last executing test programs:

19.019191726s ago: executing program 0 (id=194):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xb, 0x8, 0x2}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170005800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000001010000000001080211000000505050505050"], 0x3c}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x324)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000611034000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r7=>r5, 0x1, 0x10000, 0x10001})
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x2, 0x0) (async)
r10 = socket(0x400000000010, 0x2, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0x9, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0x8ff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0x9, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0x8ff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x6, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0xf820, 0xffff, 0xfff}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r13=>0x0, 0x29, 0x0, 0x3, 0x6, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0xf820, 0xffff, 0xfff}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', <r14=>0x0, 0x2f, 0xa3, 0x80, 0x7, 0x5, @local, @remote, 0x7800, 0x40, 0x8, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', <r15=>0x0})
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @broadcast, @multicast1}, &(0x7f0000000c00)=0xc) (async)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000bc0)={<r16=>0x0, @broadcast, @multicast1}, &(0x7f0000000c00)=0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x224, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x224}}, 0x10)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000606010300d3f89ed1adce1dde76d1a25ad51d000000000000000700000a0900030073797a32000000003ca62e792b"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4058000) (async)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000606010300d3f89ed1adce1dde76d1a25ad51d000000000000000700000a0900030073797a32000000003ca62e792b"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4058000)

16.490784086s ago: executing program 0 (id=198):
socketpair(0xb, 0x4, 0xb117, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x3, 0xc, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_key={0x1, 0x9}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0xeea5}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x2a, 0x14, 0x10}]}, 0x60}}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

16.488796756s ago: executing program 0 (id=200):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x58, r4, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x58}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000fc0)={0x0, 0xfcff, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=<r7=>0x0, @ANYBLOB="02000000080002000700000008000200070000000800020003000100080002000000000014000100ff"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0xc, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @enum64={0x5, 0x3, 0x0, 0x13, 0x1, 0x6, [{0x10, 0x401, 0x9}, {0xc, 0x7, 0x10}, {0x5, 0x119, 0x7}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @var={0xb, 0x0, 0x0, 0xe, 0x4, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x1f01}}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x5f, 0x0, 0x61, 0x5f, 0x2e, 0x5f]}}, &(0x7f00000003c0)=""/193, 0x98, 0xc1, 0x0, 0x8}, 0x28)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r7, @ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, 0x1b, r8}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000)

16.408718563s ago: executing program 0 (id=203):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r1, &(0x7f0000000140)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100))
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0)

16.34634675s ago: executing program 0 (id=206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040005)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde4", 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce19", 0x59}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700b", 0x13}], 0x2}}], 0x2, 0x4004894)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8)
sendmmsg$inet(r1, &(0x7f0000007340)=[{{0x0, 0x4e, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x9fc}], 0x1}}], 0x1, 0x80)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

16.289509121s ago: executing program 1 (id=208):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b, 0x2e000000}, 0x14}}, 0x0)

16.20067229s ago: executing program 1 (id=210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x20000400)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
shutdown(r2, 0xfffffffffffffffd)
socket$inet6(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30000008001b"], 0x11c}}, 0x4)

16.200333527s ago: executing program 2 (id=211):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x7, 0x6, "259b3f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5dff5c48e77138fa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz0\x00', 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x228, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast1, @ipv4=@remote, @ipv6=@local, @ipv4=@local}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x80, @local}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x30) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
write$tun(r3, &(0x7f00000001c0)={@val={0x0, 0x8864}, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xf4, 0x0, 0x41, 0x11, 0x0, @empty, @rand_addr=0x64010100}, "e31120fb0344e91c"}}}}}, 0x32) (rerun: 32)
sendto$inet(r1, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)

16.200128965s ago: executing program 1 (id=212):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a30000000001400000010"], 0x48}}, 0x20050800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c00020097ffffffffffffff040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r3], 0x90}}, 0x0)

16.107678468s ago: executing program 1 (id=213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x0, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)
r3 = socket$packet(0x11, 0xa, 0x300)
bind$packet(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff400000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90)
r5 = socket(0x18, 0x3, 0x10407)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f0000000380)={@default, @null})
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000000706010100000000000000000000000408010940020073797a31000000000900020073797a300000000038688833e898bc17a920dffc582a18066d0d479c24ebb7efa786f5e17ff6ad21def64f96a892b2c8bac9e0e901ab71332482bc589f3f145519fa5ad997"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r8=>0x0})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000240)={'wpan4\x00'})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xfffffc46, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x80)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$unix(r12, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r12, r11, r11]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000040)=0x7, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r4], 0x18}}, 0x4044004)
recvmmsg(r13, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4008103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x801}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000dc0)=""/273, 0x111}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0)

16.040679442s ago: executing program 2 (id=214):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x8000000, 0xfffffffc}}, 0x2e)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a3000000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000030900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048025000180090001006d6574610000f8ff1300028018000140000000120800024000000005140000001100010000000000000000000000000a"], 0xd8}}, 0x0)

15.990328447s ago: executing program 2 (id=215):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x79}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x2420, 0x900}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f00000001c0)=0x9, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x40)
preadv(r0, &(0x7f0000001e80)=[{&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000001740)=""/224, 0xe0}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000001c00)=""/144, 0x90}, {&(0x7f0000001cc0)=""/131, 0x83}, {&(0x7f0000001d80)=""/193, 0xc1}], 0x9, 0xe4e, 0x7)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)={0x368, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x355, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x265, 0x64, 0x0, 0x1, [@nested={0x8d, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x1d}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x30}]}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x612}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x368}], 0x1}, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa7, '\x00', 0x0, r4, 0x2, 0x5}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x6, [@union={0x7, 0x7, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x5, 0x6}, {0xe, 0x4, 0x6}, {0x1, 0x2, 0x4}, {0x7, 0x2, 0x3ff}, {0xc, 0x5, 0xaa51}, {0xa, 0x5}, {0x9, 0x3, 0x200}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x5}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x9}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x5e, 0x7}]}, {0x0, [0x61, 0x61, 0x5f, 0x0]}}, &(0x7f00000002c0)=""/214, 0xba, 0xd6, 0x1, 0x1}, 0x28)

15.93930448s ago: executing program 2 (id=216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x19}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r0}, 0x18)

15.924057761s ago: executing program 2 (id=217):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b, 0x70000000}, 0x14}}, 0x0)

15.849935331s ago: executing program 2 (id=218):
r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x44}}, 0x20000000) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x400c000) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
close(0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})

15.439619922s ago: executing program 0 (id=219):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a30000000001400000010"], 0x48}}, 0x20050800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c000200e4ffffffffffffff040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r3], 0x90}}, 0x0)

15.238731499s ago: executing program 1 (id=220):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a100000000005000100060000000500050000000000050004000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4d808}, 0x0)

15.100264216s ago: executing program 1 (id=221):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, &(0x7f0000000200), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x8, 0x0, 0x0}}, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r6=>0x0})
r7 = socket(0x1d, 0x3, 0x1)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001000400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000900000000000000802400018008001c000010000008001200fcffffff08000700020000000800200001000000080004000000000067b23b22d7a1f2144e6fd96ffb3d920f72e6e6700bdef24fccfa6b601565da03dbd0f7fdeaa1f92f5d4423ce7a4e3ecaa028cf1ceac8652155106dae9b633324bb25ac9e4bb7c078ba17efd56fc090b7b3c85aca5f0d20e5145aa5dc36a36d"], 0x54}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd4804012"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0)

63.167581ms ago: executing program 32 (id=219):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a30000000001400000010"], 0x48}}, 0x20050800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c000200e4ffffffffffffff040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r3], 0x90}}, 0x0)

121.261µs ago: executing program 33 (id=221):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, &(0x7f0000000200), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x8, 0x0, 0x0}}, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r6=>0x0})
r7 = socket(0x1d, 0x3, 0x1)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001000400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000900000000000000802400018008001c000010000008001200fcffffff08000700020000000800200001000000080004000000000067b23b22d7a1f2144e6fd96ffb3d920f72e6e6700bdef24fccfa6b601565da03dbd0f7fdeaa1f92f5d4423ce7a4e3ecaa028cf1ceac8652155106dae9b633324bb25ac9e4bb7c078ba17efd56fc090b7b3c85aca5f0d20e5145aa5dc36a36d"], 0x54}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd4804012"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0)

0s ago: executing program 34 (id=218):
r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x44}}, 0x20000000) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x400c000) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r9, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
close(0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38035' (ED25519) to the list of known hosts.
syzkaller login: [   48.345684][ T5817] cgroup: Unknown subsys name 'net'
[   48.467146][ T5817] cgroup: Unknown subsys name 'cpuset'
[   48.473009][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.888978][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.069078][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.078414][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.081140][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.084461][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.086714][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.087309][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.092619][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.095967][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.098439][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.102952][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.105529][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.108565][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.111179][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.115516][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.121709][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.329180][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   54.449873][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.503512][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.517446][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.519890][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.523974][ T5829] bridge_slave_0: entered allmulticast mode
[   54.527070][ T5829] bridge_slave_0: entered promiscuous mode
[   54.551818][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.554760][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.557764][ T5829] bridge_slave_1: entered allmulticast mode
[   54.560635][ T5829] bridge_slave_1: entered promiscuous mode
[   54.620004][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.624184][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.627423][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.630815][ T5836] bridge_slave_0: entered allmulticast mode
[   54.636933][ T5836] bridge_slave_0: entered promiscuous mode
[   54.641861][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.645461][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.648570][ T5836] bridge_slave_1: entered allmulticast mode
[   54.652515][ T5836] bridge_slave_1: entered promiscuous mode
[   54.681373][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.712153][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.716185][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.718868][ T5827] bridge_slave_0: entered allmulticast mode
[   54.722664][ T5827] bridge_slave_0: entered promiscuous mode
[   54.725995][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.728561][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.731082][ T5827] bridge_slave_1: entered allmulticast mode
[   54.734922][ T5827] bridge_slave_1: entered promiscuous mode
[   54.778363][ T5829] team0: Port device team_slave_0 added
[   54.784176][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.788977][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.794477][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.799434][ T5829] team0: Port device team_slave_1 added
[   54.804379][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.860255][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.863050][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.871813][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.877391][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.879705][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.888701][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.894294][ T5836] team0: Port device team_slave_0 added
[   54.898329][ T5827] team0: Port device team_slave_0 added
[   54.906345][ T5836] team0: Port device team_slave_1 added
[   54.922040][ T5827] team0: Port device team_slave_1 added
[   54.935285][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.937641][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.946497][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.975630][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.978552][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.989343][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.996591][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.998961][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.008281][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.025789][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.028152][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.036629][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.043557][ T5829] hsr_slave_0: entered promiscuous mode
[   55.045983][ T5829] hsr_slave_1: entered promiscuous mode
[   55.127041][ T5836] hsr_slave_0: entered promiscuous mode
[   55.130326][ T5836] hsr_slave_1: entered promiscuous mode
[   55.135229][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.138597][ T5836] Cannot create hsr debugfs directory
[   55.146381][ T5827] hsr_slave_0: entered promiscuous mode
[   55.148972][ T5827] hsr_slave_1: entered promiscuous mode
[   55.151165][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.154709][ T5827] Cannot create hsr debugfs directory
[   55.389208][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.401090][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.406448][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.420690][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.456799][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.461840][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.471484][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.479701][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.530766][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.537686][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.548965][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.558644][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.626972][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.647494][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.657058][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   55.670769][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.673701][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.690917][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.693390][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.698160][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.712242][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.715161][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.738856][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.746674][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.749118][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.794931][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.810253][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.812845][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.828278][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.831054][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.864532][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.868035][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.954847][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.978274][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.998929][ T5836] veth0_vlan: entered promiscuous mode
[   56.009803][ T5836] veth1_vlan: entered promiscuous mode
[   56.027770][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.049245][ T5829] veth0_vlan: entered promiscuous mode
[   56.062737][ T5829] veth1_vlan: entered promiscuous mode
[   56.068939][ T5836] veth0_macvtap: entered promiscuous mode
[   56.079129][ T5836] veth1_macvtap: entered promiscuous mode
[   56.102282][ T5827] veth0_vlan: entered promiscuous mode
[   56.113407][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.127095][ T5827] veth1_vlan: entered promiscuous mode
[   56.131042][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.137700][ T5829] veth0_macvtap: entered promiscuous mode
[   56.142596][ T5829] veth1_macvtap: entered promiscuous mode
[   56.146420][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.149680][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.153774][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.157424][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.178579][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.194352][   T54] Bluetooth: hci2: command tx timeout
[   56.196986][   T54] Bluetooth: hci1: command tx timeout
[   56.199611][   T54] Bluetooth: hci0: command tx timeout
[   56.210908][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.216518][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.219438][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.222208][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.225641][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.251365][ T5827] veth0_macvtap: entered promiscuous mode
[   56.261365][ T5827] veth1_macvtap: entered promiscuous mode
[   56.309916][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.318673][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.340110][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.350663][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.361977][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.367325][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.370181][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.373635][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.383090][ T1939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.385766][ T1939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.408546][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.411172][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.447332][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.455927][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.469781][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.515792][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.518534][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.564907][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.568169][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.691033][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   56.699001][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   56.702817][ T5906] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   56.705900][ T5906] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5'.
[   56.773428][ T5906] nbd0: detected capacity change from 0 to 7503871
[   56.777887][ T5828] block nbd0: Send control failed (result -107)
[   56.784874][ T5828] block nbd0: Request send failed, requeueing
[   56.786334][ T5908] syz_tun: entered allmulticast mode
[   56.791658][ T5908] netlink: 'syz.0.1': attribute type 6 has an invalid length.
[   56.796516][ T5828] block nbd0: Dead connection, failed to find a fallback
[   56.798971][ T5828] block nbd0: shutting down sockets
[   56.800796][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.803295][ T5908] netlink: 'syz.0.1': attribute type 7 has an invalid length.
[   56.804623][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.810327][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   56.816282][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[   56.816513][ T5908] netlink: 'syz.0.1': attribute type 8 has an invalid length.
[   56.819151][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.826124][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read
[   56.829421][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.834713][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read
[   56.837727][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.840935][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[   56.843774][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.846955][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[   56.850073][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.860611][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read
[   56.863784][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.867087][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read
[   56.877288][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.885623][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[   56.888759][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   56.891741][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[   56.898319][ T5828] ldm_validate_partition_table(): Disk read failed.
[   56.908267][ T5828] Dev nbd0: unable to read RDB block 0
[   56.911159][ T5828]  nbd0: unable to read partition table
[   56.918165][ T5907] syz_tun: left allmulticast mode
[   56.919559][ T5828] ldm_validate_partition_table(): Disk read failed.
[   56.925832][ T5828] Dev nbd0: unable to read RDB block 0
[   56.928519][ T5828]  nbd0: unable to read partition table
[   57.081131][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.122795][ T5925] tipc: Started in network mode
[   57.124639][ T5925] tipc: Node identity ac1414aa, cluster identity 4711
[   57.127658][ T5925] tipc: Enabled bearer <udp:syz2>, priority 10
[   57.207653][ T5939] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11'.
[   57.656037][ T5969] syz_tun: entered allmulticast mode
[   57.658492][ T5969] netlink: 'syz.1.15': attribute type 6 has an invalid length.
[   57.660982][ T5969] netlink: 'syz.1.15': attribute type 7 has an invalid length.
[   57.663843][ T5969] netlink: 'syz.1.15': attribute type 8 has an invalid length.
[   57.668982][ T5968] syz_tun: left allmulticast mode
[   57.746710][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   57.750416][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   57.754555][ T5976] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   57.757362][ T5976] netlink: 10 bytes leftover after parsing attributes in process `syz.1.16'.
[   57.813330][ T5976] nbd1: detected capacity change from 0 to 8323071
[   57.821685][ T5828] block nbd1: Send control failed (result -107)
[   57.827117][ T5828] block nbd1: Request send failed, requeueing
[   57.831171][   T60] block nbd1: Dead connection, failed to find a fallback
[   57.834303][   T60] block nbd1: shutting down sockets
[   57.840341][ T5828] ldm_validate_partition_table(): Disk read failed.
[   57.855021][ T5828] Dev nbd1: unable to read RDB block 0
[   57.858056][ T5828]  nbd1: unable to read partition table
[   57.863382][ T5828] ldm_validate_partition_table(): Disk read failed.
[   57.866749][ T5828] Dev nbd1: unable to read RDB block 0
[   57.869602][ T5828]  nbd1: unable to read partition table
[   57.944253][ T5984] tipc: Started in network mode
[   57.946138][ T5984] tipc: Node identity ac1414aa, cluster identity 4711
[   57.949405][ T5984] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.086423][ T5998] netlink: 'syz.1.20': attribute type 10 has an invalid length.
[   58.152104][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   58.206488][ T6006] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.223182][ T6008] syz_tun: entered allmulticast mode
[   58.227193][ T6008] netlink: 'syz.0.23': attribute type 6 has an invalid length.
[   58.243602][ T5880] tipc: Node number set to 2886997162
[   58.250402][ T6007] syz_tun: left allmulticast mode
[   58.262652][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.266712][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.272965][   T54] Bluetooth: hci2: command tx timeout
[   58.282876][   T54] Bluetooth: hci0: command tx timeout
[   58.283025][ T5834] Bluetooth: hci1: command tx timeout
[   58.333216][ T6010] nbd2: detected capacity change from 0 to 8355839
[   58.336636][ T5828] block nbd2: Send control failed (result -107)
[   58.338879][ T5828] block nbd2: Request send failed, requeueing
[   58.343430][  T127] block nbd2: Dead connection, failed to find a fallback
[   58.345974][  T127] block nbd2: shutting down sockets
[   58.349988][ T5828] ldm_validate_partition_table(): Disk read failed.
[   58.373485][ T5828] Dev nbd2: unable to read RDB block 0
[   58.377439][ T5828]  nbd2: unable to read partition table
[   58.391860][ T5828] ldm_validate_partition_table(): Disk read failed.
[   58.397160][ T5828] Dev nbd2: unable to read RDB block 0
[   58.400182][ T5828]  nbd2: unable to read partition table
[   58.473615][ T6017] nbd3: detected capacity change from 0 to 8388607
[   58.477443][ T5828] block nbd3: Send control failed (result -107)
[   58.480359][ T5828] block nbd3: Request send failed, requeueing
[   58.482743][ T6015] tipc: Started in network mode
[   58.484048][   T60] block nbd3: Dead connection, failed to find a fallback
[   58.487300][   T60] block nbd3: shutting down sockets
[   58.489192][ T6015] tipc: Node identity ac1414aa, cluster identity 4711
[   58.490987][ T5828] ldm_validate_partition_table(): Disk read failed.
[   58.494579][ T6015] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.494882][ T5828] Dev nbd3: unable to read RDB block 0
[   58.499583][ T5828]  nbd3: unable to read partition table
[   58.513638][ T5828] ldm_validate_partition_table(): Disk read failed.
[   58.516737][ T5828] Dev nbd3: unable to read RDB block 0
[   58.519449][ T5828]  nbd3: unable to read partition table
[   58.606589][ T6026] Bluetooth: MGMT ver 1.23
[   58.690952][ T6032] syz_tun: entered allmulticast mode
[   58.699362][ T6031] syz_tun: left allmulticast mode
[   58.922590][ T6044] nbd4: detected capacity change from 0 to 8388607
[   58.930832][ T5828] block nbd4: Send control failed (result -107)
[   58.935272][ T5828] block nbd4: Request send failed, requeueing
[   58.938258][   T60] block nbd4: Dead connection, failed to find a fallback
[   58.941364][   T60] block nbd4: shutting down sockets
[   58.949724][ T5828] ldm_validate_partition_table(): Disk read failed.
[   58.964272][ T5828] Dev nbd4: unable to read RDB block 0
[   58.971455][ T5828]  nbd4: unable to read partition table
[   58.995171][ T5828] ldm_validate_partition_table(): Disk read failed.
[   59.004724][ T5828] Dev nbd4: unable to read RDB block 0
[   59.008734][ T5828]  nbd4: unable to read partition table
[   59.062859][ T5881] tipc: Node number set to 2886997162
[   59.208691][ T6070] syz_tun: entered allmulticast mode
[   59.238180][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.622577][ T5881] tipc: Node number set to 2886997162
[   59.874874][ T6060] syz_tun: left allmulticast mode
[   60.094741][ T6078] nbd5: detected capacity change from 0 to 8388607
[   60.101415][ T5828] block nbd5: Send control failed (result -107)
[   60.104954][ T5828] block nbd5: Request send failed, requeueing
[   60.107450][  T127] block nbd5: Dead connection, failed to find a fallback
[   60.110460][  T127] block nbd5: shutting down sockets
[   60.125911][ T5828] ldm_validate_partition_table(): Disk read failed.
[   60.128926][ T5828] Dev nbd5: unable to read RDB block 0
[   60.138771][ T5828]  nbd5: unable to read partition table
[   60.149796][ T5828] ldm_validate_partition_table(): Disk read failed.
[   60.154086][ T5828] Dev nbd5: unable to read RDB block 0
[   60.157157][ T5828]  nbd5: unable to read partition table
[   60.164396][ T6093] syz_tun: entered allmulticast mode
[   60.174385][ T6092] syz_tun: left allmulticast mode
[   60.287118][ T6109] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET)
[   60.302862][ T6109] Zero length message leads to an empty skb
[   60.354235][ T5834] Bluetooth: hci0: command tx timeout
[   60.354293][   T54] Bluetooth: hci2: command tx timeout
[   60.363639][   T54] Bluetooth: hci1: command tx timeout
[   60.675615][ T6118] nbd6: detected capacity change from 0 to 8388607
[   60.679086][ T5828] block nbd6: Send control failed (result -107)
[   60.682658][ T5828] block nbd6: Request send failed, requeueing
[   60.685813][  T127] block nbd6: Dead connection, failed to find a fallback
[   60.688326][  T127] block nbd6: shutting down sockets
[   60.693549][ T5828] ldm_validate_partition_table(): Disk read failed.
[   60.698253][ T5828] Dev nbd6: unable to read RDB block 0
[   60.701409][ T5828]  nbd6: unable to read partition table
[   60.708098][ T5828] ldm_validate_partition_table(): Disk read failed.
[   60.711201][ T5828] Dev nbd6: unable to read RDB block 0
[   60.716233][ T5828]  nbd6: unable to read partition table
[   60.721707][ T6121] syzkaller0: entered promiscuous mode
[   60.725300][ T6121] syzkaller0: entered allmulticast mode
[   60.784194][ T6124] syz_tun: entered allmulticast mode
[   60.789540][ T6123] syz_tun: left allmulticast mode
[   61.072796][ T6140] nbd7: detected capacity change from 0 to 8388607
[   61.081790][ T5828] block nbd7: Send control failed (result -107)
[   61.084682][ T5828] block nbd7: Request send failed, requeueing
[   61.087641][   T60] block nbd7: Dead connection, failed to find a fallback
[   61.090727][   T60] block nbd7: shutting down sockets
[   61.101583][ T5828] ldm_validate_partition_table(): Disk read failed.
[   61.105132][ T5828] Dev nbd7: unable to read RDB block 0
[   61.109178][ T5828]  nbd7: unable to read partition table
[   61.121562][ T5828] ldm_validate_partition_table(): Disk read failed.
[   61.127578][ T5828] Dev nbd7: unable to read RDB block 0
[   61.130956][ T5828]  nbd7: unable to read partition table
[   61.207054][ T6150] syz_tun: entered allmulticast mode
[   61.210639][ T6149] syz_tun: left allmulticast mode
[   61.238201][ T6154] set match dimension is over the limit!
[   61.492491][ T6162] nbd8: detected capacity change from 0 to 8589934592
[   61.498893][ T5828] block nbd8: Send control failed (result -107)
[   61.501520][ T5828] block nbd8: Request send failed, requeueing
[   61.504863][  T127] block nbd8: Dead connection, failed to find a fallback
[   61.508354][  T127] block nbd8: shutting down sockets
[   61.512403][ T5828] ldm_validate_partition_table(): Disk read failed.
[   61.515882][ T5828] Dev nbd8: unable to read RDB block 0
[   61.518654][ T5828]  nbd8: unable to read partition table
[   61.533915][ T5828] ldm_validate_partition_table(): Disk read failed.
[   61.537391][ T5828] Dev nbd8: unable to read RDB block 0
[   61.540205][ T5828]  nbd8: unable to read partition table
[   61.798855][ T6173] syz_tun: entered allmulticast mode
[   61.802009][ T6173] validate_nla: 25 callbacks suppressed
[   61.802022][ T6173] netlink: 'syz.1.75': attribute type 6 has an invalid length.
[   61.807817][ T6173] netlink: 'syz.1.75': attribute type 7 has an invalid length.
[   61.810962][ T6173] netlink: 'syz.1.75': attribute type 8 has an invalid length.
[   61.815316][ T6172] syz_tun: left allmulticast mode
[   61.850033][ T6175] __nla_validate_parse: 31 callbacks suppressed
[   61.850047][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   61.978900][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'.
[   61.982234][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[   61.986462][ T6181] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   61.989199][ T6181] netlink: 10 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.047046][ T6184] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   62.054658][ T6181] nbd9: detected capacity change from 0 to 35184372088831
[   62.059075][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   62.059186][ T5828] block nbd9: Send control failed (result -107)
[   62.066910][ T5828] block nbd9: Request send failed, requeueing
[   62.068534][ T6184] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   62.069742][  T127] block nbd9: Dead connection, failed to find a fallback
[   62.076749][  T127] block nbd9: shutting down sockets
[   62.079485][  T127] blk_print_req_error: 1088 callbacks suppressed
[   62.079495][  T127] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.086360][  T127] buffer_io_error: 1079 callbacks suppressed
[   62.086370][  T127] Buffer I/O error on dev nbd9, logical block 0, async page read
[   62.095711][ T5828] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.099040][ T5828] Buffer I/O error on dev nbd9, logical block 1, async page read
[   62.101869][ T5828] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.123452][ T5828] Buffer I/O error on dev nbd9, logical block 2, async page read
[   62.127051][ T5828] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.130678][ T5828] Buffer I/O error on dev nbd9, logical block 3, async page read
[   62.152718][ T5828] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.156954][ T5828] Buffer I/O error on dev nbd9, logical block 0, async page read
[   62.160529][ T5828] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.179822][ T5828] Buffer I/O error on dev nbd9, logical block 1, async page read
[   62.187876][ T5828] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.193465][ T5828] Buffer I/O error on dev nbd9, logical block 2, async page read
[   62.198161][ T5828] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.202243][ T5828] Buffer I/O error on dev nbd9, logical block 3, async page read
[   62.206193][ T5828] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.210056][ T5828] Buffer I/O error on dev nbd9, logical block 0, async page read
[   62.214728][ T5828] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   62.218561][ T5828] Buffer I/O error on dev nbd9, logical block 1, async page read
[   62.224457][ T6188] syz_tun: entered allmulticast mode
[   62.228183][ T5828] ldm_validate_partition_table(): Disk read failed.
[   62.232709][ T5828] Dev nbd9: unable to read RDB block 0
[   62.243164][ T5828]  nbd9: unable to read partition table
[   62.248842][ T6188] netlink: 'syz.1.82': attribute type 6 has an invalid length.
[   62.251622][ T6188] netlink: 'syz.1.82': attribute type 7 has an invalid length.
[   62.255579][ T5828] ldm_validate_partition_table(): Disk read failed.
[   62.256377][ T6188] netlink: 'syz.1.82': attribute type 8 has an invalid length.
[   62.259309][ T5828] Dev nbd9: unable to read RDB block 0
[   62.268445][ T6187] syz_tun: left allmulticast mode
[   62.271214][ T5828]  nbd9: unable to read partition table
[   62.315071][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   62.318382][ T6198] netlink: 'syz.1.85': attribute type 5 has an invalid length.
[   62.323749][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'.
[   62.336581][ T6198] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   62.344327][ T6198] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   62.350224][ T6198] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   62.354472][ T6198] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   62.362971][ T6198] geneve2: entered promiscuous mode
[   62.365501][ T6198] geneve2: entered allmulticast mode
[   62.390578][ T6198] syz.1.85 (6198) used greatest stack depth: 20728 bytes left
[   62.432751][   T54] Bluetooth: hci1: command tx timeout
[   62.435173][   T54] Bluetooth: hci2: command tx timeout
[   62.458369][ T5834] Bluetooth: hci0: command tx timeout
[   62.648770][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'.
[   62.656335][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'.
[   62.660240][ T6212] netlink: 'syz.1.88': attribute type 1 has an invalid length.
[   62.663727][ T6212] netlink: 10 bytes leftover after parsing attributes in process `syz.1.88'.
[   62.772414][ T6212] nbd10: detected capacity change from 0 to 281474976710656
[   62.776577][ T5828] block nbd10: Send control failed (result -107)
[   62.780674][ T5828] block nbd10: Request send failed, requeueing
[   62.785041][  T127] block nbd10: Dead connection, failed to find a fallback
[   62.787833][  T127] block nbd10: shutting down sockets
[   62.790660][ T5828] ldm_validate_partition_table(): Disk read failed.
[   62.794570][ T5828] Dev nbd10: unable to read RDB block 0
[   62.797207][ T5828]  nbd10: unable to read partition table
[   62.806041][ T5828] ldm_validate_partition_table(): Disk read failed.
[   62.808575][ T5828] Dev nbd10: unable to read RDB block 0
[   62.810676][ T5828]  nbd10: unable to read partition table
[   62.942172][ T6222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.963016][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   62.990275][ T6224] syz_tun: entered allmulticast mode
[   62.995901][ T6223] syz_tun: left allmulticast mode
[   63.333355][ T6234] nbd11: detected capacity change from 0 to 422212465065984
[   63.353177][ T5828] block nbd11: Send control failed (result -107)
[   63.356039][ T5828] block nbd11: Request send failed, requeueing
[   63.365324][  T127] block nbd11: Dead connection, failed to find a fallback
[   63.369555][  T127] block nbd11: shutting down sockets
[   63.375827][ T5828] ldm_validate_partition_table(): Disk read failed.
[   63.379215][ T5828] Dev nbd11: unable to read RDB block 0
[   63.382041][ T5828]  nbd11: unable to read partition table
[   63.394819][ T5828] ldm_validate_partition_table(): Disk read failed.
[   63.399042][ T5828] Dev nbd11: unable to read RDB block 0
[   63.401861][ T5828]  nbd11: unable to read partition table
[   63.489622][ T6246] syz_tun: entered allmulticast mode
[   63.493649][ T6245] syz_tun: left allmulticast mode
[   63.853561][ T6259] syzkaller1: entered promiscuous mode
[   63.865817][ T6259] syzkaller1: entered allmulticast mode
[   64.062378][ T6266] nbd12: detected capacity change from 0 to 562949953421312
[   64.068649][ T6268] syz_tun: entered allmulticast mode
[   64.071397][ T6267] syz_tun: left allmulticast mode
[   64.082016][ T5828] block nbd12: Send control failed (result -107)
[   64.091828][ T5828] block nbd12: Request send failed, requeueing
[   64.098940][  T127] block nbd12: Dead connection, failed to find a fallback
[   64.101393][  T127] block nbd12: shutting down sockets
[   64.104673][ T5828] ldm_validate_partition_table(): Disk read failed.
[   64.108755][ T6274] xt_bpf: check failed: parse error
[   64.117522][ T6276] hsr_slave_0: left promiscuous mode
[   64.120365][ T5828] Dev nbd12: unable to read RDB block 0
[   64.143518][ T6276] hsr_slave_1: left promiscuous mode
[   64.149505][ T5828]  nbd12: unable to read partition table
[   64.163396][ T5828] ldm_validate_partition_table(): Disk read failed.
[   64.166091][ T5828] Dev nbd12: unable to read RDB block 0
[   64.178831][ T5828]  nbd12: unable to read partition table
[   64.182259][ T6278] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   64.358431][ T6290] syz_tun: entered allmulticast mode
[   64.360931][ T6289] syz_tun: left allmulticast mode
[   64.384246][ T6199] Set syz1 is full, maxelem 65536 reached
[   64.442702][ T6288] nbd13: detected capacity change from 0 to 985162418487296
[   64.452794][ T5828] block nbd13: Send control failed (result -107)
[   64.457112][ T5828] block nbd13: Request send failed, requeueing
[   64.473096][  T127] block nbd13: Dead connection, failed to find a fallback
[   64.475954][  T127] block nbd13: shutting down sockets
[   64.478822][ T5828] ldm_validate_partition_table(): Disk read failed.
[   64.481337][ T5828] Dev nbd13: unable to read RDB block 0
[   64.498228][ T5828]  nbd13: unable to read partition table
[   64.505125][ T5828] ldm_validate_partition_table(): Disk read failed.
[   64.508244][ T5828] Dev nbd13: unable to read RDB block 0
[   64.511155][ T5828]  nbd13: unable to read partition table
[   64.513808][ T5834] Bluetooth: hci2: command tx timeout
[   64.598896][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.603538][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.673176][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.679007][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.730276][ T6297] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.733902][ T6297] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.737228][ T6297] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.740598][ T6297] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.792550][ T6313] syz_tun: entered allmulticast mode
[   64.816550][ T6314] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.830108][ T6302] syz_tun: left allmulticast mode
[   65.002458][ T6321] nbd14: detected capacity change from 0 to 1125899906842624
[   65.006114][ T5828] block nbd14: Send control failed (result -107)
[   65.010121][ T5828] block nbd14: Request send failed, requeueing
[   65.012868][  T127] block nbd14: Dead connection, failed to find a fallback
[   65.015791][  T127] block nbd14: shutting down sockets
[   65.018341][ T5828] ldm_validate_partition_table(): Disk read failed.
[   65.021088][ T5828] Dev nbd14: unable to read RDB block 0
[   65.024093][ T5828]  nbd14: unable to read partition table
[   65.029577][ T5828] ldm_validate_partition_table(): Disk read failed.
[   65.033199][ T5828] Dev nbd14: unable to read RDB block 0
[   65.035313][ T5828]  nbd14: unable to read partition table
[   65.312668][ T6336] geneve0: entered allmulticast mode
[   65.446410][ T6348] syz_tun: entered allmulticast mode
[   65.448866][ T6347] syz_tun: left allmulticast mode
[   65.485622][ T6350] syzkaller1: entered promiscuous mode
[   65.487715][ T6350] syzkaller1: entered allmulticast mode
[   65.663564][ T6352] nbd15: detected capacity change from 0 to 9007199254740992
[   65.667839][ T5828] block nbd15: Send control failed (result -107)
[   65.670178][ T5828] block nbd15: Request send failed, requeueing
[   65.683814][   T60] block nbd15: Dead connection, failed to find a fallback
[   65.686475][   T60] block nbd15: shutting down sockets
[   65.688856][ T5828] ldm_validate_partition_table(): Disk read failed.
[   65.691604][ T5828] Dev nbd15: unable to read RDB block 0
[   65.698207][ T5828]  nbd15: unable to read partition table
[   65.714235][ T5828] ldm_validate_partition_table(): Disk read failed.
[   65.724532][ T5828] Dev nbd15: unable to read RDB block 0
[   65.727521][ T5828]  nbd15: unable to read partition table
[   65.799904][ T6364] syz_tun: entered allmulticast mode
[   65.801941][ T6363] syz_tun: left allmulticast mode
[   66.148200][ T6390] syz_tun: entered allmulticast mode
[   66.153364][ T6386] syz_tun: left allmulticast mode
[   66.306022][ T6405] raw_sendmsg: syz.1.155 forgot to set AF_INET. Fix it!
[   66.420322][ T6410] syz_tun: entered allmulticast mode
[   66.426715][ T6409] syz_tun: left allmulticast mode
[   66.469199][ T6416] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   66.829686][ T6449] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   66.840170][ T6449] bridge_slave_0: left allmulticast mode
[   66.843458][ T6449] bridge_slave_0: left promiscuous mode
[   66.845536][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.851590][ T6449] bridge_slave_1: left allmulticast mode
[   66.858749][ T6449] bridge_slave_1: left promiscuous mode
[   66.861178][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.868147][ T6449] bond0: (slave bond_slave_0): Releasing backup interface
[   66.870675][ T6454] __nla_validate_parse: 27 callbacks suppressed
[   66.870689][ T6454] netlink: 9 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.879182][ T6449] bond0: (slave bond_slave_1): Releasing backup interface
[   66.885185][ T6449] team0: Port device team_slave_0 removed
[   66.888566][ T6449] team0: Port device team_slave_1 removed
[   66.891434][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.894988][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.901864][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'.
[   66.905728][ T6449] validate_nla: 19 callbacks suppressed
[   66.905736][ T6449] netlink: 'syz.0.173': attribute type 10 has an invalid length.
[   66.910320][ T6449] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   66.916762][ T6449] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.960887][ T6460] tipc: Can't bind to reserved service type 0
[   67.004099][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[   67.350502][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'.
[   67.491435][ T6477] netlink: 5 bytes leftover after parsing attributes in process `syz.1.184'.
[   67.663361][  T790] cfg80211: failed to load regulatory.db
[   67.908128][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   68.094136][ T6504] Cannot find add_set index 2 as target
[   68.140801][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   68.158217][ T6507] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   68.161827][ T6506] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   70.665107][ T6520] netlink: 'syz.1.197': attribute type 3 has an invalid length.
[   70.670141][ T6520] netlink: 504 bytes leftover after parsing attributes in process `syz.1.197'.
[   70.718570][ T6526] batadv_slave_0: entered promiscuous mode
[   70.734046][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   70.771247][ T6532] sctp: [Deprecated]: syz.1.202 (pid 6532) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.771247][ T6532] Use struct sctp_sack_info instead
[   70.851740][ T6537] netlink: 404 bytes leftover after parsing attributes in process `syz.1.204'.
[   70.916520][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.919020][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.185356][ T6573] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   71.325324][ T6580] block nbd2: NBD_DISCONNECT
[   71.327913][ T6580] block nbd2: Send disconnect failed -107
[   71.891662][ T6571] syz.1.213 (6571) used greatest stack depth: 20536 bytes left
[   71.940595][ T6587] bridge0: entered promiscuous mode
[   71.949727][ T6587] macsec1: entered promiscuous mode
[   71.954564][ T6587] bridge0: port 3(macsec1) entered blocking state
[   71.958738][ T6587] bridge0: port 3(macsec1) entered disabled state
[   71.961849][ T6587] macsec1: entered allmulticast mode
[   71.964345][ T6587] bridge0: entered allmulticast mode
[   71.968815][ T6587] macsec1: left allmulticast mode
[   71.971084][ T6587] bridge0: left allmulticast mode
[   71.974872][ T6587] bridge0: left promiscuous mode
[   72.120341][ T6590] __nla_validate_parse: 5 callbacks suppressed
[   72.120358][ T6590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.221'.
[   72.128552][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[   87.344444][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.348269][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.351796][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.365519][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.368211][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.482257][ T6598] chnl_net:caif_netlink_parms(): no params data found
[   87.498419][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.501020][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.506513][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.509993][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.513567][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.516382][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.520746][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.525461][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.527936][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.531297][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.586937][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.590667][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.594749][ T6598] bridge_slave_0: entered allmulticast mode
[   87.598752][ T6598] bridge_slave_0: entered promiscuous mode
[   87.604441][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.607491][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.610735][ T6598] bridge_slave_1: entered allmulticast mode
[   87.616805][ T6598] bridge_slave_1: entered promiscuous mode
[   87.660637][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.669964][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.726801][ T6598] team0: Port device team_slave_0 added
[   87.733770][ T6598] team0: Port device team_slave_1 added
[   87.780418][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.783452][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.795083][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.807223][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.810166][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.821497][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.886765][ T6598] hsr_slave_0: entered promiscuous mode
[   87.889921][ T6598] hsr_slave_1: entered promiscuous mode
[   87.893215][ T6598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.896331][ T6598] Cannot create hsr debugfs directory
[   88.075201][ T6605] chnl_net:caif_netlink_parms(): no params data found
[   88.140048][ T6604] chnl_net:caif_netlink_parms(): no params data found
[   88.226815][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.230118][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.234490][ T6605] bridge_slave_0: entered allmulticast mode
[   88.238579][ T6605] bridge_slave_0: entered promiscuous mode
[   88.270324][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.277290][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.280528][ T6605] bridge_slave_1: entered allmulticast mode
[   88.285595][ T6605] bridge_slave_1: entered promiscuous mode
[   88.339796][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.359370][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.370192][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.374979][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.377574][ T6604] bridge_slave_0: entered allmulticast mode
[   88.381548][ T6604] bridge_slave_0: entered promiscuous mode
[   88.397065][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.399594][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.402786][ T6604] bridge_slave_1: entered allmulticast mode
[   88.406535][ T6604] bridge_slave_1: entered promiscuous mode
[   88.412729][ T6605] team0: Port device team_slave_0 added
[   88.428319][ T6605] team0: Port device team_slave_1 added
[   88.447900][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.468384][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.492644][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.495518][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.507647][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.527889][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.530230][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.539292][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.545760][ T6604] team0: Port device team_slave_0 added
[   88.555670][ T6604] team0: Port device team_slave_1 added
[   88.593367][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.595721][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.604886][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.619241][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.622223][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.633477][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.641529][ T6605] hsr_slave_0: entered promiscuous mode
[   88.647382][ T6605] hsr_slave_1: entered promiscuous mode
[   88.649959][ T6605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.652724][ T6605] Cannot create hsr debugfs directory
[   88.717676][ T6604] hsr_slave_0: entered promiscuous mode
[   88.720951][ T6604] hsr_slave_1: entered promiscuous mode
[   88.724324][ T6604] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.727525][ T6604] Cannot create hsr debugfs directory
[   89.393778][ T5838] Bluetooth: hci3: command tx timeout
[   89.552891][ T5830] Bluetooth: hci4: command tx timeout
[   89.556082][ T5838] Bluetooth: hci5: command tx timeout
[   91.472540][ T5838] Bluetooth: hci3: command tx timeout
[   91.632707][ T5838] Bluetooth: hci5: command tx timeout
[   91.635431][ T5830] Bluetooth: hci4: command tx timeout
[   93.552763][ T5830] Bluetooth: hci3: command tx timeout
[   93.712714][ T5830] Bluetooth: hci5: command tx timeout
[   93.712746][ T5838] Bluetooth: hci4: command tx timeout
[   95.632594][ T5838] Bluetooth: hci3: command tx timeout
[   95.792772][ T5838] Bluetooth: hci5: command tx timeout
[   95.792837][ T5830] Bluetooth: hci4: command tx timeout
[  132.355200][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.357437][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  147.562755][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  147.578493][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  147.582882][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  147.586930][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  147.590910][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.649738][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  147.656061][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  147.659815][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  147.667269][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  147.671276][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  147.690695][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  147.704237][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  147.708786][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  147.716610][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  147.720201][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  147.931329][ T6636] chnl_net:caif_netlink_parms(): no params data found
[  148.006561][ T6640] chnl_net:caif_netlink_parms(): no params data found
[  148.012107][ T6642] chnl_net:caif_netlink_parms(): no params data found
[  148.129699][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.135483][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.138032][ T6636] bridge_slave_0: entered allmulticast mode
[  148.141329][ T6636] bridge_slave_0: entered promiscuous mode
[  148.184977][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.187987][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.190975][ T6636] bridge_slave_1: entered allmulticast mode
[  148.195780][ T6636] bridge_slave_1: entered promiscuous mode
[  148.199153][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.201887][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.204857][ T6640] bridge_slave_0: entered allmulticast mode
[  148.207735][ T6640] bridge_slave_0: entered promiscuous mode
[  148.210838][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.214328][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.217488][ T6642] bridge_slave_0: entered allmulticast mode
[  148.221431][ T6642] bridge_slave_0: entered promiscuous mode
[  148.226804][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.230046][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.233787][ T6642] bridge_slave_1: entered allmulticast mode
[  148.237937][ T6642] bridge_slave_1: entered promiscuous mode
[  148.256920][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.260253][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.263601][ T6640] bridge_slave_1: entered allmulticast mode
[  148.267212][ T6640] bridge_slave_1: entered promiscuous mode
[  148.308226][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.313417][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.327206][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.333870][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.348002][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.380423][ T6636] team0: Port device team_slave_0 added
[  148.386092][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.403484][ T6636] team0: Port device team_slave_1 added
[  148.431354][ T6642] team0: Port device team_slave_0 added
[  148.437978][ T6642] team0: Port device team_slave_1 added
[  148.461309][ T6640] team0: Port device team_slave_0 added
[  148.466562][ T6640] team0: Port device team_slave_1 added
[  148.530768][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.536614][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.549037][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.555728][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.558671][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.571276][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.575982][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.578556][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.589206][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.594953][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.597626][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.607188][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.611644][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.614497][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.623729][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.628446][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.631353][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.643557][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.739450][ T6642] hsr_slave_0: entered promiscuous mode
[  148.744592][ T6642] hsr_slave_1: entered promiscuous mode
[  148.747774][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.750875][ T6642] Cannot create hsr debugfs directory
[  148.771862][ T6640] hsr_slave_0: entered promiscuous mode
[  148.776153][ T6640] hsr_slave_1: entered promiscuous mode
[  148.779299][ T6640] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.782885][ T6640] Cannot create hsr debugfs directory
[  148.789960][ T6636] hsr_slave_0: entered promiscuous mode
[  148.798122][ T6636] hsr_slave_1: entered promiscuous mode
[  148.801150][ T6636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.804760][ T6636] Cannot create hsr debugfs directory
[  149.633839][   T54] Bluetooth: hci6: command tx timeout
[  149.712624][   T54] Bluetooth: hci7: command tx timeout
[  149.792918][   T54] Bluetooth: hci8: command tx timeout
[  151.712813][   T54] Bluetooth: hci6: command tx timeout
[  151.793007][   T54] Bluetooth: hci7: command tx timeout
[  151.873170][   T54] Bluetooth: hci8: command tx timeout
[  153.792969][   T54] Bluetooth: hci6: command tx timeout
[  153.882751][   T54] Bluetooth: hci7: command tx timeout
[  153.954752][   T54] Bluetooth: hci8: command tx timeout
[  155.872720][   T54] Bluetooth: hci6: command tx timeout
[  155.952518][   T54] Bluetooth: hci7: command tx timeout
[  156.032635][   T54] Bluetooth: hci8: command tx timeout
[  180.515483][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.515535][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  190.755548][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  193.795474][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.798209][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  208.528090][ T5830] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  208.531228][ T5830] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  208.534222][ T5830] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  208.537228][ T5830] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  208.539990][ T5830] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  208.627960][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  208.632266][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  208.642684][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  208.647139][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  208.650848][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  208.659936][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  208.665983][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  208.669362][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  208.672917][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  208.675636][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  208.758313][ T6669] chnl_net:caif_netlink_parms(): no params data found
[  208.881441][ T6674] chnl_net:caif_netlink_parms(): no params data found
[  208.899019][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.901621][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.904392][ T6669] bridge_slave_0: entered allmulticast mode
[  208.907120][ T6669] bridge_slave_0: entered promiscuous mode
[  208.940809][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.943984][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.946358][ T6669] bridge_slave_1: entered allmulticast mode
[  208.949110][ T6669] bridge_slave_1: entered promiscuous mode
[  208.995044][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.026137][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.029288][ T6677] chnl_net:caif_netlink_parms(): no params data found
[  209.058833][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.061215][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.067291][ T6674] bridge_slave_0: entered allmulticast mode
[  209.070064][ T6674] bridge_slave_0: entered promiscuous mode
[  209.076578][ T6669] team0: Port device team_slave_0 added
[  209.078781][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.081176][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.084510][ T6674] bridge_slave_1: entered allmulticast mode
[  209.087261][ T6674] bridge_slave_1: entered promiscuous mode
[  209.103457][ T6669] team0: Port device team_slave_1 added
[  209.133914][ T6674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.156040][ T6674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.178709][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.180988][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.193307][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.217212][ T6674] team0: Port device team_slave_0 added
[  209.219713][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.222175][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.225505][ T6677] bridge_slave_0: entered allmulticast mode
[  209.228501][ T6677] bridge_slave_0: entered promiscuous mode
[  209.232938][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.235565][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.244778][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.250920][ T6674] team0: Port device team_slave_1 added
[  209.258523][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.260927][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.263696][ T6677] bridge_slave_1: entered allmulticast mode
[  209.266670][ T6677] bridge_slave_1: entered promiscuous mode
[  209.316593][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.319596][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.330119][ T6674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.336526][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.339548][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.349524][ T6674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.358033][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.377282][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.391822][ T6669] hsr_slave_0: entered promiscuous mode
[  209.394614][ T6669] hsr_slave_1: entered promiscuous mode
[  209.396710][ T6669] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.399104][ T6669] Cannot create hsr debugfs directory
[  209.436249][ T6677] team0: Port device team_slave_0 added
[  209.451141][ T6674] hsr_slave_0: entered promiscuous mode
[  209.454002][ T6674] hsr_slave_1: entered promiscuous mode
[  209.456201][ T6674] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.458739][ T6674] Cannot create hsr debugfs directory
[  209.461568][ T6677] team0: Port device team_slave_1 added
[  209.501020][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.504364][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.516444][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.544264][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.546548][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.555656][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.665872][ T6677] hsr_slave_0: entered promiscuous mode
[  209.668418][ T6677] hsr_slave_1: entered promiscuous mode
[  209.670563][ T6677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.673366][ T6677] Cannot create hsr debugfs directory
[  210.592878][ T5834] Bluetooth: hci9: command tx timeout
[  210.672574][ T5834] Bluetooth: hci10: command tx timeout
[  210.752486][ T5834] Bluetooth: hci11: command tx timeout
[  211.236404][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  211.236507][ T5835] Bluetooth: hci4: command 0x0406 tx timeout
[  211.240108][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  212.672610][ T5838] Bluetooth: hci9: command tx timeout
[  212.752567][ T5838] Bluetooth: hci10: command tx timeout
[  212.832681][ T5838] Bluetooth: hci11: command tx timeout
[  214.752613][ T5838] Bluetooth: hci9: command tx timeout
[  214.832761][ T5838] Bluetooth: hci10: command tx timeout
[  214.913844][ T5838] Bluetooth: hci11: command tx timeout
[  216.832537][ T5838] Bluetooth: hci9: command tx timeout
[  216.912563][ T5838] Bluetooth: hci10: command tx timeout
[  216.992689][ T5838] Bluetooth: hci11: command tx timeout
[  232.193228][   T34] INFO: task syz.2.218:6579 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  232.196135][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  232.200662][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.222595][   T34] task:syz.2.218       state:D stack:27208 pid:6579  tgid:6578  ppid:5829   task_flags:0x400140 flags:0x00004004
[  232.230002][   T34] Call Trace:
[  232.231539][   T34]  <TASK>
[  232.237167][   T34]  __schedule+0x16f5/0x4d00
[  232.239151][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.241389][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.243999][   T34]  ? schedule+0x165/0x360
[  232.245899][   T34]  ? __pfx___schedule+0x10/0x10
[  232.247925][   T34]  ? schedule+0x91/0x360
[  232.249877][   T34]  schedule+0x165/0x360
[  232.251693][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.254628][   T34]  __mutex_lock+0x724/0xe80
[  232.256548][   T34]  ? unwind_get_return_address+0x4d/0x90
[  232.258918][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.261118][   T34]  ? genl_rcv_msg+0x10d/0x790
[  232.263586][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.265269][   T34]  ? stack_trace_save+0x9c/0xe0
[  232.266856][   T34]  ? radix_tree_lookup+0x240/0x290
[  232.268548][   T34]  genl_rcv_msg+0x10d/0x790
[  232.270026][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.271671][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.273794][   T34]  netlink_rcv_skb+0x208/0x470
[  232.275503][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.277249][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.279215][   T34]  ? down_read+0x1ad/0x2e0
[  232.280959][   T34]  genl_rcv+0x28/0x40
[  232.283243][   T34]  netlink_unicast+0x75c/0x8e0
[  232.285265][   T34]  netlink_sendmsg+0x805/0xb30
[  232.286946][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.288855][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  232.290638][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.292647][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.294488][   T34]  __sock_sendmsg+0x21c/0x270
[  232.296206][   T34]  ____sys_sendmsg+0x505/0x830
[  232.297917][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.300074][   T34]  ? import_iovec+0x74/0xa0
[  232.302026][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  232.304168][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.306131][   T34]  ? __fget_files+0x2a/0x420
[  232.307810][   T34]  ? __fget_files+0x3a0/0x420
[  232.309560][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  232.311258][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.313232][   T34]  ? __sys_socketpair+0x4a9/0x560
[  232.314974][   T34]  ? do_syscall_64+0xbe/0x3b0
[  232.316664][   T34]  do_syscall_64+0xfa/0x3b0
[  232.318157][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.320019][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.322529][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.324162][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.326200][   T34] RIP: 0033:0x7fceeb18e929
[  232.327641][   T34] RSP: 002b:00007fceec095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.331803][   T34] RAX: ffffffffffffffda RBX: 00007fceeb3b5fa0 RCX: 00007fceeb18e929
[  232.335354][   T34] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000087
[  232.338024][   T34] RBP: 00007fceeb210ca1 R08: 0000000000000000 R09: 0000000000000000
[  232.340695][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.344016][   T34] R13: 0000000000000000 R14: 00007fceeb3b5fa0 R15: 00007ffd67e860b8
[  232.346870][   T34]  </TASK>
[  232.348004][   T34] INFO: task syz.2.218:6580 blocked for more than 143 seconds.
[  232.350448][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  232.353369][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.356280][   T34] task:syz.2.218       state:D stack:25480 pid:6580  tgid:6578  ppid:5829   task_flags:0x400140 flags:0x00004004
[  232.360189][   T34] Call Trace:
[  232.361299][   T34]  <TASK>
[  232.362702][   T34]  __schedule+0x16f5/0x4d00
[  232.364413][   T34]  ? schedule+0x165/0x360
[  232.365895][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.367550][   T34]  ? __pfx___schedule+0x10/0x10
[  232.369236][   T34]  ? schedule+0x91/0x360
[  232.370811][   T34]  schedule+0x165/0x360
[  232.372272][   T34]  schedule_timeout+0x9a/0x270
[  232.374820][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  232.376619][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.378536][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.380319][   T34]  ? wait_for_completion+0x267/0x5d0
[  232.382083][   T34]  wait_for_completion+0x2bf/0x5d0
[  232.384023][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  232.385962][   T34]  ? flush_workqueue_prep_pwqs+0x47c/0x4f0
[  232.387937][   T34]  ? check_flush_dependency+0x88/0x400
[  232.389794][   T34]  __flush_workqueue+0x6f7/0x14b0
[  232.391541][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  232.393514][   T34]  ? __pfx___flush_workqueue+0x10/0x10
[  232.395376][   T34]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  232.397383][   T34]  ? __wake_up_common_lock+0x190/0x1f0
[  232.399240][   T34]  nbd_disconnect_and_put+0x9e/0x2a0
[  232.401028][   T34]  nbd_genl_disconnect+0x485/0x570
[  232.402913][   T34]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  232.404845][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  232.407005][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  232.408908][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  232.410985][   T34]  genl_rcv_msg+0x60e/0x790
[  232.412708][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.414446][   T34]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  232.416348][   T34]  netlink_rcv_skb+0x208/0x470
[  232.417951][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.419682][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.421517][   T34]  ? down_read+0x1ad/0x2e0
[  232.423210][   T34]  genl_rcv+0x28/0x40
[  232.424585][   T34]  netlink_unicast+0x75c/0x8e0
[  232.426248][   T34]  netlink_sendmsg+0x805/0xb30
[  232.427884][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.429863][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  232.432614][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.434423][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.436231][   T34]  __sock_sendmsg+0x21c/0x270
[  232.437848][   T34]  ____sys_sendmsg+0x505/0x830
[  232.439713][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.441480][   T34]  ? import_iovec+0x74/0xa0
[  232.443250][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  232.444862][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.446642][   T34]  ? __fget_files+0x2a/0x420
[  232.448230][   T34]  ? __fget_files+0x3a0/0x420
[  232.449786][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  232.451543][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.454077][   T34]  ? rcu_is_watching+0x15/0xb0
[  232.455713][   T34]  ? do_syscall_64+0xbe/0x3b0
[  232.457321][   T34]  do_syscall_64+0xfa/0x3b0
[  232.458840][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.460570][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.462947][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.464601][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.466615][   T34] RIP: 0033:0x7fceeb18e929
[  232.468156][   T34] RSP: 002b:00007fceec074038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.470878][   T34] RAX: ffffffffffffffda RBX: 00007fceeb3b6080 RCX: 00007fceeb18e929
[  232.473572][   T34] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000086
[  232.476199][   T34] RBP: 00007fceeb210ca1 R08: 0000000000000000 R09: 0000000000000000
[  232.478789][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.481385][   T34] R13: 0000000000000000 R14: 00007fceeb3b6080 R15: 00007ffd67e860b8
[  232.484160][   T34]  </TASK>
[  232.485209][   T34] INFO: task syz.0.219:6584 blocked for more than 143 seconds.
[  232.487720][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  232.490352][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.493400][   T34] task:syz.0.219       state:D stack:24816 pid:6584  tgid:6583  ppid:5827   task_flags:0x400140 flags:0x00004004
[  232.497279][   T34] Call Trace:
[  232.498424][   T34]  <TASK>
[  232.499440][   T34]  __schedule+0x16f5/0x4d00
[  232.500973][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.502655][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.504377][   T34]  ? schedule+0x165/0x360
[  232.505837][   T34]  ? __pfx___schedule+0x10/0x10
[  232.507499][   T34]  ? schedule+0x91/0x360
[  232.508910][   T34]  schedule+0x165/0x360
[  232.510247][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.512048][   T34]  __mutex_lock+0x724/0xe80
[  232.513817][   T34]  ? unwind_get_return_address+0x4d/0x90
[  232.515706][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.517313][   T34]  ? genl_rcv_msg+0x10d/0x790
[  232.518897][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.520594][   T34]  ? stack_trace_save+0x9c/0xe0
[  232.522263][   T34]  ? radix_tree_lookup+0x240/0x290
[  232.524118][   T34]  genl_rcv_msg+0x10d/0x790
[  232.525646][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.527312][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.528999][   T34]  netlink_rcv_skb+0x208/0x470
[  232.530600][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.532257][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.534781][   T34]  ? down_read+0x1ad/0x2e0
[  232.536297][   T34]  genl_rcv+0x28/0x40
[  232.537634][   T34]  netlink_unicast+0x75c/0x8e0
[  232.539178][   T34]  netlink_sendmsg+0x805/0xb30
[  232.540890][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.542912][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  232.544811][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.546785][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.548566][   T34]  __sock_sendmsg+0x21c/0x270
[  232.550250][   T34]  __sys_sendto+0x3bd/0x520
[  232.551952][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  232.553762][   T34]  ? count_memcg_event_mm+0x21/0x260
[  232.555523][   T34]  ? exc_page_fault+0x76/0xf0
[  232.557124][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  232.558900][   T34]  __x64_sys_sendto+0xde/0x100
[  232.560471][   T34]  do_syscall_64+0xfa/0x3b0
[  232.561958][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.563899][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.565961][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.567559][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.569542][   T34] RIP: 0033:0x7f58619907bc
[  232.570999][   T34] RSP: 002b:00007f58627e4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  232.573921][   T34] RAX: ffffffffffffffda RBX: 00007f58627e4fc0 RCX: 00007f58619907bc
[  232.576596][   T34] RDX: 000000000000001c RSI: 00007f58627e5010 RDI: 0000000000000011
[  232.579181][   T34] RBP: 0000000000000000 R08: 00007f58627e4f14 R09: 000000000000000c
[  232.581843][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011
[  232.584578][   T34] R13: 00007f58627e4f68 R14: 00007f58627e5010 R15: 0000000000000000
[  232.587135][   T34]  </TASK>
[  232.588160][   T34] INFO: task syz.1.221:6589 blocked for more than 143 seconds.
[  232.590557][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  232.593441][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.596338][   T34] task:syz.1.221       state:D stack:28328 pid:6589  tgid:6588  ppid:5836   task_flags:0x400140 flags:0x00004004
[  232.600313][   T34] Call Trace:
[  232.601494][   T34]  <TASK>
[  232.602644][   T34]  __schedule+0x16f5/0x4d00
[  232.604245][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.605882][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.607538][   T34]  ? schedule+0x165/0x360
[  232.609023][   T34]  ? __pfx___schedule+0x10/0x10
[  232.610693][   T34]  ? schedule+0x91/0x360
[  232.612226][   T34]  schedule+0x165/0x360
[  232.613957][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.615964][   T34]  __mutex_lock+0x724/0xe80
[  232.617773][   T34]  ? unwind_get_return_address+0x4d/0x90
[  232.619811][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.621409][   T34]  ? genl_rcv_msg+0x10d/0x790
[  232.623228][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.625018][   T34]  ? stack_trace_save+0x9c/0xe0
[  232.626932][   T34]  ? radix_tree_lookup+0x240/0x290
[  232.628816][   T34]  genl_rcv_msg+0x10d/0x790
[  232.630271][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.632013][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.634277][   T34]  netlink_rcv_skb+0x208/0x470
[  232.637585][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.639410][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.641374][   T34]  ? down_read+0x1ad/0x2e0
[  232.643414][   T34]  genl_rcv+0x28/0x40
[  232.644948][   T34]  netlink_unicast+0x75c/0x8e0
[  232.646594][   T34]  netlink_sendmsg+0x805/0xb30
[  232.648223][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.650084][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  232.652073][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.653942][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.655700][   T34]  __sock_sendmsg+0x21c/0x270
[  232.657538][   T34]  __sys_sendto+0x3bd/0x520
[  232.659329][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  232.661289][   T34]  ? count_memcg_event_mm+0x21/0x260
[  232.663524][   T34]  ? exc_page_fault+0x76/0xf0
[  232.665279][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  232.667092][   T34]  __x64_sys_sendto+0xde/0x100
[  232.668801][   T34]  do_syscall_64+0xfa/0x3b0
[  232.670680][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.672958][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.675290][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.677003][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.679156][   T34] RIP: 0033:0x7f8fadb907bc
[  232.680675][   T34] RSP: 002b:00007f8faea3eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  232.683746][   T34] RAX: ffffffffffffffda RBX: 00007f8faea3efc0 RCX: 00007f8fadb907bc
[  232.686705][   T34] RDX: 0000000000000024 RSI: 00007f8faea3f010 RDI: 0000000000000004
[  232.689481][   T34] RBP: 0000000000000000 R08: 00007f8faea3ef14 R09: 000000000000000c
[  232.692183][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  232.695021][   T34] R13: 00007f8faea3ef68 R14: 00007f8faea3f010 R15: 0000000000000000
[  232.697620][   T34]  </TASK>
[  232.698740][   T34] INFO: task syz-executor:6598 blocked for more than 143 seconds.
[  232.701394][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  232.704278][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.707090][   T34] task:syz-executor    state:D stack:22280 pid:6598  tgid:6598  ppid:1      task_flags:0x400140 flags:0x00004004
[  232.711462][   T34] Call Trace:
[  232.712892][   T34]  <TASK>
[  232.714083][   T34]  __schedule+0x16f5/0x4d00
[  232.715956][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.717749][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.719429][   T34]  ? schedule+0x165/0x360
[  232.720905][   T34]  ? __pfx___schedule+0x10/0x10
[  232.722756][   T34]  ? schedule+0x91/0x360
[  232.724217][   T34]  schedule+0x165/0x360
[  232.725629][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.727464][   T34]  __mutex_lock+0x724/0xe80
[  232.728992][   T34]  ? unwind_get_return_address+0x4d/0x90
[  232.730885][   T34]  ? __mutex_lock+0x51b/0xe80
[  232.732607][   T34]  ? genl_rcv_msg+0x10d/0x790
[  232.734240][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.735862][   T34]  ? stack_trace_save+0x9c/0xe0
[  232.738575][   T34]  ? radix_tree_lookup+0x240/0x290
[  232.740357][   T34]  genl_rcv_msg+0x10d/0x790
[  232.742040][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.743906][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.745762][   T34]  netlink_rcv_skb+0x208/0x470
[  232.747389][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.749174][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.751040][   T34]  ? down_read+0x1ad/0x2e0
[  232.752734][   T34]  genl_rcv+0x28/0x40
[  232.754108][   T34]  netlink_unicast+0x75c/0x8e0
[  232.755953][   T34]  netlink_sendmsg+0x805/0xb30
[  232.757688][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.759673][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  232.761357][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.763292][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.764995][   T34]  __sock_sendmsg+0x21c/0x270
[  232.766572][   T34]  __sys_sendto+0x3bd/0x520
[  232.768133][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  232.769853][   T34]  ? fd_install+0x97/0x540
[  232.771335][   T34]  ? fd_install+0x30d/0x540
[  232.772905][   T34]  __x64_sys_sendto+0xde/0x100
[  232.774512][   T34]  do_syscall_64+0xfa/0x3b0
[  232.776028][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.777748][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.780035][   T34]  ? exc_page_fault+0x9f/0xf0
[  232.781640][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.783849][   T34] RIP: 0033:0x7fe6605907bc
[  232.785363][   T34] RSP: 002b:00007ffec0ebf670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  232.788125][   T34] RAX: ffffffffffffffda RBX: 00007fe6612e4620 RCX: 00007fe6605907bc
[  232.790952][   T34] RDX: 0000000000000020 RSI: 00007fe6612e4670 RDI: 0000000000000005
[  232.793776][   T34] RBP: 0000000000000000 R08: 00007ffec0ebf6c4 R09: 000000000000000c
[  232.796446][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  232.799111][   T34] R13: 00007ffec0ebf718 R14: 00007fe6612e4670 R15: 0000000000000000
[  232.801794][   T34]  </TASK>
[  232.803045][   T34] 
[  232.803045][   T34] Showing all locks held in the system:
[  232.805698][   T34] 1 lock held by khungtaskd/34:
[  232.807531][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  232.810967][   T34] 2 locks held by kworker/u12:0/55:
[  232.812977][   T34]  #0: ffff888022a59148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.816737][   T34]  #1: ffffc900007dfbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.820993][   T34] 2 locks held by kworker/u13:0/56:
[  232.822924][   T34]  #0: ffff888022a5f948 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.826720][   T34]  #1: ffffc900007efbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.830968][   T34] 2 locks held by getty/5658:
[  232.832916][   T34]  #0: ffff888104dfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  232.836244][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  232.839556][   T34] 2 locks held by kworker/u12:1/5909:
[  232.842169][   T34]  #0: ffff888022b36148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.846283][   T34]  #1: ffffc90003b0fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.850285][   T34] 2 locks held by kworker/u13:1/5979:
[  232.852143][   T34]  #0: ffff88801abd8148 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.856037][   T34]  #1: ffffc900040f7bc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.859952][   T34] 2 locks held by kworker/u12:2/6013:
[  232.861722][   T34]  #0: ffff88801b301948 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.865541][   T34]  #1: ffffc900041e7bc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.869468][   T34] 2 locks held by kworker/u13:2/6019:
[  232.871241][   T34]  #0: ffff888022b43148 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.875246][   T34]  #1: ffffc9000433fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.879373][   T34] 2 locks held by kworker/u12:3/6046:
[  232.881212][   T34]  #0: ffff88801abde948 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.885086][   T34]  #1: ffffc900042f7bc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.889033][   T34] 2 locks held by kworker/u13:3/6085:
[  232.890871][   T34]  #0: ffff88801af5b948 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.894869][   T34]  #1: ffffc9000438fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.898690][   T34] 2 locks held by kworker/u12:4/6119:
[  232.900518][   T34]  #0: ffff88801af45148 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.904298][   T34]  #1: ffffc900043efbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.908244][   T34] 2 locks held by kworker/u12:5/6141:
[  232.910082][   T34]  #0: ffff88801afea148 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.914028][   T34]  #1: ffffc9000457fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.918252][   T34] 2 locks held by kworker/u13:4/6163:
[  232.920044][   T34]  #0: ffff8880230e5948 ((wq_completion)nbd12-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.924092][   T34]  #1: ffffc900044afbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.928166][   T34] 2 locks held by kworker/u12:6/6182:
[  232.930000][   T34]  #0: ffff88801aff8948 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.934021][   T34]  #1: ffffc900045bfbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.937911][   T34] 2 locks held by kworker/u12:7/6213:
[  232.939682][   T34]  #0: ffff8880231d9148 ((wq_completion)nbd15-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.944329][   T34]  #1: ffffc9000609fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.948267][   T34] 2 locks held by kworker/u13:5/6237:
[  232.950098][   T34]  #0: ffff88801afff148 ((wq_completion)nbd11-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.953989][   T34]  #1: ffffc9000667fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.957789][   T34] 2 locks held by kworker/u13:6/6269:
[  232.959613][   T34]  #0: ffff8880231c2948 ((wq_completion)nbd14-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.963363][   T34]  #1: ffffc9000684fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.967232][   T34] 2 locks held by kworker/u12:8/6294:
[  232.969013][   T34]  #0: ffff888023114148 ((wq_completion)nbd13-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.972885][   T34]  #1: ffffc90006a1fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.976752][   T34] 2 locks held by syz.2.218/6579:
[  232.978412][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  232.981006][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  232.984112][   T34] 3 locks held by syz.2.218/6580:
[  232.985836][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  232.988601][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  232.991610][   T34]  #2: ffff888022b32230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0
[  232.997277][   T34] 2 locks held by syz.0.219/6584:
[  232.998987][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.001721][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.004966][   T34] 2 locks held by syz.1.221/6589:
[  233.006707][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.009514][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.012716][   T34] 2 locks held by syz-executor/6598:
[  233.014532][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.017224][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.020239][   T34] 2 locks held by syz-executor/6604:
[  233.022024][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.024935][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.027970][   T34] 2 locks held by syz-executor/6605:
[  233.029753][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.032656][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.035695][   T34] 2 locks held by syz-executor/6636:
[  233.037512][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.040263][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.043392][   T34] 2 locks held by syz-executor/6640:
[  233.045962][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.048715][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.051611][   T34] 2 locks held by syz-executor/6642:
[  233.053549][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.056320][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.059310][   T34] 2 locks held by syz-executor/6669:
[  233.061101][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.063961][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.066968][   T34] 2 locks held by syz-executor/6674:
[  233.068787][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.071589][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.074888][   T34] 2 locks held by syz-executor/6677:
[  233.076675][   T34]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.079418][   T34]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.082553][   T34] 
[  233.083436][   T34] =============================================
[  233.083436][   T34] 
[  233.086254][   T34] NMI backtrace for cpu 0
[  233.086261][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  233.086269][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.086274][   T34] Call Trace:
[  233.086278][   T34]  <TASK>
[  233.086282][   T34]  dump_stack_lvl+0x189/0x250
[  233.086293][   T34]  ? __wake_up_klogd+0xd9/0x110
[  233.086305][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.086313][   T34]  ? __pfx__printk+0x10/0x10
[  233.086327][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  233.086340][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  233.086349][   T34]  ? _printk+0xcf/0x120
[  233.086360][   T34]  ? __pfx__printk+0x10/0x10
[  233.086370][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  233.086378][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  233.086390][   T34]  watchdog+0xfee/0x1030
[  233.086398][   T34]  ? watchdog+0x1de/0x1030
[  233.086406][   T34]  kthread+0x711/0x8a0
[  233.086418][   T34]  ? __pfx_watchdog+0x10/0x10
[  233.086424][   T34]  ? __pfx_kthread+0x10/0x10
[  233.086434][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.086446][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.086453][   T34]  ? __pfx_kthread+0x10/0x10
[  233.086463][   T34]  ret_from_fork+0x3fc/0x770
[  233.086472][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.086481][   T34]  ? __switch_to_asm+0x39/0x70
[  233.086489][   T34]  ? __switch_to_asm+0x33/0x70
[  233.086498][   T34]  ? __pfx_kthread+0x10/0x10
[  233.086508][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.086522][   T34]  </TASK>
[  233.086525][   T34] Sending NMI from CPU 0 to CPUs 1:
[  233.139745][    C1] NMI backtrace for cpu 1
[  233.139769][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  233.139783][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.139791][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  233.139811][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  233.139821][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  233.139834][    C1] RAX: c8b4c68415a20b00 RBX: ffffffff81976c78 RCX: c8b4c68415a20b00
[  233.139842][    C1] RDX: 0000000000000001 RSI: ffffffff8d995f8c RDI: ffffffff8be28c40
[  233.139850][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  233.139859][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  233.139867][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d2000
[  233.139874][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  233.139883][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.139891][    C1] CR2: 000055ed51ce2018 CR3: 000000010fe90000 CR4: 00000000000006f0
[  233.139926][    C1] Call Trace:
[  233.139935][    C1]  <TASK>
[  233.139940][    C1]  default_idle+0x13/0x20
[  233.139955][    C1]  default_idle_call+0x74/0xb0
[  233.139969][    C1]  do_idle+0x1e8/0x510
[  233.139986][    C1]  ? __pfx_do_idle+0x10/0x10
[  233.139997][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  233.140015][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.140027][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.140043][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.140103][    C1]  cpu_startup_entry+0x44/0x60
[  233.140116][    C1]  start_secondary+0x101/0x110
[  233.140128][    C1]  common_startup_64+0x13e/0x147
[  233.140150][    C1]  </TASK>
[  233.140703][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  233.212435][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  233.217727][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.222159][   T34] Call Trace:
[  233.223724][   T34]  <TASK>
[  233.225041][   T34]  dump_stack_lvl+0x99/0x250
[  233.227141][   T34]  ? __asan_memcpy+0x40/0x70
[  233.229148][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.231486][   T34]  ? __pfx__printk+0x10/0x10
[  233.233694][   T34]  panic+0x2db/0x790
[  233.235472][   T34]  ? __pfx_panic+0x10/0x10
[  233.237476][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  233.240073][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  233.242630][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  233.245513][   T34]  watchdog+0x102d/0x1030
[  233.247407][   T34]  ? watchdog+0x1de/0x1030
[  233.249511][   T34]  kthread+0x711/0x8a0
[  233.251431][   T34]  ? __pfx_watchdog+0x10/0x10
[  233.253542][   T34]  ? __pfx_kthread+0x10/0x10
[  233.255610][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.258087][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.260427][   T34]  ? __pfx_kthread+0x10/0x10
[  233.262406][   T34]  ret_from_fork+0x3fc/0x770
[  233.264495][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.266581][   T34]  ? __switch_to_asm+0x39/0x70
[  233.268761][   T34]  ? __switch_to_asm+0x33/0x70
[  233.270883][   T34]  ? __pfx_kthread+0x10/0x10
[  233.272923][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.275099][   T34]  </TASK>
[  233.277487][   T34] Kernel Offset: disabled
[  233.279440][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:35:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888021280237 R9 =1ffff11004250046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8c6 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe0c22bddc CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fa21db86d00
XMM02=0000000500000007 0000555500000001 XMM03=00005555585a5240 00005555585a5190
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=00005555585a99b0 0000555500000007 XMM07=0000555500000000 00005555585a9820
XMM08=00005555585a97b0 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1a2f75e740e42000 RBX=0000000000000202 RCX=1a2f75e740e42000 RDX=ffffc9000314f101
RSI=ffffffff8d9a9850 RDI=ffffffff8be28c40 RBP=dffffc0000000000 RSP=ffffc9000314f038
R8 =ffffc9000314f590 R9 =0000000000000000 R10=ffffc9000314f1f8 R11=fffff52000629e41
R12=ffffc9000314f5a0 R13=ffffffff8172aae5 R14=ffffffff8e13f160 R15=ffff8881080b0000
RIP=ffffffff8b6d7217 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f603076c800 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd3087cfa4 CR3=000000001f804000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
