last executing test programs:

24.723258015s ago: executing program 3 (id=690):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.484725064s ago: executing program 3 (id=694):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x2, 0x4) (async)
sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async)
socket$unix(0x1, 0x2, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
recvmmsg(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000006000)=""/4100, 0x1004}, {&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002980)=""/117, 0x75}, {&(0x7f0000002a00)=""/203, 0xcb}, {&(0x7f0000002b00)=""/183, 0xb7}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000002dc0)=""/184, 0xb8}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/247, 0xf7}, {&(0x7f0000000000)=""/188, 0xbc}], 0x7}, 0x8}], 0x2, 0x2000, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="50000000070603000000000000000000020800061e00000008080006400000000205000100070000000900020073797a30379b7423e94e79a37e640000000008000640000000040800064000000002000000e9ff0000000000003d1c4a4016315ee7f5f7fd1adb"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async, rerun: 64)
r3 = socket(0xa, 0x3, 0x3a) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async, rerun: 64)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={<r4=>0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88)
r5 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={r4, 0x7fff}, 0x8) (async)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={r4, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x1, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) (async, rerun: 64)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x200000, @remote, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x3, 0x8, 0x1]}}, 0x5c) (rerun: 64)

24.28763137s ago: executing program 3 (id=696):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc)
close(r1)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffdfffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r5 = getpid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

21.584397716s ago: executing program 3 (id=719):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x1, 0x5)
shutdown(r3, 0x1)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000040)={r5}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x200, 0xcc}, 0xc)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})

21.078403124s ago: executing program 3 (id=724):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19.988152505s ago: executing program 2 (id=734):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000013c0)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x0, 0xffea, 0x0, 0x32, 0x0, @empty, @broadcast, {[@generic={0x7, 0x10, "050958357cf2cd5834099c981153"}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0x1, 0x5, 0x65, 0x1, 0x7a, 0x33, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="33b45b449dce8c1b033f000000fffffffffdffff", @ANYRES32=0x0, @ANYBLOB="e9200000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r4, &(0x7f0000000300)="8995b3", 0x3, 0x4044880, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x54ad)
unshare(0x600)
setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x5, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd9"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
r8 = socket$inet_udp(0x2, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2e7c4cbe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000840)={{r5, 0x0, 0x4000, &(0x7f0000000240)={@_ha_fsid={[0x5f45, 0x6]}, {0x3, 0x67b, 0x1000, 0x1f}}, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x5}, 0x0, &(0x7f00000004c0)})

19.662102736s ago: executing program 4 (id=738):
r0 = socket(0x848000000015, 0x805, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, <r4=>0x0}, &(0x7f0000001980)=0xc)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3)
r7 = getpid()
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r10 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, <r11=>0x0}, &(0x7f0000001a00)=0xc)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
accept4(r12, 0x0, 0x0, 0x800)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002f80)={{<r13=>r0, &(0x7f0000001a40)='$%,:}#$\x00', 0x20000, &(0x7f0000001a80)={@align=0x6, {0x7ff, 0xa4dc, 0x1, 0x2}}, 0x6, &(0x7f0000001ac0)={@_ha_fsid}, &(0x7f0000001b00)=0x6}, 0x4, &(0x7f0000002f00)=[{0x1, 0x6, &(0x7f0000001b40)=':$#-}#\xab+\'%{..@{,):]\xe8\x00', &(0x7f0000001b80)="98a164f71c78dedbc47ed2c09d8ce8f72f307d416b51466a8da3210a31473ab6bca3fbd7b21657bd0bd81deb25261536cc5425233f0ccc82f5d0d6e164fa8bdf239a1f4f42723f8b8dbcd7febdb566fd4b854388eb76d8f8f0370cc57c27223e1cf715dd0fa344dc543e8fbbcfe83c6bf9cf62d7fe146b8add13a39015fbf405d5c1a003ef1df2792ed74c8e08862b015981f4022375d5b753950391b0f80ad48d3bea62278a014df914d8bbe138c916497eb1d93b7639b15cddbc7e197c7b1d7ed948ba4824ce87a662ae57e03297c5005e07700111ee8ba98ff1f9d08e3f5e47e9453c", 0xe4, 0x10}, {0x3, 0x549f, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)="41329fd4d5b156ff3ee56a40af2e6ffa9e11268bec5e465c60cfcd71dfc7cdf058be97fa711cddf75bd4d2ebb2bedb6332be3fa4b3c325de2677397168d8ad15fbfeb94c716f1e74c3f69219e02b348222181c8f31a2877886093a8966356716efdb7987167ed0b4cbd3caa96e5b4ea92c291e493c7d111115ecc88784410015463ffd4343398d40ebf3b11036a1694029ebd16a0885fbb620635d53299e5e02b6e940d04c95b837629b5518a6c5ac9173f5a298a7db2fca111f57843e90af11fd82270ba91827a95f", 0xc9}, {0x3, 0x5, &(0x7f0000001dc0)='\x00', &(0x7f0000001e00)="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", 0x1000, 0x8}, {0x3, 0x37c83404, &(0x7f0000002e00)=']$-b\b&&*\'\x00', &(0x7f0000002e40)="29c6ce3cb9d744e9eb79651282498e79203f0259cf68834339f072a46f52b599f6f2d36cc1b936ccae372af26dd73dbd803afe14c0bbc4ffddea5bab8f2c7c9d9e451611ffc58975000f903756b6c0dcc0ff6dde8e504f7bf32b9f6cd0c54085e9485e18b98f56fb18abb742dddf21dac80263f2b5182a7bac6281964edc1b9371d5b5722ec0c92b4c589a7a70ae6cab1a3803a4b7237508699eccb62a70d29b2f1d0d4d29c2aed55f295b", 0xab, 0x2}]})
r14 = gettid()
r15 = getuid()
r16 = gettid()
r17 = getgid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000)={<r18=>0x0}, &(0x7f0000003040)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003080)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000003180)=0xe8)
r20 = getgid()
sendmsg$unix(r0, &(0x7f0000003300)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000016c0)="ec40ac0bd22c3f51b9e9241e8cdaea7b91c291aa720c38856b2e360226c0482d65bc01ff62f0284a43d1a63eb1c87c36c51229b13a6f6eed9968222dd73056cbf548e4a59d5306df7987da88e6655ff38163da711671ee180c2e4ecf99fc1d21ce93a6ae896227ceb11685ad7da66429fc3bb091937d453c88b1ad45833def197c55148608", 0x85}], 0x1, &(0x7f00000031c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r5, r0, r2, r1, r6, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r10, r11}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r12, r3, r3, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xffffffffffffffff, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x130, 0x40}, 0x60000041)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x4b, 0x0, 0x0}, 0x50)
getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000380))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r2, 0x0, 0xc3, 0x1d, &(0x7f00000004c0)="94565dc0afe744674b175d6ddebeff5dfd34a1cdbeb8c9e476ff845c021aa767c0437738310ccb305c22ce9209b6680a586cdb568d210e79329fafad1b02149e84419601aca15047b577f0640a1a2d0d88596964eb060d8e8d76300f257b70e5287c64223db57fd42af156306d9123648f30ad401082983fcee29fdd1bdba362e030e536056aecddbf1734066030d23157ca5b4fbfeee7a48b409b0796774af5ef9e98e7fb44e22164e651b78e06d0e747ee746533052cef3c9acb6182e850ee9135e1", &(0x7f00000005c0)=""/29, 0x81, 0x0, 0x39, 0x1000, &(0x7f0000000600)="9249d51cc2f33de34b91dbc876d991664b32597f9587f0b8cc3d7ed49572c9b1c09468171ae63af40ab122c54856a17ff6524d233a1b13fc15", &(0x7f0000000640)="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", 0x0, 0x0, 0x100}, 0x50)

19.240172242s ago: executing program 1 (id=740):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x6}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0xd}, {0x0, 0xffff}, {0xffe0}}}, 0x24}}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @broadcast, <r7=>0x0}, &(0x7f0000000140)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r9=>0x0, 0x0, 0x9, 0x4, 0xc, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x20, 0x7800, 0x6, 0x5}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r12 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r12, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r14=>0x0, 0x29, 0x40, 0xd, 0x422f, 0x47, @dev={0xfe, 0x80, '\x00', 0x17}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x1, 0x99}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0xc8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.191554371s ago: executing program 0 (id=741):
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa22daa36caaaa86dd606410a600080001fe800000000000000000000000000012000000000000000000000000000000013200010400000010"], 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0x7}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x24040084)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000680))
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000310000085000000860000008500000011000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}]}, 0x60}}, 0x80)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44085}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

19.022866726s ago: executing program 2 (id=742):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18ffffffff00000000ffffff8700000091116800000000009500001900000000"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x47, 0x48, 0x805, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x80000003}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x48}}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10}}], 0x30}, 0x200000e0) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xfffc, 0xe, 0x0, 0x2000}, 0x8) (async)
sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e24, 0x5, @mcast1, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="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", 0xfb}], 0x1, &(0x7f0000000740)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x73, 0x4, 0x2, 0x4, 0x0, [@mcast2, @private1]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x6c, 0x9, '\x00', [@generic={0x9, 0x32, "7268ad588964524291bd35c3cf1686d046539a220a0595856a281b7090c07ba9e8ffcf64a05f2495d395f427d75d8eb9e770"}, @jumbo={0xc2, 0x4, 0x200}, @hao={0xc9, 0x10, @remote}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x59}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x11, 0x4, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2f, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0x80, [0x8001]}}, @jumbo={0xc2, 0x4, 0x7c39}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x1a0}, 0x1) (async)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0xce24, @empty}]}, &(0x7f0000000640)=0x10) (async)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x2}, 0x9})

18.856887845s ago: executing program 2 (id=743):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000040)=0x7fff, 0x4)

18.785230262s ago: executing program 0 (id=744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0xc011}, 0x400c0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x5, 0x8, 0x3, 0x800fffd}]}, 0x10)
recvmmsg(r4, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/73, 0x49}, 0x5}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)

18.772786806s ago: executing program 2 (id=745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000000206050000000000000000000200fffd120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff0800064000006d2305000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r6=>0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xc}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x10}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x528}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x80)
socket(0x2b, 0x80801, 0xfffffffd)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000540)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'veth1_to_bond\x00', 0x2000})
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)

18.70082167s ago: executing program 1 (id=746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r3=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000f00)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000640)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008ca2170e4"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020605000000000000000000040000010500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012000000000611000300686173683a69702c6d61726b"], 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_IFNAME={0x14, 0x3, 'pimreg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010)

18.660190352s ago: executing program 2 (id=747):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$kcm(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

18.514600997s ago: executing program 0 (id=748):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000f3213f227effa69a0876ac12000214010029bd7000ffdbdf2571526afd901cea2f87bfb32f42998d458aa6d43df0740e5397845a456c622b5d5bd8029390d642d6060000005ed460cf0ba9b957342a08ad4c33cab0c9c1044898e526f9e18295d633cf7f4fd04819f7e1a6e567f9fe075b79ec74cf78ab15cc65dc2700"/143, @ANYRES32=r3, @ANYBLOB="0900020073797a3000000000080001000000000008000100000000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x80016, 0xb3, 0x7f, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x50, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb99}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010)

18.460852278s ago: executing program 1 (id=749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006140000001100"], 0x50}}, 0x20044084)
close(r0)

18.455511551s ago: executing program 2 (id=750):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00f5ff15008106000100"], 0x4c)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002500), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x800)

18.356199511s ago: executing program 1 (id=751):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

18.348324933s ago: executing program 0 (id=752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752400000000cf2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRESHEX, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)

18.200763923s ago: executing program 4 (id=753):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='syzkaller\x00'}, 0x94)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000240)={r0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r1, r1, 0x2f}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r1, r5, 0x34, 0x0, 0x4, @void, @value=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0)

18.200476907s ago: executing program 1 (id=754):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c80)='GPL\x00'}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
ioctl$FIONCLEX(r2, 0x5450)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0xfd, 0xb, 0x407}]})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x1d2})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, r3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000002000000020000000000000000000000000000010500f000080000000000000001000005000000000000000002"], 0x0, 0x5a}, 0x28)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000000)={'sit0\x00', 0x0})
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x1})
write$ppp(r1, &(0x7f0000000400)='k\'', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)

18.181426676s ago: executing program 0 (id=755):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3eb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600140001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x73, 0x3, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x10, 0x2, 0x2}})
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3eb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600140001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x73, 0x3, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x10, 0x2, 0x2}}) (async)

18.055947093s ago: executing program 0 (id=756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x80)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fea8"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket(0x1, 0x1, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf250100000018000200d5400000000000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="7b6db567bda59fe941525b0d14bed170b44764e4a0e6c06f021431f8a23d97eefc49ca46585bb273f5cd2ee1cd993a03bb6447c6e6f5ca345c81093619f16c8eeb265d11f4eb7dfb50199ff54f3e8c5cb1b1b4d35ee6a9140000000000c50e6ef46f9c11312492b3743edde43d60a7fa78a5ec8185d445705e93abc3360a683762ce4e0c78f17072d11c94eceeb552a3242b75ed394344006f9fb3ca9019cb8b17a91eae492bb27bad98d5580f50232d9f"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

18.033840715s ago: executing program 4 (id=757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(r2)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000300)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r1}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r11)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r12 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4)

17.974097847s ago: executing program 1 (id=758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0xc011}, 0x400c0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x5, 0x8, 0x3, 0x800fffd}]}, 0x10)
recvmmsg(r4, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/73, 0x49}, 0x5}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)

17.908626522s ago: executing program 3 (id=759):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000000)={'veth0_macvtap\x00', @ifru_mtu=0xfffffffc}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbbe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000440)={<r9=>r8, &(0x7f0000000140)='veth0_macvtap\x00', 0x400900, &(0x7f00000001c0)={@align=0xffffffffffffffdd, {0x5, 0x2, 0x407, 0x5}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xffff}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan1\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000004c0)={0x1d, r10}, 0x10) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xf, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)={@rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc)

16.173984654s ago: executing program 4 (id=760):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x6, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20}, {0x3000000, 0x0, 0x0, 0x0, 0x10001}, {0x8000000000000000, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

16.108328471s ago: executing program 4 (id=761):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000bf0000009500000000000000d98fc56041a6478ab99698b28ce3062b8203ac07c12a54a2563b55834acd81354d6beee622703897aebb0f547a4ec0cd20e919403573729644930d3d054e338332e79245ef5b3ae041f1fd62820fb8175777b8b7a3fd767f7fc6c719055f3d0101000000000000fc49831d801cfd85d200ff4e0d6eb36a97f83b44c6a17b7effb0dcf52bf015e73f3d617210a9e06d492a57908a54922416dee11a430e2a25b2d250d72695e5d7069fcf774a80497807e2a5891bd331c485059195332d3e1809e756"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c40)=ANY=[@ANYBLOB="600000002daecfb2a0c7435c0206030000ef5d3444820f6836060000020500050002001700054b84e7ac41e577c191b3000400000000001400078008001240001000000800134000005bad12000300686173683a6e65740000000000000000003249d200c7bb87fa254e36c3a127cf79350afa73584203cfc7b217437d9468d409f656f52e0cb79c10534a94a82331a27b4c70891aee8ba92c136a51d9e66a83120e0665b42eee3de5"], 0x60}}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_virt_wifi\x00', <r4=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f00000015c0)=""/146}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000003c0)={'veth1\x00', {0x2, 0x0, @remote}})
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8000, r1}, 0x18)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x9, 0x18}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b5e9c81c56ec5fe226200978b6608e8cb3f0de7b39a1b12bf1406d9d35a9086e1749f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r6, @ANYRES32=r0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x50)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0x1, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x1ff, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x19, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@generic={0x9, 0x6, 0x0, 0x1, 0xff}, @ldst={0x0, 0x3, 0x6, 0x1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xba45}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0x7d, &(0x7f0000000480)=""/125, 0x40f00, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r7, r8, r9, r10, r11], &(0x7f0000000900)=[{0x0, 0x5, 0x7, 0x4}, {0x4, 0x1, 0x10, 0x6}, {0x1, 0x2, 0x0, 0xb}, {0x4, 0x5, 0xd, 0xa}, {0x5, 0x1, 0xf, 0x9}, {0x3, 0x2, 0x7, 0x1}, {0x1, 0x4, 0x6}, {0x0, 0x5, 0xd, 0xb}, {0x1, 0x5, 0xb, 0x9}], 0x10, 0x10}, 0x94)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x110)
close(0x3)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r14=>0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @private2, 0xb}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x22, 0x200, 0x66, 0x8, r14}, 0x10)

15.757901085s ago: executing program 4 (id=762):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000f3213f227effa69a0876ac12000214010029bd7000ffdbdf2571526afd901cea2f87bfb32f42998d458aa6d43df0740e5397845a456c622b5d5bd8029390d642d6060000005ed460cf0ba9b957342a08ad4c33cab0c9c1044898e526f9e18295d633cf7f4fd04819f7e1a6e567f9fe075b79ec74cf78ab15cc65dc2700"/143, @ANYRES32=r3, @ANYBLOB="0900020073797a3000000000080001000000000008000100000000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x80016, 0xb3, 0x7f, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x50, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb99}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010)

3.013670486s ago: executing program 32 (id=756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x80)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32, @ANYBLOB="14000300200100000000000000000000000000010400130014000200fea8"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket(0x1, 0x1, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf250100000018000200d5400000000000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="7b6db567bda59fe941525b0d14bed170b44764e4a0e6c06f021431f8a23d97eefc49ca46585bb273f5cd2ee1cd993a03bb6447c6e6f5ca345c81093619f16c8eeb265d11f4eb7dfb50199ff54f3e8c5cb1b1b4d35ee6a9140000000000c50e6ef46f9c11312492b3743edde43d60a7fa78a5ec8185d445705e93abc3360a683762ce4e0c78f17072d11c94eceeb552a3242b75ed394344006f9fb3ca9019cb8b17a91eae492bb27bad98d5580f50232d9f"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

2.973579021s ago: executing program 33 (id=750):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00f5ff15008106000100"], 0x4c)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002500), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x800)

2.441959663s ago: executing program 34 (id=758):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0xc011}, 0x400c0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x5, 0x8, 0x3, 0x800fffd}]}, 0x10)
recvmmsg(r4, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/73, 0x49}, 0x5}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="1c012a002a010184dc060e00ffffffffffff040000003e0000080211000001020900001e0000080211000000ff030000310040ffffffffffff81000000080211000001100000ffffffffffffff01000007004008021100000135090000ffffffffffff320040080211000001810000000802110000001b00000802110000018000000011004008021100000100000080ffffffffffff330000ffffffffffff0200000041004008021100000100000000080211000000220000080211000001018000000f0000080211000000040000001b0040080219000000fcffffffffffffffffff1e00030138710700ffff00ff0628bd060802110000017e15073d63080211000001010000000f0000000b0000003e0101010412a480860301070a0034000101010101010000080042000200000010009d000200000004000600040060"], 0x198}, 0x1, 0x0, 0x0, 0x8c4}, 0x0)

2.32226232s ago: executing program 35 (id=759):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000000)={'veth0_macvtap\x00', @ifru_mtu=0xfffffffc}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbbe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000440)={<r9=>r8, &(0x7f0000000140)='veth0_macvtap\x00', 0x400900, &(0x7f00000001c0)={@align=0xffffffffffffffdd, {0x5, 0x2, 0x407, 0x5}}, 0x7, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xffff}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan1\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000004c0)={0x1d, r10}, 0x10) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xf, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)={@rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc)

0s ago: executing program 36 (id=762):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000f3213f227effa69a0876ac12000214010029bd7000ffdbdf2571526afd901cea2f87bfb32f42998d458aa6d43df0740e5397845a456c622b5d5bd8029390d642d6060000005ed460cf0ba9b957342a08ad4c33cab0c9c1044898e526f9e18295d633cf7f4fd04819f7e1a6e567f9fe075b79ec74cf78ab15cc65dc2700"/143, @ANYRES32=r3, @ANYBLOB="0900020073797a3000000000080001000000000008000100000000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x80016, 0xb3, 0x7f, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x50, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb99}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010)

kernel console output (not intermixed with test programs):

are name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  126.283116][ T6317] Call Trace:
[  126.283125][ T6317]  <TASK>
[  126.283149][ T6317]  dump_stack_lvl+0xe8/0x150
[  126.283182][ T6317]  should_fail_ex+0x40c/0x560
[  126.283218][ T6317]  should_failslab+0xa8/0x100
[  126.283244][ T6317]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  126.283275][ T6317]  ? local_lock_release+0x9c/0x160
[  126.283309][ T6317]  ? __alloc_skb+0x1d7/0x7a0
[  126.283326][ T6317]  ? __alloc_skb+0x1d7/0x7a0
[  126.283352][ T6317]  __alloc_skb+0x1d7/0x7a0
[  126.283376][ T6317]  netlink_sendmsg+0x5d4/0xb40
[  126.283423][ T6317]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.283453][ T6317]  ? aa_sock_msg_perm+0xf1/0x1b0
[  126.283486][ T6317]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.283511][ T6317]  sock_sendmsg_nosec+0x13a/0x180
[  126.283544][ T6317]  ____sys_sendmsg+0x54e/0x850
[  126.283573][ T6317]  ? __pfx_____sys_sendmsg+0x10/0x10
[  126.283607][ T6317]  ? import_iovec+0x73/0xa0
[  126.283634][ T6317]  ___sys_sendmsg+0x2a5/0x360
[  126.283660][ T6317]  ? __lock_acquire+0x683/0x2cf0
[  126.283687][ T6317]  ? __pfx____sys_sendmsg+0x10/0x10
[  126.283746][ T6317]  ? __fget_files+0x2a/0x420
[  126.283766][ T6317]  ? __fget_files+0x3a2/0x420
[  126.283798][ T6317]  __x64_sys_sendmsg+0x1b1/0x290
[  126.283824][ T6317]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  126.283867][ T6317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.283890][ T6317]  do_syscall_64+0x174/0x580
[  126.283910][ T6317]  ? trace_irq_disable+0x3b/0x140
[  126.283931][ T6317]  ? clear_bhb_loop+0x40/0x90
[  126.283958][ T6317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.283979][ T6317] RIP: 0033:0x7ffbc1d9ce59
[  126.284000][ T6317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.284017][ T6317] RSP: 002b:00007ffbbfff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.284040][ T6317] RAX: ffffffffffffffda RBX: 00007ffbc2015fa0 RCX: 00007ffbc1d9ce59
[  126.284055][ T6317] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004
[  126.284069][ T6317] RBP: 00007ffbbfff6090 R08: 0000000000000000 R09: 0000000000000000
[  126.284082][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.284094][ T6317] R13: 00007ffbc2016038 R14: 00007ffbc2015fa0 R15: 00007ffc90716ee8
[  126.284138][ T6317]  </TASK>
[  127.351501][ T6339] netlink: 1 bytes leftover after parsing attributes in process `syz.3.150'.
[  127.418329][ T6312] syz.1.141 (6312) used greatest stack depth: 18312 bytes left
[  127.605838][ T6345] openvswitch: netlink: IP tunnel dst address not specified
[  127.652668][   T78] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.699314][   T78] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.733430][   T78] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.767061][   T78] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.936666][ T6353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.157'.
[  127.971905][ T6354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'.
[  128.052156][ T6358] netlink: 104 bytes leftover after parsing attributes in process `syz.2.156'.
[  128.129768][ T6363] netlink: 72 bytes leftover after parsing attributes in process `syz.4.159'.
[  128.533501][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'.
[  128.725553][ T6379] syz.2.160 (6379) used obsolete PPPIOCDETACH ioctl
[  129.407709][ T6403] netlink: 64 bytes leftover after parsing attributes in process `syz.1.164'.
[  129.428090][ T6405] netlink: 76 bytes leftover after parsing attributes in process `syz.4.165'.
[  131.847185][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.169'.
[  131.904482][ T6418] tipc: Can't bind to reserved service type 1
[  131.917797][ T6420] netlink: 72 bytes leftover after parsing attributes in process `syz.2.171'.
[  132.047113][ T6426] netlink: 80 bytes leftover after parsing attributes in process `syz.4.168'.
[  132.092030][ T6428] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  132.132583][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.172'.
[  132.162688][ T6428] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  132.252528][ T6428] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  132.613142][ T6438] tipc: Trying to set illegal importance in message
[  132.656991][ T6438] syzkaller0: entered promiscuous mode
[  132.685262][ T6438] syzkaller0: entered allmulticast mode
[  132.925518][ T6450] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  133.250010][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.182'.
[  133.295937][ T6469] FAULT_INJECTION: forcing a failure.
[  133.295937][ T6469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.391116][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz.4.179 Not tainted syzkaller #0 PREEMPT(full) 
[  133.391146][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  133.391159][ T6469] Call Trace:
[  133.391176][ T6469]  <TASK>
[  133.391185][ T6469]  dump_stack_lvl+0xe8/0x150
[  133.391222][ T6469]  should_fail_ex+0x40c/0x560
[  133.391259][ T6469]  _copy_from_user+0x2d/0xb0
[  133.391284][ T6469]  ___sys_sendmsg+0x1c6/0x360
[  133.391308][ T6469]  ? __lock_acquire+0x683/0x2cf0
[  133.391337][ T6469]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.391400][ T6469]  ? __fget_files+0x2a/0x420
[  133.391421][ T6469]  ? __fget_files+0x3a2/0x420
[  133.391453][ T6469]  __x64_sys_sendmsg+0x1b1/0x290
[  133.391481][ T6469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  133.391525][ T6469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.391550][ T6469]  do_syscall_64+0x174/0x580
[  133.391571][ T6469]  ? trace_irq_disable+0x3b/0x140
[  133.391592][ T6469]  ? clear_bhb_loop+0x40/0x90
[  133.391619][ T6469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.391641][ T6469] RIP: 0033:0x7fe80419ce59
[  133.391661][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.391678][ T6469] RSP: 002b:00007fe8023f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.391701][ T6469] RAX: ffffffffffffffda RBX: 00007fe804416180 RCX: 00007fe80419ce59
[  133.391717][ T6469] RDX: 0000000004000880 RSI: 0000200000002900 RDI: 0000000000000007
[  133.391731][ T6469] RBP: 00007fe8023f6090 R08: 0000000000000000 R09: 0000000000000000
[  133.391743][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.391756][ T6469] R13: 00007fe804416218 R14: 00007fe804416180 R15: 00007ffe31b97588
[  133.391810][ T6469]  </TASK>
[  133.749377][ T6475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.181'.
[  134.134239][ T6492] netlink: 72 bytes leftover after parsing attributes in process `syz.2.184'.
[  134.608093][ T6506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  135.508105][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  135.525251][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  136.146971][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 30 seconds
[  136.760793][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.191'.
[  139.054703][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'.
[  139.308472][ T6550] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  139.764405][ T6567] FAULT_INJECTION: forcing a failure.
[  139.764405][ T6567] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.783820][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.0.205 Not tainted syzkaller #0 PREEMPT(full) 
[  139.783850][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  139.783862][ T6567] Call Trace:
[  139.783871][ T6567]  <TASK>
[  139.783880][ T6567]  dump_stack_lvl+0xe8/0x150
[  139.783912][ T6567]  should_fail_ex+0x40c/0x560
[  139.783944][ T6567]  _copy_to_user+0x31/0xb0
[  139.783967][ T6567]  bpf_verifier_vlog+0x52a/0x900
[  139.784022][ T6567]  __btf_verifier_log+0xe2/0x140
[  139.784055][ T6567]  ? __pfx___btf_verifier_log+0x10/0x10
[  139.784081][ T6567]  ? __might_fault+0xaf/0x130
[  139.784115][ T6567]  ? btf_parse_hdr+0x1da/0x810
[  139.784140][ T6567]  btf_parse_hdr+0x2bd/0x810
[  139.784166][ T6567]  btf_new_fd+0x32f/0xbb0
[  139.784197][ T6567]  __sys_bpf+0xd2e/0xd90
[  139.784224][ T6567]  ? __pfx___sys_bpf+0x10/0x10
[  139.784254][ T6567]  ? __fget_files+0x2a/0x420
[  139.784295][ T6567]  ? ksys_write+0x242/0x270
[  139.784325][ T6567]  ? __pfx_ksys_write+0x10/0x10
[  139.784356][ T6567]  __x64_sys_bpf+0xba/0xd0
[  139.784388][ T6567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.784412][ T6567]  do_syscall_64+0x174/0x580
[  139.784432][ T6567]  ? trace_irq_disable+0x3b/0x140
[  139.784452][ T6567]  ? clear_bhb_loop+0x40/0x90
[  139.784478][ T6567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.784499][ T6567] RIP: 0033:0x7ffbc1d9ce59
[  139.784520][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.784537][ T6567] RSP: 002b:00007ffbbfff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  139.784560][ T6567] RAX: ffffffffffffffda RBX: 00007ffbc2015fa0 RCX: 00007ffbc1d9ce59
[  139.784576][ T6567] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012
[  139.784603][ T6567] RBP: 00007ffbbfff6090 R08: 0000000000000000 R09: 0000000000000000
[  139.784616][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.784628][ T6567] R13: 00007ffbc2016038 R14: 00007ffbc2015fa0 R15: 00007ffc90716ee8
[  139.784659][ T6567]  </TASK>
[  139.854629][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.204'.
[  140.080156][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'.
[  140.178670][ T6572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'.
[  140.455822][ T6581] pim6reg: entered allmulticast mode
[  140.780446][ T6589] tipc: Trying to set illegal importance in message
[  141.406267][ T6607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.220'.
[  141.431529][ T1149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.450343][ T1149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.480725][ T1149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.516236][ T1149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.748991][ T6619] sctp: [Deprecated]: syz.0.223 (pid 6619) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.748991][ T6619] Use struct sctp_sack_info instead
[  141.795781][ T6617] batman_adv: batadv0: Adding interface: dummy0
[  141.827479][ T6617] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.896259][ T6617] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  142.763012][ T6649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.233'.
[  142.935330][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'.
[  142.959950][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.236'.
[  142.985004][ T6656] tc_dump_action: action bad kind
[  143.279547][ T6666] sctp: [Deprecated]: syz.3.239 (pid 6666) Use of int in max_burst socket option.
[  143.279547][ T6666] Use struct sctp_assoc_value instead
[  144.001805][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.245'.
[  144.671646][ T6703] team0 (unregistering): Port device team_slave_0 removed
[  144.701335][ T6703] team0 (unregistering): Port device team_slave_1 removed
[  144.862843][ T6706] netlink: 1 bytes leftover after parsing attributes in process `syz.1.255'.
[  144.897402][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'.
[  144.909744][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'.
[  144.942332][ T6709] netlink: 72 bytes leftover after parsing attributes in process `syz.2.256'.
[  144.954831][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.257'.
[  145.226578][ T6725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.260'.
[  145.254362][ T6725] openvswitch: netlink: Flow key attr not present in new flow.
[  145.853045][ T6735] syzkaller0: entered promiscuous mode
[  145.869361][ T6735] syzkaller0: entered allmulticast mode
[  147.721888][ T6778] bridge_slave_1: left allmulticast mode
[  147.741739][ T6778] bridge_slave_1: left promiscuous mode
[  147.767397][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.791466][ T6778] bridge_slave_0: left allmulticast mode
[  147.797377][ T6778] bridge_slave_0: left promiscuous mode
[  147.803246][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.855697][ T6780] netlink: 'syz.0.276': attribute type 1 has an invalid length.
[  148.191635][ T6794] __nla_validate_parse: 1 callbacks suppressed
[  148.191654][ T6794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.278'.
[  148.229398][ T6785] bond0: (slave ip6tnl0): refused to change device type
[  148.502208][ T6798] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  148.519240][ T6798] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  148.531350][ T6798] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  148.782197][ T6812] FAULT_INJECTION: forcing a failure.
[  148.782197][ T6812] name failslab, interval 1, probability 0, space 0, times 0
[  148.812939][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.3.286 Not tainted syzkaller #0 PREEMPT(full) 
[  148.812968][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  148.813004][ T6812] Call Trace:
[  148.813014][ T6812]  <TASK>
[  148.813023][ T6812]  dump_stack_lvl+0xe8/0x150
[  148.813056][ T6812]  should_fail_ex+0x40c/0x560
[  148.813092][ T6812]  should_failslab+0xa8/0x100
[  148.813121][ T6812]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  148.813154][ T6812]  ? skb_clone+0x212/0x3a0
[  148.813178][ T6812]  ? skb_clone+0x212/0x3a0
[  148.813209][ T6812]  skb_clone+0x212/0x3a0
[  148.813237][ T6812]  __netlink_deliver_tap+0x413/0x860
[  148.813272][ T6812]  ? netlink_deliver_tap+0x2e/0x1b0
[  148.813297][ T6812]  netlink_deliver_tap+0x19c/0x1b0
[  148.813322][ T6812]  netlink_unicast+0x77f/0x940
[  148.813366][ T6812]  netlink_sendmsg+0x813/0xb40
[  148.813403][ T6812]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.813432][ T6812]  ? aa_sock_msg_perm+0xf1/0x1b0
[  148.813465][ T6812]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.813487][ T6812]  sock_sendmsg_nosec+0x13a/0x180
[  148.813518][ T6812]  ____sys_sendmsg+0x54e/0x850
[  148.813560][ T6812]  ? __pfx_____sys_sendmsg+0x10/0x10
[  148.813592][ T6812]  ? import_iovec+0x73/0xa0
[  148.813617][ T6812]  ___sys_sendmsg+0x2a5/0x360
[  148.813639][ T6812]  ? __lock_acquire+0x683/0x2cf0
[  148.813667][ T6812]  ? __pfx____sys_sendmsg+0x10/0x10
[  148.813724][ T6812]  ? __fget_files+0x2a/0x420
[  148.813744][ T6812]  ? __fget_files+0x3a2/0x420
[  148.813775][ T6812]  __x64_sys_sendmsg+0x1b1/0x290
[  148.813801][ T6812]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  148.813844][ T6812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.813866][ T6812]  do_syscall_64+0x174/0x580
[  148.813885][ T6812]  ? trace_irq_disable+0x3b/0x140
[  148.813915][ T6812]  ? clear_bhb_loop+0x40/0x90
[  148.813940][ T6812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.813961][ T6812] RIP: 0033:0x7fb47939ce59
[  148.813981][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.813998][ T6812] RSP: 002b:00007fb47a258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.814021][ T6812] RAX: ffffffffffffffda RBX: 00007fb479615fa0 RCX: 00007fb47939ce59
[  148.814035][ T6812] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  148.814048][ T6812] RBP: 00007fb47a258090 R08: 0000000000000000 R09: 0000000000000000
[  148.814060][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.814072][ T6812] R13: 00007fb479616038 R14: 00007fb479615fa0 R15: 00007ffce8330198
[  148.814105][ T6812]  </TASK>
[  149.072779][ T6813] syzkaller1: entered promiscuous mode
[  149.078386][ T6813] syzkaller1: entered allmulticast mode
[  149.490319][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'.
[  149.822090][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'.
[  149.831879][ T6843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.290'.
[  150.224203][ T5638] Bluetooth: hci0: command tx timeout
[  150.705964][ T6874] tipc: Trying to set illegal importance in message
[  150.782005][ T6878] FAULT_INJECTION: forcing a failure.
[  150.782005][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.823841][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.4.302 Not tainted syzkaller #0 PREEMPT(full) 
[  150.823872][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  150.823902][ T6878] Call Trace:
[  150.823910][ T6878]  <TASK>
[  150.823919][ T6878]  dump_stack_lvl+0xe8/0x150
[  150.823954][ T6878]  should_fail_ex+0x40c/0x560
[  150.823990][ T6878]  _copy_from_user+0x2d/0xb0
[  150.824015][ T6878]  ___sys_sendmsg+0x1c6/0x360
[  150.824050][ T6878]  ? __lock_acquire+0x683/0x2cf0
[  150.824099][ T6878]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.824158][ T6878]  ? __fget_files+0x2a/0x420
[  150.824179][ T6878]  ? __fget_files+0x3a2/0x420
[  150.824210][ T6878]  __x64_sys_sendmsg+0x1b1/0x290
[  150.824236][ T6878]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.824278][ T6878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.824302][ T6878]  do_syscall_64+0x174/0x580
[  150.824322][ T6878]  ? trace_irq_disable+0x3b/0x140
[  150.824344][ T6878]  ? clear_bhb_loop+0x40/0x90
[  150.824370][ T6878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.824391][ T6878] RIP: 0033:0x7fe80419ce59
[  150.824410][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.824426][ T6878] RSP: 002b:00007fe804f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.824448][ T6878] RAX: ffffffffffffffda RBX: 00007fe804415fa0 RCX: 00007fe80419ce59
[  150.824463][ T6878] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  150.824475][ T6878] RBP: 00007fe804f9f090 R08: 0000000000000000 R09: 0000000000000000
[  150.824487][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.824500][ T6878] R13: 00007fe804416038 R14: 00007fe804415fa0 R15: 00007ffe31b97588
[  150.824530][ T6878]  </TASK>
[  151.242234][ T6890] netlink: 'syz.1.300': attribute type 8 has an invalid length.
[  151.284056][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[  151.412431][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.304'.
[  151.430297][ T6890] veth1_to_team: entered promiscuous mode
[  151.479679][ T6890] gretap0: entered promiscuous mode
[  151.540858][ T6890] veth1_to_team: left promiscuous mode
[  151.562426][ T6890] gretap0: left promiscuous mode
[  151.891696][ T6910] FAULT_INJECTION: forcing a failure.
[  151.891696][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.985281][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.305'.
[  151.999165][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(full) 
[  151.999194][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  151.999206][ T6910] Call Trace:
[  151.999215][ T6910]  <TASK>
[  151.999223][ T6910]  dump_stack_lvl+0xe8/0x150
[  151.999274][ T6910]  should_fail_ex+0x40c/0x560
[  151.999317][ T6910]  _copy_from_user+0x2d/0xb0
[  151.999342][ T6910]  ___sys_sendmsg+0x1c6/0x360
[  151.999366][ T6910]  ? __lock_acquire+0x683/0x2cf0
[  151.999395][ T6910]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.999452][ T6910]  ? __fget_files+0x2a/0x420
[  151.999474][ T6910]  ? __fget_files+0x3a2/0x420
[  151.999505][ T6910]  __x64_sys_sendmsg+0x1b1/0x290
[  151.999533][ T6910]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  151.999575][ T6910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.999596][ T6910]  do_syscall_64+0x174/0x580
[  151.999614][ T6910]  ? trace_irq_disable+0x3b/0x140
[  151.999635][ T6910]  ? clear_bhb_loop+0x40/0x90
[  151.999662][ T6910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.999683][ T6910] RIP: 0033:0x7f029659ce59
[  151.999706][ T6910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.999722][ T6910] RSP: 002b:00007f0297391028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.999744][ T6910] RAX: ffffffffffffffda RBX: 00007f0296815fa0 RCX: 00007f029659ce59
[  151.999760][ T6910] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  151.999773][ T6910] RBP: 00007f0297391090 R08: 0000000000000000 R09: 0000000000000000
[  151.999786][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.999798][ T6910] R13: 00007f0296816038 R14: 00007f0296815fa0 R15: 00007ffeb842c5b8
[  151.999832][ T6910]  </TASK>
[  152.427269][ T6919] FAULT_INJECTION: forcing a failure.
[  152.427269][ T6919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.446225][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT(full) 
[  152.446255][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  152.446267][ T6919] Call Trace:
[  152.446290][ T6919]  <TASK>
[  152.446299][ T6919]  dump_stack_lvl+0xe8/0x150
[  152.446352][ T6919]  should_fail_ex+0x40c/0x560
[  152.446389][ T6919]  _copy_to_user+0x31/0xb0
[  152.446416][ T6919]  simple_read_from_buffer+0xe1/0x170
[  152.446446][ T6919]  proc_fail_nth_read+0x1bb/0x230
[  152.446473][ T6919]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.446500][ T6919]  ? rw_verify_area+0x24a/0x4c0
[  152.446528][ T6919]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.446549][ T6919]  vfs_read+0x213/0xa80
[  152.446580][ T6919]  ? __pfx___mutex_lock+0x10/0x10
[  152.446604][ T6919]  ? __pfx_vfs_read+0x10/0x10
[  152.446638][ T6919]  ? __fget_files+0x2a/0x420
[  152.446664][ T6919]  ? __fget_files+0x3a2/0x420
[  152.446684][ T6919]  ? __fget_files+0x2a/0x420
[  152.446715][ T6919]  ksys_read+0x150/0x270
[  152.446744][ T6919]  ? __pfx_ksys_read+0x10/0x10
[  152.446779][ T6919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.446803][ T6919]  do_syscall_64+0x174/0x580
[  152.446822][ T6919]  ? trace_irq_disable+0x3b/0x140
[  152.446844][ T6919]  ? clear_bhb_loop+0x40/0x90
[  152.446876][ T6919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.446898][ T6919] RIP: 0033:0x7fb47935d68e
[  152.446918][ T6919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  152.446935][ T6919] RSP: 002b:00007fb47a257fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  152.446958][ T6919] RAX: ffffffffffffffda RBX: 00007fb47a2586c0 RCX: 00007fb47935d68e
[  152.446973][ T6919] RDX: 000000000000000f RSI: 00007fb47a2580a0 RDI: 0000000000000007
[  152.446987][ T6919] RBP: 00007fb47a258090 R08: 0000000000000000 R09: 0000000000000000
[  152.446999][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  152.447012][ T6919] R13: 00007fb479616038 R14: 00007fb479615fa0 R15: 00007ffce8330198
[  152.447047][ T6919]  </TASK>
[  153.089191][ T6950] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.318'.
[  153.122041][ T6950] openvswitch: netlink: Message has 16 unknown bytes.
[  153.320843][ T6961] vti0: entered promiscuous mode
[  153.495700][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  153.537143][ T6976] netlink: 72 bytes leftover after parsing attributes in process `syz.4.325'.
[  153.619055][ T6980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'.
[  153.731105][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[  153.800696][ T6987] netlink: 64 bytes leftover after parsing attributes in process `syz.0.328'.
[  153.809960][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'.
[  154.019066][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'.
[  154.231727][ T7010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.292870][ T7014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.405299][ T7017] netlink: 72 bytes leftover after parsing attributes in process `syz.0.339'.
[  154.788915][ T7035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.923464][ T7033] syzkaller0: entered promiscuous mode
[  154.929240][ T7033] syzkaller0: entered allmulticast mode
[  155.061887][ T7045] tipc: Started in network mode
[  155.068579][ T7045] tipc: Node identity 080211000001, cluster identity 4711
[  155.095279][ T7045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.140430][ T7047] netlink: 'syz.0.349': attribute type 4 has an invalid length.
[  155.170745][ T7049] netlink: 80 bytes leftover after parsing attributes in process `syz.1.347'.
[  155.231549][ T7045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.348'.
[  155.398958][ T7056] FAULT_INJECTION: forcing a failure.
[  155.398958][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.412683][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) 
[  155.412712][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  155.412724][ T7056] Call Trace:
[  155.412732][ T7056]  <TASK>
[  155.412740][ T7056]  dump_stack_lvl+0xe8/0x150
[  155.412773][ T7056]  should_fail_ex+0x40c/0x560
[  155.412818][ T7056]  _copy_from_user+0x2d/0xb0
[  155.412842][ T7056]  bpf_test_init+0xd8/0x150
[  155.412869][ T7056]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  155.412911][ T7056]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  155.412940][ T7056]  ? __fget_files+0x2a/0x420
[  155.412965][ T7056]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  155.412989][ T7056]  bpf_prog_test_run+0x2c5/0x340
[  155.413030][ T7056]  __sys_bpf+0xa22/0xd90
[  155.413059][ T7056]  ? __pfx___sys_bpf+0x10/0x10
[  155.413090][ T7056]  ? __fget_files+0x2a/0x420
[  155.413129][ T7056]  ? ksys_write+0x242/0x270
[  155.413156][ T7056]  ? __pfx_ksys_write+0x10/0x10
[  155.413186][ T7056]  __x64_sys_bpf+0xba/0xd0
[  155.413216][ T7056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.413239][ T7056]  do_syscall_64+0x174/0x580
[  155.413259][ T7056]  ? trace_irq_disable+0x3b/0x140
[  155.413278][ T7056]  ? clear_bhb_loop+0x40/0x90
[  155.413304][ T7056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.413326][ T7056] RIP: 0033:0x7f029659ce59
[  155.413347][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.413364][ T7056] RSP: 002b:00007f0297391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  155.413385][ T7056] RAX: ffffffffffffffda RBX: 00007f0296815fa0 RCX: 00007f029659ce59
[  155.413400][ T7056] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  155.413413][ T7056] RBP: 00007f0297391090 R08: 0000000000000000 R09: 0000000000000000
[  155.413425][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.413437][ T7056] R13: 00007f0296816038 R14: 00007f0296815fa0 R15: 00007ffeb842c5b8
[  155.413471][ T7056]  </TASK>
[  155.823557][ T7065] FAULT_INJECTION: forcing a failure.
[  155.823557][ T7065] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.856703][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) 
[  155.856733][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  155.856746][ T7065] Call Trace:
[  155.856755][ T7065]  <TASK>
[  155.856773][ T7065]  dump_stack_lvl+0xe8/0x150
[  155.856806][ T7065]  should_fail_ex+0x40c/0x560
[  155.856842][ T7065]  _copy_from_iter+0x1d3/0x1660
[  155.856876][ T7065]  ? rcu_is_watching+0x15/0xb0
[  155.856904][ T7065]  ? trace_kmalloc+0x2a/0xf0
[  155.856942][ T7065]  ? __pfx__copy_from_iter+0x10/0x10
[  155.856973][ T7065]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  155.857006][ T7065]  ? netlink_sendmsg+0x5d4/0xb40
[  155.857031][ T7065]  ? netlink_sendmsg+0x5d4/0xb40
[  155.857062][ T7065]  ? netlink_sendmsg+0x650/0xb40
[  155.857086][ T7065]  ? skb_put+0x112/0x210
[  155.857110][ T7065]  netlink_sendmsg+0x6c0/0xb40
[  155.857146][ T7065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.857175][ T7065]  ? aa_sock_msg_perm+0xf1/0x1b0
[  155.857208][ T7065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.857232][ T7065]  sock_sendmsg_nosec+0x13a/0x180
[  155.857285][ T7065]  ____sys_sendmsg+0x54e/0x850
[  155.857314][ T7065]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.857344][ T7065]  ? import_iovec+0x73/0xa0
[  155.857370][ T7065]  ___sys_sendmsg+0x2a5/0x360
[  155.857391][ T7065]  ? __lock_acquire+0x683/0x2cf0
[  155.857416][ T7065]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.857480][ T7065]  ? __fget_files+0x2a/0x420
[  155.857501][ T7065]  ? __fget_files+0x3a2/0x420
[  155.857529][ T7065]  __x64_sys_sendmsg+0x1b1/0x290
[  155.857557][ T7065]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  155.857599][ T7065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.857621][ T7065]  do_syscall_64+0x174/0x580
[  155.857642][ T7065]  ? trace_irq_disable+0x3b/0x140
[  155.857669][ T7065]  ? clear_bhb_loop+0x40/0x90
[  155.857694][ T7065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.857714][ T7065] RIP: 0033:0x7fb47939ce59
[  155.857734][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.857751][ T7065] RSP: 002b:00007fb47a258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.857781][ T7065] RAX: ffffffffffffffda RBX: 00007fb479615fa0 RCX: 00007fb47939ce59
[  155.857796][ T7065] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003
[  155.857809][ T7065] RBP: 00007fb47a258090 R08: 0000000000000000 R09: 0000000000000000
[  155.857821][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.857832][ T7065] R13: 00007fb479616038 R14: 00007fb479615fa0 R15: 00007ffce8330198
[  155.857863][ T7065]  </TASK>
[  156.225893][ T5746] tipc: Node number set to 134418688
[  156.656810][ T7087] sctp: [Deprecated]: syz.3.362 (pid 7087) Use of int in max_burst socket option.
[  156.656810][ T7087] Use struct sctp_assoc_value instead
[  157.158328][ T7109] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  157.880729][ T7137] netlink: 'syz.0.379': attribute type 3 has an invalid length.
[  157.976452][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.103459][ T7135] netlink: 'syz.4.378': attribute type 10 has an invalid length.
[  158.164052][ T7143] netlink: 'syz.4.378': attribute type 10 has an invalid length.
[  158.239539][ T7154] openvswitch: netlink: Flow actions attr not present in new flow.
[  160.900814][ T7135] team0: Port device dummy0 added
[  160.931473][ T7143] team0: Port device dummy0 removed
[  160.966573][ T7143] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  161.195217][ T7188] netlink: 'syz.0.391': attribute type 3 has an invalid length.
[  161.227024][ T7188] netlink: 'syz.0.391': attribute type 16 has an invalid length.
[  161.252585][ T7188] __nla_validate_parse: 11 callbacks suppressed
[  161.252607][ T7188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.391'.
[  161.318599][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[  161.357389][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[  161.374997][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'.
[  161.605595][ T7207] openvswitch: netlink: Flow actions attr not present in new flow.
[  161.754973][ T7209] netlink: 72 bytes leftover after parsing attributes in process `syz.0.397'.
[  162.198775][ T7220] netlink: 'syz.2.399': attribute type 12 has an invalid length.
[  162.209061][ T7220] FAULT_INJECTION: forcing a failure.
[  162.209061][ T7220] name failslab, interval 1, probability 0, space 0, times 0
[  162.255039][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(full) 
[  162.255068][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  162.255080][ T7220] Call Trace:
[  162.255089][ T7220]  <TASK>
[  162.255098][ T7220]  dump_stack_lvl+0xe8/0x150
[  162.255131][ T7220]  should_fail_ex+0x40c/0x560
[  162.255181][ T7220]  should_failslab+0xa8/0x100
[  162.255215][ T7220]  __kmalloc_noprof+0xfe/0x720
[  162.255250][ T7220]  ? pneigh_create+0x11c/0x4a0
[  162.255279][ T7220]  ? pneigh_create+0x11c/0x4a0
[  162.255316][ T7220]  pneigh_create+0x11c/0x4a0
[  162.255382][ T7220]  neigh_add+0x6ea/0xf60
[  162.255417][ T7220]  ? __pfx_neigh_add+0x10/0x10
[  162.255469][ T7220]  ? __pfx_neigh_add+0x10/0x10
[  162.255490][ T7220]  rtnetlink_rcv_msg+0x7b9/0xc00
[  162.255522][ T7220]  ? netlink_sendmsg+0x5d4/0xb40
[  162.255556][ T7220]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  162.255589][ T7220]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.255624][ T7220]  ? __lock_acquire+0x683/0x2cf0
[  162.255667][ T7220]  netlink_rcv_skb+0x226/0x4a0
[  162.255703][ T7220]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.255739][ T7220]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.255778][ T7220]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.255802][ T7220]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.255833][ T7220]  netlink_unicast+0x7bb/0x940
[  162.255868][ T7220]  netlink_sendmsg+0x813/0xb40
[  162.255904][ T7220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.255934][ T7220]  ? aa_sock_msg_perm+0xf1/0x1b0
[  162.255968][ T7220]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.255991][ T7220]  sock_sendmsg_nosec+0x13a/0x180
[  162.256024][ T7220]  sock_write_iter+0x2de/0x3e0
[  162.256055][ T7220]  ? __pfx_sock_write_iter+0x10/0x10
[  162.256092][ T7220]  ? bpf_lsm_file_permission+0x9/0x20
[  162.256122][ T7220]  ? security_file_permission+0x75/0x260
[  162.256164][ T7220]  vfs_write+0x612/0xba0
[  162.256198][ T7220]  ? __pfx_vfs_write+0x10/0x10
[  162.256258][ T7220]  ? __fget_files+0x2a/0x420
[  162.256291][ T7220]  ksys_write+0x150/0x270
[  162.256321][ T7220]  ? __pfx_ksys_write+0x10/0x10
[  162.256364][ T7220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.256388][ T7220]  do_syscall_64+0x174/0x580
[  162.256409][ T7220]  ? trace_irq_disable+0x3b/0x140
[  162.256430][ T7220]  ? clear_bhb_loop+0x40/0x90
[  162.256457][ T7220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.256478][ T7220] RIP: 0033:0x7f029659ce59
[  162.256499][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.256516][ T7220] RSP: 002b:00007f0297391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  162.256539][ T7220] RAX: ffffffffffffffda RBX: 00007f0296815fa0 RCX: 00007f029659ce59
[  162.256554][ T7220] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 0000000000000003
[  162.256568][ T7220] RBP: 00007f0297391090 R08: 0000000000000000 R09: 0000000000000000
[  162.256581][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.256593][ T7220] R13: 00007f0296816038 R14: 00007f0296815fa0 R15: 00007ffeb842c5b8
[  162.256629][ T7220]  </TASK>
[  163.036420][ T7242] openvswitch: netlink: Flow actions attr not present in new flow.
[  163.291855][ T7264] netlink: 292 bytes leftover after parsing attributes in process `syz.1.411'.
[  163.426247][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.434180][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.550959][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.576062][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.858756][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.893548][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.904080][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.942618][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.011229][ T7280] netlink: 72 bytes leftover after parsing attributes in process `syz.4.413'.
[  164.137473][ T7256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.222908][ T7290] FAULT_INJECTION: forcing a failure.
[  164.222908][ T7290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.239152][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.3.415 Not tainted syzkaller #0 PREEMPT(full) 
[  164.239182][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  164.239195][ T7290] Call Trace:
[  164.239204][ T7290]  <TASK>
[  164.239213][ T7290]  dump_stack_lvl+0xe8/0x150
[  164.239247][ T7290]  should_fail_ex+0x40c/0x560
[  164.239283][ T7290]  _copy_from_user+0x2d/0xb0
[  164.239308][ T7290]  kstrtouint_from_user+0xd6/0x180
[  164.239342][ T7290]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  164.239392][ T7290]  proc_fail_nth_write+0x8e/0x210
[  164.239417][ T7290]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  164.239450][ T7290]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  164.239472][ T7290]  vfs_write+0x296/0xba0
[  164.239509][ T7290]  ? __pfx_vfs_write+0x10/0x10
[  164.239538][ T7290]  ? __fget_files+0x2a/0x420
[  164.239564][ T7290]  ? __fget_files+0x3a2/0x420
[  164.239584][ T7290]  ? __fget_files+0x2a/0x420
[  164.239616][ T7290]  ksys_write+0x150/0x270
[  164.239645][ T7290]  ? __pfx_ksys_write+0x10/0x10
[  164.239682][ T7290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.239706][ T7290]  do_syscall_64+0x174/0x580
[  164.239726][ T7290]  ? trace_irq_disable+0x3b/0x140
[  164.239748][ T7290]  ? clear_bhb_loop+0x40/0x90
[  164.239775][ T7290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.239813][ T7290] RIP: 0033:0x7fb47935d68e
[  164.239834][ T7290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  164.239851][ T7290] RSP: 002b:00007fb47a257fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  164.239874][ T7290] RAX: ffffffffffffffda RBX: 00007fb47a2586c0 RCX: 00007fb47935d68e
[  164.239889][ T7290] RDX: 0000000000000001 RSI: 00007fb47a2580a0 RDI: 0000000000000004
[  164.239902][ T7290] RBP: 00007fb47a258090 R08: 0000000000000000 R09: 0000000000000000
[  164.239915][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.239927][ T7290] R13: 00007fb479616038 R14: 00007fb479615fa0 R15: 00007ffce8330198
[  164.239960][ T7290]  </TASK>
[  164.580985][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'.
[  164.590977][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'.
[  164.735249][ T7256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.932575][ T7256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  164.989470][ T7305] Bluetooth: MGMT ver 1.23
[  165.016237][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'.
[  165.055881][ T7256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.096888][ T7305] macsec1: entered allmulticast mode
[  165.102295][ T7305] bond0: entered allmulticast mode
[  165.109182][ T7305] bond_slave_0: entered allmulticast mode
[  165.117894][ T7311] netlink: 'syz.4.423': attribute type 1 has an invalid length.
[  165.137414][ T7305] bond_slave_1: entered allmulticast mode
[  165.145201][ T7305] 8021q: adding VLAN 0 to HW filter on device macsec1
[  165.163206][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[  165.231746][ T7307] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  165.254695][ T7307] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  165.452515][ T7311] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.475954][ T7331] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[  165.488080][ T7331] netlink: 'syz.2.428': attribute type 2 has an invalid length.
[  165.538839][ T7309] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  165.557078][ T7316] bond1: entered promiscuous mode
[  165.562586][ T7316] bond1: entered allmulticast mode
[  165.575632][   T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.587561][   T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.611684][ T7336] tipc: Trying to set illegal importance in message
[  165.627776][ T7329] macvlan2: entered promiscuous mode
[  165.643940][ T7329] macvlan2: entered allmulticast mode
[  165.655142][ T7329] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  165.682010][   T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.710287][   T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.874837][   T57] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  165.972027][   T78] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  165.997989][ T7349] syz_tun: entered allmulticast mode
[  166.008571][ T7346] openvswitch: netlink: Message has 16 unknown bytes.
[  166.086030][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.095712][ T7349] 8021q: adding VLAN 0 to HW filter on device team0
[  166.113920][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.166521][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.176726][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.190174][ T7349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  166.201307][ T7349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.212581][ T7355] FAULT_INJECTION: forcing a failure.
[  166.212581][ T7355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.232232][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.2.434 Not tainted syzkaller #0 PREEMPT(full) 
[  166.232263][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  166.232275][ T7355] Call Trace:
[  166.232283][ T7355]  <TASK>
[  166.232306][ T7355]  dump_stack_lvl+0xe8/0x150
[  166.232344][ T7355]  should_fail_ex+0x40c/0x560
[  166.232378][ T7355]  _copy_from_iter+0x1d3/0x1660
[  166.232411][ T7355]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  166.232458][ T7355]  ? __pfx_policy_nodemask+0x10/0x10
[  166.232484][ T7355]  ? unwind_next_frame+0x8f/0x2550
[  166.232515][ T7355]  ? __pfx__copy_from_iter+0x10/0x10
[  166.232550][ T7355]  ? alloc_pages_mpol+0x24a/0x380
[  166.232585][ T7355]  copy_page_from_iter+0x219/0x2d0
[  166.232623][ T7355]  tun_get_user+0x1bf1/0x4370
[  166.232662][ T7355]  ? tun_get_user+0x6e7/0x4370
[  166.232714][ T7355]  ? aa_file_perm+0x4ed/0x15f0
[  166.232741][ T7355]  ? __pfx_tun_get_user+0x10/0x10
[  166.232777][ T7355]  ? __lock_acquire+0x683/0x2cf0
[  166.232815][ T7355]  ? ref_tracker_alloc+0x341/0x4b0
[  166.232843][ T7355]  ? get_pid_task+0x20/0x1f0
[  166.232879][ T7355]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  166.232911][ T7355]  ? tun_get+0x1c/0x2f0
[  166.232943][ T7355]  ? tun_get+0x1c/0x2f0
[  166.232982][ T7355]  ? tun_get+0x1c/0x2f0
[  166.233013][ T7355]  ? tun_get+0x1c/0x2f0
[  166.233050][ T7355]  tun_chr_write_iter+0x113/0x200
[  166.233084][ T7355]  vfs_write+0x612/0xba0
[  166.233121][ T7355]  ? __pfx_vfs_write+0x10/0x10
[  166.233158][ T7355]  ? __fget_files+0x2a/0x420
[  166.233190][ T7355]  ksys_write+0x150/0x270
[  166.233219][ T7355]  ? __pfx_ksys_write+0x10/0x10
[  166.233255][ T7355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.233279][ T7355]  do_syscall_64+0x174/0x580
[  166.233299][ T7355]  ? trace_irq_disable+0x3b/0x140
[  166.233320][ T7355]  ? clear_bhb_loop+0x40/0x90
[  166.233347][ T7355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.233368][ T7355] RIP: 0033:0x7f029655d68e
[  166.233389][ T7355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  166.233407][ T7355] RSP: 002b:00007f029736ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  166.233430][ T7355] RAX: ffffffffffffffda RBX: 00007f02973706c0 RCX: 00007f029655d68e
[  166.233445][ T7355] RDX: 000000000000005e RSI: 00002000000003c0 RDI: 00000000000000c8
[  166.233459][ T7355] RBP: 00007f0297370090 R08: 0000000000000000 R09: 0000000000000000
[  166.233472][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.233484][ T7355] R13: 00007f0296816128 R14: 00007f0296816090 R15: 00007ffeb842c5b8
[  166.233518][ T7355]  </TASK>
[  166.289803][ T7349] veth1_vlan: left promiscuous mode
[  166.293333][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 60 seconds
[  166.348119][ T7349] veth0_vlan: left promiscuous mode
[  166.365862][ T7349] veth0_vlan: entered promiscuous mode
[  166.381275][ T7349] veth1_vlan: entered promiscuous mode
[  166.537288][ T7349] veth1_macvtap: left promiscuous mode
[  166.545420][ T7349] veth0_macvtap: left promiscuous mode
[  166.552288][ T7349] veth0_macvtap: entered promiscuous mode
[  166.559627][ T7349] veth1_macvtap: entered promiscuous mode
[  166.571520][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  166.580703][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  166.589162][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  166.597531][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  166.605955][ T7349] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  166.619457][ T7349] vti0: left promiscuous mode
[  166.625415][ T7349] bond1: left promiscuous mode
[  166.630639][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.638483][ T1149] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.652773][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.675903][   T78] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  166.691676][   T78] bond1: (slave veth0_to_bond): making interface the new active one
[  166.701435][   T78] veth0_to_bond: entered allmulticast mode
[  166.711269][   T78] bond1: active interface up!
[  166.776408][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.789653][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.801942][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.837687][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.856387][ T7345] syz_tun: left allmulticast mode
[  167.140740][ T7367] bond0: left allmulticast mode
[  167.147456][ T7367] bond_slave_0: left allmulticast mode
[  167.153524][ T7367] bond_slave_1: left allmulticast mode
[  167.160222][ T7367] macsec1: left allmulticast mode
[  167.236746][ T7366] __nla_validate_parse: 2 callbacks suppressed
[  167.236767][ T7366] netlink: 224 bytes leftover after parsing attributes in process `syz.4.437'.
[  167.276799][ T7366] x_tables: duplicate underflow at hook 1
[  167.618390][ T7391] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.445'.
[  167.657383][ T7391] openvswitch: netlink: Message has 16 unknown bytes.
[  167.821296][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  167.845894][ T5746] IPVS: starting estimator thread 0...
[  167.954390][ T7399] IPVS: using max 32 ests per chain, 76800 per kthread
[  169.158918][ T7434] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.458'.
[  169.193772][ T7434] openvswitch: netlink: Message has 16 unknown bytes.
[  169.415363][ T2177] IPVS: starting estimator thread 0...
[  169.535058][ T7443] IPVS: using max 30 ests per chain, 72000 per kthread
[  169.671763][ T7451] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.462'.
[  169.871410][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[  169.948858][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'.
[  170.163299][ T7460] xt_TCPMSS: Only works on TCP SYN packets
[  170.315078][ T7460] bridge_slave_1: left allmulticast mode
[  170.322412][ T7460] bridge_slave_1: left promiscuous mode
[  170.329139][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.347051][ T7469] tipc: Trying to set illegal importance in message
[  170.355582][ T7460] bridge_slave_0: left allmulticast mode
[  170.361398][ T7460] bridge_slave_0: left promiscuous mode
[  170.380727][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.798440][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'.
[  173.211658][ T7541] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.490'.
[  173.882849][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.890740][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.977434][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'.
[  174.148296][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.178968][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.789598][   T78] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.823934][   T78] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.937847][   T78] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.966339][   T78] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.206085][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'.
[  175.229659][ T7553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.239261][ T7553] IPv6: NLM_F_CREATE should be set when creating new route
[  175.279261][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'.
[  175.607895][ T7580] netlink: 'syz.0.501': attribute type 1 has an invalid length.
[  175.710409][ T7580] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.728841][ T7583] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  175.806085][ T7583] bond1: entered allmulticast mode
[  175.911345][ T7580] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  176.157754][ T7595] netlink: 96 bytes leftover after parsing attributes in process `syz.4.505'.
[  176.210990][ T7594] netlink: 128 bytes leftover after parsing attributes in process `syz.4.505'.
[  176.272769][ T7594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.324059][ T7604] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.507'.
[  176.362412][ T7595] 8021q: VLANs not supported on ip_vti0
[  177.632665][ T7635] netlink: 'syz.0.516': attribute type 10 has an invalid length.
[  177.815375][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'.
[  177.847571][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'.
[  178.805458][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.843493][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.072384][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'.
[  179.084270][ T7656] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  179.116761][ T7656] bond1: left allmulticast mode
[  179.121776][ T7656] veth0_to_bond: left allmulticast mode
[  179.150793][ T1149] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.169096][ T1149] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.198775][ T1149] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.233477][ T1149] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.368695][ T7674] netlink: 72 bytes leftover after parsing attributes in process `syz.4.527'.
[  179.451513][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[  180.290629][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'.
[  180.316452][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'.
[  181.642518][ T7721] netlink: 'syz.2.539': attribute type 1 has an invalid length.
[  181.923977][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'.
[  182.119597][ T7724] bond1: (slave veth5): Enslaving as an active interface with a down link
[  182.174170][ T7719] bond1: (slave veth7): Enslaving as an active interface with a down link
[  182.212753][ T7724] syz.2.539 (7724) used greatest stack depth: 17960 bytes left
[  182.663347][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'.
[  183.160134][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[  183.183812][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[  183.211853][ T7754] netlink: 58 bytes leftover after parsing attributes in process `syz.0.547'.
[  183.482432][ T7768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.551'.
[  183.667408][ T7772] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  183.691866][ T7772] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  183.731675][ T7772] tipc: Resetting bearer <eth:syzkaller0>
[  184.260823][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'.
[  184.269696][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'.
[  184.373029][ T7790] bond2: Invalid ad_actor_system MAC address.
[  184.387607][ T7790] bond2: option ad_actor_system: invalid value (7)
[  184.407597][ T7790] bond2 (unregistering): Released all slaves
[  184.978704][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  185.400886][ T7819] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8
[  185.621195][ T7821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.645226][ T7821] tipc: Resetting bearer <eth:syzkaller0>
[  185.664357][ T7821] tipc: Resetting bearer <eth:syzkaller0>
[  187.076769][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'.
[  187.893204][ T5634] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  187.923611][ T5634] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  187.923646][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  187.923657][ T5634] Call Trace:
[  187.923666][ T5634]  <TASK>
[  187.923675][ T5634]  dump_stack_lvl+0xe8/0x150
[  187.923710][ T5634]  dump_header+0xd3/0x4b0
[  187.923748][ T5634]  oom_kill_process+0x3ab/0x970
[  187.923782][ T5634]  out_of_memory+0x1064/0x1480
[  187.923808][ T5634]  ? try_charge_memcg+0xbca/0x1590
[  187.923846][ T5634]  ? __pfx_out_of_memory+0x10/0x10
[  187.923871][ T5634]  ? do_raw_spin_unlock+0xf5/0x210
[  187.923913][ T5634]  try_charge_memcg+0xc74/0x1590
[  187.923955][ T5634]  ? __pfx_try_charge_memcg+0x10/0x10
[  187.923976][ T5634]  ? percpu_ref_tryget+0x15/0x180
[  187.924024][ T5634]  ? charge_memcg+0x20/0x2b0
[  187.924050][ T5634]  charge_memcg+0x19c/0x2b0
[  187.924073][ T5634]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  187.924095][ T5634]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  187.924123][ T5634]  swap_cache_alloc_folio+0x4de/0x990
[  187.924170][ T5634]  swap_cache_read_folio+0x44/0x120
[  187.924203][ T5634]  swap_cluster_readahead+0x3a0/0x640
[  187.924242][ T5634]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  187.924284][ T5634]  ? rcu_is_watching+0x15/0xb0
[  187.924323][ T5634]  ? get_vma_policy+0x27b/0x3c0
[  187.924358][ T5634]  swapin_readahead+0x19a/0xc10
[  187.924393][ T5634]  ? swap_table_get+0x1e/0x260
[  187.924422][ T5634]  ? swap_table_get+0x1e/0x260
[  187.924451][ T5634]  ? __pfx_swapin_readahead+0x10/0x10
[  187.924484][ T5634]  ? swap_table_get+0x1e/0x260
[  187.924511][ T5634]  ? swap_table_get+0x1e/0x260
[  187.924535][ T5634]  ? swap_table_get+0x1e/0x260
[  187.924571][ T5634]  ? swap_table_get+0x216/0x260
[  187.924600][ T5634]  ? swap_cache_get_folio+0x2e7/0x2f0
[  187.924637][ T5634]  do_swap_page+0x455/0x5060
[  187.924680][ T5634]  ? __pte_offset_map+0x29/0x240
[  187.924717][ T5634]  ? __lock_acquire+0x683/0x2cf0
[  187.924738][ T5634]  ? do_swap_page+0x124/0x5060
[  187.924766][ T5634]  ? __pfx_do_swap_page+0x10/0x10
[  187.924790][ T5634]  ? __pte_offset_map+0x1ae/0x240
[  187.924824][ T5634]  ? pte_offset_map_rw_nolock+0xea/0x160
[  187.924857][ T5634]  handle_mm_fault+0x124c/0x3080
[  187.924902][ T5634]  ? handle_mm_fault+0xec/0x3080
[  187.924941][ T5634]  ? __pfx_handle_mm_fault+0x10/0x10
[  187.924968][ T5634]  ? lock_vma_under_rcu+0x45a/0x500
[  187.925032][ T5634]  do_user_addr_fault+0xa4d/0x1340
[  187.925070][ T5634]  ? trace_page_fault_user+0x84/0x1e0
[  187.925099][ T5634]  exc_page_fault+0x6a/0xc0
[  187.925136][ T5634]  asm_exc_page_fault+0x26/0x30
[  187.925157][ T5634] RIP: 0033:0x7f029655d68e
[  187.925177][ T5634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  187.925200][ T5634] RSP: 002b:00007ffeb842c898 EFLAGS: 00010246
[  187.925219][ T5634] RAX: 0000000000000000 RBX: 000055556a156500 RCX: 00007f029655d68e
[  187.925234][ T5634] RDX: 00007ffeb842c8f0 RSI: 0000000000000000 RDI: 0000000000000000
[  187.925247][ T5634] RBP: 00007ffeb842c95c R08: 0000000000000000 R09: 0000000000000000
[  187.925260][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  187.925272][ T5634] R13: 00000000000927c0 R14: 000000000002dba0 R15: 00007ffeb842c9b0
[  187.925308][ T5634]  </TASK>
[  188.268432][ T5634] memory: usage 307200kB, limit 307200kB, failcnt 775
[  188.275465][ T5634] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0
[  188.285953][ T5634] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  188.293391][ T5634] Memory cgroup stats for /syz2:
[  188.294295][ T5634] cache 0
[  188.302507][ T5634] rss 0
[  188.306050][ T5634] rss_huge 0
[  188.309389][ T5634] shmem 0
[  188.312623][ T5634] mapped_file 0
[  188.316727][ T5634] dirty 0
[  188.319790][ T5634] writeback 0
[  188.323341][ T5634] workingset_refault_anon 0
[  188.329438][ T5634] workingset_refault_file 41
[  188.334643][ T5634] swap 229376
[  188.338072][ T5634] swapcached 229376
[  188.341991][ T5634] pgpgin 11941
[  188.346243][ T5634] pgpgout 11941
[  188.349821][ T5634] pgfault 37251
[  188.353375][ T5634] pgmajfault 4
[  188.358220][ T5634] inactive_anon 0
[  188.361971][ T5634] active_anon 0
[  188.366002][ T5634] inactive_file 0
[  188.369907][ T5634] active_file 0
[  188.373473][ T5634] unevictable 0
[  188.377709][ T5634] hierarchical_memory_limit 314572800
[  188.383361][ T5634] hierarchical_memsw_limit 9223372036854771712
[  188.390046][ T5634] total_cache 0
[  188.394010][ T5634] total_rss 0
[  188.398020][ T5634] total_rss_huge 0
[  188.401928][ T5634] total_shmem 0
[  188.406300][ T5634] total_mapped_file 0
[  188.410484][ T5634] total_dirty 0
[  188.414440][ T5634] total_writeback 0
[  188.418529][ T5634] total_workingset_refault_anon 0
[  188.424084][ T5634] total_workingset_refault_file 41
[  188.429471][ T5634] total_swap 229376
[  188.433381][ T5634] total_swapcached 229376
[  188.438426][ T5634] total_pgpgin 11941
[  188.442605][ T5634] total_pgpgout 11941
[  188.447176][ T5634] total_pgfault 37251
[  188.451286][ T5634] total_pgmajfault 4
[  188.455889][ T5634] total_inactive_anon 0
[  188.460160][ T5634] total_active_anon 0
[  188.466599][ T5634] total_inactive_file 0
[  188.470802][ T5634] total_active_file 0
[  188.475028][ T5634] total_unevictable 0
[  188.479268][ T5634] anon_cost 0
[  188.482631][ T5634] file_cost 0
[  188.486068][ T5634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.572,pid=7839,uid=0
[  188.503045][ T5634] Memory cgroup out of memory: Killed process 7839 (syz.2.572) total-vm:110896kB, anon-rss:1240kB, file-rss:31196kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  189.100054][ T7830] geneve1: entered promiscuous mode
[  189.235333][ T7853] bridge_slave_1: left allmulticast mode
[  189.242937][ T7853] bridge_slave_1: left promiscuous mode
[  189.265879][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.375902][ T7853] bridge_slave_0: left allmulticast mode
[  189.433727][ T7853] bridge_slave_0: left promiscuous mode
[  189.455501][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.588165][ T7849] macsec1: entered promiscuous mode
[  189.603957][ T7849] batadv0: entered promiscuous mode
[  189.611057][ T7849] macsec1: entered allmulticast mode
[  189.625367][ T7849] batadv0: entered allmulticast mode
[  189.632708][ T7849] 8021q: adding VLAN 0 to HW filter on device macsec1
[  189.654818][ T7849] batadv0: left allmulticast mode
[  189.661026][ T7849] batadv0: left promiscuous mode
[  189.869973][ T7875] netlink: zone id is out of range
[  190.049366][ T7876] syzkaller0: entered promiscuous mode
[  190.070915][ T7876] syzkaller0: entered allmulticast mode
[  190.680597][ T7899] bond1: left allmulticast mode
[  190.727249][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'.
[  190.775221][ T7889] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  190.803772][ T7889] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  190.830165][ T7889] tipc: Resetting bearer <eth:syzkaller0>
[  190.882826][ T7909] tipc: Trying to set illegal importance in message
[  191.141571][ T7901] syzkaller0: entered promiscuous mode
[  191.168139][ T7901] syzkaller0: entered allmulticast mode
[  192.361657][ T7949] netlink: 566 bytes leftover after parsing attributes in process `syz.3.603'.
[  192.681509][ T7966] tipc: Trying to set illegal importance in message
[  193.469816][ T7987] wlan0 speed is unknown, defaulting to 1000
[  193.499795][   T29] IPVS: starting estimator thread 0...
[  193.506547][ T7987] wlan0 speed is unknown, defaulting to 1000
[  193.521352][ T7987] wlan0 speed is unknown, defaulting to 1000
[  193.532050][ T7987] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  193.547586][ T7987] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  193.565930][ T7987] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  193.606521][ T7994] IPVS: using max 28 ests per chain, 67200 per kthread
[  193.624246][ T7987] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.726004][ T7987] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  193.734495][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.606'.
[  193.955908][ T7987] wlan0 speed is unknown, defaulting to 1000
[  193.987314][ T7987] wlan0 speed is unknown, defaulting to 1000
[  194.039013][ T7987] wlan0 speed is unknown, defaulting to 1000
[  194.072899][ T7987] wlan0 speed is unknown, defaulting to 1000
[  194.106563][ T7987] wlan0 speed is unknown, defaulting to 1000
[  195.089988][ T8027] tipc: Trying to set illegal importance in message
[  195.435617][ T8036] syzkaller0: entered promiscuous mode
[  195.453779][ T8036] syzkaller0: entered allmulticast mode
[  195.715364][ T8040] wlan0 speed is unknown, defaulting to 1000
[  196.082161][ T8049] netlink: 128 bytes leftover after parsing attributes in process `syz.1.632'.
[  196.121652][ T8049] FAULT_INJECTION: forcing a failure.
[  196.121652][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.154374][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.1.632 Not tainted syzkaller #0 PREEMPT(full) 
[  196.154403][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  196.154415][ T8049] Call Trace:
[  196.154441][ T8049]  <TASK>
[  196.154450][ T8049]  dump_stack_lvl+0xe8/0x150
[  196.154503][ T8049]  should_fail_ex+0x40c/0x560
[  196.154540][ T8049]  _copy_from_user+0x2d/0xb0
[  196.154565][ T8049]  kstrtouint_from_user+0xd6/0x180
[  196.154623][ T8049]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  196.154672][ T8049]  proc_fail_nth_write+0x8e/0x210
[  196.154694][ T8049]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.154724][ T8049]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.154746][ T8049]  vfs_write+0x296/0xba0
[  196.154783][ T8049]  ? __pfx_vfs_write+0x10/0x10
[  196.154811][ T8049]  ? __fget_files+0x2a/0x420
[  196.154837][ T8049]  ? __fget_files+0x3a2/0x420
[  196.154856][ T8049]  ? __fget_files+0x2a/0x420
[  196.154885][ T8049]  ksys_write+0x150/0x270
[  196.154913][ T8049]  ? __pfx_ksys_write+0x10/0x10
[  196.154947][ T8049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.154971][ T8049]  do_syscall_64+0x174/0x580
[  196.154992][ T8049]  ? trace_irq_disable+0x3b/0x140
[  196.155011][ T8049]  ? clear_bhb_loop+0x40/0x90
[  196.155037][ T8049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.155064][ T8049] RIP: 0033:0x7feb1eb5d68e
[  196.155083][ T8049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  196.155106][ T8049] RSP: 002b:00007feb1f9adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  196.155127][ T8049] RAX: ffffffffffffffda RBX: 00007feb1f9ae6c0 RCX: 00007feb1eb5d68e
[  196.155142][ T8049] RDX: 0000000000000001 RSI: 00007feb1f9ae0a0 RDI: 0000000000000003
[  196.155154][ T8049] RBP: 00007feb1f9ae090 R08: 0000000000000000 R09: 0000000000000000
[  196.155170][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.155182][ T8049] R13: 00007feb1ee16038 R14: 00007feb1ee15fa0 R15: 00007ffc4434f3e8
[  196.155224][ T8049]  </TASK>
[  196.561097][ T8064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.601308][ T8064] FAULT_INJECTION: forcing a failure.
[  196.601308][ T8064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.615120][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  196.640326][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.1.637 Not tainted syzkaller #0 PREEMPT(full) 
[  196.640357][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  196.640370][ T8064] Call Trace:
[  196.640378][ T8064]  <TASK>
[  196.640388][ T8064]  dump_stack_lvl+0xe8/0x150
[  196.640423][ T8064]  should_fail_ex+0x40c/0x560
[  196.640460][ T8064]  _copy_from_user+0x2d/0xb0
[  196.640494][ T8064]  kstrtouint_from_user+0xd6/0x180
[  196.640530][ T8064]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  196.640580][ T8064]  proc_fail_nth_write+0x8e/0x210
[  196.640605][ T8064]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.640637][ T8064]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  196.640660][ T8064]  vfs_write+0x296/0xba0
[  196.640697][ T8064]  ? __pfx_vfs_write+0x10/0x10
[  196.640726][ T8064]  ? __fget_files+0x2a/0x420
[  196.640753][ T8064]  ? __fget_files+0x3a2/0x420
[  196.640772][ T8064]  ? __fget_files+0x2a/0x420
[  196.640804][ T8064]  ksys_write+0x150/0x270
[  196.640849][ T8064]  ? __pfx_ksys_write+0x10/0x10
[  196.640884][ T8064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.640907][ T8064]  do_syscall_64+0x174/0x580
[  196.640926][ T8064]  ? trace_irq_disable+0x3b/0x140
[  196.640944][ T8064]  ? clear_bhb_loop+0x40/0x90
[  196.640966][ T8064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.640986][ T8064] RIP: 0033:0x7feb1eb5d68e
[  196.641005][ T8064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  196.641023][ T8064] RSP: 002b:00007feb1f9adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  196.641047][ T8064] RAX: ffffffffffffffda RBX: 00007feb1f9ae6c0 RCX: 00007feb1eb5d68e
[  196.641069][ T8064] RDX: 0000000000000001 RSI: 00007feb1f9ae0a0 RDI: 0000000000000004
[  196.641081][ T8064] RBP: 00007feb1f9ae090 R08: 0000000000000000 R09: 0000000000000000
[  196.641092][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  196.641103][ T8064] R13: 00007feb1ee16038 R14: 00007feb1ee15fa0 R15: 00007ffc4434f3e8
[  196.641134][ T8064]  </TASK>
[  196.949733][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  196.970279][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  197.073111][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 90 seconds
[  197.464331][ T8073] syzkaller0: entered promiscuous mode
[  197.481286][ T8073] syzkaller0: entered allmulticast mode
[  197.797844][   T78] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.813877][   T78] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.851467][   T78] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.889008][   T78] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.286963][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'.
[  198.349076][ T8105] netlink: 'syz.3.649': attribute type 1 has an invalid length.
[  198.421042][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'.
[  198.601514][ T8113] netlink: 'syz.3.651': attribute type 2 has an invalid length.
[  198.623386][ T8113] : entered promiscuous mode
[  199.118231][ T8130] wlan0 speed is unknown, defaulting to 1000
[  199.226984][ T8136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'.
[  199.312593][ T8143] netlink: 104 bytes leftover after parsing attributes in process `syz.3.658'.
[  199.342027][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.659'.
[  199.646751][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[  200.182968][ T8166] wlan0 speed is unknown, defaulting to 1000
[  200.194537][ T8171] warning: `syz.1.670' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  200.422295][ T8180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.672'.
[  200.459314][ T8179] wlan0 speed is unknown, defaulting to 1000
[  201.291164][ T8199] xt_cluster: node mask cannot exceed total number of nodes
[  201.676998][ T8217] netlink: 'syz.0.682': attribute type 4 has an invalid length.
[  201.707618][ T8217] netlink: 'syz.0.682': attribute type 4 has an invalid length.
[  201.763534][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'.
[  201.907297][ T8224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.684'.
[  202.264070][ T8232] wlan0 speed is unknown, defaulting to 1000
[  202.691114][ T8262] FAULT_INJECTION: forcing a failure.
[  202.691114][ T8262] name failslab, interval 1, probability 0, space 0, times 0
[  202.712493][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.1.695 Not tainted syzkaller #0 PREEMPT(full) 
[  202.712522][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  202.712549][ T8262] Call Trace:
[  202.712556][ T8262]  <TASK>
[  202.712564][ T8262]  dump_stack_lvl+0xe8/0x150
[  202.712598][ T8262]  should_fail_ex+0x40c/0x560
[  202.712631][ T8262]  should_failslab+0xa8/0x100
[  202.712656][ T8262]  __kmalloc_noprof+0xfe/0x720
[  202.712689][ T8262]  ? ethnl_default_start+0x118/0x610
[  202.712714][ T8262]  ? ethnl_default_start+0x118/0x610
[  202.712745][ T8262]  ethnl_default_start+0x118/0x610
[  202.712776][ T8262]  genl_start+0x4c1/0x6d0
[  202.712811][ T8262]  __netlink_dump_start+0x442/0x7b0
[  202.712839][ T8262]  genl_family_rcv_msg_dumpit+0x213/0x310
[  202.712871][ T8262]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  202.712896][ T8262]  ? genl_get_cmd+0x6cc/0x960
[  202.712928][ T8262]  ? __pfx_genl_start+0x10/0x10
[  202.712952][ T8262]  ? __pfx_genl_dumpit+0x10/0x10
[  202.712976][ T8262]  ? __pfx_genl_done+0x10/0x10
[  202.713003][ T8262]  ? __lock_acquire+0x683/0x2cf0
[  202.713034][ T8262]  genl_rcv_msg+0x5e1/0x7a0
[  202.713066][ T8262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  202.713091][ T8262]  ? __pfx_ethnl_default_start+0x10/0x10
[  202.713113][ T8262]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  202.713136][ T8262]  ? __pfx_ethnl_default_done+0x10/0x10
[  202.713183][ T8262]  netlink_rcv_skb+0x226/0x4a0
[  202.713206][ T8262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  202.713234][ T8262]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  202.713271][ T8262]  ? down_read+0x2be/0x330
[  202.713296][ T8262]  genl_rcv+0x28/0x40
[  202.713321][ T8262]  netlink_unicast+0x7bb/0x940
[  202.713353][ T8262]  netlink_sendmsg+0x813/0xb40
[  202.713396][ T8262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.713423][ T8262]  ? aa_sock_msg_perm+0xf1/0x1b0
[  202.713454][ T8262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.713474][ T8262]  sock_sendmsg_nosec+0x13a/0x180
[  202.713504][ T8262]  ____sys_sendmsg+0x54e/0x850
[  202.713531][ T8262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  202.713561][ T8262]  ? import_iovec+0x73/0xa0
[  202.713585][ T8262]  ___sys_sendmsg+0x2a5/0x360
[  202.713605][ T8262]  ? __lock_acquire+0x683/0x2cf0
[  202.713629][ T8262]  ? __pfx____sys_sendmsg+0x10/0x10
[  202.713687][ T8262]  ? __fget_files+0x2a/0x420
[  202.713706][ T8262]  ? __fget_files+0x3a2/0x420
[  202.713735][ T8262]  __x64_sys_sendmsg+0x1b1/0x290
[  202.713759][ T8262]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  202.713799][ T8262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.713819][ T8262]  do_syscall_64+0x174/0x580
[  202.713867][ T8262]  ? trace_irq_disable+0x3b/0x140
[  202.713886][ T8262]  ? clear_bhb_loop+0x40/0x90
[  202.713910][ T8262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.713929][ T8262] RIP: 0033:0x7feb1eb9ce59
[  202.713949][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.713965][ T8262] RSP: 002b:00007feb1f9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.713985][ T8262] RAX: ffffffffffffffda RBX: 00007feb1ee15fa0 RCX: 00007feb1eb9ce59
[  202.713999][ T8262] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  202.714010][ T8262] RBP: 00007feb1f9ae090 R08: 0000000000000000 R09: 0000000000000000
[  202.714031][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.714042][ T8262] R13: 00007feb1ee16038 R14: 00007feb1ee15fa0 R15: 00007ffc4434f3e8
[  202.714074][ T8262]  </TASK>
[  203.231495][ T8271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.698'.
[  203.262544][ T8273] netlink: 72 bytes leftover after parsing attributes in process `syz.1.700'.
[  203.426336][ T8283] netlink: 104 bytes leftover after parsing attributes in process `syz.4.698'.
[  203.559861][ T8290] netlink: 76 bytes leftover after parsing attributes in process `syz.2.704'.
[  203.793586][ T8299] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  203.897450][ T8298] wlan0 speed is unknown, defaulting to 1000
[  203.987435][ T8308] FAULT_INJECTION: forcing a failure.
[  203.987435][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.000826][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT(full) 
[  204.000853][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  204.000866][ T8308] Call Trace:
[  204.000875][ T8308]  <TASK>
[  204.000883][ T8308]  dump_stack_lvl+0xe8/0x150
[  204.000915][ T8308]  should_fail_ex+0x40c/0x560
[  204.000952][ T8308]  _copy_from_iter+0x1d3/0x1660
[  204.000983][ T8308]  ? kmem_cache_alloc_node_noprof+0x1b1/0x610
[  204.001016][ T8308]  ? rcu_is_watching+0x15/0xb0
[  204.001042][ T8308]  ? trace_kmem_cache_alloc+0x29/0xe0
[  204.001075][ T8308]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  204.001108][ T8308]  ? __pfx__copy_from_iter+0x10/0x10
[  204.001138][ T8308]  ? __alloc_skb+0x276/0x7a0
[  204.001158][ T8308]  ? __alloc_skb+0x276/0x7a0
[  204.001183][ T8308]  ? netlink_sendmsg+0x650/0xb40
[  204.001207][ T8308]  ? skb_put+0x112/0x210
[  204.001231][ T8308]  netlink_sendmsg+0x6c0/0xb40
[  204.001267][ T8308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.001297][ T8308]  ? aa_sock_msg_perm+0xf1/0x1b0
[  204.001329][ T8308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.001351][ T8308]  sock_sendmsg_nosec+0x13a/0x180
[  204.001384][ T8308]  ____sys_sendmsg+0x54e/0x850
[  204.001412][ T8308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.001443][ T8308]  ? import_iovec+0x73/0xa0
[  204.001467][ T8308]  ___sys_sendmsg+0x2a5/0x360
[  204.001488][ T8308]  ? __lock_acquire+0x683/0x2cf0
[  204.001513][ T8308]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.001573][ T8308]  ? __fget_files+0x2a/0x420
[  204.001612][ T8308]  ? __fget_files+0x3a2/0x420
[  204.001654][ T8308]  __x64_sys_sendmsg+0x1b1/0x290
[  204.001682][ T8308]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.001733][ T8308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.001755][ T8308]  do_syscall_64+0x174/0x580
[  204.001774][ T8308]  ? trace_irq_disable+0x3b/0x140
[  204.001793][ T8308]  ? clear_bhb_loop+0x40/0x90
[  204.001834][ T8308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.001855][ T8308] RIP: 0033:0x7feb1eb9ce59
[  204.001875][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.001891][ T8308] RSP: 002b:00007feb1f9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.001912][ T8308] RAX: ffffffffffffffda RBX: 00007feb1ee15fa0 RCX: 00007feb1eb9ce59
[  204.001927][ T8308] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  204.001940][ T8308] RBP: 00007feb1f9ae090 R08: 0000000000000000 R09: 0000000000000000
[  204.001952][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.001964][ T8308] R13: 00007feb1ee16038 R14: 00007feb1ee15fa0 R15: 00007ffc4434f3e8
[  204.001999][ T8308]  </TASK>
[  204.267242][ T8309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.666076][ T8322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.715'.
[  204.678298][ T8302] xt_time: invalid argument - start or stop time greater than 23:59:59
[  204.697194][ T8315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.712'.
[  204.719604][ T8311] syzkaller0: entered promiscuous mode
[  204.733181][ T8311] syzkaller0: entered allmulticast mode
[  205.018283][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[  205.206122][ T8338] netlink: 76 bytes leftover after parsing attributes in process `syz.0.717'.
[  205.716527][ T8351] syzkaller0: entered promiscuous mode
[  205.737338][ T8351] syzkaller0: entered allmulticast mode
[  206.010620][ T8354] wlan0 speed is unknown, defaulting to 1000
[  206.266685][ T8371] FAULT_INJECTION: forcing a failure.
[  206.266685][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.280208][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.1.728 Not tainted syzkaller #0 PREEMPT(full) 
[  206.280236][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  206.280248][ T8371] Call Trace:
[  206.280257][ T8371]  <TASK>
[  206.280266][ T8371]  dump_stack_lvl+0xe8/0x150
[  206.280299][ T8371]  should_fail_ex+0x40c/0x560
[  206.280340][ T8371]  _copy_from_user+0x2d/0xb0
[  206.280364][ T8371]  ___sys_sendmsg+0x1c6/0x360
[  206.280387][ T8371]  ? __lock_acquire+0x683/0x2cf0
[  206.280411][ T8371]  ? __pfx____sys_sendmsg+0x10/0x10
[  206.280458][ T8371]  ? __fget_files+0x2a/0x420
[  206.280475][ T8371]  ? __fget_files+0x3a2/0x420
[  206.280515][ T8371]  __x64_sys_sendmsg+0x1b1/0x290
[  206.280537][ T8371]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  206.280572][ T8371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.280591][ T8371]  do_syscall_64+0x174/0x580
[  206.280607][ T8371]  ? trace_irq_disable+0x3b/0x140
[  206.280624][ T8371]  ? clear_bhb_loop+0x40/0x90
[  206.280650][ T8371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.280668][ T8371] RIP: 0033:0x7feb1eb9ce59
[  206.280698][ T8371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.280712][ T8371] RSP: 002b:00007feb1f9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.280750][ T8371] RAX: ffffffffffffffda RBX: 00007feb1ee15fa0 RCX: 00007feb1eb9ce59
[  206.280763][ T8371] RDX: 0000000000000090 RSI: 0000200000000b80 RDI: 0000000000000003
[  206.280774][ T8371] RBP: 00007feb1f9ae090 R08: 0000000000000000 R09: 0000000000000000
[  206.280784][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.280795][ T8371] R13: 00007feb1ee16038 R14: 00007feb1ee15fa0 R15: 00007ffc4434f3e8
[  206.280823][ T8371]  </TASK>
[  206.662836][ T8379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.805859][ T8383] __nla_validate_parse: 1 callbacks suppressed
[  206.805885][ T8383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'.
[  207.163116][ T8394] wlan0 speed is unknown, defaulting to 1000
[  207.294243][ T8402] netlink: 'syz.0.737': attribute type 1 has an invalid length.
[  207.365523][ T8402] bond2: entered promiscuous mode
[  207.372364][ T8402] bond2: entered allmulticast mode
[  207.379389][ T8402] 8021q: adding VLAN 0 to HW filter on device bond2
[  207.405890][ T8407] erspan1: entered allmulticast mode
[  207.418366][ T8407] bond2: (slave erspan1): making interface the new active one
[  207.426167][ T8407] erspan1: entered promiscuous mode
[  207.433296][ T8407] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  207.639263][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'.
[  207.942533][ T8423] netlink: 7 bytes leftover after parsing attributes in process `syz.2.742'.
[  208.079651][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.262908][ T8432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.744'.
[  208.591321][ T8445] syzkaller1: entered promiscuous mode
[  208.598073][ T8445] syzkaller1: entered allmulticast mode
[  208.631542][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'.
[  208.759360][ T8455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.755'.
[  208.803777][ T8455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.755'.
[  210.753041][ T8474] netlink: 104 bytes leftover after parsing attributes in process `syz.4.760'.
[  211.015891][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.761'.
[  211.026454][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.761'.
[  214.157102][ T4994] udevd[4994]: worker [5727] /devices/virtual/block/nbd2 is taking a long time
[  219.517078][ T5638] Bluetooth: hci3: command 0x0406 tx timeout
[  219.525495][ T5638] Bluetooth: hci2: command 0x0406 tx timeout
[  219.532261][ T5638] Bluetooth: hci0: command 0x0406 tx timeout
[  219.538776][ T5638] Bluetooth: hci1: command 0x0406 tx timeout
[  219.544711][ T5633] Bluetooth: hci4: command 0x0406 tx timeout
[  224.025702][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  224.035685][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  224.048205][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  224.057616][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  224.066261][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  224.103558][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  224.116606][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  224.125342][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  224.139387][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  224.149402][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  224.660861][ T8486] wlan0 speed is unknown, defaulting to 1000
[  224.867895][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  224.884210][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  224.900245][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  224.909656][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  224.923508][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  224.939122][ T5640] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  224.954455][ T5640] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  224.969094][ T5640] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  224.999520][   T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  225.007496][   T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  225.052598][ T8488] wlan0 speed is unknown, defaulting to 1000
[  225.417801][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.426261][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.436199][ T8486] bridge_slave_0: entered allmulticast mode
[  225.445044][ T8486] bridge_slave_0: entered promiscuous mode
[  225.464892][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.475516][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.493509][ T8486] bridge_slave_1: entered allmulticast mode
[  225.506363][ T8486] bridge_slave_1: entered promiscuous mode
[  225.571984][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.605374][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.684751][ T8486] team0: Port device team_slave_0 added
[  225.696299][ T8486] team0: Port device team_slave_1 added
[  225.769857][ T8510] wlan0 speed is unknown, defaulting to 1000
[  225.785394][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.792914][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.819515][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.839225][ T8509] wlan0 speed is unknown, defaulting to 1000
[  225.846171][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.854478][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.881538][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.085398][ T8486] hsr_slave_0: entered promiscuous mode
[  226.092005][ T8486] hsr_slave_1: entered promiscuous mode
[  226.098642][ T8486] debugfs: 'hsr0' already exists in 'hsr'
[  226.104514][ T8486] Cannot create hsr debugfs directory
[  226.140792][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.148097][   T50] Bluetooth: hci5: command tx timeout
[  226.148214][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.161709][ T8488] bridge_slave_0: entered allmulticast mode
[  226.169752][ T8488] bridge_slave_0: entered promiscuous mode
[  226.178751][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.186233][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.193494][ T8488] bridge_slave_1: entered allmulticast mode
[  226.201925][ T8488] bridge_slave_1: entered promiscuous mode
[  226.224294][   T50] Bluetooth: hci6: command tx timeout
[  226.301489][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.315131][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.409486][ T8488] team0: Port device team_slave_0 added
[  226.423150][ T8488] team0: Port device team_slave_1 added
[  226.519262][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.530580][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.557297][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.608358][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.617210][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.645104][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.806099][ T8488] hsr_slave_0: entered promiscuous mode
[  226.813129][ T8488] hsr_slave_1: entered promiscuous mode
[  226.819769][ T8488] debugfs: 'hsr0' already exists in 'hsr'
[  226.827059][ T8488] Cannot create hsr debugfs directory
[  227.023841][   T50] Bluetooth: hci7: command tx timeout
[  227.048851][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.058037][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.067589][ T8510] bridge_slave_0: entered allmulticast mode
[  227.076747][ T4944] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  227.087639][ T8510] bridge_slave_0: entered promiscuous mode
[  227.088249][ T4944] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  227.105250][ T5640] Bluetooth: hci8: command tx timeout
[  227.114904][ T5640] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  227.128304][ T5640] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  227.137537][ T5640] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  227.194012][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.201869][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.212238][ T8510] bridge_slave_1: entered allmulticast mode
[  227.221030][ T8510] bridge_slave_1: entered promiscuous mode
[  227.260449][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.273568][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.281915][ T8509] bridge_slave_0: entered allmulticast mode
[  227.290853][ T8509] bridge_slave_0: entered promiscuous mode
[  227.318635][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.329710][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.338665][ T8509] bridge_slave_1: entered allmulticast mode
[  227.347682][ T8509] bridge_slave_1: entered promiscuous mode
[  227.370880][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.414898][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.485316][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.499744][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.527294][ T8510] team0: Port device team_slave_0 added
[  227.569302][ T8510] team0: Port device team_slave_1 added
[  227.618593][ T8509] team0: Port device team_slave_0 added
[  227.656971][ T8509] team0: Port device team_slave_1 added
[  227.685015][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 120 seconds
[  227.686478][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.705378][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.732144][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.766634][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.773914][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.800471][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.861338][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.869463][ T8557] wlan0 speed is unknown, defaulting to 1000
[  227.877736][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.904489][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.919143][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.926471][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.952728][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.077629][ T8510] hsr_slave_0: entered promiscuous mode
[  228.084690][ T8510] hsr_slave_1: entered promiscuous mode
[  228.091196][ T8510] debugfs: 'hsr0' already exists in 'hsr'
[  228.097593][ T8510] Cannot create hsr debugfs directory
[  228.127064][ T8509] hsr_slave_0: entered promiscuous mode
[  228.134215][ T8509] hsr_slave_1: entered promiscuous mode
[  228.140642][ T8509] debugfs: 'hsr0' already exists in 'hsr'
[  228.146618][ T8509] Cannot create hsr debugfs directory
[  228.223774][   T50] Bluetooth: hci5: command tx timeout
[  228.305699][   T50] Bluetooth: hci6: command tx timeout
[  228.737766][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.745174][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.752548][ T8557] bridge_slave_0: entered allmulticast mode
[  228.760867][ T8557] bridge_slave_0: entered promiscuous mode
[  228.783066][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.790698][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.798541][ T8557] bridge_slave_1: entered allmulticast mode
[  228.806375][ T8557] bridge_slave_1: entered promiscuous mode
[  228.856029][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.870772][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.906981][ T8557] team0: Port device team_slave_0 added
[  228.915510][ T8557] team0: Port device team_slave_1 added
[  228.946342][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.953341][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.979816][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.992938][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.000266][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.026747][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.076155][ T8557] hsr_slave_0: entered promiscuous mode
[  229.083097][ T8557] hsr_slave_1: entered promiscuous mode
[  229.089745][ T8557] debugfs: 'hsr0' already exists in 'hsr'
[  229.095579][ T8557] Cannot create hsr debugfs directory
[  229.104116][   T50] Bluetooth: hci7: command tx timeout
[  229.183845][ T5640] Bluetooth: hci8: command tx timeout
[  229.183852][   T50] Bluetooth: hci9: command tx timeout
[  230.304059][   T50] Bluetooth: hci5: command tx timeout
[  230.384328][   T50] Bluetooth: hci6: command tx timeout
[  231.184024][   T50] Bluetooth: hci7: command tx timeout
[  231.263939][   T50] Bluetooth: hci9: command tx timeout
[  231.263951][ T5640] Bluetooth: hci8: command tx timeout
[  232.383836][ T5640] Bluetooth: hci5: command tx timeout
[  232.464337][ T5640] Bluetooth: hci6: command tx timeout
[  233.263983][ T5640] Bluetooth: hci7: command tx timeout
[  233.343956][   T50] Bluetooth: hci8: command tx timeout
[  233.344262][ T5640] Bluetooth: hci9: command tx timeout
[  235.423792][ T5640] Bluetooth: hci9: command tx timeout
[  245.984407][ T2177] page_pool_release_retry() stalled pool shutdown: id 63, 1 inflight 60 sec
[  257.747289][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 150 seconds
[  258.385356][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  258.391709][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  284.087326][   T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  284.099526][   T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  284.108386][   T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  284.118596][   T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  284.138671][ T5630] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  284.141514][ T4944] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  284.164640][ T4944] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  284.176385][ T4944] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  284.192897][ T4944] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  284.204832][ T4944] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  284.597346][ T8576] wlan0 speed is unknown, defaulting to 1000
[  284.661707][ T8578] wlan0 speed is unknown, defaulting to 1000
[  285.153287][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.167084][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.170299][   T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  285.179814][ T8576] bridge_slave_0: entered allmulticast mode
[  285.189979][   T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  285.199433][   T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  285.200072][ T8576] bridge_slave_0: entered promiscuous mode
[  285.217225][   T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  285.225305][   T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  285.281996][ T5640] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  285.297424][ T5640] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  285.309211][ T5640] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  285.322585][ T5640] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  285.331303][ T5640] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  285.351182][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.361009][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.369077][ T8576] bridge_slave_1: entered allmulticast mode
[  285.388623][ T8576] bridge_slave_1: entered promiscuous mode
[  285.533027][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.542716][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.551699][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.559896][ T8578] bridge_slave_0: entered allmulticast mode
[  285.568835][ T8578] bridge_slave_0: entered promiscuous mode
[  285.585216][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.595861][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.603242][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.611825][ T8578] bridge_slave_1: entered allmulticast mode
[  285.620976][ T8578] bridge_slave_1: entered promiscuous mode
[  285.708531][ T8578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.723309][ T8576] team0: Port device team_slave_0 added
[  285.733571][ T8576] team0: Port device team_slave_1 added
[  285.745854][ T8578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.858331][ T8578] team0: Port device team_slave_0 added
[  285.872575][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.894115][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.928043][ T8576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.947434][ T8578] team0: Port device team_slave_1 added
[  285.956461][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.964122][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.990765][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.062081][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.071340][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.099777][ T8578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.133093][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.140604][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.167408][ T8578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.214157][ T8576] hsr_slave_0: entered promiscuous mode
[  286.220902][ T8576] hsr_slave_1: entered promiscuous mode
[  286.229454][ T8576] debugfs: 'hsr0' already exists in 'hsr'
[  286.235723][   T50] Bluetooth: hci10: command tx timeout
[  286.241501][ T8576] Cannot create hsr debugfs directory
[  286.277507][ T8609] wlan0 speed is unknown, defaulting to 1000
[  286.303974][   T50] Bluetooth: hci11: command tx timeout
[  286.329198][ T8578] hsr_slave_0: entered promiscuous mode
[  286.336482][ T8578] hsr_slave_1: entered promiscuous mode
[  286.342887][ T8578] debugfs: 'hsr0' already exists in 'hsr'
[  286.348758][ T8578] Cannot create hsr debugfs directory
[  286.362669][ T8612] wlan0 speed is unknown, defaulting to 1000
[  287.115042][ T5640] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  287.128468][ T5640] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  287.142512][ T5640] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  287.151014][ T5640] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  287.159243][ T5640] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  287.269636][   T50] Bluetooth: hci12: command tx timeout
[  287.355702][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.364302][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.372308][ T8612] bridge_slave_0: entered allmulticast mode
[  287.381746][ T8612] bridge_slave_0: entered promiscuous mode
[  287.394865][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.402217][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.416248][ T8609] bridge_slave_0: entered allmulticast mode
[  287.424033][   T50] Bluetooth: hci13: command tx timeout
[  287.433547][ T8609] bridge_slave_0: entered promiscuous mode
[  287.445437][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.453451][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.461335][ T8612] bridge_slave_1: entered allmulticast mode
[  287.469482][ T8612] bridge_slave_1: entered promiscuous mode
[  287.492276][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.502230][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.510691][ T8609] bridge_slave_1: entered allmulticast mode
[  287.519607][ T8609] bridge_slave_1: entered promiscuous mode
[  287.631353][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.658820][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.673135][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.692525][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.786273][ T8612] team0: Port device team_slave_0 added
[  287.796444][ T8609] team0: Port device team_slave_0 added
[  287.806262][ T8609] team0: Port device team_slave_1 added
[  287.818171][ T8612] team0: Port device team_slave_1 added
[  287.834833][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 180 seconds
[  287.913360][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.920550][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.947270][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.959763][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.966994][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.997503][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.009842][ T8642] wlan0 speed is unknown, defaulting to 1000
[  288.009969][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.023410][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.049863][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.069849][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.077480][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.104397][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.239735][ T8609] hsr_slave_0: entered promiscuous mode
[  288.246670][ T8609] hsr_slave_1: entered promiscuous mode
[  288.252986][ T8609] debugfs: 'hsr0' already exists in 'hsr'
[  288.258851][ T8609] Cannot create hsr debugfs directory
[  288.280449][ T8612] hsr_slave_0: entered promiscuous mode
[  288.287613][ T8612] hsr_slave_1: entered promiscuous mode
[  288.294522][ T8612] debugfs: 'hsr0' already exists in 'hsr'
[  288.300321][ T8612] Cannot create hsr debugfs directory
[  288.306276][   T50] Bluetooth: hci10: command tx timeout
[  288.383777][   T50] Bluetooth: hci11: command tx timeout
[  288.847998][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.856736][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.865187][ T8642] bridge_slave_0: entered allmulticast mode
[  288.874293][ T8642] bridge_slave_0: entered promiscuous mode
[  288.884447][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.891885][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.899962][ T8642] bridge_slave_1: entered allmulticast mode
[  288.910413][ T8642] bridge_slave_1: entered promiscuous mode
[  288.960418][ T8642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.973559][ T8642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.021616][ T8642] team0: Port device team_slave_0 added
[  289.030625][ T8642] team0: Port device team_slave_1 added
[  289.062448][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.069692][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.095867][ T8642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.126511][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.133542][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.160614][ T8642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.184176][   T50] Bluetooth: hci14: command tx timeout
[  289.229373][ T8642] hsr_slave_0: entered promiscuous mode
[  289.242385][ T8642] hsr_slave_1: entered promiscuous mode
[  289.249348][ T8642] debugfs: 'hsr0' already exists in 'hsr'
[  289.255176][ T8642] Cannot create hsr debugfs directory
[  289.343905][   T50] Bluetooth: hci12: command tx timeout
[  289.504758][   T50] Bluetooth: hci13: command tx timeout
[  290.384356][   T50] Bluetooth: hci10: command tx timeout
[  290.464017][   T50] Bluetooth: hci11: command tx timeout
[  291.274090][   T50] Bluetooth: hci14: command tx timeout
[  291.424008][   T50] Bluetooth: hci12: command tx timeout
[  291.583964][   T50] Bluetooth: hci13: command tx timeout
[  292.465334][   T50] Bluetooth: hci10: command tx timeout
[  292.544053][   T50] Bluetooth: hci11: command tx timeout
[  293.007816][ T4994] udevd[4994]: worker [5727] /devices/virtual/block/nbd2 timeout; kill it
[  293.016995][ T4994] udevd[4994]: seq 10660 '/devices/virtual/block/nbd2' killed
[  293.344119][   T50] Bluetooth: hci14: command tx timeout
[  293.503941][   T50] Bluetooth: hci12: command tx timeout
[  293.663794][   T50] Bluetooth: hci13: command tx timeout
[  295.424022][   T50] Bluetooth: hci14: command tx timeout
[  317.905289][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 210 seconds
[  319.835366][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  319.842678][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  344.167448][ T5640] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  344.183250][ T5640] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  344.196613][ T5640] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  344.205850][ T5640] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  344.206887][ T4944] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  344.221114][ T5640] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  344.239888][ T4944] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  344.251347][ T4944] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  344.263238][ T4944] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  344.271707][ T4944] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  344.650033][ T8666] wlan0 speed is unknown, defaulting to 1000
[  344.757213][ T8668] wlan0 speed is unknown, defaulting to 1000
[  345.255863][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.263173][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.272847][ T8666] bridge_slave_0: entered allmulticast mode
[  345.279907][ T5630] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  345.287707][ T8666] bridge_slave_0: entered promiscuous mode
[  345.299658][ T5630] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  345.308140][ T5630] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  345.315862][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.323134][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.329201][ T5630] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  345.334754][ T8666] bridge_slave_1: entered allmulticast mode
[  345.345499][ T5630] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  345.352584][ T8666] bridge_slave_1: entered promiscuous mode
[  345.450668][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.475735][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.627598][ T8666] team0: Port device team_slave_0 added
[  345.634975][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.646604][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.654647][ T8668] bridge_slave_0: entered allmulticast mode
[  345.663073][ T8668] bridge_slave_0: entered promiscuous mode
[  345.675930][ T8666] team0: Port device team_slave_1 added
[  345.715520][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.728252][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.738474][ T5636] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  345.746457][ T8668] bridge_slave_1: entered allmulticast mode
[  345.757153][ T5636] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  345.759216][ T8668] bridge_slave_1: entered promiscuous mode
[  345.769552][ T5636] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  345.778961][ T5636] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  345.786976][ T5636] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  345.886587][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.905189][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.940866][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.981632][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.994742][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.013686][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.057251][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.107067][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.188189][ T8668] team0: Port device team_slave_0 added
[  346.232973][ T8668] team0: Port device team_slave_1 added
[  346.270191][ T8666] hsr_slave_0: entered promiscuous mode
[  346.277480][ T8666] hsr_slave_1: entered promiscuous mode
[  346.285850][ T8666] debugfs: 'hsr0' already exists in 'hsr'
[  346.291658][ T8666] Cannot create hsr debugfs directory
[  346.297607][ T8698] wlan0 speed is unknown, defaulting to 1000
[  346.307340][ T5638] Bluetooth: hci15: command tx timeout
[  346.353360][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.360778][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.389024][ T5638] Bluetooth: hci16: command tx timeout
[  346.397230][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.439272][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.448375][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.474791][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.615206][ T8668] hsr_slave_0: entered promiscuous mode
[  346.622822][ T8668] hsr_slave_1: entered promiscuous mode
[  346.629896][ T8668] debugfs: 'hsr0' already exists in 'hsr'
[  346.635736][ T8668] Cannot create hsr debugfs directory
[  346.641403][ T8708] wlan0 speed is unknown, defaulting to 1000
[  347.230319][ T5636] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  347.245371][ T5636] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  347.257956][ T5636] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  347.269219][ T5636] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  347.278737][ T5636] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  347.429817][ T5638] Bluetooth: hci17: command tx timeout
[  347.509049][ T5638] Bluetooth: hci7: command 0x0406 tx timeout
[  347.510008][ T5636] Bluetooth: hci5: command 0x0406 tx timeout
[  347.522825][ T5636] Bluetooth: hci8: command 0x0406 tx timeout
[  347.525362][ T8483] Bluetooth: hci6: command 0x0406 tx timeout
[  347.549159][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.562592][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.589937][ T8698] bridge_slave_0: entered allmulticast mode
[  347.599297][ T8698] bridge_slave_0: entered promiscuous mode
[  347.682872][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.690497][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.698515][ T8698] bridge_slave_1: entered allmulticast mode
[  347.706949][ T8698] bridge_slave_1: entered promiscuous mode
[  347.804124][ T8698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.825282][ T5640] Bluetooth: hci18: command tx timeout
[  347.837741][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.845461][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.853056][ T8708] bridge_slave_0: entered allmulticast mode
[  347.861702][ T8708] bridge_slave_0: entered promiscuous mode
[  347.872779][ T8698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.895821][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.903209][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.911366][ T8708] bridge_slave_1: entered allmulticast mode
[  347.919945][ T8708] bridge_slave_1: entered promiscuous mode
[  348.004118][ T1597] block nbd2: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 240 seconds
[  348.025843][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.043494][ T8698] team0: Port device team_slave_0 added
[  348.056720][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.072026][ T8698] team0: Port device team_slave_1 added
[  348.157189][ T8708] team0: Port device team_slave_0 added
[  348.170388][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.177845][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.204661][ T8698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.223016][ T8698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.230391][ T8698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.256969][ T8698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.270443][ T8708] team0: Port device team_slave_1 added
[  348.294206][ T8730] wlan0 speed is unknown, defaulting to 1000
[  348.356413][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.363503][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.390664][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.399254][ T5640] Bluetooth: hci15: command tx timeout
[  348.436648][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.444275][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.473461][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.475026][ T5640] Bluetooth: hci16: command tx timeout
[  348.538385][ T8698] hsr_slave_0: entered promiscuous mode
[  348.546417][ T8698] hsr_slave_1: entered promiscuous mode
[  348.552935][ T8698] debugfs: 'hsr0' already exists in 'hsr'
[  348.559071][ T8698] Cannot create hsr debugfs directory
[  348.681622][ T8708] hsr_slave_0: entered promiscuous mode
[  348.689298][ T8708] hsr_slave_1: entered promiscuous mode
[  348.697389][ T8708] debugfs: 'hsr0' already exists in 'hsr'
[  348.703540][ T8708] Cannot create hsr debugfs directory
[  349.192845][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.200412][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.208137][ T8730] bridge_slave_0: entered allmulticast mode
[  349.216523][ T8730] bridge_slave_0: entered promiscuous mode
[  349.238844][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.246389][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.253982][ T8730] bridge_slave_1: entered allmulticast mode
[  349.261751][ T8730] bridge_slave_1: entered promiscuous mode
[  349.305558][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.328388][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.344289][ T5640] Bluetooth: hci19: command tx timeout
[  349.372639][ T8730] team0: Port device team_slave_0 added
[  349.395692][ T8730] team0: Port device team_slave_1 added
[  349.427017][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.435950][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.462538][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.475903][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.482903][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.507340][ T5640] Bluetooth: hci17: command tx timeout
[  349.509717][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.607462][ T8730] hsr_slave_0: entered promiscuous mode
[  349.615199][ T8730] hsr_slave_1: entered promiscuous mode
[  349.621707][ T8730] debugfs: 'hsr0' already exists in 'hsr'
[  349.627729][ T8730] Cannot create hsr debugfs directory
[  349.904045][ T5640] Bluetooth: hci18: command tx timeout
[  350.473930][ T5640] Bluetooth: hci15: command tx timeout
[  350.554546][ T4944] Bluetooth: hci16: command tx timeout
[  351.434272][   T50] Bluetooth: hci19: command tx timeout
[  351.583912][   T50] Bluetooth: hci17: command tx timeout
[  351.983813][   T50] Bluetooth: hci18: command tx timeout
[  352.544064][   T50] Bluetooth: hci15: command tx timeout
[  352.624477][   T50] Bluetooth: hci9: command 0x0406 tx timeout
[  352.624494][ T4944] Bluetooth: hci16: command tx timeout
[  353.503944][ T5640] Bluetooth: hci19: command tx timeout
[  353.664414][ T5640] Bluetooth: hci17: command tx timeout
[  354.063829][ T5640] Bluetooth: hci18: command tx timeout
[  354.384085][   T31] INFO: task dhcpcd:5288 blocked for more than 143 seconds.
[  354.391596][   T31]       Not tainted syzkaller #0
[  354.396656][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  354.405422][   T31] task:dhcpcd          state:D stack:25448 pid:5288  tgid:5288  ppid:1      task_flags:0x400140 flags:0x00080000
[  354.417588][   T31] Call Trace:
[  354.420943][   T31]  <TASK>
[  354.423998][   T31]  __schedule+0x17d9/0x56c0
[  354.428636][   T31]  ? __lock_acquire+0x683/0x2cf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  354.433833][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.438828][   T31]  ? unwind_next_frame+0x8f/0x2550
[  354.444167][   T31]  ? __pfx___schedule+0x10/0x10
[  354.449248][   T31]  ? schedule+0x90/0x2b0
[  354.453680][   T31]  schedule+0x164/0x2b0
[  354.457916][   T31]  schedule_preempt_disabled+0x13/0x30
[  354.463432][   T31]  __mutex_lock+0x7bf/0x1550
[  354.468886][   T31]  ? __mutex_lock+0x5d4/0x1550
[  354.473830][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  354.478588][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  354.484125][   T31]  ? stack_trace_save+0xa9/0x100
[  354.489212][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.494612][   T31]  ? radix_tree_lookup+0x240/0x290
[  354.500202][   T31]  genl_rcv_msg+0x10b/0x7a0
[  354.505142][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.510263][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.515773][   T31]  netlink_rcv_skb+0x226/0x4a0
[  354.520652][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.529118][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.553881][   T31]  ? down_read+0x2be/0x330
[  354.563986][   T31]  genl_rcv+0x28/0x40
[  354.577968][   T31]  netlink_unicast+0x7bb/0x940
[  354.585669][   T31]  netlink_sendmsg+0x813/0xb40
[  354.590543][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.597913][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  354.608980][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.615102][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  354.620222][   T31]  ____sys_sendmsg+0x54e/0x850
[  354.628559][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.636622][   T31]  ? import_iovec+0x73/0xa0
[  354.641234][   T31]  ___sys_sendmsg+0x2a5/0x360
[  354.647469][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.653211][   T31]  ? netdev_run_todo+0x1045/0x10d0
[  354.658812][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  354.664561][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  354.669592][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.675947][   T31]  ? __secure_computing+0xe7/0x2b0
[  354.681215][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.687527][   T31]  do_syscall_64+0x174/0x580
[  354.692181][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.698514][   T31]  ? clear_bhb_loop+0x40/0x90
[  354.703267][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.709580][   T31] RIP: 0033:0x7f509236f407
[  354.714186][   T31] RSP: 002b:00007fff6055bdb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  354.722733][   T31] RAX: ffffffffffffffda RBX: 00007f50922e5780 RCX: 00007f509236f407
[  354.731000][   T31] RDX: 0000000000000000 RSI: 00007fff6055be30 RDI: 000000000000000e
[  354.739198][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  354.747364][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561b30666e10
[  354.755496][   T31] R13: 000000000000000e R14: 00007fff605702f0 R15: 0000561b34227320
[  354.763536][   T31]  </TASK>
[  354.767009][   T31] INFO: task syz.2.750:8445 blocked for more than 143 seconds.
[  354.774664][   T31]       Not tainted syzkaller #0
[  354.779605][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  354.788508][   T31] task:syz.2.750       state:D stack:26344 pid:8445  tgid:8444  ppid:5634   task_flags:0x480140 flags:0x00080002
[  354.801446][   T31] Call Trace:
[  354.807301][   T31]  <TASK>
[  354.810283][   T31]  __schedule+0x17d9/0x56c0
[  354.814898][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.819897][   T31]  ? __pfx___schedule+0x10/0x10
[  354.824892][   T31]  ? schedule+0x90/0x2b0
[  354.829291][   T31]  schedule+0x164/0x2b0
[  354.833500][   T31]  blk_mq_freeze_queue_wait+0x101/0x180
[  354.839223][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  354.845411][   T31]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  354.851786][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  354.857992][   T31]  queue_limits_commit_update_frozen+0x55/0xd0
[  354.864356][   T31]  nbd_set_size+0x454/0x680
[  354.869090][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  354.874250][   T31]  ? nla_memcpy+0x5b/0xc0
[  354.878674][   T31]  nbd_genl_reconfigure+0x7e9/0x1e80
[  354.884125][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  354.889924][   T31]  ? rcu_is_watching+0x15/0xb0
[  354.895057][   T31]  ? trace_kmalloc+0x2a/0xf0
[  354.899747][   T31]  ? __kmalloc_noprof+0x396/0x720
[  354.904928][   T31]  ? __nla_parse+0x40/0x60
[  354.909400][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  354.916008][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  354.922534][   T31]  genl_family_rcv_msg_doit+0x233/0x340
[  354.928235][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.934412][   T31]  ? __lock_acquire+0x683/0x2cf0
[  354.939381][   T31]  genl_rcv_msg+0x614/0x7a0
[  354.944184][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.949288][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  354.955159][   T31]  netlink_rcv_skb+0x226/0x4a0
[  354.959962][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.965106][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.970446][   T31]  ? down_read+0x2be/0x330
[  354.974987][   T31]  genl_rcv+0x28/0x40
[  354.979015][   T31]  netlink_unicast+0x7bb/0x940
[  354.983935][   T31]  netlink_sendmsg+0x813/0xb40
[  354.988754][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.994164][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  354.999148][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.004804][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  355.009918][   T31]  ____sys_sendmsg+0x54e/0x850
[  355.014805][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.020178][   T31]  ? import_iovec+0x73/0xa0
[  355.024973][   T31]  ___sys_sendmsg+0x2a5/0x360
[  355.029817][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.034909][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.040153][   T31]  ? futex_wait+0x2a2/0x390
[  355.044807][   T31]  ? __fget_files+0x2a/0x420
[  355.049444][   T31]  ? __fget_files+0x3a2/0x420
[  355.054308][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  355.059295][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.064900][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.071076][   T31]  do_syscall_64+0x174/0x580
[  355.075819][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.080906][   T31]  ? clear_bhb_loop+0x40/0x90
[  355.085793][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.091725][   T31] RIP: 0033:0x7f029659ce59
[  355.096238][   T31] RSP: 002b:00007f0297391028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.104882][   T31] RAX: ffffffffffffffda RBX: 00007f0296815fa0 RCX: 00007f029659ce59
[  355.113029][   T31] RDX: 0000000000000800 RSI: 0000200000002600 RDI: 0000000000000004
[  355.121240][   T31] RBP: 00007f0296632e6f R08: 0000000000000000 R09: 0000000000000000
[  355.129451][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.137689][   T31] R13: 00007f0296816038 R14: 00007f0296815fa0 R15: 00007ffeb842c5b8
[  355.145909][   T31]  </TASK>
[  355.149003][   T31] INFO: task syz.0.756:8462 blocked for more than 144 seconds.
[  355.156643][   T31]       Not tainted syzkaller #0
[  355.161620][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.170478][   T31] task:syz.0.756       state:D stack:22472 pid:8462  tgid:8461  ppid:5626   task_flags:0x400140 flags:0x00080002
[  355.182615][   T31] Call Trace:
[  355.191795][   T31]  <TASK>
[  355.194966][   T31]  __schedule+0x17d9/0x56c0
[  355.199543][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.204612][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.209612][   T31]  ? unwind_next_frame+0x8f/0x2550
[  355.214877][   T31]  ? __pfx___schedule+0x10/0x10
[  355.219789][   T31]  ? schedule+0x90/0x2b0
[  355.224179][   T31]  schedule+0x164/0x2b0
[  355.228427][   T31]  schedule_preempt_disabled+0x13/0x30
[  355.234029][   T31]  __mutex_lock+0x7bf/0x1550
[  355.238795][   T31]  ? __mutex_lock+0x5d4/0x1550
[  355.243766][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  355.248550][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  355.253706][   T31]  ? stack_trace_save+0xa9/0x100
[  355.258796][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.263968][   T31]  ? radix_tree_lookup+0x240/0x290
[  355.269156][   T31]  genl_rcv_msg+0x10b/0x7a0
[  355.273809][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.278880][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.283957][   T31]  netlink_rcv_skb+0x226/0x4a0
[  355.288771][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.293927][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.299268][   T31]  ? down_read+0x2be/0x330
[  355.303779][   T31]  genl_rcv+0x28/0x40
[  355.307822][   T31]  netlink_unicast+0x7bb/0x940
[  355.312647][   T31]  netlink_sendmsg+0x813/0xb40
[  355.317606][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.322958][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  355.328036][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.333456][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  355.338604][   T31]  __sys_sendto+0x408/0x5a0
[  355.343164][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  355.348565][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  355.354052][   T31]  __x64_sys_sendto+0xde/0x100
[  355.358912][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.365089][   T31]  do_syscall_64+0x174/0x580
[  355.370238][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.375397][   T31]  ? clear_bhb_loop+0x40/0x90
[  355.380122][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.386099][   T31] RIP: 0033:0x7ffbc1d5d68e
[  355.390549][   T31] RSP: 002b:00007ffbbfff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  355.399106][   T31] RAX: ffffffffffffffda RBX: 00007ffbbfff66c0 RCX: 00007ffbc1d5d68e
[  355.407169][   T31] RDX: 000000000000001c RSI: 00007ffbbfff5000 RDI: 0000000000000009
[  355.415238][   T31] RBP: 0000000000000000 R08: 00007ffbbfff4f04 R09: 000000000000000c
[  355.423239][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  355.431502][   T31] R13: 00007ffbbfff4f58 R14: 00007ffbbfff5000 R15: 0000000000000000
[  355.439648][   T31]  </TASK>
[  355.442739][   T31] INFO: task syz.1.758:8464 blocked for more than 144 seconds.
[  355.450516][   T31]       Not tainted syzkaller #0
[  355.455563][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.464446][   T31] task:syz.1.758       state:D stack:28808 pid:8464  tgid:8463  ppid:5641   task_flags:0x400040 flags:0x00080002
[  355.476641][   T31] Call Trace:
[  355.479973][   T31]  <TASK>
[  355.482939][   T31]  __schedule+0x17d9/0x56c0
[  355.487570][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.492564][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.497633][   T31]  ? unwind_next_frame+0x8f/0x2550
[  355.502810][   T31]  ? __pfx___schedule+0x10/0x10
[  355.507962][   T31]  ? schedule+0x90/0x2b0
[  355.512279][   T31]  schedule+0x164/0x2b0
[  355.516587][   T31]  schedule_preempt_disabled+0x13/0x30
[  355.522103][   T31]  __mutex_lock+0x7bf/0x1550
[  355.526838][   T31]  ? __mutex_lock+0x5d4/0x1550
[  355.531644][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  355.536464][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  355.541530][   T31]  ? stack_trace_save+0xa9/0x100
[  355.546800][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.551801][   T31]  ? radix_tree_lookup+0x240/0x290
[  355.557037][   T31]  genl_rcv_msg+0x10b/0x7a0
[  355.561690][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.566830][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.571809][   T31]  netlink_rcv_skb+0x226/0x4a0
[  355.576843][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.581932][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.587707][   T31]  ? down_read+0x2be/0x330
[  355.587832][ T5640] Bluetooth: hci19: command tx timeout
[  355.592202][   T31]  genl_rcv+0x28/0x40
[  355.592260][   T31]  netlink_unicast+0x7bb/0x940
[  355.592288][   T31]  netlink_sendmsg+0x813/0xb40
[  355.592316][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.592341][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  355.592368][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.592388][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  355.592416][   T31]  __sys_sendto+0x408/0x5a0
[  355.592439][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  355.592480][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  355.592505][   T31]  __x64_sys_sendto+0xde/0x100
[  355.592523][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.592544][   T31]  do_syscall_64+0x174/0x580
[  355.592561][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.592579][   T31]  ? clear_bhb_loop+0x40/0x90
[  355.592600][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.592620][   T31] RIP: 0033:0x7feb1eb5d68e
[  355.592638][   T31] RSP: 002b:00007feb1f9ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  355.592659][   T31] RAX: ffffffffffffffda RBX: 00007feb1f9ae6c0 RCX: 00007feb1eb5d68e
[  355.592672][   T31] RDX: 0000000000000020 RSI: 00007feb1f9ad000 RDI: 0000000000000004
[  355.592684][   T31] RBP: 0000000000000000 R08: 00007feb1f9acf04 R09: 000000000000000c
[  355.592696][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  355.592707][   T31] R13: 00007feb1f9acf58 R14: 00007feb1f9ad000 R15: 0000000000000000
[  355.592734][   T31]  </TASK>
[  355.592771][   T31] INFO: task syz.3.759:8466 blocked for more than 144 seconds.
[  355.592786][   T31]       Not tainted syzkaller #0
[  355.592796][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.592804][   T31] task:syz.3.759       state:D stack:28424 pid:8466  tgid:8465  ppid:5642   task_flags:0x400140 flags:0x00080002
[  355.592872][   T31] Call Trace:
[  355.592878][   T31]  <TASK>
[  355.592889][   T31]  __schedule+0x17d9/0x56c0
[  355.592940][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.592962][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.592987][   T31]  ? unwind_next_frame+0x8f/0x2550
[  355.593018][   T31]  ? __pfx___schedule+0x10/0x10
[  355.593050][   T31]  ? schedule+0x90/0x2b0
[  355.593076][   T31]  schedule+0x164/0x2b0
[  355.593103][   T31]  schedule_preempt_disabled+0x13/0x30
[  355.593127][   T31]  __mutex_lock+0x7bf/0x1550
[  355.593148][   T31]  ? __mutex_lock+0x5d4/0x1550
[  355.593168][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  355.593194][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  355.593212][   T31]  ? stack_trace_save+0xa9/0x100
[  355.593241][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.593263][   T31]  ? radix_tree_lookup+0x240/0x290
[  355.593291][   T31]  genl_rcv_msg+0x10b/0x7a0
[  355.593321][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.593346][   T31]  ? __lock_acquire+0x683/0x2cf0
[  355.593384][   T31]  netlink_rcv_skb+0x226/0x4a0
[  355.593406][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.593434][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.593466][   T31]  ? down_read+0x2be/0x330
[  355.593487][   T31]  genl_rcv+0x28/0x40
[  355.593510][   T31]  netlink_unicast+0x7bb/0x940
[  355.593536][   T31]  netlink_sendmsg+0x813/0xb40
[  355.899835][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.905546][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  355.910585][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.916086][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  355.921160][   T31]  __sys_sendto+0x408/0x5a0
[  355.925797][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  355.930921][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  355.936312][   T31]  __x64_sys_sendto+0xde/0x100
[  355.941209][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.947408][   T31]  do_syscall_64+0x174/0x580
[  355.952037][   T31]  ? trace_irq_disable+0x3b/0x140
[  355.957379][   T31]  ? clear_bhb_loop+0x40/0x90
[  355.962104][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.968121][   T31] RIP: 0033:0x7fb47935d68e
[  355.972569][   T31] RSP: 002b:00007fb47a256e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  355.981074][   T31] RAX: ffffffffffffffda RBX: 00007fb47a2586c0 RCX: 00007fb47935d68e
[  355.989406][   T31] RDX: 0000000000000024 RSI: 00007fb47a257000 RDI: 0000000000000005
[  355.997526][   T31] RBP: 0000000000000000 R08: 00007fb47a256f04 R09: 000000000000000c
[  356.005827][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  356.013915][   T31] R13: 00007fb47a256f58 R14: 00007fb47a257000 R15: 0000000000000000
[  356.021968][   T31]  </TASK>
[  356.025269][   T31] 
[  356.025269][   T31] Showing all locks held in the system:
[  356.033128][   T31] 1 lock held by khungtaskd/31:
[  356.038159][   T31]  #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  356.048378][   T31] 2 locks held by dhcpcd/5288:
[  356.053201][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.061616][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.070706][   T31] 2 locks held by getty/5384:
[  356.075482][   T31]  #0: ffff8880356280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  356.085414][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  356.095647][   T31] 1 lock held by udevd/5727:
[  356.100292][   T31]  #0: ffff8880266e0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  356.109667][   T31] 6 locks held by syz.2.750/8445:
[  356.115050][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.123335][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.132445][   T31]  #2: ffff88801c778a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80
[  356.142942][   T31]  #3: ffff8880262b5a68 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  356.152498][   T31]  #4: ffff8880262b5430 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  356.164716][   T31]  #5: ffff8880262b5468 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  356.177296][   T31] 2 locks held by syz.0.756/8462:
[  356.182360][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.190699][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.200079][   T31] 2 locks held by syz.1.758/8464:
[  356.205215][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.213479][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.222622][   T31] 2 locks held by syz.3.759/8466:
[  356.228495][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.237172][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.246350][   T31] 2 locks held by syz.4.762/8480:
[  356.251685][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.260388][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.269741][   T31] 2 locks held by syz.4.762/8481:
[  356.274853][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.283104][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.292213][   T31] 2 locks held by syz-executor/8486:
[  356.297604][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.306334][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.315455][   T31] 2 locks held by syz-executor/8488:
[  356.320793][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.329967][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.340312][   T31] 2 locks held by syz-executor/8509:
[  356.345729][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.354225][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.364492][   T31] 2 locks held by syz-executor/8510:
[  356.369850][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.378133][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.387488][   T31] 2 locks held by syz-executor/8557:
[  356.392837][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.401355][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.410461][   T31] 2 locks held by syz-executor/8576:
[  356.415852][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.424288][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.433437][   T31] 2 locks held by syz-executor/8578:
[  356.439034][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.447620][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.456756][   T31] 2 locks held by syz-executor/8609:
[  356.462090][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.470538][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.479657][   T31] 2 locks held by syz-executor/8612:
[  356.485063][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.493305][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.502408][   T31] 2 locks held by syz-executor/8642:
[  356.507768][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.516085][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.525173][   T31] 2 locks held by syz-executor/8666:
[  356.530467][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.538834][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.548337][   T31] 2 locks held by syz-executor/8668:
[  356.554036][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.562330][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.571423][   T31] 2 locks held by syz-executor/8698:
[  356.576818][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.585146][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.594247][   T31] 2 locks held by syz-executor/8708:
[  356.599552][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.607922][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.617002][   T31] 2 locks held by syz-executor/8730:
[  356.622290][   T31]  #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  356.630706][   T31]  #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  356.639865][   T31] 
[  356.642258][   T31] =============================================
[  356.642258][   T31] 
[  356.650836][   T31] NMI backtrace for cpu 1
[  356.650853][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  356.650876][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  356.650888][   T31] Call Trace:
[  356.650896][   T31]  <TASK>
[  356.650905][   T31]  dump_stack_lvl+0xe8/0x150
[  356.650937][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  356.650966][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  356.650993][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  356.651023][   T31]  sys_info+0x135/0x170
[  356.651048][   T31]  watchdog+0xfd7/0x1030
[  356.651089][   T31]  ? watchdog+0x1c7/0x1030
[  356.651129][   T31]  kthread+0x388/0x470
[  356.651156][   T31]  ? __pfx_watchdog+0x10/0x10
[  356.651186][   T31]  ? __pfx_kthread+0x10/0x10
[  356.651211][   T31]  ret_from_fork+0x514/0xb70
[  356.651269][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  356.651295][   T31]  ? __switch_to+0xc89/0x1420
[  356.651332][   T31]  ? __pfx_kthread+0x10/0x10
[  356.651358][   T31]  ret_from_fork_asm+0x1a/0x30
[  356.651402][   T31]  </TASK>
[  356.651411][   T31] Sending NMI from CPU 1 to CPUs 0:
[  356.762144][    C0] NMI backtrace for cpu 0
[  356.762179][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  356.762201][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  356.762213][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  356.762249][    C0] Code: 8c 76 02 e9 53 04 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 c9 15 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  356.762274][    C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246
[  356.762291][    C0] RAX: 0000000000135735 RBX: ffffffff819ab370 RCX: 0000000080000001
[  356.762305][    C0] RDX: 0000000000000001 RSI: ffffffff8dfe0307 RDI: ffffffff8c2a9f80
[  356.762318][    C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b
[  356.762340][    C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000
[  356.762353][    C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000
[  356.762368][    C0] FS:  0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000
[  356.762383][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.762396][    C0] CR2: 00007f21215f2a10 CR3: 000000000e746000 CR4: 00000000003526f0
[  356.762414][    C0] Call Trace:
[  356.762423][    C0]  <TASK>
[  356.762431][    C0]  default_idle+0x9/0x20
[  356.762450][    C0]  default_idle_call+0x72/0xb0
[  356.762472][    C0]  do_idle+0x2e0/0x540
[  356.762493][    C0]  ? __pfx_do_idle+0x10/0x10
[  356.762517][    C0]  cpu_startup_entry+0x43/0x60
[  356.762535][    C0]  rest_init+0x2de/0x300
[  356.762568][    C0]  start_kernel+0x392/0x3e0
[  356.762627][    C0]  x86_64_start_reservations+0x24/0x30
[  356.762655][    C0]  x86_64_start_kernel+0x137/0x1b0
[  356.762682][    C0]  common_startup_64+0x13e/0x157
[  356.762718][    C0]  </TASK>
[  356.938652][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  356.945517][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  356.954657][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  356.964765][   T31] Call Trace:
[  356.968083][   T31]  <TASK>
[  356.971050][   T31]  vpanic+0x56c/0xa60
[  356.975076][   T31]  ? __pfx___schedule+0x10/0x10
[  356.979982][   T31]  ? __pfx_vpanic+0x10/0x10
[  356.984518][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  356.990714][   T31]  panic+0xc5/0xd0
[  356.994470][   T31]  ? __pfx_panic+0x10/0x10
[  356.998922][   T31]  ? preempt_schedule_common+0x82/0xd0
[  357.004422][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  357.009886][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  357.016073][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  357.022257][   T31]  watchdog+0x1030/0x1030
[  357.026630][   T31]  ? watchdog+0x1c7/0x1030
[  357.031091][   T31]  kthread+0x388/0x470
[  357.035184][   T31]  ? __pfx_watchdog+0x10/0x10
[  357.039909][   T31]  ? __pfx_kthread+0x10/0x10
[  357.044521][   T31]  ret_from_fork+0x514/0xb70
[  357.049143][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  357.054280][   T31]  ? __switch_to+0xc89/0x1420
[  357.058992][   T31]  ? __pfx_kthread+0x10/0x10
[  357.063803][   T31]  ret_from_fork_asm+0x1a/0x30
[  357.068630][   T31]  </TASK>
[  357.072638][   T31] Kernel Offset: disabled
[  357.077016][   T31] Rebooting in 86400 seconds..