+0xbe/0xfa0
[  373.018842][T13993]  do_syscall_64+0xfa/0xfa0
[  373.018863][T13993]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.018885][T13993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.018903][T13993]  ? clear_bhb_loop+0x60/0xb0
[  373.018925][T13993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.018944][T13993] RIP: 0033:0x7f1fd698e0dc
[  373.018961][T13993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  373.019005][T13993] RSP: 002b:00007f1fd7827030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  373.019026][T13993] RAX: ffffffffffffffda RBX: 00007f1fd6be5fa0 RCX: 00007f1fd698e0dc
[  373.019041][T13993] RDX: 000000000000000f RSI: 00007f1fd78270a0 RDI: 0000000000000005
[  373.019053][T13993] RBP: 00007f1fd7827090 R08: 0000000000000000 R09: 0000000000000000
[  373.019065][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.019077][T13993] R13: 00007f1fd6be6038 R14: 00007f1fd6be5fa0 R15: 00007ffdae4b89e8
[  373.019110][T13993]  </TASK>
[  373.504335][T14005] v speed is unknown, defaulting to 1000
[  374.005683][T14017] nbd0: detected capacity change from 0 to 63
[  374.012543][T14020] block nbd0: NBD_DISCONNECT
[  374.022487][T14020] block nbd0: Disconnected due to user request.
[  374.030135][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2327'.
[  374.035552][T14020] block nbd0: shutting down sockets
[  374.063629][T14025] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  374.101095][T14017] bond23: entered promiscuous mode
[  374.114680][T14017] bond23: entered allmulticast mode
[  374.118684][T11959] ldm_validate_partition_table(): Disk read failed.
[  374.125313][T14017] 8021q: adding VLAN 0 to HW filter on device bond23
[  374.129882][T11959] Dev nbd0: unable to read RDB block 0
[  374.146796][T11959]  nbd0: unable to read partition table
[  374.189914][T11959] ldm_validate_partition_table(): Disk read failed.
[  374.237250][T14005] lo speed is unknown, defaulting to 1000
[  374.380900][T11959] Dev nbd0: unable to read RDB block 0
[  374.389285][T11959]  nbd0: unable to read partition table
[  374.481146][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'.
[  374.517658][T14032] netlink: 'syz.1.2329': attribute type 33 has an invalid length.
[  374.526257][T14032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2329'.
[  374.545250][T14032] `: renamed from team0
[  374.766099][T14043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'.
[  374.870629][T14046] syzkaller0: entered promiscuous mode
[  374.884997][T14046] syzkaller0: entered allmulticast mode
[  374.991332][T14046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.005801][T14045] tipc: Resetting bearer <eth:syzkaller0>
[  375.085174][T14045] tipc: Disabling bearer <eth:syzkaller0>
[  375.454001][T14066] Cannot find set identified by id 65534 to match
[  375.762120][T14075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.773903][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2348'.
[  375.779471][T14075] tipc: Resetting bearer <eth:syzkaller0>
[  375.872587][T14073] tipc: Disabling bearer <eth:syzkaller0>
[  375.907828][T14083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2349'.
[  376.014790][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.051456][T14090] v speed is unknown, defaulting to 1000
[  376.371203][T14101] netlink: 'syz.3.2355': attribute type 12 has an invalid length.
[  376.382695][T14095] v speed is unknown, defaulting to 1000
[  376.753574][T14090] lo speed is unknown, defaulting to 1000
[  377.269763][T14123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.309655][T14123] tipc: Resetting bearer <eth:syzkaller0>
[  377.336781][T14095] lo speed is unknown, defaulting to 1000
[  377.355622][T14122] tipc: Disabling bearer <eth:syzkaller0>
[  377.584114][T14133] v speed is unknown, defaulting to 1000
[  377.604920][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  378.343175][T14152] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2369'.
[  378.468579][T14133] lo speed is unknown, defaulting to 1000
[  378.570876][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.843151][T14162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2372'.
[  378.960697][T14162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2372'.
[  378.977235][T14162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.033708][T14152] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  379.722441][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2377'.
[  380.030837][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'.
[  380.060398][T14189] FAULT_INJECTION: forcing a failure.
[  380.060398][T14189] name failslab, interval 1, probability 0, space 0, times 0
[  380.076786][T14189] CPU: 0 UID: 0 PID: 14189 Comm: syz.1.2382 Not tainted syzkaller #0 PREEMPT(full) 
[  380.076812][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  380.076824][T14189] Call Trace:
[  380.076831][T14189]  <TASK>
[  380.076840][T14189]  dump_stack_lvl+0x189/0x250
[  380.076868][T14189]  ? __pfx____ratelimit+0x10/0x10
[  380.076892][T14189]  ? __pfx_dump_stack_lvl+0x10/0x10
[  380.076915][T14189]  ? __pfx__printk+0x10/0x10
[  380.076940][T14189]  ? __pfx___might_resched+0x10/0x10
[  380.076966][T14189]  should_fail_ex+0x414/0x560
[  380.076997][T14189]  should_failslab+0xa8/0x100
[  380.077017][T14189]  __kmalloc_noprof+0xcb/0x7f0
[  380.077040][T14189]  ? kfree+0x4d/0x6d0
[  380.077058][T14189]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  380.077091][T14189]  tomoyo_realpath_from_path+0xe3/0x5d0
[  380.077118][T14189]  ? tomoyo_domain+0xd9/0x130
[  380.077149][T14189]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  380.077172][T14189]  tomoyo_path_number_perm+0x1e8/0x5a0
[  380.077197][T14189]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  380.077223][T14189]  ? sb_end_write+0xe9/0x1c0
[  380.077243][T14189]  ? vfs_write+0x956/0xb30
[  380.077301][T14189]  ? ksys_write+0x1e1/0x250
[  380.077329][T14189]  security_file_ioctl+0xcb/0x2d0
[  380.077353][T14189]  __se_sys_ioctl+0x47/0x170
[  380.077377][T14189]  do_syscall_64+0xfa/0xfa0
[  380.077398][T14189]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.077421][T14189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.077440][T14189]  ? clear_bhb_loop+0x60/0xb0
[  380.077461][T14189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.077483][T14189] RIP: 0033:0x7f1fd698f6c9
[  380.077501][T14189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.077516][T14189] RSP: 002b:00007f1fd7827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  380.077538][T14189] RAX: ffffffffffffffda RBX: 00007f1fd6be5fa0 RCX: 00007f1fd698f6c9
[  380.077552][T14189] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000005
[  380.077565][T14189] RBP: 00007f1fd7827090 R08: 0000000000000000 R09: 0000000000000000
[  380.077583][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.077595][T14189] R13: 00007f1fd6be6038 R14: 00007f1fd6be5fa0 R15: 00007ffdae4b89e8
[  380.077629][T14189]  </TASK>
[  380.077636][T14189] ERROR: Out of memory at tomoyo_realpath_from_path.
[  380.446907][T14197] nbd0: detected capacity change from 0 to 63
[  380.459860][T14198] block nbd0: NBD_DISCONNECT
[  380.474913][T14199] bond24: entered promiscuous mode
[  380.476521][T14198] block nbd0: Disconnected due to user request.
[  380.483691][T14199] bond24: entered allmulticast mode
[  380.494793][T14199] 8021q: adding VLAN 0 to HW filter on device bond24
[  380.506664][T14198] block nbd0: shutting down sockets
[  380.547988][    C1] blk_print_req_error: 431 callbacks suppressed
[  380.548012][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.563482][    C1] buffer_io_error: 434 callbacks suppressed
[  380.563496][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  380.571095][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.586227][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  380.601079][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.610258][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  380.618078][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.627154][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  380.635667][T11959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.645230][T11959] Buffer I/O error on dev nbd0, logical block 0, async page read
[  380.653289][T11959] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.665187][T11959] Buffer I/O error on dev nbd0, logical block 1, async page read
[  380.674670][T11959] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.683850][T11959] Buffer I/O error on dev nbd0, logical block 2, async page read
[  380.702658][T11959] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.726697][T14202] nbd1: detected capacity change from 0 to 63
[  380.733882][T11959] Buffer I/O error on dev nbd0, logical block 3, async page read
[  380.744159][T14203] block nbd1: NBD_DISCONNECT
[  380.755075][T14203] block nbd1: Disconnected due to user request.
[  380.761356][T14203] block nbd1: shutting down sockets
[  380.767066][T14204] bond24: entered promiscuous mode
[  380.769353][T11959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.772343][T14204] bond24: entered allmulticast mode
[  380.789444][T14204] 8021q: adding VLAN 0 to HW filter on device bond24
[  380.798925][T11959] Buffer I/O error on dev nbd0, logical block 0, async page read
[  380.834735][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.843896][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  380.858336][T11341] ldm_validate_partition_table(): Disk read failed.
[  380.868342][T11959] ldm_validate_partition_table(): Disk read failed.
[  380.896506][T11341] Dev nbd1: unable to read RDB block 0
[  380.903993][T11341]  nbd1: unable to read partition table
[  380.922485][T11959] Dev nbd0: unable to read RDB block 0
[  380.943283][T11959]  nbd0: unable to read partition table
[  380.981808][T11341] ldm_validate_partition_table(): Disk read failed.
[  380.991351][T14213] netlink: 'syz.2.2388': attribute type 6 has an invalid length.
[  381.000610][T11959] ldm_validate_partition_table(): Disk read failed.
[  381.022708][T11959] Dev nbd0: unable to read RDB block 0
[  381.031878][T11341] Dev nbd1: unable to read RDB block 0
[  381.048329][T11341]  nbd1: unable to read partition table
[  381.055527][T11959]  nbd0: unable to read partition table
[  381.064905][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2386'.
[  381.073940][T14219] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2387'.
[  381.328645][T14224] v speed is unknown, defaulting to 1000
[  381.421488][T14238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2395'.
[  381.434726][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2395'.
[  381.443619][T14238] tc_dump_action: action bad kind
[  381.459292][T14240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2396'.
[  381.492564][ T2914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.501805][ T2914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.523651][ T2914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.558894][ T2914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.726600][T14246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.739350][T14246] tipc: Resetting bearer <eth:syzkaller0>
[  381.764290][T14245] tipc: Disabling bearer <eth:syzkaller0>
[  381.800215][T14215] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  382.060173][T14258] netlink: 'syz.1.2403': attribute type 10 has an invalid length.
[  382.072069][T14258] dummy0: entered promiscuous mode
[  382.104347][T14224] lo speed is unknown, defaulting to 1000
[  382.304496][T14267] xt_hashlimit: max too large, truncated to 1048576
[  383.277062][T14297] nbd1: detected capacity change from 0 to 63
[  383.292065][T14298] block nbd1: NBD_DISCONNECT
[  383.303873][T14298] block nbd1: Disconnected due to user request.
[  383.310936][T14298] block nbd1: shutting down sockets
[  383.337032][T11959] ldm_validate_partition_table(): Disk read failed.
[  383.346334][T11959] Dev nbd1: unable to read RDB block 0
[  383.356512][T11959]  nbd1: unable to read partition table
[  383.372588][T11959] ldm_validate_partition_table(): Disk read failed.
[  383.381552][T11959] Dev nbd1: unable to read RDB block 0
[  383.388374][T14297] bond25: entered promiscuous mode
[  383.390487][T11959]  nbd1: unable to read partition table
[  383.393783][T14297] bond25: entered allmulticast mode
[  383.418943][T14297] 8021q: adding VLAN 0 to HW filter on device bond25
[  383.605627][T14303] __nla_validate_parse: 6 callbacks suppressed
[  383.605645][T14303] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2417'.
[  383.616855][T14305] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2416'.
[  383.644500][T14301] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2415'.
[  383.890570][T14317] v speed is unknown, defaulting to 1000
[  384.124869][T14329] nbd3: detected capacity change from 0 to 63
[  384.135275][T14331] block nbd3: NBD_DISCONNECT
[  384.143289][T14331] block nbd3: Disconnected due to user request.
[  384.150587][T14331] block nbd3: shutting down sockets
[  384.157431][T14326] v speed is unknown, defaulting to 1000
[  384.170079][T11959] ldm_validate_partition_table(): Disk read failed.
[  384.182715][T11959] Dev nbd3: unable to read RDB block 0
[  384.193147][T11959]  nbd3: unable to read partition table
[  384.209420][T14329] bond22: entered promiscuous mode
[  384.215018][T14329] bond22: entered allmulticast mode
[  384.221623][T14329] 8021q: adding VLAN 0 to HW filter on device bond22
[  384.255469][T11959] ldm_validate_partition_table(): Disk read failed.
[  384.264285][T11959] Dev nbd3: unable to read RDB block 0
[  384.276000][T11959]  nbd3: unable to read partition table
[  384.554811][T14335] nbd3: detected capacity change from 0 to 63
[  384.571036][T14336] block nbd3: NBD_DISCONNECT
[  384.586735][T14336] block nbd3: Disconnected due to user request.
[  384.593320][T14336] block nbd3: shutting down sockets
[  384.619629][T11959] ldm_validate_partition_table(): Disk read failed.
[  384.655620][T11959] Dev nbd3: unable to read RDB block 0
[  384.682063][T11959]  nbd3: unable to read partition table
[  384.701316][T11959] ldm_validate_partition_table(): Disk read failed.
[  384.711127][T11959] Dev nbd3: unable to read RDB block 0
[  384.711969][T14337] bond23: entered promiscuous mode
[  384.720512][T11959]  nbd3: unable to read partition table
[  384.738105][T14337] bond23: entered allmulticast mode
[  384.744259][T14337] 8021q: adding VLAN 0 to HW filter on device bond23
[  384.772072][T14317] lo speed is unknown, defaulting to 1000
[  384.834491][T14340] v speed is unknown, defaulting to 1000
[  384.914981][T14342] sctp: [Deprecated]: syz.4.2427 (pid 14342) Use of int in maxseg socket option.
[  384.914981][T14342] Use struct sctp_assoc_value instead
[  385.115241][T14349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2429'.
[  385.145971][T14350] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2430'.
[  385.330722][T14326] lo speed is unknown, defaulting to 1000
[  385.383787][T14355] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2432'.
[  385.914316][T14340] lo speed is unknown, defaulting to 1000
[  386.052834][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'.
[  386.159595][T14378] FAULT_INJECTION: forcing a failure.
[  386.159595][T14378] name failslab, interval 1, probability 0, space 0, times 0
[  386.195048][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.0.2440 Not tainted syzkaller #0 PREEMPT(full) 
[  386.195074][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  386.195102][T14378] Call Trace:
[  386.195110][T14378]  <TASK>
[  386.195119][T14378]  dump_stack_lvl+0x189/0x250
[  386.195147][T14378]  ? __pfx____ratelimit+0x10/0x10
[  386.195169][T14378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.195191][T14378]  ? __pfx__printk+0x10/0x10
[  386.195212][T14378]  ? __pfx___might_resched+0x10/0x10
[  386.195230][T14378]  ? fs_reclaim_acquire+0x7d/0x100
[  386.195259][T14378]  should_fail_ex+0x414/0x560
[  386.195289][T14378]  should_failslab+0xa8/0x100
[  386.195309][T14378]  __kvmalloc_node_noprof+0x158/0x910
[  386.195333][T14378]  ? __nf_register_net_hook+0x232/0x930
[  386.195353][T14378]  ? nf_hook_entries_grow+0x281/0x720
[  386.195379][T14378]  nf_hook_entries_grow+0x281/0x720
[  386.195413][T14378]  __nf_register_net_hook+0x2c9/0x930
[  386.195444][T14378]  nf_register_net_hook+0xb2/0x190
[  386.195465][T14378]  nf_register_net_hooks+0x44/0x1b0
[  386.195486][T14378]  nf_ct_netns_do_get+0x363/0x5a0
[  386.195505][T14378]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  386.195526][T14378]  ? __raw_spin_lock_init+0x45/0x100
[  386.195548][T14378]  nf_ct_netns_get+0x44/0xb0
[  386.195562][T14378]  nft_connlimit_do_init+0x1de/0x2e0
[  386.195580][T14378]  nft_set_elem_expr_alloc+0x1db/0x590
[  386.195603][T14378]  ? __pfx_nft_set_elem_expr_alloc+0x10/0x10
[  386.195634][T14378]  ? nft_rhash_init+0x2b3/0x3a0
[  386.195650][T14378]  ? __pfx_nft_rhash_init+0x10/0x10
[  386.195663][T14378]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.195680][T14378]  ? __pfx_nft_rhash_key+0x10/0x10
[  386.195693][T14378]  ? __pfx_nft_rhash_obj+0x10/0x10
[  386.195707][T14378]  ? __pfx_nft_rhash_cmp+0x10/0x10
[  386.195725][T14378]  nft_set_expr_alloc+0x68/0x760
[  386.195752][T14378]  nf_tables_newset+0x1c4c/0x2540
[  386.195780][T14378]  ? __pfx_nf_tables_newset+0x10/0x10
[  386.195814][T14378]  ? __nla_parse+0x40/0x60
[  386.195832][T14378]  nfnetlink_rcv+0x11d9/0x2590
[  386.195879][T14378]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  386.195938][T14378]  ? netlink_deliver_tap+0x2e/0x1b0
[  386.195966][T14378]  netlink_unicast+0x82f/0x9e0
[  386.195992][T14378]  ? __pfx_netlink_unicast+0x10/0x10
[  386.196013][T14378]  ? netlink_sendmsg+0x642/0xb30
[  386.196025][T14378]  ? skb_put+0x11b/0x210
[  386.196045][T14378]  netlink_sendmsg+0x805/0xb30
[  386.196067][T14378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.196088][T14378]  ? aa_sock_msg_perm+0xf1/0x1d0
[  386.196110][T14378]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  386.196124][T14378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.196138][T14378]  __sock_sendmsg+0x21c/0x270
[  386.196159][T14378]  ____sys_sendmsg+0x505/0x830
[  386.196179][T14378]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.196201][T14378]  ? import_iovec+0x74/0xa0
[  386.196221][T14378]  ___sys_sendmsg+0x21f/0x2a0
[  386.196238][T14378]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.196282][T14378]  ? __fget_files+0x2a/0x420
[  386.196295][T14378]  ? __fget_files+0x3a0/0x420
[  386.196317][T14378]  __x64_sys_sendmsg+0x19b/0x260
[  386.196335][T14378]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  386.196358][T14378]  ? __pfx_ksys_write+0x10/0x10
[  386.196381][T14378]  ? do_syscall_64+0xbe/0xfa0
[  386.196402][T14378]  do_syscall_64+0xfa/0xfa0
[  386.196418][T14378]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.196435][T14378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.196449][T14378]  ? clear_bhb_loop+0x60/0xb0
[  386.196467][T14378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.196480][T14378] RIP: 0033:0x7f65fdd8f6c9
[  386.196494][T14378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.196507][T14378] RSP: 002b:00007f65fec93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.196523][T14378] RAX: ffffffffffffffda RBX: 00007f65fdfe5fa0 RCX: 00007f65fdd8f6c9
[  386.196533][T14378] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  386.196543][T14378] RBP: 00007f65fec93090 R08: 0000000000000000 R09: 0000000000000000
[  386.196552][T14378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  386.196560][T14378] R13: 00007f65fdfe6038 R14: 00007f65fdfe5fa0 R15: 00007ffea2f22728
[  386.196585][T14378]  </TASK>
[  386.790736][T14382] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2442'.
[  386.899073][T14388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.906915][T14388] syzkaller0: entered promiscuous mode
[  386.912404][T14388] syzkaller0: entered allmulticast mode
[  387.006413][T14387] tipc: Resetting bearer <eth:syzkaller0>
[  387.096966][T14387] tipc: Disabling bearer <eth:syzkaller0>
[  387.357246][ T6132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  387.391322][T14402] v speed is unknown, defaulting to 1000
[  387.410919][ T6132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  387.464797][ T6132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  387.499812][ T6132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  387.525811][T14404] nbd0: detected capacity change from 0 to 63
[  387.534003][T14409] block nbd0: NBD_DISCONNECT
[  387.568103][T14409] block nbd0: Disconnected due to user request.
[  387.574422][T14409] block nbd0: shutting down sockets
[  387.606256][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  387.655883][    C1] blk_print_req_error: 727 callbacks suppressed
[  387.655904][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.671306][    C1] buffer_io_error: 730 callbacks suppressed
[  387.671327][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  387.687131][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.696255][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  387.704185][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.713308][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  387.721856][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.730951][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  387.738844][T11959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.754372][T11959] Buffer I/O error on dev nbd0, logical block 0, async page read
[  387.762936][T11959] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.772822][T11959] Buffer I/O error on dev nbd0, logical block 1, async page read
[  387.781259][T11959] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.791299][T11959] Buffer I/O error on dev nbd0, logical block 2, async page read
[  387.807530][T11959] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.827827][T11959] Buffer I/O error on dev nbd0, logical block 3, async page read
[  387.836890][T11959] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.846391][T11959] Buffer I/O error on dev nbd0, logical block 0, async page read
[  387.854943][T11959] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.864296][T14415] nbd3: detected capacity change from 0 to 63
[  387.877343][T11959] Buffer I/O error on dev nbd0, logical block 1, async page read
[  387.883124][T14419] block nbd3: NBD_DISCONNECT
[  387.892727][T11959] ldm_validate_partition_table(): Disk read failed.
[  387.903899][T14419] block nbd3: Disconnected due to user request.
[  387.913850][T11959] Dev nbd0: unable to read RDB block 0
[  387.941952][T14419] block nbd3: shutting down sockets
[  387.943037][T11959]  nbd0: unable to read partition table
[  387.981587][T11959] ldm_validate_partition_table(): Disk read failed.
[  388.013878][T11341] ldm_validate_partition_table(): Disk read failed.
[  388.027001][T11959] Dev nbd0: unable to read RDB block 0
[  388.039649][T11959]  nbd0: unable to read partition table
[  388.051628][T14404] bond25: entered promiscuous mode
[  388.100461][T14404] bond25: entered allmulticast mode
[  388.101704][T11341] Dev nbd3: unable to read RDB block 0
[  388.106633][T14404] 8021q: adding VLAN 0 to HW filter on device bond25
[  388.145435][T11341]  nbd3: unable to read partition table
[  388.195716][T14422] bond24: entered promiscuous mode
[  388.200910][T14422] bond24: entered allmulticast mode
[  388.206981][T14422] 8021q: adding VLAN 0 to HW filter on device bond24
[  388.216210][T14413] v speed is unknown, defaulting to 1000
[  388.216732][T11341] ldm_validate_partition_table(): Disk read failed.
[  388.231772][T11341] Dev nbd3: unable to read RDB block 0
[  388.237695][T14430] syzkaller0: entered promiscuous mode
[  388.243477][T14430] syzkaller0: entered allmulticast mode
[  388.302592][T11341]  nbd3: unable to read partition table
[  388.417815][T14442] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2457'.
[  388.739456][T14455] netlink: 'syz.3.2460': attribute type 6 has an invalid length.
[  389.039033][T14466] FAULT_INJECTION: forcing a failure.
[  389.039033][T14466] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  389.054508][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.3.2463 Not tainted syzkaller #0 PREEMPT(full) 
[  389.054534][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  389.054545][T14466] Call Trace:
[  389.054552][T14466]  <TASK>
[  389.054560][T14466]  dump_stack_lvl+0x189/0x250
[  389.054587][T14466]  ? __pfx____ratelimit+0x10/0x10
[  389.054609][T14466]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.054632][T14466]  ? __pfx__printk+0x10/0x10
[  389.054652][T14466]  ? fs_reclaim_acquire+0x7d/0x100
[  389.054688][T14466]  should_fail_ex+0x414/0x560
[  389.054719][T14466]  prepare_alloc_pages+0x213/0x610
[  389.054744][T14466]  __alloc_frozen_pages_noprof+0x123/0x370
[  389.054766][T14466]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  389.054792][T14466]  ? policy_nodemask+0x27c/0x720
[  389.054807][T14466]  ? __lock_acquire+0xab9/0xd20
[  389.054831][T14466]  alloc_pages_mpol+0x232/0x4a0
[  389.054855][T14466]  vma_alloc_folio_noprof+0xe4/0x200
[  389.054874][T14466]  ? page_table_check_set+0x18d/0x730
[  389.054907][T14466]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  389.054938][T14466]  folio_prealloc+0x30/0x180
[  389.054966][T14466]  __handle_mm_fault+0x2a8b/0x5400
[  389.055006][T14466]  ? __pfx___handle_mm_fault+0x10/0x10
[  389.055043][T14466]  ? follow_page_pte+0x7ef/0x13e0
[  389.055075][T14466]  handle_mm_fault+0x40a/0x8e0
[  389.055108][T14466]  __get_user_pages+0x165c/0x2a00
[  389.055165][T14466]  __gup_longterm_locked+0xde4/0x1660
[  389.055201][T14466]  ? sanity_check_pinned_pages+0x123a/0x1300
[  389.055231][T14466]  gup_fast_fallback+0x1d65/0x22d0
[  389.055288][T14466]  ? __pfx_gup_fast_fallback+0x10/0x10
[  389.055317][T14466]  ? rcu_is_watching+0x15/0xb0
[  389.055338][T14466]  ? is_valid_gup_args+0x11f/0x200
[  389.055363][T14466]  ? pin_user_pages_fast+0x4d/0xb0
[  389.055387][T14466]  rds_info_getsockopt+0x1fb/0x470
[  389.055417][T14466]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  389.055441][T14466]  ? __might_fault+0xb0/0x130
[  389.055468][T14466]  ? rds_getsockopt+0x2a9/0x500
[  389.055485][T14466]  ? __pfx_rds_getsockopt+0x10/0x10
[  389.055505][T14466]  do_sock_getsockopt+0x372/0x450
[  389.055529][T14466]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  389.055547][T14466]  ? do_syscall_64+0xa0/0xfa0
[  389.055569][T14466]  ? __fget_files+0x2a/0x420
[  389.055585][T14466]  ? __fget_files+0x3a0/0x420
[  389.055602][T14466]  ? __fget_files+0x2a/0x420
[  389.055626][T14466]  __x64_sys_getsockopt+0x1a5/0x250
[  389.055644][T14466]  ? do_syscall_64+0xa0/0xfa0
[  389.055668][T14466]  ? do_syscall_64+0xa0/0xfa0
[  389.055690][T14466]  do_syscall_64+0xfa/0xfa0
[  389.055710][T14466]  ? lockdep_hardirqs_on+0x9c/0x150
[  389.055732][T14466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.055749][T14466]  ? clear_bhb_loop+0x60/0xb0
[  389.055772][T14466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.055790][T14466] RIP: 0033:0x7f8561f8f6c9
[  389.055806][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.055822][T14466] RSP: 002b:00007f8562d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  389.055842][T14466] RAX: ffffffffffffffda RBX: 00007f85621e6090 RCX: 00007f8561f8f6c9
[  389.055856][T14466] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000008
[  389.055868][T14466] RBP: 00007f8562d8d090 R08: 0000200000000040 R09: 0000000000000000
[  389.055880][T14466] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002
[  389.055892][T14466] R13: 00007f85621e6128 R14: 00007f85621e6090 R15: 00007ffcc63f3208
[  389.055930][T14466]  </TASK>
[  389.472388][T14464] lo: left promiscuous mode
[  389.518657][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.566388][T14464] tunl0: left promiscuous mode
[  389.610211][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.640581][T14464] gre0: left promiscuous mode
[  389.660463][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.690104][T14464] gretap0: left allmulticast mode
[  389.710310][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.773195][T14464] erspan0: left promiscuous mode
[  389.795308][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.816867][T14464] ip_vti0: left promiscuous mode
[  389.825318][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.845941][T14464] ip6_vti0: left promiscuous mode
[  389.851772][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.863224][T14464] sit0: left promiscuous mode
[  389.873070][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.888309][T14464] ip6tnl0: left promiscuous mode
[  389.894018][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.904330][T14464] ip6gre0: left promiscuous mode
[  389.910110][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  389.920002][T14464] syz_tun: left promiscuous mode
[  389.926233][T14464] ip6gretap0: left promiscuous mode
[  389.932076][T14464] bridge0: left promiscuous mode
[  389.937986][T14464] vcan0: left promiscuous mode
[  389.943452][T14464] bond0: left promiscuous mode
[  389.948875][T14464] bond_slave_0: left promiscuous mode
[  389.954936][  T982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.955990][T14464] bond_slave_1: left promiscuous mode
[  389.970134][T14464] team0: left promiscuous mode
[  389.976174][T14464] team_slave_0: left promiscuous mode
[  389.982047][T14464] team_slave_1: left promiscuous mode
[  389.988677][T14464] dummy0: left promiscuous mode
[  389.993986][T14464] nlmon0: left promiscuous mode
[  389.999879][T14464] caif0: left promiscuous mode
[  390.004817][T14464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.025221][T14457] v speed is unknown, defaulting to 1000
[  390.034894][T14402] lo speed is unknown, defaulting to 1000
[  390.114756][T14480] nbd1: detected capacity change from 0 to 63
[  390.121374][T14475] block nbd1: NBD_DISCONNECT
[  390.131342][T14475] block nbd1: Disconnected due to user request.
[  390.138509][T14475] block nbd1: shutting down sockets
[  390.151882][T11959] ldm_validate_partition_table(): Disk read failed.
[  390.180987][T11959] Dev nbd1: unable to read RDB block 0
[  390.198128][T11959]  nbd1: unable to read partition table
[  390.221841][T11959] ldm_validate_partition_table(): Disk read failed.
[  390.232598][T14478] bond26: entered promiscuous mode
[  390.238558][T14478] bond26: entered allmulticast mode
[  390.244265][T14478] 8021q: adding VLAN 0 to HW filter on device bond26
[  390.259932][T11959] Dev nbd1: unable to read RDB block 0
[  390.267565][T11959]  nbd1: unable to read partition table
[  390.565653][T14466] v speed is unknown, defaulting to 1000
[  390.644865][  T982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  390.681822][T14496] netlink: 'syz.1.2473': attribute type 6 has an invalid length.
[  390.796166][T14413] lo speed is unknown, defaulting to 1000
[  391.525209][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  391.549069][T14502] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  391.848317][T14466] lo speed is unknown, defaulting to 1000
[  391.863894][T14457] lo speed is unknown, defaulting to 1000
[  391.985646][T14521] netlink: 'syz.1.2478': attribute type 1 has an invalid length.
[  392.446637][T14524] v speed is unknown, defaulting to 1000
[  393.229801][T14534] nbd1: detected capacity change from 0 to 63
[  393.296964][T14535] bond28: entered promiscuous mode
[  393.302282][T14535] bond28: entered allmulticast mode
[  393.308574][T14535] 8021q: adding VLAN 0 to HW filter on device bond28
[  393.327125][ T5831] block nbd1: Receive control failed (result -104)
[  393.641929][T14543] netlink: 'syz.1.2485': attribute type 6 has an invalid length.
[  393.921427][T14524] lo speed is unknown, defaulting to 1000
[  395.656494][T14573] netlink: 'syz.2.2494': attribute type 2 has an invalid length.
[  395.676486][T14573] __nla_validate_parse: 13 callbacks suppressed
[  395.676505][T14573] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2494'.
[  396.108272][T14585] netlink: 'syz.1.2497': attribute type 6 has an invalid length.
[  396.652008][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2499'.
[  396.919593][T14596] nbd0: detected capacity change from 0 to 63
[  396.929713][T14600] block nbd0: NBD_DISCONNECT
[  396.974737][T14600] block nbd0: Disconnected due to user request.
[  397.104795][T14600] block nbd0: shutting down sockets
[  397.121769][    C0] blk_print_req_error: 431 callbacks suppressed
[  397.121791][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.137205][    C0] buffer_io_error: 434 callbacks suppressed
[  397.137224][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  397.150959][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.160049][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  397.167915][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.176999][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  397.184872][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.193920][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  397.223237][T11341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.305733][T11341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  397.380486][T11341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.391901][T11341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  397.433585][T11341] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.436038][T14612] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2501'.
[  397.462193][T11341] Buffer I/O error on dev nbd0, logical block 2, async page read
[  397.477195][T11341] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.497195][T11341] Buffer I/O error on dev nbd0, logical block 3, async page read
[  397.525711][T11341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.544795][T11341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  397.563025][T11341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.589787][T11341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  397.617543][T11341] ldm_validate_partition_table(): Disk read failed.
[  397.641869][T11341] Dev nbd0: unable to read RDB block 0
[  397.661567][T11341]  nbd0: unable to read partition table
[  397.708726][T11341] ldm_validate_partition_table(): Disk read failed.
[  397.734267][T11341] Dev nbd0: unable to read RDB block 0
[  397.758270][T11341]  nbd0: unable to read partition table
[  397.860860][T14621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2505'.
[  397.965164][T14625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2505'.
[  397.980493][T14622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2502'.
[  398.005946][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  398.037032][T14629] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2505'.
[  398.176645][T14633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.184816][T14633] syzkaller0: entered promiscuous mode
[  398.190438][T14633] syzkaller0: entered allmulticast mode
[  398.242856][T14633] tipc: Resetting bearer <eth:syzkaller0>
[  398.269234][T14641] netlink: 'syz.0.2510': attribute type 6 has an invalid length.
[  398.284803][T14632] tipc: Resetting bearer <eth:syzkaller0>
[  398.312047][T14632] tipc: Disabling bearer <eth:syzkaller0>
[  398.544688][T14646] nbd2: detected capacity change from 0 to 63
[  398.624935][T14650] block nbd2: NBD_DISCONNECT
[  398.630836][T14650] block nbd2: Disconnected due to user request.
[  398.637799][T14650] block nbd2: shutting down sockets
[  398.716965][T11341] ldm_validate_partition_table(): Disk read failed.
[  398.760110][T11341] Dev nbd2: unable to read RDB block 0
[  398.787871][T11341]  nbd2: unable to read partition table
[  398.817903][T11341] ldm_validate_partition_table(): Disk read failed.
[  398.840177][T11341] Dev nbd2: unable to read RDB block 0
[  398.855981][T11341]  nbd2: unable to read partition table
[  399.148701][T14665] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2518'.
[  399.224203][T14668] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2517'.
[  399.237003][T14668] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  399.435152][T14677] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2519'.
[  399.483636][T14672] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  399.503269][T14679] netlink: 'syz.1.2523': attribute type 6 has an invalid length.
[  399.662872][T14689] team0: Device gtp0 is of different type
[  399.861748][T14695] v speed is unknown, defaulting to 1000
[  399.992457][T14699] FAULT_INJECTION: forcing a failure.
[  399.992457][T14699] name failslab, interval 1, probability 0, space 0, times 0
[  400.005311][T14699] CPU: 1 UID: 0 PID: 14699 Comm: syz.2.2528 Not tainted syzkaller #0 PREEMPT(full) 
[  400.005336][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  400.005347][T14699] Call Trace:
[  400.005355][T14699]  <TASK>
[  400.005364][T14699]  dump_stack_lvl+0x189/0x250
[  400.005392][T14699]  ? __pfx____ratelimit+0x10/0x10
[  400.005416][T14699]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.005439][T14699]  ? __pfx__printk+0x10/0x10
[  400.005461][T14699]  ? __pfx___might_resched+0x10/0x10
[  400.005482][T14699]  ? fs_reclaim_acquire+0x7d/0x100
[  400.005513][T14699]  should_fail_ex+0x414/0x560
[  400.005544][T14699]  should_failslab+0xa8/0x100
[  400.005565][T14699]  __kvmalloc_node_noprof+0x158/0x910
[  400.005589][T14699]  ? __nf_register_net_hook+0x232/0x930
[  400.005607][T14699]  ? rcu_is_watching+0x15/0xb0
[  400.005627][T14699]  ? nf_hook_entries_grow+0x281/0x720
[  400.005652][T14699]  nf_hook_entries_grow+0x281/0x720
[  400.005687][T14699]  __nf_register_net_hook+0x2c9/0x930
[  400.005718][T14699]  nf_register_net_hook+0xb2/0x190
[  400.005739][T14699]  nf_register_net_hooks+0x44/0x1b0
[  400.005762][T14699]  nf_ct_netns_do_get+0x363/0x5a0
[  400.005785][T14699]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  400.005814][T14699]  ? __raw_spin_lock_init+0x45/0x100
[  400.005842][T14699]  nf_ct_netns_get+0x44/0xb0
[  400.005861][T14699]  nft_connlimit_do_init+0x1de/0x2e0
[  400.005884][T14699]  nft_set_elem_expr_alloc+0x1db/0x590
[  400.005914][T14699]  ? __pfx_nft_set_elem_expr_alloc+0x10/0x10
[  400.005954][T14699]  ? nft_rhash_init+0x2b3/0x3a0
[  400.005976][T14699]  ? __pfx_nft_rhash_init+0x10/0x10
[  400.005992][T14699]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.006015][T14699]  ? __pfx_nft_rhash_key+0x10/0x10
[  400.006031][T14699]  ? __pfx_nft_rhash_obj+0x10/0x10
[  400.006049][T14699]  ? __pfx_nft_rhash_cmp+0x10/0x10
[  400.006072][T14699]  nft_set_expr_alloc+0x68/0x760
[  400.006104][T14699]  nf_tables_newset+0x1c4c/0x2540
[  400.006146][T14699]  ? __pfx_nf_tables_newset+0x10/0x10
[  400.006192][T14699]  ? __nla_parse+0x40/0x60
[  400.006217][T14699]  nfnetlink_rcv+0x11d9/0x2590
[  400.006279][T14699]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  400.006359][T14699]  ? netlink_deliver_tap+0x2e/0x1b0
[  400.006398][T14699]  netlink_unicast+0x82f/0x9e0
[  400.006432][T14699]  ? __pfx_netlink_unicast+0x10/0x10
[  400.006459][T14699]  ? netlink_sendmsg+0x642/0xb30
[  400.006475][T14699]  ? skb_put+0x11b/0x210
[  400.006498][T14699]  netlink_sendmsg+0x805/0xb30
[  400.006527][T14699]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.006549][T14699]  ? aa_sock_msg_perm+0xf1/0x1d0
[  400.006577][T14699]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  400.006594][T14699]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.006614][T14699]  __sock_sendmsg+0x21c/0x270
[  400.006641][T14699]  ____sys_sendmsg+0x505/0x830
[  400.006667][T14699]  ? __pfx_____sys_sendmsg+0x10/0x10
[  400.006697][T14699]  ? import_iovec+0x74/0xa0
[  400.006724][T14699]  ___sys_sendmsg+0x21f/0x2a0
[  400.006746][T14699]  ? __pfx____sys_sendmsg+0x10/0x10
[  400.006806][T14699]  ? __fget_files+0x2a/0x420
[  400.006822][T14699]  ? __fget_files+0x3a0/0x420
[  400.006851][T14699]  __x64_sys_sendmsg+0x19b/0x260
[  400.006875][T14699]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  400.006906][T14699]  ? __pfx_ksys_write+0x10/0x10
[  400.006934][T14699]  ? do_syscall_64+0xbe/0xfa0
[  400.006962][T14699]  do_syscall_64+0xfa/0xfa0
[  400.006982][T14699]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.007005][T14699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.007022][T14699]  ? clear_bhb_loop+0x60/0xb0
[  400.007045][T14699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.007063][T14699] RIP: 0033:0x7ff8bff8f6c9
[  400.007080][T14699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.007096][T14699] RSP: 002b:00007ff8c0e21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.007116][T14699] RAX: ffffffffffffffda RBX: 00007ff8c01e5fa0 RCX: 00007ff8bff8f6c9
[  400.007140][T14699] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  400.007152][T14699] RBP: 00007ff8c0e21090 R08: 0000000000000000 R09: 0000000000000000
[  400.007164][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  400.007175][T14699] R13: 00007ff8c01e6038 R14: 00007ff8c01e5fa0 R15: 00007ffee6e6a908
[  400.007209][T14699]  </TASK>
[  400.588732][T14707] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  400.676015][T14710] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  400.878347][T14714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.922762][T14703] v speed is unknown, defaulting to 1000
[  401.019190][T14714] syzkaller0: entered promiscuous mode
[  401.031105][T14714] syzkaller0: entered allmulticast mode
[  401.085262][T14714] tipc: Resetting bearer <eth:syzkaller0>
[  401.130552][T14695] lo speed is unknown, defaulting to 1000
[  401.193054][T14713] tipc: Resetting bearer <eth:syzkaller0>
[  401.241625][T14713] tipc: Disabling bearer <eth:syzkaller0>
[  401.284638][ T5831] Bluetooth: hci0: command tx timeout
[  401.367171][T14724] netlink: 'syz.0.2536': attribute type 6 has an invalid length.
[  401.783436][T14730] nbd0: detected capacity change from 0 to 63
[  401.835045][T14736] block nbd0: NBD_DISCONNECT
[  401.870192][T14736] block nbd0: Disconnected due to user request.
[  401.886933][T14736] block nbd0: shutting down sockets
[  401.900341][T14740] bond26: entered promiscuous mode
[  401.925065][T14740] bond26: entered allmulticast mode
[  401.931006][T14740] 8021q: adding VLAN 0 to HW filter on device bond26
[  401.958955][T11341] ldm_validate_partition_table(): Disk read failed.
[  401.973010][T11341] Dev nbd0: unable to read RDB block 0
[  402.029798][T11341]  nbd0: unable to read partition table
[  402.048387][T14749] FAULT_INJECTION: forcing a failure.
[  402.048387][T14749] name failslab, interval 1, probability 0, space 0, times 0
[  402.053352][T11341] ldm_validate_partition_table(): Disk read failed.
[  402.061298][T14749] CPU: 0 UID: 0 PID: 14749 Comm: syz.0.2543 Not tainted syzkaller #0 PREEMPT(full) 
[  402.061321][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  402.061333][T14749] Call Trace:
[  402.061340][T14749]  <TASK>
[  402.061349][T14749]  dump_stack_lvl+0x189/0x250
[  402.061378][T14749]  ? __pfx____ratelimit+0x10/0x10
[  402.061401][T14749]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.061423][T14749]  ? __pfx__printk+0x10/0x10
[  402.061448][T14749]  ? __pfx___might_resched+0x10/0x10
[  402.061465][T14749]  ? fs_reclaim_acquire+0x7d/0x100
[  402.061496][T14749]  should_fail_ex+0x414/0x560
[  402.061527][T14749]  should_failslab+0xa8/0x100
[  402.061548][T14749]  __kvmalloc_node_noprof+0x158/0x910
[  402.061573][T14749]  ? alloc_netdev_mqs+0xa4b/0x11b0
[  402.061603][T14749]  alloc_netdev_mqs+0xa4b/0x11b0
[  402.061632][T14749]  l2tp_eth_create+0x1bd/0xbd0
[  402.061655][T14749]  ? l2tp_tunnel_get+0x8d/0x400
[  402.061680][T14749]  ? l2tp_tunnel_get+0x365/0x400
[  402.061703][T14749]  ? l2tp_tunnel_get+0x8d/0x400
[  402.061727][T14749]  ? __pfx_l2tp_eth_create+0x10/0x10
[  402.061759][T14749]  l2tp_nl_cmd_session_create+0x733/0xc20
[  402.061792][T14749]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[  402.061822][T14749]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  402.061853][T14749]  genl_family_rcv_msg_doit+0x215/0x300
[  402.061883][T14749]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  402.061918][T14749]  ? bpf_lsm_capable+0x9/0x20
[  402.061938][T14749]  ? security_capable+0x7e/0x2e0
[  402.061967][T14749]  genl_rcv_msg+0x60e/0x790
[  402.062003][T14749]  ? __pfx_genl_rcv_msg+0x10/0x10
[  402.062024][T14749]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[  402.062061][T14749]  netlink_rcv_skb+0x208/0x470
[  402.062085][T14749]  ? __lock_acquire+0xab9/0xd20
[  402.062103][T14749]  ? __pfx_genl_rcv_msg+0x10/0x10
[  402.062126][T14749]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  402.062170][T14749]  ? down_read+0x1ad/0x2e0
[  402.062198][T14749]  genl_rcv+0x28/0x40
[  402.062217][T14749]  netlink_unicast+0x82f/0x9e0
[  402.062250][T14749]  ? __pfx_netlink_unicast+0x10/0x10
[  402.062276][T14749]  ? netlink_sendmsg+0x642/0xb30
[  402.062292][T14749]  ? skb_put+0x11b/0x210
[  402.062314][T14749]  netlink_sendmsg+0x805/0xb30
[  402.062340][T14749]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.062361][T14749]  ? aa_sock_msg_perm+0xf1/0x1d0
[  402.062387][T14749]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  402.062405][T14749]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.062423][T14749]  __sock_sendmsg+0x21c/0x270
[  402.062449][T14749]  ____sys_sendmsg+0x505/0x830
[  402.062474][T14749]  ? __pfx_____sys_sendmsg+0x10/0x10
[  402.062503][T14749]  ? import_iovec+0x74/0xa0
[  402.062528][T14749]  ___sys_sendmsg+0x21f/0x2a0
[  402.062549][T14749]  ? __pfx____sys_sendmsg+0x10/0x10
[  402.062605][T14749]  ? __fget_files+0x2a/0x420
[  402.062622][T14749]  ? __fget_files+0x3a0/0x420
[  402.062648][T14749]  __x64_sys_sendmsg+0x19b/0x260
[  402.062671][T14749]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  402.062700][T14749]  ? __pfx_ksys_write+0x10/0x10
[  402.062727][T14749]  ? do_syscall_64+0xbe/0xfa0
[  402.062753][T14749]  do_syscall_64+0xfa/0xfa0
[  402.062774][T14749]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.062795][T14749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.062812][T14749]  ? clear_bhb_loop+0x60/0xb0
[  402.062834][T14749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.062851][T14749] RIP: 0033:0x7f65fdd8f6c9
[  402.062868][T14749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.062884][T14749] RSP: 002b:00007f65fec93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.062904][T14749] RAX: ffffffffffffffda RBX: 00007f65fdfe5fa0 RCX: 00007f65fdd8f6c9
[  402.062917][T14749] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000006
[  402.062929][T14749] RBP: 00007f65fec93090 R08: 0000000000000000 R09: 0000000000000000
[  402.062940][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  402.062951][T14749] R13: 00007f65fdfe6038 R14: 00007f65fdfe5fa0 R15: 00007ffea2f22728
[  402.062983][T14749]  </TASK>
[  402.389539][T14703] lo speed is unknown, defaulting to 1000
[  402.392650][T11341] blk_print_req_error: 379 callbacks suppressed
[  402.392664][T11341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.454000][T14754] __nla_validate_parse: 1 callbacks suppressed
[  402.454018][T14754] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2545'.
[  402.461338][T11341] buffer_io_error: 382 callbacks suppressed
[  402.461351][T11341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  402.518995][T11341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.528198][T11341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  402.537362][T11341] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.546532][T11341] Buffer I/O error on dev nbd0, logical block 2, async page read
[  402.554413][T11341] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.644738][T11341] Buffer I/O error on dev nbd0, logical block 3, async page read
[  402.652681][T11341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.687180][T11341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  402.695198][T11341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.730884][T11341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  402.740132][T14760] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2548'.
[  402.750019][T11341] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.786237][T11341] Buffer I/O error on dev nbd0, logical block 2, async page read
[  402.794199][T11341] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.841241][T11341] Buffer I/O error on dev nbd0, logical block 3, async page read
[  402.852834][T11341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.879814][T11341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  402.902427][T11341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.919795][T11341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  402.932948][T11341] Dev nbd0: unable to read RDB block 0
[  402.953923][T11341]  nbd0: unable to read partition table
[  403.391083][T14774] v speed is unknown, defaulting to 1000
[  403.425016][T14781] nbd4: detected capacity change from 0 to 63
[  403.451488][T14778] block nbd4: NBD_DISCONNECT
[  403.465603][T14778] block nbd4: Disconnected due to user request.
[  403.472116][T14778] block nbd4: shutting down sockets
[  403.528686][T11341] ldm_validate_partition_table(): Disk read failed.
[  403.539774][T11341] Dev nbd4: unable to read RDB block 0
[  403.548020][T11341]  nbd4: unable to read partition table
[  403.573038][T11341] ldm_validate_partition_table(): Disk read failed.
[  403.596752][T11341] Dev nbd4: unable to read RDB block 0
[  403.604275][T11341]  nbd4: unable to read partition table
[  403.616907][T14780] bond17: entered promiscuous mode
[  403.622189][T14780] bond17: entered allmulticast mode
[  403.628033][T14780] 8021q: adding VLAN 0 to HW filter on device bond17
[  404.285492][T14805] netlink: 'syz.2.2559': attribute type 6 has an invalid length.
[  404.348803][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2560'.
[  404.430095][T14774] lo speed is unknown, defaulting to 1000
[  404.558605][T14811] tap0: tun_chr_ioctl cmd 1074025677
[  404.564341][T14811] tap0: linktype set to 270
[  404.734618][T14813] bond18: entered promiscuous mode
[  404.740349][T14813] bond18: entered allmulticast mode
[  404.746529][T14813] 8021q: adding VLAN 0 to HW filter on device bond18
[  405.190340][T14835] 8021q: VLANs not supported on ip_vti0
[  405.500095][T14842] v speed is unknown, defaulting to 1000
[  405.774140][T14852] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2572'.
[  406.778105][T14842] lo speed is unknown, defaulting to 1000
[  407.284938][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  407.291471][T14850] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  407.364767][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.592716][T14880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.609240][T14880] syzkaller0: entered promiscuous mode
[  407.624453][T14880] syzkaller0: entered allmulticast mode
[  407.720316][T14880] tipc: Resetting bearer <eth:syzkaller0>
[  407.793430][T14879] tipc: Resetting bearer <eth:syzkaller0>
[  407.810741][T14879] tipc: Disabling bearer <eth:syzkaller0>
[  408.352849][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'.
[  408.365472][T14882] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  408.520687][T14921] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2590'.
[  408.949510][T14929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.966911][T14928] tipc: Disabling bearer <eth:syzkaller0>
[  409.159794][T14933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2593'.
[  409.235810][T14921] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  409.346381][T14938] nbd4: detected capacity change from 0 to 63
[  409.373582][T14944] block nbd4: NBD_DISCONNECT
[  409.401217][T14943] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2598'.
[  409.431863][T14944] block nbd4: Disconnected due to user request.
[  409.448865][T14944] block nbd4: shutting down sockets
[  409.495866][    C1] blk_print_req_error: 187 callbacks suppressed
[  409.495886][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.497956][T14938] bond19: entered promiscuous mode
[  409.502169][    C1] buffer_io_error: 190 callbacks suppressed
[  409.502184][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  409.502340][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.539032][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  409.550326][T14938] bond19: entered allmulticast mode
[  409.554188][    C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.560582][T14938] 8021q: adding VLAN 0 to HW filter on device bond19
[  409.564709][    C0] Buffer I/O error on dev nbd4, logical block 2, async page read
[  409.581363][    C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.588002][T14950] v speed is unknown, defaulting to 1000
[  409.590503][    C0] Buffer I/O error on dev nbd4, logical block 3, async page read
[  409.607735][T11341] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.631206][T11341] Buffer I/O error on dev nbd4, logical block 0, async page read
[  409.665478][T11341] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.684957][T11341] Buffer I/O error on dev nbd4, logical block 1, async page read
[  409.703442][T11341] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.714710][T11341] Buffer I/O error on dev nbd4, logical block 2, async page read
[  409.723643][T11341] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.765070][T11341] Buffer I/O error on dev nbd4, logical block 3, async page read
[  409.773082][T11341] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.822839][T11341] Buffer I/O error on dev nbd4, logical block 0, async page read
[  409.833154][T11341] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  409.846243][T14968] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2603'.
[  409.854176][T11341] Buffer I/O error on dev nbd4, logical block 1, async page read
[  409.950533][T11341] ldm_validate_partition_table(): Disk read failed.
[  410.000263][T11341] Dev nbd4: unable to read RDB block 0
[  410.028767][T11341]  nbd4: unable to read partition table
[  410.120638][T11341] ldm_validate_partition_table(): Disk read failed.
[  410.142564][T11341] Dev nbd4: unable to read RDB block 0
[  410.152869][T11341]  nbd4: unable to read partition table
[  410.442442][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'.
[  410.742939][T14950] lo speed is unknown, defaulting to 1000
[  410.790445][T14995] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2609'.
[  411.208284][T15002] syzkaller0: entered promiscuous mode
[  411.213851][T15002] syzkaller0: entered allmulticast mode
[  411.537744][T14995] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  411.737608][T15010] nbd2: detected capacity change from 0 to 63
[  411.774767][T15013] block nbd2: NBD_DISCONNECT
[  411.779491][T15013] block nbd2: Disconnected due to user request.
[  411.805528][T15013] block nbd2: shutting down sockets
[  411.828330][T15016] bond23: entered promiscuous mode
[  411.854661][T15016] bond23: entered allmulticast mode
[  411.860290][T15016] 8021q: adding VLAN 0 to HW filter on device bond23
[  411.972261][T11341] ldm_validate_partition_table(): Disk read failed.
[  411.983548][T11341] Dev nbd2: unable to read RDB block 0
[  411.996686][T11341]  nbd2: unable to read partition table
[  412.020765][T11341] ldm_validate_partition_table(): Disk read failed.
[  412.031276][T11341] Dev nbd2: unable to read RDB block 0
[  412.040441][T11341]  nbd2: unable to read partition table
[  413.368243][T15023] syzkaller0: entered promiscuous mode
[  413.373876][T15023] syzkaller0: entered allmulticast mode
[  413.731920][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'.
[  414.286865][T15074] netlink: 'syz.0.2627': attribute type 6 has an invalid length.
[  414.450412][T15084] FAULT_INJECTION: forcing a failure.
[  414.450412][T15084] name failslab, interval 1, probability 0, space 0, times 0
[  414.463791][T15084] CPU: 1 UID: 0 PID: 15084 Comm: syz.0.2631 Not tainted syzkaller #0 PREEMPT(full) 
[  414.463817][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  414.463829][T15084] Call Trace:
[  414.463838][T15084]  <TASK>
[  414.463846][T15084]  dump_stack_lvl+0x189/0x250
[  414.463875][T15084]  ? __pfx____ratelimit+0x10/0x10
[  414.463897][T15084]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.463921][T15084]  ? __pfx__printk+0x10/0x10
[  414.463945][T15084]  ? __pfx___might_resched+0x10/0x10
[  414.463964][T15084]  ? fs_reclaim_acquire+0x7d/0x100
[  414.463996][T15084]  should_fail_ex+0x414/0x560
[  414.464027][T15084]  should_failslab+0xa8/0x100
[  414.464047][T15084]  __kmalloc_cache_noprof+0x6f/0x6f0
[  414.464070][T15084]  ? __genradix_ptr_alloc+0x463/0x4a0
[  414.464092][T15084]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  414.464121][T15084]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  414.464153][T15084]  sctp_association_new+0x15d3/0x25f0
[  414.464188][T15084]  sctp_connect_new_asoc+0x2c5/0x690
[  414.464210][T15084]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  414.464226][T15084]  ? __local_bh_enable_ip+0x12d/0x1c0
[  414.464253][T15084]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  414.464272][T15084]  ? security_sctp_bind_connect+0x7e/0x2e0
[  414.464295][T15084]  sctp_sendmsg+0x155c/0x2810
[  414.464334][T15084]  ? __pfx_sctp_sendmsg+0x10/0x10
[  414.464363][T15084]  ? aa_sk_perm+0x81e/0x950
[  414.464398][T15084]  ? __pfx_aa_sk_perm+0x10/0x10
[  414.464425][T15084]  ? sock_rps_record_flow+0x19/0x410
[  414.464454][T15084]  ? inet_sendmsg+0x2f4/0x370
[  414.464476][T15084]  __sock_sendmsg+0x19c/0x270
[  414.464503][T15084]  __sys_sendto+0x3bd/0x520
[  414.464522][T15084]  ? __pfx___sys_sendto+0x10/0x10
[  414.464547][T15084]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  414.464581][T15084]  ? __fget_files+0x3a0/0x420
[  414.464608][T15084]  ? ksys_write+0x22a/0x250
[  414.464634][T15084]  ? __pfx_ksys_write+0x10/0x10
[  414.464661][T15084]  __x64_sys_sendto+0xde/0x100
[  414.464682][T15084]  do_syscall_64+0xfa/0xfa0
[  414.464702][T15084]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.464723][T15084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.464741][T15084]  ? clear_bhb_loop+0x60/0xb0
[  414.464761][T15084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.464779][T15084] RIP: 0033:0x7f65fdd8f6c9
[  414.464795][T15084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.464811][T15084] RSP: 002b:00007f65fec93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  414.464830][T15084] RAX: ffffffffffffffda RBX: 00007f65fdfe5fa0 RCX: 00007f65fdd8f6c9
[  414.464843][T15084] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  414.464855][T15084] RBP: 00007f65fec93090 R08: 0000200000000080 R09: 000000000000001c
[  414.464867][T15084] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001
[  414.464878][T15084] R13: 00007f65fdfe6038 R14: 00007f65fdfe5fa0 R15: 00007ffea2f22728
[  414.464911][T15084]  </TASK>
[  414.879179][T15089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.905036][T15089] syzkaller0: entered promiscuous mode
[  414.921454][T15089] syzkaller0: entered allmulticast mode
[  414.987469][T15089] tipc: Resetting bearer <eth:syzkaller0>
[  414.995040][T15092] netlink: 'syz.0.2634': attribute type 3 has an invalid length.
[  415.002903][T15092] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2634'.
[  415.012726][T15093] v speed is unknown, defaulting to 1000
[  415.036818][T15087] tipc: Resetting bearer <eth:syzkaller0>
[  415.059630][T15087] tipc: Disabling bearer <eth:syzkaller0>
[  415.286214][T15106] netlink: 'syz.2.2639': attribute type 6 has an invalid length.
[  415.442752][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'.
[  415.673158][T15093] lo speed is unknown, defaulting to 1000
[  415.678092][T15127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2645'.
[  415.918070][T15135] v speed is unknown, defaulting to 1000
[  416.298689][T15135] lo speed is unknown, defaulting to 1000
[  416.341083][T15144] netlink: 'syz.2.2651': attribute type 6 has an invalid length.
[  416.960768][T15152] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2654'.
[  417.700837][T15152] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  417.814015][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'.
[  418.265330][T15183] nbd: nbd1 already in use
[  418.285293][T15183] block nbd1: NBD_DISCONNECT
[  418.295481][T15183] block nbd1: Send disconnect failed -32
[  418.306533][T15183] block nbd1: shutting down sockets
[  418.344753][    C0] blk_print_req_error: 283 callbacks suppressed
[  418.344774][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.360200][    C0] buffer_io_error: 286 callbacks suppressed
[  418.360217][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  418.376367][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.381073][T15184] bond29: entered promiscuous mode
[  418.385483][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  418.385586][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.407575][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  418.415443][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.424497][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  418.432668][T11959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.432764][T15184] bond29: entered allmulticast mode
[  418.447832][T15184] 8021q: adding VLAN 0 to HW filter on device bond29
[  418.447999][T11959] Buffer I/O error on dev nbd1, logical block 0, async page read
[  418.469284][T11959] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.478674][T11959] Buffer I/O error on dev nbd1, logical block 1, async page read
[  418.494065][T11959] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.503595][T11959] Buffer I/O error on dev nbd1, logical block 2, async page read
[  418.512908][T11959] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.522298][T11959] Buffer I/O error on dev nbd1, logical block 3, async page read
[  418.531194][T11959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.540772][T11959] Buffer I/O error on dev nbd1, logical block 0, async page read
[  418.554809][T11959] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.563988][T11959] Buffer I/O error on dev nbd1, logical block 1, async page read
[  418.576703][T11959] ldm_validate_partition_table(): Disk read failed.
[  418.586534][T11959] Dev nbd1: unable to read RDB block 0
[  418.594026][T11959]  nbd1: unable to read partition table
[  418.609093][T11959] ldm_validate_partition_table(): Disk read failed.
[  418.647017][T11959] Dev nbd1: unable to read RDB block 0
[  418.656935][T15187] nbd: nbd1 already in use
[  418.663605][T11959]  nbd1: unable to read partition table
[  418.685462][T15187] block nbd1: NBD_DISCONNECT
[  418.695054][T15187] block nbd1: Send disconnect failed -32
[  418.869555][T15187] bond30: entered promiscuous mode
[  418.874968][T15187] bond30: entered allmulticast mode
[  418.889885][T15187] 8021q: adding VLAN 0 to HW filter on device bond30
[  419.427733][T15212] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2671'.
[  420.022456][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'.
[  420.064436][T15229] v speed is unknown, defaulting to 1000
[  420.158022][T15212] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  420.238251][T15239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2677'.
[  420.451323][T15229] lo speed is unknown, defaulting to 1000
[  420.865030][T15258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.896089][T15258] syzkaller0: entered promiscuous mode
[  420.916545][T15261] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2680'.
[  420.924761][T15258] syzkaller0: entered allmulticast mode
[  420.949991][T15258] tipc: Resetting bearer <eth:syzkaller0>
[  420.992401][T15257] tipc: Resetting bearer <eth:syzkaller0>
[  421.023520][T15257] tipc: Disabling bearer <eth:syzkaller0>
[  421.420855][T15270] v speed is unknown, defaulting to 1000
[  421.627171][T15261] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  422.228531][T15270] lo speed is unknown, defaulting to 1000
[  422.229442][T15301] syzkaller0: entered promiscuous mode
[  422.254677][T15301] syzkaller0: entered allmulticast mode
[  422.308254][T15299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.333512][T15298] tipc: Resetting bearer <eth:syzkaller0>
[  422.394260][T15298] tipc: Disabling bearer <eth:syzkaller0>
[  422.445366][T15302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.452595][T15306] syzkaller0: entered promiscuous mode
[  422.460934][T15306] syzkaller0: entered allmulticast mode
[  422.505373][T15302] tipc: Resetting bearer <eth:syzkaller0>
[  422.551894][T15309] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2698'.
[  422.576135][T15300] tipc: Resetting bearer <eth:syzkaller0>
[  422.637485][T15300] tipc: Disabling bearer <eth:syzkaller0>
[  422.681271][T15321] netlink: 'syz.3.2703': attribute type 6 has an invalid length.
[  422.922302][T15334] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  423.359878][T15343] syzkaller0: entered promiscuous mode
[  423.374014][T15343] syzkaller0: entered allmulticast mode
[  423.405416][T15343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.494270][T15342] tipc: Resetting bearer <eth:syzkaller0>
[  423.525033][T15342] tipc: Disabling bearer <eth:syzkaller0>
[  423.810499][T15345] bond0: (slave bond_slave_0): Releasing backup interface
[  423.860262][T15345] bond0: (slave bond_slave_1): Releasing backup interface
[  423.861203][T15350] netlink: 'syz.1.2712': attribute type 3 has an invalid length.
[  423.883569][T15345] team0: Port device team_slave_0 removed
[  423.917570][T15345] team0: Port device team_slave_1 removed
[  423.923977][T15345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.956982][T15345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.965446][T15345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  424.171177][T15357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.187416][T15357] syzkaller0: entered promiscuous mode
[  424.196728][T15357] syzkaller0: entered allmulticast mode
[  424.197654][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2714'.
[  424.221701][T15357] tipc: Resetting bearer <eth:syzkaller0>
[  424.257487][T15355] tipc: Resetting bearer <eth:syzkaller0>
[  424.287035][T15355] tipc: Disabling bearer <eth:syzkaller0>
[  425.287624][T15384] syzkaller0: entered promiscuous mode
[  425.302006][T15384] syzkaller0: entered allmulticast mode
[  425.321457][T15384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.338952][T15383] tipc: Resetting bearer <eth:syzkaller0>
[  425.489228][T15389] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2724'.
[  425.490370][T15383] tipc: Disabling bearer <eth:syzkaller0>
[  425.638411][T15391] FAULT_INJECTION: forcing a failure.
[  425.638411][T15391] name failslab, interval 1, probability 0, space 0, times 0
[  425.674718][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.4.2725 Not tainted syzkaller #0 PREEMPT(full) 
[  425.674745][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  425.674757][T15391] Call Trace:
[  425.674766][T15391]  <TASK>
[  425.674775][T15391]  dump_stack_lvl+0x189/0x250
[  425.674804][T15391]  ? __pfx____ratelimit+0x10/0x10
[  425.674827][T15391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.674850][T15391]  ? __pfx__printk+0x10/0x10
[  425.674875][T15391]  ? __pfx___might_resched+0x10/0x10
[  425.674893][T15391]  ? fs_reclaim_acquire+0x7d/0x100
[  425.674924][T15391]  should_fail_ex+0x414/0x560
[  425.674954][T15391]  should_failslab+0xa8/0x100
[  425.674975][T15391]  kmem_cache_alloc_node_noprof+0x77/0x710
[  425.674999][T15391]  ? __alloc_skb+0x112/0x2d0
[  425.675022][T15391]  ? netlink_autobind+0xdb/0x300
[  425.675045][T15391]  __alloc_skb+0x112/0x2d0
[  425.675072][T15391]  netlink_sendmsg+0x5c6/0xb30
[  425.675100][T15391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.675120][T15391]  ? aa_sock_msg_perm+0xf1/0x1d0
[  425.675145][T15391]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  425.675163][T15391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.675182][T15391]  __sock_sendmsg+0x21c/0x270
[  425.675208][T15391]  ____sys_sendmsg+0x505/0x830
[  425.675233][T15391]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.675262][T15391]  ? import_iovec+0x74/0xa0
[  425.675288][T15391]  ___sys_sendmsg+0x21f/0x2a0
[  425.675310][T15391]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.675382][T15391]  ? __fget_files+0x2a/0x420
[  425.675400][T15391]  ? __fget_files+0x3a0/0x420
[  425.675427][T15391]  __x64_sys_sendmsg+0x19b/0x260
[  425.675450][T15391]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.675479][T15391]  ? __pfx_ksys_write+0x10/0x10
[  425.675507][T15391]  ? do_syscall_64+0xbe/0xfa0
[  425.675533][T15391]  do_syscall_64+0xfa/0xfa0
[  425.675554][T15391]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.675577][T15391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.675595][T15391]  ? clear_bhb_loop+0x60/0xb0
[  425.675623][T15391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.675641][T15391] RIP: 0033:0x7f60e1b8f6c9
[  425.675658][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.675674][T15391] RSP: 002b:00007f60e29ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.675694][T15391] RAX: ffffffffffffffda RBX: 00007f60e1de5fa0 RCX: 00007f60e1b8f6c9
[  425.675708][T15391] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  425.675720][T15391] RBP: 00007f60e29ae090 R08: 0000000000000000 R09: 0000000000000000
[  425.675732][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.675743][T15391] R13: 00007f60e1de6038 R14: 00007f60e1de5fa0 R15: 00007ffca7d99648
[  425.675774][T15391]  </TASK>
[  426.081679][T15393] syzkaller1: entered promiscuous mode
[  426.090183][T15393] syzkaller1: entered allmulticast mode
[  426.106005][T15389] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  426.442230][T15406] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2728'.
[  426.500391][T15403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2729'.
[  426.834138][T15418] v speed is unknown, defaulting to 1000
[  427.065109][T15424] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2734'.
[  427.126651][T15406] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  427.254382][T15427] syzkaller0: entered promiscuous mode
[  427.266506][T15427] syzkaller0: entered allmulticast mode
[  427.288936][T15427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.316871][T15425] tipc: Resetting bearer <eth:syzkaller0>
[  427.366110][T15425] tipc: Disabling bearer <eth:syzkaller0>
[  427.400099][T15430] v speed is unknown, defaulting to 1000
[  427.885891][T15418] lo speed is unknown, defaulting to 1000
[  428.183454][T15430] lo speed is unknown, defaulting to 1000
[  428.633316][T15452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.656569][T15452] syzkaller0: entered promiscuous mode
[  428.662079][T15452] syzkaller0: entered allmulticast mode
[  428.696814][T15452] tipc: Resetting bearer <eth:syzkaller0>
[  428.711301][T15454] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2742'.
[  428.735185][T15454] netlink: 'syz.2.2742': attribute type 9 has an invalid length.
[  428.762687][T15456] netlink: 3976 bytes leftover after parsing attributes in process `syz.2.2742'.
[  428.763372][T15454] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2742'.
[  428.772385][T15456] openvswitch: netlink: Flow key attr not present in new flow.
[  428.792479][T15454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2742'.
[  428.816977][T15451] tipc: Resetting bearer <eth:syzkaller0>
[  428.844947][T15451] tipc: Disabling bearer <eth:syzkaller0>
[  429.015031][T15466] 8021q: VLANs not supported on ip_vti0
[  429.108586][T15463] v speed is unknown, defaulting to 1000
[  429.242675][T15472] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2747'.
[  429.881254][T15463] lo speed is unknown, defaulting to 1000
[  430.112686][T15492] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2753'.
[  430.559889][T15504] 8021q: VLANs not supported on ip_vti0
[  430.826708][T15513] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2759'.
[  430.889930][T15510] v speed is unknown, defaulting to 1000
[  431.045226][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  431.053789][T15490] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  431.347714][T15536] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2765'.
[  431.566560][T15510] lo speed is unknown, defaulting to 1000
[  431.619913][T15544] 8021q: VLANs not supported on ip_vti0
[  431.960771][T15552] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2772'.
[  432.049247][T15536] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  432.087532][T15556] syzkaller1: entered promiscuous mode
[  432.094938][T15556] syzkaller1: entered allmulticast mode
[  432.330014][T15561] syzkaller0: entered promiscuous mode
[  432.358517][T15561] syzkaller0: entered allmulticast mode
[  432.390010][T15571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.458133][T15560] tipc: Resetting bearer <eth:syzkaller0>
[  432.502374][T15560] tipc: Disabling bearer <eth:syzkaller0>
[  432.519761][T15574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.536679][T15572] syzkaller0: entered promiscuous mode
[  432.552383][T15572] syzkaller0: entered allmulticast mode
[  432.694399][T15574] tipc: Resetting bearer <eth:syzkaller0>
[  432.782597][T15570] tipc: Resetting bearer <eth:syzkaller0>
[  432.895670][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'.
[  432.985567][T15570] tipc: Disabling bearer <eth:syzkaller0>
[  433.245400][T15589] 8021q: VLANs not supported on ip_vti0
[  433.611227][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'.
[  433.882436][T15611] syzkaller0: entered promiscuous mode
[  433.898195][T15611] syzkaller0: entered allmulticast mode
[  433.906156][T15610] v speed is unknown, defaulting to 1000
[  433.914455][T15611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.936588][T15608] tipc: Resetting bearer <eth:syzkaller0>
[  434.035865][T15608] tipc: Disabling bearer <eth:syzkaller0>
[  434.084723][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  434.356029][T15617] v speed is unknown, defaulting to 1000
[  434.445115][T15620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2794'.
[  434.713594][T15610] lo speed is unknown, defaulting to 1000
[  434.985304][T15626] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2796'.
[  435.187951][T15617] lo speed is unknown, defaulting to 1000
[  435.458594][T15636] v speed is unknown, defaulting to 1000
[  436.477110][T15636] lo speed is unknown, defaulting to 1000
[  436.921602][T15654] syzkaller0: entered promiscuous mode
[  436.941204][T15654] syzkaller0: entered allmulticast mode
[  436.957810][T15654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.969683][T15653] tipc: Resetting bearer <eth:syzkaller0>
[  437.071098][T15653] tipc: Disabling bearer <eth:syzkaller0>
[  437.643853][T15672] syz_tun: entered allmulticast mode
[  437.830644][T15672] syz_tun: left allmulticast mode
[  438.207905][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  438.217096][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  438.225583][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  438.233737][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  438.241672][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  438.331156][T15682] v speed is unknown, defaulting to 1000
[  438.455696][T15680] bond25: entered promiscuous mode
[  438.460866][T15680] bond25: entered allmulticast mode
[  438.485246][T15680] 8021q: adding VLAN 0 to HW filter on device bond25
[  438.672759][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'.
[  439.226566][T15682] lo speed is unknown, defaulting to 1000
[  439.349082][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.367016][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.392829][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.405041][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.423541][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.432962][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.442954][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.453603][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.463876][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'.
[  439.483860][T15706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.505145][ T5948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.543446][T15710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.581499][T15711] syzkaller0: entered promiscuous mode
[  439.590508][T15711] syzkaller0: entered allmulticast mode
[  439.635048][T15702] v speed is unknown, defaulting to 1000
[  439.656301][T15710] tipc: Resetting bearer <eth:syzkaller0>
[  439.734828][T15708] tipc: Resetting bearer <eth:syzkaller0>
[  439.761823][T15708] tipc: Disabling bearer <eth:syzkaller0>
[  440.044832][ T5948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.324759][ T5838] Bluetooth: hci4: command tx timeout
[  440.502735][T15682] chnl_net:caif_netlink_parms(): no params data found
[  440.566686][T15702] lo speed is unknown, defaulting to 1000
[  440.786949][T15682] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.794104][T15682] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.810730][T15682] bridge_slave_0: entered allmulticast mode
[  440.838606][T15682] bridge_slave_0: entered promiscuous mode
[  440.847380][T15729] 8021q: VLANs not supported on ip_vti0
[  440.875425][T15682] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.885744][T15682] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.893014][T15682] bridge_slave_1: entered allmulticast mode
[  440.920298][T15682] bridge_slave_1: entered promiscuous mode
[  441.065126][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.111414][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.336802][T15682] team0: Port device team_slave_0 added
[  441.461990][T15739] bond20 (unregistering): Released all slaves
[  441.491210][T15682] team0: Port device team_slave_1 added
[  441.635019][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.662733][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.744793][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.795822][T15755] syzkaller0: entered promiscuous mode
[  441.801588][T15755] syzkaller0: entered allmulticast mode
[  441.816594][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.823865][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.850637][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.182693][T15682] hsr_slave_0: entered promiscuous mode
[  442.200885][T15682] hsr_slave_1: entered promiscuous mode
[  442.222697][T15682] debugfs: 'hsr0' already exists in 'hsr'
[  442.231136][T15682] Cannot create hsr debugfs directory
[  442.286344][T15768] nbd: must specify a size in bytes for the device
[  442.384346][T15768] bond31: entered promiscuous mode
[  442.406388][ T5831] Bluetooth: hci4: command tx timeout
[  442.411940][T15768] bond31: entered allmulticast mode
[  442.417924][T15768] 8021q: adding VLAN 0 to HW filter on device bond31
[  442.695094][T15784] v speed is unknown, defaulting to 1000
[  442.879889][T15785] v speed is unknown, defaulting to 1000
[  442.885782][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  442.908149][T15682] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  442.920753][T15682] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  442.933749][T15682] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  442.951772][T15682] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  443.188497][T15784] lo speed is unknown, defaulting to 1000
[  443.248336][T15682] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.288632][T15682] 8021q: adding VLAN 0 to HW filter on device team0
[  443.313376][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.320615][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.348908][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.356120][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.424087][T15682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  443.445690][T15682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  443.645010][T15785] lo speed is unknown, defaulting to 1000
[  443.708844][T15799] v speed is unknown, defaulting to 1000
[  443.990448][T15682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.182519][T15682] veth0_vlan: entered promiscuous mode
[  444.277041][T15682] veth1_vlan: entered promiscuous mode
[  444.494256][T15682] veth0_macvtap: entered promiscuous mode
[  444.500487][ T5838] Bluetooth: hci4: command tx timeout
[  444.517538][T15682] veth1_macvtap: entered promiscuous mode
[  444.553038][T15682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.573830][T15682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.623483][ T2914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.644491][ T2914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.680794][T15799] lo speed is unknown, defaulting to 1000
[  444.684039][ T2914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.698851][ T2914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.840327][  T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.860972][  T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.918527][T15825] SET target dimension over the limit!
[  445.030655][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.058629][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.281805][T15834] __nla_validate_parse: 10 callbacks suppressed
[  445.281824][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'.
[  445.550278][T15844] syzkaller0: entered promiscuous mode
[  445.558117][T15844] syzkaller0: entered allmulticast mode
[  445.568308][T15844] tipc: Started in network mode
[  445.573375][T15844] tipc: Node identity ba2939b352d2, cluster identity 4711
[  445.580984][T15844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.589851][T15843] tipc: Resetting bearer <eth:syzkaller0>
[  445.609603][T15843] tipc: Disabling bearer <eth:syzkaller0>
[  446.293340][T15857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2860'.
[  446.295043][T15858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2861'.
[  446.500177][T15860] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2862'.
[  446.583862][ T5838] Bluetooth: hci4: command tx timeout
[  446.596373][T15863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2863'.
[  447.067142][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'.
[  447.160658][T15883] FAULT_INJECTION: forcing a failure.
[  447.160658][T15883] name failslab, interval 1, probability 0, space 0, times 0
[  447.178382][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.4.2871 Not tainted syzkaller #0 PREEMPT(full) 
[  447.178409][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  447.178420][T15883] Call Trace:
[  447.178429][T15883]  <TASK>
[  447.178437][T15883]  dump_stack_lvl+0x189/0x250
[  447.178469][T15883]  ? __pfx____ratelimit+0x10/0x10
[  447.178491][T15883]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.178515][T15883]  ? __pfx__printk+0x10/0x10
[  447.178538][T15883]  ? __pfx___might_resched+0x10/0x10
[  447.178557][T15883]  ? fs_reclaim_acquire+0x7d/0x100
[  447.178587][T15883]  should_fail_ex+0x414/0x560
[  447.178618][T15883]  should_failslab+0xa8/0x100
[  447.178639][T15883]  __kmalloc_noprof+0xcb/0x7f0
[  447.178659][T15883]  ? offload_action_alloc+0x2d/0x180
[  447.178686][T15883]  offload_action_alloc+0x2d/0x180
[  447.178714][T15883]  tcf_action_offload_add_ex+0x388/0x870
[  447.178745][T15883]  ? __pfx_tcf_action_offload_add_ex+0x10/0x10
[  447.178796][T15883]  ? tcf_action_fill_size+0x1c/0x2e0
[  447.178822][T15883]  ? tcf_action_fill_size+0x1c/0x2e0
[  447.178848][T15883]  tcf_action_init+0x341/0xab0
[  447.178879][T15883]  ? __pfx_tcf_action_init+0x10/0x10
[  447.178937][T15883]  ? __pfx___nla_validate_parse+0x10/0x10
[  447.178995][T15883]  tc_ctl_action+0x430/0xbd0
[  447.179028][T15883]  ? __pfx_tc_ctl_action+0x10/0x10
[  447.179055][T15883]  ? rcu_is_watching+0x15/0xb0
[  447.179076][T15883]  ? trace_contention_end+0x39/0x120
[  447.179141][T15883]  ? __pfx_tc_ctl_action+0x10/0x10
[  447.179163][T15883]  rtnetlink_rcv_msg+0x77c/0xb70
[  447.179187][T15883]  ? __lock_acquire+0xab9/0xd20
[  447.179207][T15883]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  447.179231][T15883]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  447.179271][T15883]  netlink_rcv_skb+0x208/0x470
[  447.179300][T15883]  ? __lock_acquire+0xab9/0xd20
[  447.179319][T15883]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  447.179345][T15883]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  447.179386][T15883]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.179412][T15883]  netlink_unicast+0x82f/0x9e0
[  447.179445][T15883]  ? __pfx_netlink_unicast+0x10/0x10
[  447.179470][T15883]  ? netlink_sendmsg+0x642/0xb30
[  447.179486][T15883]  ? skb_put+0x11b/0x210
[  447.179506][T15883]  netlink_sendmsg+0x805/0xb30
[  447.179534][T15883]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.179556][T15883]  ? aa_sock_msg_perm+0xf1/0x1d0
[  447.179582][T15883]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.179600][T15883]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.179619][T15883]  __sock_sendmsg+0x21c/0x270
[  447.179645][T15883]  ____sys_sendmsg+0x505/0x830
[  447.179671][T15883]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.179699][T15883]  ? import_iovec+0x74/0xa0
[  447.179724][T15883]  ___sys_sendmsg+0x21f/0x2a0
[  447.179746][T15883]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.179802][T15883]  ? __fget_files+0x2a/0x420
[  447.179819][T15883]  ? __fget_files+0x3a0/0x420
[  447.179847][T15883]  __x64_sys_sendmsg+0x19b/0x260
[  447.179869][T15883]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.179898][T15883]  ? __pfx_ksys_write+0x10/0x10
[  447.179932][T15883]  ? do_syscall_64+0xbe/0xfa0
[  447.179957][T15883]  do_syscall_64+0xfa/0xfa0
[  447.179975][T15883]  ? lockdep_hardirqs_on+0x9c/0x150
[  447.179995][T15883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.180011][T15883]  ? clear_bhb_loop+0x60/0xb0
[  447.180029][T15883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.180044][T15883] RIP: 0033:0x7f60e1b8f6c9
[  447.180060][T15883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.180075][T15883] RSP: 002b:00007f60e29ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.180096][T15883] RAX: ffffffffffffffda RBX: 00007f60e1de5fa0 RCX: 00007f60e1b8f6c9
[  447.180109][T15883] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004
[  447.180121][T15883] RBP: 00007f60e29ae090 R08: 0000000000000000 R09: 0000000000000000
[  447.180132][T15883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  447.180142][T15883] R13: 00007f60e1de6038 R14: 00007f60e1de5fa0 R15: 00007ffca7d99648
[  447.180171][T15883]  </TASK>
[  447.180923][T15884] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  448.112097][T15922] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2880'.
[  448.263048][ T5933] IPVS: starting estimator thread 0...
[  448.332424][T15927] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2882'.
[  448.357784][T15928] IPVS: using max 28 ests per chain, 67200 per kthread
[  448.820494][T15959] v speed is unknown, defaulting to 1000
[  449.040461][T15927] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  449.158284][T15971] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2890'.
[  449.240671][T15974] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2893'.
[  449.492344][T15959] lo speed is unknown, defaulting to 1000
[  449.905923][T15971] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  450.512589][T16003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.545041][T16003] syzkaller0: entered promiscuous mode
[  450.564718][T16003] syzkaller0: entered allmulticast mode
[  450.630450][T16003] tipc: Resetting bearer <eth:syzkaller0>
[  450.659752][T16002] tipc: Resetting bearer <eth:syzkaller0>
[  450.729091][T16002] tipc: Disabling bearer <eth:syzkaller0>
[  450.887026][T16017] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2905'.
[  451.196724][T16028] FAULT_INJECTION: forcing a failure.
[  451.196724][T16028] name failslab, interval 1, probability 0, space 0, times 0
[  451.209761][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.4.2910 Not tainted syzkaller #0 PREEMPT(full) 
[  451.209785][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  451.209797][T16028] Call Trace:
[  451.209806][T16028]  <TASK>
[  451.209814][T16028]  dump_stack_lvl+0x189/0x250
[  451.209849][T16028]  ? __pfx____ratelimit+0x10/0x10
[  451.209872][T16028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.209895][T16028]  ? __pfx__printk+0x10/0x10
[  451.209929][T16028]  should_fail_ex+0x414/0x560
[  451.209960][T16028]  should_failslab+0xa8/0x100
[  451.209982][T16028]  kmem_cache_alloc_noprof+0x74/0x6e0
[  451.210006][T16028]  ? skb_ext_add+0x148/0x8f0
[  451.210031][T16028]  skb_ext_add+0x148/0x8f0
[  451.210049][T16028]  ? inet6_lookup_reuseport+0x7d/0x150
[  451.210079][T16028]  secpath_set+0x58/0x1f0
[  451.210103][T16028]  esp6_gro_receive+0x40c/0xfe0
[  451.210127][T16028]  ? xfrm6_gro_udp_encap_rcv+0x1cf/0x8e0
[  451.210151][T16028]  ? __pfx_esp6_gro_receive+0x10/0x10
[  451.210178][T16028]  ? __pfx_esp6_gro_receive+0x10/0x10
[  451.210197][T16028]  ? xfrm6_gro_udp_encap_rcv+0x1cf/0x8e0
[  451.210217][T16028]  xfrm6_gro_udp_encap_rcv+0x4bd/0x8e0
[  451.210238][T16028]  ? xfrm6_gro_udp_encap_rcv+0x1cf/0x8e0
[  451.210260][T16028]  ? __pfx_xfrm6_gro_udp_encap_rcv+0x10/0x10
[  451.210283][T16028]  udp_gro_receive+0x2538/0x25d0
[  451.210322][T16028]  ? __pfx_udp6_gro_receive+0x10/0x10
[  451.210344][T16028]  ipv6_gro_receive+0x1200/0x1640
[  451.210384][T16028]  ? __pfx_ipv6_gro_receive+0x10/0x10
[  451.210404][T16028]  ? dev_gro_receive+0x1108/0x23c0
[  451.210430][T16028]  dev_gro_receive+0x1853/0x23c0
[  451.210455][T16028]  ? dev_gro_receive+0x1108/0x23c0
[  451.210503][T16028]  napi_gro_frags+0x5e6/0x1030
[  451.210541][T16028]  ? tun_get_user+0x272f/0x3e90
[  451.210561][T16028]  tun_get_user+0x298e/0x3e90
[  451.210595][T16028]  ? tun_get_user+0x272f/0x3e90
[  451.210620][T16028]  ? aa_file_perm+0x44d/0x1550
[  451.210638][T16028]  ? __pfx_tun_get_user+0x10/0x10
[  451.210671][T16028]  ? __lock_acquire+0xab9/0xd20
[  451.210697][T16028]  ? ref_tracker_alloc+0x318/0x460
[  451.210713][T16028]  ? __lock_acquire+0xab9/0xd20
[  451.210733][T16028]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  451.210758][T16028]  ? tun_get+0x1c/0x2f0
[  451.210785][T16028]  ? tun_get+0x1c/0x2f0
[  451.210805][T16028]  ? tun_get+0x1c/0x2f0
[  451.210836][T16028]  tun_chr_write_iter+0x113/0x200
[  451.210861][T16028]  vfs_write+0x5c9/0xb30
[  451.210891][T16028]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  451.210913][T16028]  ? __pfx_vfs_write+0x10/0x10
[  451.210948][T16028]  ? __fget_files+0x2a/0x420
[  451.210976][T16028]  ksys_write+0x145/0x250
[  451.211003][T16028]  ? __pfx_ksys_write+0x10/0x10
[  451.211031][T16028]  ? do_syscall_64+0xbe/0xfa0
[  451.211058][T16028]  do_syscall_64+0xfa/0xfa0
[  451.211079][T16028]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.211102][T16028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.211121][T16028]  ? clear_bhb_loop+0x60/0xb0
[  451.211143][T16028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.211161][T16028] RIP: 0033:0x7f60e1b8f6c9
[  451.211178][T16028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.211193][T16028] RSP: 002b:00007f60e29ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  451.211213][T16028] RAX: ffffffffffffffda RBX: 00007f60e1de5fa0 RCX: 00007f60e1b8f6c9
[  451.211226][T16028] RDX: 0000000000000052 RSI: 0000200000000200 RDI: 0000000000000004
[  451.211238][T16028] RBP: 00007f60e29ae090 R08: 0000000000000000 R09: 0000000000000000
[  451.211248][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.211259][T16028] R13: 00007f60e1de6038 R14: 00007f60e1de5fa0 R15: 00007ffca7d99648
[  451.211292][T16028]  </TASK>
[  452.658376][T16054] syzkaller0: entered promiscuous mode
[  452.663889][T16054] syzkaller0: entered allmulticast mode
[  452.840543][T16057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.850559][T16053] tipc: Resetting bearer <eth:syzkaller0>
[  452.857136][T16061] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2920'.
[  452.983667][T16053] tipc: Disabling bearer <eth:syzkaller0>
[  453.893997][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  453.903763][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  453.912363][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  453.922764][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  453.934400][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  453.999806][T16085] v speed is unknown, defaulting to 1000
[  454.460481][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'.
[  454.467745][T16085] lo speed is unknown, defaulting to 1000
[  454.963194][T16104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2935'.
[  454.994741][T16104] netlink: 'syz.2.2935': attribute type 33 has an invalid length.
[  455.005758][T16104] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2935'.
[  455.027263][T16104] `: renamed from team0
[  455.137438][T16112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.160158][T16112] syzkaller0: entered promiscuous mode
[  455.172696][T16112] syzkaller0: entered allmulticast mode
[  455.208794][T16085] chnl_net:caif_netlink_parms(): no params data found
[  455.243926][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'.
[  455.300177][T16112] tipc: Resetting bearer <eth:syzkaller0>
[  455.374038][T16111] tipc: Resetting bearer <eth:syzkaller0>
[  455.422527][T16111] tipc: Disabling bearer <eth:syzkaller0>
[  455.515441][T16085] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.522842][T16085] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.530421][T16085] bridge_slave_0: entered allmulticast mode
[  455.537883][T16085] bridge_slave_0: entered promiscuous mode
[  455.546778][T16085] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.553981][T16085] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.561485][T16085] bridge_slave_1: entered allmulticast mode
[  455.570342][T16085] bridge_slave_1: entered promiscuous mode
[  455.606943][T16136] block nbd3: NBD_DISCONNECT
[  455.656844][T16136] bond26: entered promiscuous mode
[  455.662323][T16136] bond26: entered allmulticast mode
[  455.670655][T16136] 8021q: adding VLAN 0 to HW filter on device bond26
[  455.709153][T16085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.753744][T16085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.803717][T16142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2944'.
[  455.830202][T16085] team0: Port device team_slave_0 added
[  455.840443][T16085] team0: Port device team_slave_1 added
[  455.986270][T16085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.993351][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.021439][T16085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.027189][ T5831] Bluetooth: hci2: command tx timeout
[  456.039074][T16085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.052616][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.079147][T16085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.155392][T16085] hsr_slave_0: entered promiscuous mode
[  456.162212][T16085] hsr_slave_1: entered promiscuous mode
[  456.176047][T16085] debugfs: 'hsr0' already exists in 'hsr'
[  456.181805][T16085] Cannot create hsr debugfs directory
[  456.531926][T16085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  456.623776][T16085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  456.694301][T16085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  456.783071][T16085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  456.951812][T16175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2952'.
[  457.332992][T16085] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  457.419488][T16085] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  457.453342][T16085] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  457.464836][T16085] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  457.531648][T16180] v speed is unknown, defaulting to 1000
[  457.569249][T16193] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2955'.
[  458.025877][T16180] lo speed is unknown, defaulting to 1000
[  458.085019][ T5831] Bluetooth: hci2: command tx timeout
[  458.149059][T16085] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.168810][T16194] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  458.188755][T16085] 8021q: adding VLAN 0 to HW filter on device team0
[  458.226341][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.233525][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.267404][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.274629][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.312513][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'.
[  458.890870][T16085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.571334][T16085] veth0_vlan: entered promiscuous mode
[  459.632183][T16085] veth1_vlan: entered promiscuous mode
[  459.759355][T16085] veth0_macvtap: entered promiscuous mode
[  459.794116][T16085] veth1_macvtap: entered promiscuous mode
[  459.888493][T16085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.958932][T16085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.998151][ T6132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.015048][ T6132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.038625][ T6132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.070998][ T6132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.165523][ T5831] Bluetooth: hci2: command tx timeout
[  460.249655][T16253] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2966'.
[  460.263362][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.288778][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.381908][  T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.397635][  T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.580031][T16259] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2922'.
[  460.807488][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'.
[  460.895454][T16263] v speed is unknown, defaulting to 1000
[  460.968687][T16253] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  461.227652][T16279] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2972'.
[  461.351979][T16281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2973'.
[  461.480832][T16265] v speed is unknown, defaulting to 1000
[  461.864742][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  461.873929][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  461.884097][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  461.904647][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  461.917300][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  462.245283][ T5838] Bluetooth: hci2: command tx timeout
[  462.253730][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'.
[  462.294679][T16305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2980'.
[  462.324331][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'.
[  462.350393][T16305] FAULT_INJECTION: forcing a failure.
[  462.350393][T16305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.392179][T16305] CPU: 1 UID: 0 PID: 16305 Comm: syz.2.2980 Not tainted syzkaller #0 PREEMPT(full) 
[  462.392206][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  462.392218][T16305] Call Trace:
[  462.392227][T16305]  <TASK>
[  462.392236][T16305]  dump_stack_lvl+0x189/0x250
[  462.392266][T16305]  ? __pfx____ratelimit+0x10/0x10
[  462.392289][T16305]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.392313][T16305]  ? __pfx__printk+0x10/0x10
[  462.392345][T16305]  should_fail_ex+0x414/0x560
[  462.392376][T16305]  _copy_to_user+0x31/0xb0
[  462.392400][T16305]  simple_read_from_buffer+0xe1/0x170
[  462.392432][T16305]  proc_fail_nth_read+0x1b3/0x220
[  462.392457][T16305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  462.392483][T16305]  ? rw_verify_area+0x2a6/0x4d0
[  462.392506][T16305]  ? __lock_acquire+0xab9/0xd20
[  462.392522][T16305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  462.392546][T16305]  vfs_read+0x200/0xa30
[  462.392568][T16305]  ? fdget_pos+0x247/0x320
[  462.392590][T16305]  ? __pfx___mutex_lock+0x10/0x10
[  462.392615][T16305]  ? __pfx_vfs_read+0x10/0x10
[  462.392641][T16305]  ? __fget_files+0x2a/0x420
[  462.392663][T16305]  ? __fget_files+0x3a0/0x420
[  462.392679][T16305]  ? __fget_files+0x2a/0x420
[  462.392706][T16305]  ksys_read+0x145/0x250
[  462.392732][T16305]  ? __pfx_ksys_read+0x10/0x10
[  462.392760][T16305]  ? do_syscall_64+0xbe/0xfa0
[  462.392787][T16305]  do_syscall_64+0xfa/0xfa0
[  462.392826][T16305]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.392849][T16305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.392866][T16305]  ? clear_bhb_loop+0x60/0xb0
[  462.392888][T16305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.392905][T16305] RIP: 0033:0x7ff8bff8e0dc
[  462.392922][T16305] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  462.392938][T16305] RSP: 002b:00007ff8c0e21030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  462.392959][T16305] RAX: ffffffffffffffda RBX: 00007ff8c01e5fa0 RCX: 00007ff8bff8e0dc
[  462.392974][T16305] RDX: 000000000000000f RSI: 00007ff8c0e210a0 RDI: 0000000000000004
[  462.392986][T16305] RBP: 00007ff8c0e21090 R08: 0000000000000000 R09: 0000000000000000
[  462.392998][T16305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.393010][T16305] R13: 00007ff8c01e6038 R14: 00007ff8c01e5fa0 R15: 00007ffee6e6a908
[  462.393044][T16305]  </TASK>
[  462.729575][T16294] v speed is unknown, defaulting to 1000
[  463.015165][T16263] lo speed is unknown, defaulting to 1000
[  463.186242][T16324] netlink: 'syz.2.2987': attribute type 64 has an invalid length.
[  463.295701][T16326] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2986'.
[  463.337838][T16330] xt_SECMARK: invalid mode: 0
[  463.396300][T16333] netlink: 'syz.0.2990': attribute type 29 has an invalid length.
[  463.417752][T16330] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2989'.
[  463.428576][T16333] netlink: 'syz.0.2990': attribute type 29 has an invalid length.
[  463.445770][T16330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2989'.
[  463.446363][T16333] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2990'.
[  463.580843][T16336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.606787][T16336] syzkaller0: entered promiscuous mode
[  463.612403][T16336] syzkaller0: entered allmulticast mode
[  463.627602][T16265] lo speed is unknown, defaulting to 1000
[  463.662394][T16335] tipc: Resetting bearer <eth:syzkaller0>
[  463.701392][T16335] tipc: Disabling bearer <eth:syzkaller0>
[  463.718511][T16342] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2994'.
[  464.005000][ T5838] Bluetooth: hci5: command tx timeout
[  464.215671][T16360] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3000'.
[  464.247186][T16357] 8021q: VLANs not supported on ip_vti0
[  464.261703][T16294] lo speed is unknown, defaulting to 1000
[  464.424014][T16366] bridge_slave_0: left allmulticast mode
[  464.431362][T16366] bridge_slave_0: left promiscuous mode
[  464.439308][T16366] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.483166][T16366] bridge_slave_1: left allmulticast mode
[  464.512814][T16366] bridge_slave_1: left promiscuous mode
[  464.524127][T16366] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.598913][T16366] bond0: (slave bond_slave_0): Releasing backup interface
[  464.621072][T16366] bond0: (slave bond_slave_1): Releasing backup interface
[  464.735142][T16366] team0: Port device team_slave_0 removed
[  464.782264][T16366] team0: Port device team_slave_1 removed
[  464.816067][T16366] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.824222][T16366] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.838456][T16366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.863466][T16366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.910409][T16366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  465.009685][T16375] syzkaller0: entered promiscuous mode
[  465.015631][T16375] syzkaller0: entered allmulticast mode
[  465.026745][T16378] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  465.520000][T16388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  466.084886][ T5831] Bluetooth: hci5: command tx timeout
[  466.244865][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  466.251460][T16373] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  466.524930][ T5933] tipc: Node number set to 3908778419
[  467.013872][T16386] syzkaller0: entered promiscuous mode
[  467.019439][T16386] syzkaller0: entered allmulticast mode
[  467.046182][T16390] tipc: Resetting bearer <eth:syzkaller0>
[  467.058716][T16393] bpq0: entered promiscuous mode
[  467.077496][T16385] tipc: Resetting bearer <eth:syzkaller0>
[  467.095713][T16385] tipc: Disabling bearer <eth:syzkaller0>
[  467.333655][T16406] v speed is unknown, defaulting to 1000
[  467.363454][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'.
[  467.401141][T16414] geneve2: entered promiscuous mode
[  467.409534][T16414] geneve2: entered allmulticast mode
[  467.417059][T16413] bpq0: left promiscuous mode
[  467.436696][ T2914] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  467.467904][ T2914] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  467.488241][ T2914] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  467.508442][ T2914] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  467.520438][T16294] chnl_net:caif_netlink_parms(): no params data found
[  467.777720][T16294] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.785199][T16294] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.792758][T16294] bridge_slave_0: entered allmulticast mode
[  467.800811][T16294] bridge_slave_0: entered promiscuous mode
[  467.812410][T16294] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.820494][T16294] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.828245][T16432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3012'.
[  467.837873][T16294] bridge_slave_1: entered allmulticast mode
[  467.847266][T16294] bridge_slave_1: entered promiscuous mode
[  468.169481][ T5831] Bluetooth: hci5: command tx timeout
[  468.237387][T16294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.296054][T16406] lo speed is unknown, defaulting to 1000
[  468.312157][T16294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.668532][T16294] team0: Port device team_slave_0 added
[  468.688825][T16294] team0: Port device team_slave_1 added
[  468.763974][T16439] v speed is unknown, defaulting to 1000
[  468.764754][T16294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.789260][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.816459][T16294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.835664][T16294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.844750][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.872492][T16294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.971797][T16447] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3016'.
[  469.030091][T16294] hsr_slave_0: entered promiscuous mode
[  469.046925][T16294] hsr_slave_1: entered promiscuous mode
[  469.053401][T16294] debugfs: 'hsr0' already exists in 'hsr'
[  469.059746][T16294] Cannot create hsr debugfs directory
[  469.373112][T16454] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3019'.
[  469.390417][T16455] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  469.554263][T16455] syzkaller0: entered promiscuous mode
[  469.560146][T16455] syzkaller0: entered allmulticast mode
[  469.642719][T16439] lo speed is unknown, defaulting to 1000
[  469.962919][T16467] netlink: 'syz.2.3022': attribute type 3 has an invalid length.
[  469.978378][T16467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  470.159581][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  470.244778][ T5831] Bluetooth: hci5: command tx timeout
[  470.287522][T16294] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  470.299410][T16294] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  470.354137][T16294] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  470.383689][T16294] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  470.699819][T16294] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.725003][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.767970][T16294] 8021q: adding VLAN 0 to HW filter on device team0
[  470.796613][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.803804][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.837764][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.844980][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.227689][T16496] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  471.473137][T16501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.489208][T16501] syzkaller0: entered promiscuous mode
[  471.497074][T16501] syzkaller0: entered allmulticast mode
[  471.507095][T16294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.555794][T16499] v speed is unknown, defaulting to 1000
[  471.602623][T16503] tipc: Resetting bearer <eth:syzkaller0>
[  471.741040][T16500] tipc: Resetting bearer <eth:syzkaller0>
[  471.771191][T16500] tipc: Disabling bearer <eth:syzkaller0>
[  471.829465][T16294] veth0_vlan: entered promiscuous mode
[  471.844016][T16294] veth1_vlan: entered promiscuous mode
[  471.983949][T16499] lo speed is unknown, defaulting to 1000
[  472.004295][T16294] veth0_macvtap: entered promiscuous mode
[  472.035290][T16294] veth1_macvtap: entered promiscuous mode
[  472.118877][T16294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.177163][T16294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.265215][ T6133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.291599][ T6133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.312765][ T6133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.341962][ T6133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.651223][T16518] v speed is unknown, defaulting to 1000
[  472.674947][ T6133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.709183][ T6133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.849386][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.866123][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.154477][ T5880] IPVS: starting estimator thread 0...
[  473.171329][T16533] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2971'.
[  473.280999][T16530] IPVS: using max 28 ests per chain, 67200 per kthread
[  473.808785][T16532] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  473.897187][T16533] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  474.047483][T16541] v speed is unknown, defaulting to 1000
[  474.201137][T16518] lo speed is unknown, defaulting to 1000
[  474.900912][T16558] v speed is unknown, defaulting to 1000
[  475.319574][T16541] lo speed is unknown, defaulting to 1000
[  475.845257][    C0] ------------[ cut here ]------------
[  475.851123][    C0] ODEBUG: free active (active state 0) object: ffff8880327e6090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  475.864895][    C0] WARNING: CPU: 0 PID: 6133 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  475.874453][    C0] Modules linked in:
[  475.878661][    C0] CPU: 0 UID: 0 PID: 6133 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) 
[  475.888260][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  475.898370][    C0] Workqueue: kvfree_rcu_reclaim kfree_rcu_monitor
[  475.904856][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  475.910700][    C0] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 2c ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  475.930365][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296
[  475.936489][    C0] RAX: 5d3b5ea16efef100 RBX: dffffc0000000000 RCX: ffff88802ba53c80
[  475.944483][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  475.952497][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  475.960513][    C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a391560
[  475.968529][    C0] R13: ffffffff8bbf1100 R14: ffff8880327e6090 R15: ffffffff8b6cf600
[  475.976545][    C0] FS:  0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000
[  475.985517][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  475.992111][    C0] CR2: 000000110c39fc54 CR3: 00000000291d6000 CR4: 00000000003526f0
[  476.000127][    C0] Call Trace:
[  476.003412][    C0]  <IRQ>
[  476.006300][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  476.011903][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  476.017062][    C0]  kfree+0x115/0x6d0
[  476.020981][    C0]  rose_timer_expiry+0x4cb/0x600
[  476.025975][    C0]  call_timer_fn+0x17e/0x5f0
[  476.030578][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  476.036083][    C0]  ? call_timer_fn+0xbe/0x5f0
[  476.040768][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  476.045938][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  476.051153][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  476.056403][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  476.061887][    C0]  __run_timer_base+0x61a/0x860
[  476.066813][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  476.072210][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  476.078518][    C0]  run_timer_softirq+0xb7/0x180
[  476.083395][    C0]  handle_softirqs+0x286/0x870
[  476.088206][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  476.092992][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  476.098324][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  476.103547][    C0]  __irq_exit_rcu+0xca/0x1f0
[  476.108181][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  476.113412][    C0]  irq_exit_rcu+0x9/0x30
[  476.117705][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  476.123360][    C0]  </IRQ>
[  476.126327][    C0]  <TASK>
[  476.129263][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  476.135293][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[  476.141126][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 6f cc b7 09 e8 aa b9 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  476.160773][    C0] RSP: 0018:ffffc9000bb66e98 EFLAGS: 00000282
[  476.166895][    C0] RAX: 5d3b5ea16efef100 RBX: 0000000000000000 RCX: 5d3b5ea16efef100
[  476.174917][    C0] RDX: 0000000000000006 RSI: ffffffff8d70d771 RDI: ffffffff8bbf05e0
[  476.182903][    C0] RBP: ffffc9000bb66ef0 R08: ffffffff8f7cd177 R09: 1ffffffff1ef9a2e
[  476.190922][    C0] R10: dffffc0000000000 R11: fffffbfff1ef9a2f R12: ffff88802ba53c80
[  476.198945][    C0] R13: dffffc0000000000 R14: ffff888030b05ac0 R15: ffff8880b883ab98
[  476.206993][    C0]  ? finish_task_switch+0x266/0x950
[  476.212222][    C0]  __schedule+0x17a0/0x4cc0
[  476.216802][    C0]  ? __pfx___schedule+0x10/0x10
[  476.221675][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  476.228062][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  476.233376][    C0]  preempt_schedule_irq+0xb5/0x150
[  476.238545][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  476.244292][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  476.250153][    C0]  irqentry_exit+0x6f/0x90
[  476.254618][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  476.260618][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  476.265944][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 4b ba d0 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  476.285604][    C0] RSP: 0018:ffffc9000bb67290 EFLAGS: 00000206
[  476.291688][    C0] RAX: 5d3b5ea16efef100 RBX: 0000000000000206 RCX: 5d3b5ea16efef100
[  476.306010][    C0] RDX: 0000000000000003 RSI: ffffffff8d8f42b8 RDI: ffffffff8bbf05e0
[  476.314009][    C0] RBP: ffff88802ba54828 R08: ffffc9000bb674b0 R09: 0000000000000000
[  476.322011][    C0] R10: ffffc9000bb67478 R11: fffff5200176ce91 R12: 0000000000000003
[  476.330031][    C0] R13: 0000000000000003 R14: ffffffff8df3d2e0 R15: ffff88802ba53c80
[  476.338067][    C0]  ? unwind_next_frame+0xa5/0x2390
[  476.343203][    C0]  ? unwind_next_frame+0xa5/0x2390
[  476.348373][    C0]  unwind_next_frame+0x19a9/0x2390
[  476.353525][    C0]  ? unwind_next_frame+0xa5/0x2390
[  476.358695][    C0]  ? arch_stack_walk+0xe4/0x150
[  476.363570][    C0]  __unwind_start+0x5b9/0x760
[  476.368310][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  476.374497][    C0]  arch_stack_walk+0xe4/0x150
[  476.379234][    C0]  ? stack_trace_save+0x9c/0xe0
[  476.384110][    C0]  stack_trace_save+0x9c/0xe0
[  476.388841][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  476.394257][    C0]  ? stack_depot_save_flags+0x40/0x860
[  476.399854][    C0]  ? __lock_acquire+0xab9/0xd20
[  476.404728][    C0]  kasan_save_track+0x3e/0x80
[  476.409448][    C0]  __kasan_save_free_info+0x46/0x50
[  476.414666][    C0]  __kasan_slab_free+0x5c/0x80
[  476.419445][    C0]  kmem_cache_free_bulk+0xb0c/0xdb0
[  476.424668][    C0]  ? kvfree_rcu_bulk+0xe5/0x1f0
[  476.429509][    C0]  ? kvfree_rcu_bulk+0x6d/0x1f0
[  476.434345][    C0]  ? debug_object_deactivate+0x9a/0x250
[  476.439905][    C0]  ? kvfree_rcu_bulk+0x6d/0x1f0
[  476.444779][    C0]  kvfree_rcu_bulk+0xe5/0x1f0
[  476.449467][    C0]  kfree_rcu_monitor+0x211/0x2a0
[  476.454421][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  476.460189][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  476.465950][    C0]  process_scheduled_works+0xae1/0x17b0
[  476.471535][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  476.477552][    C0]  worker_thread+0x8a0/0xda0
[  476.482145][    C0]  kthread+0x711/0x8a0
[  476.486231][    C0]  ? __pfx_worker_thread+0x10/0x10
[  476.491326][    C0]  ? __pfx_kthread+0x10/0x10
[  476.495941][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  476.501151][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  476.506361][    C0]  ? __pfx_kthread+0x10/0x10
[  476.510942][    C0]  ret_from_fork+0x4bc/0x870
[  476.515545][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  476.520646][    C0]  ? __switch_to_asm+0x39/0x70
[  476.525428][    C0]  ? __switch_to_asm+0x33/0x70
[  476.530195][    C0]  ? __pfx_kthread+0x10/0x10
[  476.534800][    C0]  ret_from_fork_asm+0x1a/0x30
[  476.539560][    C0]  </TASK>
[  476.542571][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  476.549841][    C0] CPU: 0 UID: 0 PID: 6133 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) 
[  476.559375][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  476.569420][    C0] Workqueue: kvfree_rcu_reclaim kfree_rcu_monitor
[  476.575856][    C0] Call Trace:
[  476.579123][    C0]  <IRQ>
[  476.581951][    C0]  dump_stack_lvl+0x99/0x250
[  476.586559][    C0]  ? __asan_memcpy+0x40/0x70
[  476.591139][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  476.596330][    C0]  ? __pfx__printk+0x10/0x10
[  476.600927][    C0]  vpanic+0x237/0x6d0
[  476.604932][    C0]  ? __pfx_vpanic+0x10/0x10
[  476.609434][    C0]  panic+0xb9/0xc0
[  476.613146][    C0]  ? __pfx_panic+0x10/0x10
[  476.617567][    C0]  __warn+0x31b/0x4b0
[  476.621543][    C0]  ? debug_print_object+0x16b/0x1e0
[  476.626734][    C0]  ? debug_print_object+0x16b/0x1e0
[  476.631921][    C0]  report_bug+0x2be/0x4f0
[  476.636239][    C0]  ? debug_print_object+0x16b/0x1e0
[  476.641431][    C0]  ? debug_print_object+0x16b/0x1e0
[  476.646622][    C0]  ? debug_print_object+0x16d/0x1e0
[  476.651831][    C0]  handle_bug+0x84/0x160
[  476.656076][    C0]  exc_invalid_op+0x1a/0x50
[  476.660576][    C0]  asm_exc_invalid_op+0x1a/0x20
[  476.665413][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  476.671214][    C0] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 2c ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  476.690805][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296
[  476.696866][    C0] RAX: 5d3b5ea16efef100 RBX: dffffc0000000000 RCX: ffff88802ba53c80
[  476.704826][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  476.712788][    C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  476.720744][    C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a391560
[  476.728701][    C0] R13: ffffffff8bbf1100 R14: ffff8880327e6090 R15: ffffffff8b6cf600
[  476.736663][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  476.742303][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  476.747860][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  476.752966][    C0]  kfree+0x115/0x6d0
[  476.756861][    C0]  rose_timer_expiry+0x4cb/0x600
[  476.761792][    C0]  call_timer_fn+0x17e/0x5f0
[  476.766368][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  476.771832][    C0]  ? call_timer_fn+0xbe/0x5f0
[  476.776502][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  476.781602][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  476.786789][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  476.791979][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  476.797433][    C0]  __run_timer_base+0x61a/0x860
[  476.802291][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  476.807653][    C0]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  476.813901][    C0]  run_timer_softirq+0xb7/0x180
[  476.818754][    C0]  handle_softirqs+0x286/0x870
[  476.823510][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  476.828266][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  476.833542][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  476.838734][    C0]  __irq_exit_rcu+0xca/0x1f0
[  476.843309][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  476.848500][    C0]  irq_exit_rcu+0x9/0x30
[  476.852729][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  476.858353][    C0]  </IRQ>
[  476.861271][    C0]  <TASK>
[  476.864189][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  476.870156][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[  476.875961][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 6f cc b7 09 e8 aa b9 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  476.895555][    C0] RSP: 0018:ffffc9000bb66e98 EFLAGS: 00000282
[  476.901612][    C0] RAX: 5d3b5ea16efef100 RBX: 0000000000000000 RCX: 5d3b5ea16efef100
[  476.909570][    C0] RDX: 0000000000000006 RSI: ffffffff8d70d771 RDI: ffffffff8bbf05e0
[  476.917528][    C0] RBP: ffffc9000bb66ef0 R08: ffffffff8f7cd177 R09: 1ffffffff1ef9a2e
[  476.925489][    C0] R10: dffffc0000000000 R11: fffffbfff1ef9a2f R12: ffff88802ba53c80
[  476.933445][    C0] R13: dffffc0000000000 R14: ffff888030b05ac0 R15: ffff8880b883ab98
[  476.941417][    C0]  ? finish_task_switch+0x266/0x950
[  476.946617][    C0]  __schedule+0x17a0/0x4cc0
[  476.951131][    C0]  ? __pfx___schedule+0x10/0x10
[  476.955972][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  476.962295][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  476.967572][    C0]  preempt_schedule_irq+0xb5/0x150
[  476.972674][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  476.978392][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  476.984189][    C0]  irqentry_exit+0x6f/0x90
[  476.988596][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  476.994562][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  476.999844][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 4b ba d0 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  477.019435][    C0] RSP: 0018:ffffc9000bb67290 EFLAGS: 00000206
[  477.025489][    C0] RAX: 5d3b5ea16efef100 RBX: 0000000000000206 RCX: 5d3b5ea16efef100
[  477.033446][    C0] RDX: 0000000000000003 RSI: ffffffff8d8f42b8 RDI: ffffffff8bbf05e0
[  477.041401][    C0] RBP: ffff88802ba54828 R08: ffffc9000bb674b0 R09: 0000000000000000
[  477.049358][    C0] R10: ffffc9000bb67478 R11: fffff5200176ce91 R12: 0000000000000003
[  477.057319][    C0] R13: 0000000000000003 R14: ffffffff8df3d2e0 R15: ffff88802ba53c80
[  477.065295][    C0]  ? unwind_next_frame+0xa5/0x2390
[  477.070400][    C0]  ? unwind_next_frame+0xa5/0x2390
[  477.075501][    C0]  unwind_next_frame+0x19a9/0x2390
[  477.080610][    C0]  ? unwind_next_frame+0xa5/0x2390
[  477.085712][    C0]  ? arch_stack_walk+0xe4/0x150
[  477.090559][    C0]  __unwind_start+0x5b9/0x760
[  477.095229][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  477.101376][    C0]  arch_stack_walk+0xe4/0x150
[  477.106049][    C0]  ? stack_trace_save+0x9c/0xe0
[  477.110895][    C0]  stack_trace_save+0x9c/0xe0
[  477.115568][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  477.120930][    C0]  ? stack_depot_save_flags+0x40/0x860
[  477.126474][    C0]  ? __lock_acquire+0xab9/0xd20
[  477.131315][    C0]  kasan_save_track+0x3e/0x80
[  477.136029][    C0]  __kasan_save_free_info+0x46/0x50
[  477.141217][    C0]  __kasan_slab_free+0x5c/0x80
[  477.145976][    C0]  kmem_cache_free_bulk+0xb0c/0xdb0
[  477.151177][    C0]  ? kvfree_rcu_bulk+0xe5/0x1f0
[  477.156028][    C0]  ? kvfree_rcu_bulk+0x6d/0x1f0
[  477.160873][    C0]  ? debug_object_deactivate+0x9a/0x250
[  477.166416][    C0]  ? kvfree_rcu_bulk+0x6d/0x1f0
[  477.171255][    C0]  kvfree_rcu_bulk+0xe5/0x1f0
[  477.175921][    C0]  kfree_rcu_monitor+0x211/0x2a0
[  477.180859][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  477.186569][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  477.192279][    C0]  process_scheduled_works+0xae1/0x17b0
[  477.197838][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  477.203824][    C0]  worker_thread+0x8a0/0xda0
[  477.208421][    C0]  kthread+0x711/0x8a0
[  477.212495][    C0]  ? __pfx_worker_thread+0x10/0x10
[  477.217595][    C0]  ? __pfx_kthread+0x10/0x10
[  477.222176][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  477.227368][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  477.232557][    C0]  ? __pfx_kthread+0x10/0x10
[  477.237139][    C0]  ret_from_fork+0x4bc/0x870
[  477.241722][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  477.246829][    C0]  ? __switch_to_asm+0x39/0x70
[  477.251577][    C0]  ? __switch_to_asm+0x33/0x70
[  477.256322][    C0]  ? __pfx_kthread+0x10/0x10
[  477.260921][    C0]  ret_from_fork_asm+0x1a/0x30
[  477.265698][    C0]  </TASK>
[  477.268861][    C0] Kernel Offset: disabled
[  477.273177][    C0] Rebooting in 86400 seconds..