last executing test programs:

20.445153566s ago: executing program 4 (id=1903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000050700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

20.195745235s ago: executing program 4 (id=1906):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, 0x0, 0x0)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x42}, 0xfc40)
unshare(0x2c020400)
pipe(&(0x7f0000000480)={<r9=>0xffffffffffffffff})
r10 = socket$netlink(0x10, 0x3, 0x0)
splice(r9, 0x0, r10, 0x0, 0x10d00, 0xa)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="840000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000084080000400012800e00010069703665727370616e0000002c00028014000700fe8000000000000000000000000000340600020000000000080005003c0000000400120008000a00", @ANYRES32, @ANYBLOB="0a000100000000ff001f"], 0x84}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r12 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r13 = openat$cgroup_int(r12, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r13, 0xffffffffffffffff, 0x0, 0x38)
unshare(0x2a020400)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz1\x00', 0x200002, 0x0)
vmsplice(r14, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffeff}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

19.540876811s ago: executing program 0 (id=1913):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x12})
write(r1, &(0x7f0000000340), 0x11000)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'pimreg0\x00'})
r12 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', <r13=>0x0})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.530424878s ago: executing program 1 (id=1914):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {0x0}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {0x0}, {0x0}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}], 0x6, &(0x7f00000014c0)}}, {{&(0x7f0000000500)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0xfd1}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d407e1d", 0xc8}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000014c0)=""/265, 0x10b}, {&(0x7f0000001200)=""/193, 0xc1}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000600)=""/77, 0x4d}], 0x8}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x33, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}]}}]}, 0x4c}}, 0x24004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0, 0x10}, {0xffe0, 0x1}, {0xc, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000340))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

19.382957992s ago: executing program 4 (id=1915):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r0, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0xffffffffffffff44)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4}, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r6, r5, 0x29}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x734157cc}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x4044)

19.283968209s ago: executing program 1 (id=1916):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000001402000000020000000000001200000020"], 0x0, 0x34, 0x0, 0x1, 0x726}, 0x28)

19.238982508s ago: executing program 1 (id=1917):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c00"/12], 0x20}, 0x20000890)

19.126911791s ago: executing program 1 (id=1918):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}, 0x1, 0x0, 0x1000000}, 0x0)

19.073039036s ago: executing program 4 (id=1919):
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000080000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x4000000)

18.982744378s ago: executing program 0 (id=1920):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000f07000000", @ANYRES32=r2, @ANYBLOB="810200000000000014001a80100004"], 0x34}}, 0x0)

18.912219234s ago: executing program 4 (id=1921):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x61d9, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={'team_slave_1\x00', {0x2, 0x4e21, @multicast2}})
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
write$tun(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.911861092s ago: executing program 1 (id=1922):
socket$netlink(0x10, 0x3, 0x13)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd}]})
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0)

18.829476078s ago: executing program 0 (id=1923):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0x9ec, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}], 0x38)

18.740340917s ago: executing program 4 (id=1924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x110}, 0x20008004)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc4, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x27}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r4, 0xb7f6ab589daaa11, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701fcffffff00c80ef277c18ca69fa954cd000100017c0000040042800c0001800600060065580000100002800c00ec7f080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048051}, 0x400c060)

18.70627367s ago: executing program 0 (id=1925):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x801, 0x0, r3, 0x15b4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
close(r3)
setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/181, 0xb5}, {&(0x7f0000000100)=""/19, 0x13}, {&(0x7f0000000300)=""/66, 0x42}], 0x6, &(0x7f0000001900)=""/221, 0xdd}, 0x4}, {{&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)=""/67, 0x43}, {&(0x7f0000001a80)=""/220, 0xdc}, {&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000001b80)=""/146, 0x92}], 0x4, &(0x7f0000001c80)=""/190, 0xbe}, 0x8}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d40)=""/109, 0x6d}, {&(0x7f0000001dc0)=""/217, 0xd9}, {&(0x7f0000001ec0)=""/186, 0xba}, {&(0x7f0000001f80)=""/226, 0xe2}], 0x4, &(0x7f00000020c0)=""/23, 0x17}, 0x2}], 0x3, 0x40000140, &(0x7f00000021c0)={0x77359400})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x3, 0xff, 0x0, @empty}}}}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

18.641964624s ago: executing program 1 (id=1926):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50)
unshare(0x40600)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4)
sendmmsg$inet(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="27f9de75ae16a4cf8319512231178b1a83a8c8fcf0b1be370180c58e40e4dc6e0f200df180078e8555ed61e962de0ebeaf4841e966f29651e7d6c64e6f0d841a9b05a541c855253e39bb787e5e3300f7c78ee06483b4ee4c32817461e31a19eac4c88841ba5632d9b4269bf23482d70326a381337f48cf24f6180bdfa9e9d10000", 0x81}], 0x1}}], 0x2, 0x20000000)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008020}, 0x40c0)

18.292548017s ago: executing program 0 (id=1927):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881)
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)
accept4(r3, 0x0, 0x0, 0x80000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000700)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000090c0), 0x0, 0x10100, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x7, 0x4)
unshare(0x22020600)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000100))
getsockopt$inet_tcp_buf(r8, 0x6, 0x13, 0x0, &(0x7f00000000c0))

17.953877248s ago: executing program 3 (id=1929):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2e}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
unshare(0x22020400)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f0000001220f50004"], 0x20)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r8=>r5, 0x8, 0x700, 0x0, 0x1b3, {{0x28, 0x4, 0x3, 0x34, 0xa0, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@generic={0x94, 0x11, "3dbb0e9c1264ce3fe0a2c8330293d2"}, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp={0x44, 0x24, 0x33, 0x0, 0xf, [0x1, 0x4, 0x7, 0x4, 0x1, 0x8, 0xdf50, 0x1]}, @timestamp_prespec={0x44, 0x44, 0xad, 0x3, 0x9, [{@multicast2, 0x1}, {@loopback, 0x1ff}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@empty, 0x8001}, {@local, 0x76}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3ff}, {@loopback, 0x8}]}, @generic={0x86, 0x4, "31b5"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000440)={'gretap0\x00', <r9=>r5, 0x40, 0x20, 0x456, 0xffff4807, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp={0x44, 0x14, 0xda, 0x0, 0x1, [0xc, 0x8, 0x7, 0x8]}, @noop]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newneigh={0x34, 0x1c, 0x300, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, r8, 0x4, 0x4, 0x5}, [@NDA_IFINDEX={0x8, 0x8, r5}, @NDA_VNI={0x8, 0x7, 0x7}, @NDA_IFINDEX={0x8, 0x8, r9}]}, 0x34}}, 0x40000)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008801}, 0x41)

17.904699806s ago: executing program 0 (id=1930):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$alg(0x26, 0x5, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000600000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0)

17.754536417s ago: executing program 3 (id=1933):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="65c0539920d552dd4328c14100c11977bb", @ANYRES32], 0x18}}, 0x400c0c0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072009fb3000000000000000007"], 0x18}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

17.65609635s ago: executing program 3 (id=1934):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettaction={0x1c, 0x32, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000090}, 0x4040040)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xc2, 0xbd, &(0x7f0000000580)="1106230b68c6c45981a84efd95b76c522cbfa06098e9cc89535471b54c012ac2d74846d06bb6f0c6b447c5bba085d087b8fea8028a93981d1a7374fa279f9474ceaf1ae0901baddbca6bab4e4afb177d9b6db8c0d0639e59fb8bd2426c57b73bc126419b132325b7e0feec259ac5fcb38e498f4635a313510f78bc7de042dd43c9645d3d916d8d457d11ad305e17fabdf229dd71e53565a4103a84df4c113b65fef9472788e1fb72066e2e36d254340308207646ebb36df11f6ff1bb1dc41b750294", &(0x7f0000000680)=""/189, 0x2, 0x0, 0x8d, 0xe2, &(0x7f0000000740)="a3844bcf7e8aee4d5ec5fdf38a7d28de73d1d588dae389fc3c0d39b4a505c6324ec4e5fdfc0347849f04e533c49fa62a4f29723951e179dbcd29f9d1665bda7b80564419e180f46075d6fcc47473b28969d829d8ee0c10ebbc91f40dab32594b9909bb667289ff3545b4488c666c601376acc590c517e3c9156ba799c4c7661a4eb9aac3920c639c23399304f0", &(0x7f0000000800)="3c18419c9053b84fd7d7b3c0b6851f260921721bde70cb92363bfd66dd1cf822f95463f6b55d11a0d361273704754f3c7f9b3a413057c375ceb638ee32ac790bfb4f75c06643a9d9b34aac27743723c800a0f556e3ff74d996e46039946ec3b917a6f3ca07f73c26873ca1192c286b9f2b30e53ba6ffb448e9322b6fb65856385a7edfaefdb0b9a6bdf7cab70c25a544796befcbbe00a194e526e337a786ec0e9f27893aba56db5d2b9febc8b8a40ee3db7a75bf8aaefccea28a73847291f94fa22bc9a433f29c2096a06c6b9f9e5ae91904c94d9683cbf24f8380b58169b6c88abe", 0x2, 0x0, 0x1}, 0x50)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r1, r3, 0x0, 0xffffffff004)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000b14100025bd7000fedbdf03000001000200000008000300030000000800030003000000080003000200000008003f00020000000800030002000000"], 0x40}}, 0x81)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00feff000401010000000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x600000c1}, 0x4801)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x9, 0x2, 0x0, 0x4, 0x0, 0x3, [{0xa, 0x2, 0xd3}, {0x7, 0x2, 0xc15}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000000140)=""/96, 0x43, 0x60, 0x0, 0x2, 0x10000, @value=r3}, 0x28)

17.447332779s ago: executing program 2 (id=1937):
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r0, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x40000000}}], 0x1, 0x4008040)

17.336116054s ago: executing program 2 (id=1938):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback={0x201}}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = epoll_create(0x3ff)
r3 = epoll_create1(0x80000)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x62002011})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
writev(r5, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)="927d53fb", 0x4}], 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000006c0)=""/21, 0x15}], 0x63}, 0x4}], 0x2, 0x60, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x2a, 0x5, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x2771}]}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20)

17.279391866s ago: executing program 3 (id=1939):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a"], 0x20}, 0x20000890)

17.134017394s ago: executing program 3 (id=1940):
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x2e, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f)

17.052198591s ago: executing program 3 (id=1941):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x6400, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

16.415954022s ago: executing program 2 (id=1942):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000071101c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x5, 0x9, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff}})

16.278493676s ago: executing program 2 (id=1943):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x10c, 0x30, 0x1, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_mpls={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x99, 0x4, "d13961711e49408313ac2f449ff95515479f8c2543a55fcc5173d87591bc0358956721283d3272eb13332b31084a6d640bb0c52972f9000000000000005a1a028c6e7ee432d290017bc14c81ab73455f865b0e4f3e9cbee6a6668733af49eecc1f2d603c325c728688eb16db4c172aa6312d595ee7d29e5298f3547c8eefeeb541eb6ab426b77a81bbcca2e8b8a20cf2f0723e5a41"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x10c}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0)

16.140113897s ago: executing program 2 (id=1944):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0000f3}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

15.094378789s ago: executing program 2 (id=1945):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20)
recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/21, 0x15}, 0x4b6e}], 0x1, 0x820b, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0xe)
unshare(0x0)

3.510737549s ago: executing program 32 (id=1926):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50)
unshare(0x40600)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4)
sendmmsg$inet(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="27f9de75ae16a4cf8319512231178b1a83a8c8fcf0b1be370180c58e40e4dc6e0f200df180078e8555ed61e962de0ebeaf4841e966f29651e7d6c64e6f0d841a9b05a541c855253e39bb787e5e3300f7c78ee06483b4ee4c32817461e31a19eac4c88841ba5632d9b4269bf23482d70326a381337f48cf24f6180bdfa9e9d10000", 0x81}], 0x1}}], 0x2, 0x20000000)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008020}, 0x40c0)

3.484597473s ago: executing program 33 (id=1924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x110}, 0x20008004)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc4, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x27}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r4, 0xb7f6ab589daaa11, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701fcffffff00c80ef277c18ca69fa954cd000100017c0000040042800c0001800600060065580000100002800c00ec7f080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048051}, 0x400c060)

2.4903393s ago: executing program 34 (id=1930):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$alg(0x26, 0x5, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000600000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0)

1.98998679s ago: executing program 35 (id=1941):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x6400, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

0s ago: executing program 36 (id=1945):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20)
recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/21, 0x15}, 0x4b6e}], 0x1, 0x820b, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r6, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0xe)
unshare(0x0)

kernel console output (not intermixed with test programs):

] R13: 00007fbd3fa16038 R14: 00007fbd3fa15fa0 R15: 00007ffef39eccb8
[  225.021270][T10404]  </TASK>
[  225.476890][T10410] lo speed is unknown, defaulting to 1000
[  225.485476][T10410] gretap0 speed is unknown, defaulting to 1000
[  225.629981][   T24] net_ratelimit: 1 callbacks suppressed
[  225.630005][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.392833][T10444] __nla_validate_parse: 3 callbacks suppressed
[  226.392854][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1280'.
[  226.464238][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'.
[  226.590188][ T2154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.672376][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.867886][T10454] nbd1: detected capacity change from 0 to 63
[  226.904108][T10452] netlink: 'syz.4.1282': attribute type 1 has an invalid length.
[  226.936623][T10452] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1282'.
[  227.276429][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'.
[  227.318879][T10469] netem: incorrect ge model size
[  227.336768][T10469] netem: change failed
[  227.417821][ T5828] block nbd1: Receive control failed (result -104)
[  227.672090][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1287'.
[  227.717165][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.790725][T10475] nbd: socks must be embedded in a SOCK_ITEM attr
[  227.853507][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1287'.
[  227.900130][T10491] nbd: device at index 64 is going down
[  228.215217][T10509] sctp: [Deprecated]: syz.4.1294 (pid 10509) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.215217][T10509] Use struct sctp_sack_info instead
[  228.749973][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.070304][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.141178][T10547] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  229.160164][   T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.349887][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'.
[  229.381651][T10557] xt_hashlimit: size too large, truncated to 1048576
[  229.401422][T10559] lo speed is unknown, defaulting to 1000
[  229.409486][T10559] gretap0 speed is unknown, defaulting to 1000
[  229.432199][T10557] xt_hashlimit: max too large, truncated to 1048576
[  229.448543][T10561] hsr0: entered promiscuous mode
[  229.468918][T10561] macvlan3: entered allmulticast mode
[  229.490216][T10561] hsr0: entered allmulticast mode
[  229.507869][T10561] hsr_slave_0: entered allmulticast mode
[  229.521610][T10561] hsr_slave_1: entered allmulticast mode
[  230.100881][T10592] netlink: 'syz.4.1311': attribute type 32 has an invalid length.
[  230.109032][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'.
[  230.293952][T10592] bond1: option coupled_control: invalid value (180)
[  230.332692][T10592] bond1 (unregistering): Released all slaves
[  231.312692][T10621] FAULT_INJECTION: forcing a failure.
[  231.312692][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.375462][T10621] CPU: 0 UID: 0 PID: 10621 Comm: syz.1.1321 Not tainted syzkaller #0 PREEMPT(full) 
[  231.375543][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  231.375555][T10621] Call Trace:
[  231.375564][T10621]  <TASK>
[  231.375572][T10621]  dump_stack_lvl+0xe8/0x150
[  231.375607][T10621]  should_fail_ex+0x412/0x560
[  231.375642][T10621]  _copy_from_user+0x2d/0xb0
[  231.375667][T10621]  __copy_msghdr+0x3c5/0x5b0
[  231.375699][T10621]  ___sys_sendmsg+0x213/0x360
[  231.375730][T10621]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.375860][T10621]  ? __fget_files+0x2a/0x420
[  231.375888][T10621]  ? __fget_files+0x3a0/0x420
[  231.375926][T10621]  __x64_sys_sendmsg+0x1bd/0x2a0
[  231.375954][T10621]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.375989][T10621]  ? __pfx_ksys_write+0x10/0x10
[  231.376024][T10621]  do_syscall_64+0x14d/0xf80
[  231.376053][T10621]  ? trace_irq_disable+0x3b/0x150
[  231.376069][T10621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.376089][T10621]  ? clear_bhb_loop+0x40/0x90
[  231.376113][T10621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.376133][T10621] RIP: 0033:0x7fd64b19c799
[  231.376154][T10621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.376171][T10621] RSP: 002b:00007fd64c0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.376194][T10621] RAX: ffffffffffffffda RBX: 00007fd64b415fa0 RCX: 00007fd64b19c799
[  231.376209][T10621] RDX: 0000000020000890 RSI: 00002000000000c0 RDI: 0000000000000003
[  231.376222][T10621] RBP: 00007fd64c0a5090 R08: 0000000000000000 R09: 0000000000000000
[  231.376234][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.376247][T10621] R13: 00007fd64b416038 R14: 00007fd64b415fa0 R15: 00007ffc86e84428
[  231.376291][T10621]  </TASK>
[  231.679352][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'.
[  231.866986][T10633] syzkaller0: refused to change device tx_queue_len
[  232.108140][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'.
[  232.118086][T10646] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1330'.
[  232.127528][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'.
[  232.148562][T10646] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1330'.
[  232.201253][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'.
[  232.230297][T10650] netlink: 'syz.4.1330': attribute type 1 has an invalid length.
[  232.238442][T10650] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1330'.
[  232.341948][T10659] netlink: 4236 bytes leftover after parsing attributes in process `syz.1.1332'.
[  232.401989][T10646] lo speed is unknown, defaulting to 1000
[  232.432833][T10646] gretap0 speed is unknown, defaulting to 1000
[  232.496367][T10666] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  232.798235][T10679] nbd: must specify a device to reconfigure
[  233.713439][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'.
[  233.749426][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'.
[  234.493826][T10741] nbd: must specify a device to reconfigure
[  234.708297][T10751] netlink: 'syz.0.1358': attribute type 5 has an invalid length.
[  234.944204][T10759] IPv6: Can't replace route, no match found
[  234.962109][T10759] IPv6: Can't replace route, no match found
[  234.984918][T10759] IPv6: Can't replace route, no match found
[  234.991972][T10759] IPv6: Can't replace route, no match found
[  235.150584][T10768] vlan0: entered promiscuous mode
[  235.322360][T10779] FAULT_INJECTION: forcing a failure.
[  235.322360][T10779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.353424][T10776] netlink: 'syz.4.1366': attribute type 11 has an invalid length.
[  235.370873][T10779] CPU: 0 UID: 0 PID: 10779 Comm: syz.2.1367 Not tainted syzkaller #0 PREEMPT(full) 
[  235.370903][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  235.370915][T10779] Call Trace:
[  235.370923][T10779]  <TASK>
[  235.370931][T10779]  dump_stack_lvl+0xe8/0x150
[  235.370966][T10779]  should_fail_ex+0x412/0x560
[  235.371001][T10779]  _copy_from_user+0x2d/0xb0
[  235.371027][T10779]  csum_and_copy_from_iter_full+0x1e7/0x1f00
[  235.371077][T10779]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  235.371113][T10779]  ? rcu_is_watching+0x15/0xb0
[  235.371142][T10779]  ? trace_kmalloc+0x2a/0x110
[  235.371167][T10779]  ip_generic_getfrag+0x149/0x2d0
[  235.371197][T10779]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  235.371225][T10779]  ? __alloc_skb+0x4e5/0x7d0
[  235.371245][T10779]  ? skb_put+0x11b/0x210
[  235.371273][T10779]  __ip_append_data+0x31af/0x3f30
[  235.371319][T10779]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  235.371367][T10779]  ? __pfx___ip_append_data+0x10/0x10
[  235.371392][T10779]  ? do_raw_spin_lock+0x12b/0x2f0
[  235.371417][T10779]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  235.371440][T10779]  ip_append_data+0x10d/0x190
[  235.371469][T10779]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  235.371497][T10779]  udp_sendmsg+0x4d9/0x21a0
[  235.371560][T10779]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  235.371593][T10779]  ? __lock_acquire+0x6b5/0x2cf0
[  235.371626][T10779]  ? __lock_acquire+0x6b5/0x2cf0
[  235.371653][T10779]  ? __pfx_udp_sendmsg+0x10/0x10
[  235.371708][T10779]  ? aa_sk_perm+0x6d5/0x900
[  235.371745][T10779]  ? __pfx_aa_sk_perm+0x10/0x10
[  235.371769][T10779]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  235.371804][T10779]  ? __fget_files+0x3a0/0x420
[  235.371832][T10779]  ? sock_rps_record_flow+0x19/0x350
[  235.371855][T10779]  ? __pfx_inet_sendmsg+0x10/0x10
[  235.371881][T10779]  ? inet_sendmsg+0x29c/0x370
[  235.371901][T10779]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  235.371923][T10779]  ? __pfx_inet_sendmsg+0x10/0x10
[  235.371948][T10779]  __sys_sendto+0x5de/0x710
[  235.371976][T10779]  ? __pfx___sys_sendto+0x10/0x10
[  235.371997][T10779]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  235.372030][T10779]  ? __fget_files+0x3a0/0x420
[  235.372072][T10779]  ? ksys_write+0x242/0x270
[  235.372098][T10779]  ? __pfx_ksys_write+0x10/0x10
[  235.372126][T10779]  __x64_sys_sendto+0xde/0x100
[  235.372154][T10779]  do_syscall_64+0x14d/0xf80
[  235.372182][T10779]  ? trace_irq_disable+0x3b/0x150
[  235.372200][T10779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.372220][T10779]  ? clear_bhb_loop+0x40/0x90
[  235.372245][T10779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.372265][T10779] RIP: 0033:0x7f438459c799
[  235.372284][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.372301][T10779] RSP: 002b:00007f43853d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  235.372324][T10779] RAX: ffffffffffffffda RBX: 00007f4384815fa0 RCX: 00007f438459c799
[  235.372339][T10779] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003
[  235.372352][T10779] RBP: 00007f43853d4090 R08: 0000000000000000 R09: 0000000011000a00
[  235.372365][T10779] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002
[  235.372378][T10779] R13: 00007f4384816038 R14: 00007f4384815fa0 R15: 00007ffc132f7f08
[  235.372413][T10779]  </TASK>
[  235.802651][T10789] block nbd2: not configured, cannot reconfigure
[  236.304870][T10812] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  236.545847][T10824] FAULT_INJECTION: forcing a failure.
[  236.545847][T10824] name failslab, interval 1, probability 0, space 0, times 0
[  236.602414][T10824] CPU: 0 UID: 0 PID: 10824 Comm: syz.2.1380 Not tainted syzkaller #0 PREEMPT(full) 
[  236.602444][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  236.602456][T10824] Call Trace:
[  236.602465][T10824]  <TASK>
[  236.602473][T10824]  dump_stack_lvl+0xe8/0x150
[  236.602509][T10824]  should_fail_ex+0x412/0x560
[  236.602546][T10824]  should_failslab+0xa8/0x100
[  236.602574][T10824]  __kvmalloc_node_noprof+0x178/0x8a0
[  236.602600][T10824]  ? rhashtable_init_noprof+0x52e/0xa70
[  236.602623][T10824]  ? rhashtable_init_noprof+0x12d/0xa70
[  236.602659][T10824]  rhashtable_init_noprof+0x52e/0xa70
[  236.602687][T10824]  rhltable_init_noprof+0x1e/0x60
[  236.602709][T10824]  nf_tables_newtable+0x68f/0x1910
[  236.602760][T10824]  nfnetlink_rcv+0x1240/0x27b0
[  236.602819][T10824]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  236.602857][T10824]  ? ref_tracker_free+0x693/0x840
[  236.602908][T10824]  ? __netlink_deliver_tap+0x807/0x850
[  236.602930][T10824]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.602971][T10824]  netlink_unicast+0x80f/0x9b0
[  236.603028][T10824]  ? __pfx_netlink_unicast+0x10/0x10
[  236.603061][T10824]  ? netlink_sendmsg+0x650/0xb40
[  236.603081][T10824]  ? skb_put+0x11b/0x210
[  236.603110][T10824]  netlink_sendmsg+0x813/0xb40
[  236.603143][T10824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.603170][T10824]  ? aa_sock_msg_perm+0xf1/0x1b0
[  236.603202][T10824]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.603229][T10824]  ____sys_sendmsg+0x972/0x9f0
[  236.603266][T10824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.603303][T10824]  ? import_iovec+0x73/0xa0
[  236.603330][T10824]  ___sys_sendmsg+0x2a5/0x360
[  236.603363][T10824]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.603436][T10824]  ? __fget_files+0x2a/0x420
[  236.603466][T10824]  ? __fget_files+0x3a0/0x420
[  236.603507][T10824]  __x64_sys_sendmsg+0x1bd/0x2a0
[  236.603536][T10824]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.603573][T10824]  ? __pfx_ksys_write+0x10/0x10
[  236.603610][T10824]  do_syscall_64+0x14d/0xf80
[  236.603640][T10824]  ? trace_irq_disable+0x3b/0x150
[  236.603666][T10824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.603687][T10824]  ? clear_bhb_loop+0x40/0x90
[  236.603712][T10824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.603732][T10824] RIP: 0033:0x7f438459c799
[  236.603752][T10824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.603769][T10824] RSP: 002b:00007f43853d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.603792][T10824] RAX: ffffffffffffffda RBX: 00007f4384815fa0 RCX: 00007f438459c799
[  236.603808][T10824] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  236.603821][T10824] RBP: 00007f43853d4090 R08: 0000000000000000 R09: 0000000000000000
[  236.603833][T10824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.603845][T10824] R13: 00007f4384816038 R14: 00007f4384815fa0 R15: 00007ffc132f7f08
[  236.603879][T10824]  </TASK>
[  237.254180][T10840] Bluetooth: MGMT ver 1.23
[  237.262650][T10841] __nla_validate_parse: 12 callbacks suppressed
[  237.262673][T10841] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1387'.
[  238.060468][T10841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.384328][T10878] tipc: Started in network mode
[  238.411764][T10878] tipc: Node identity 4663bce4e88b, cluster identity 4711
[  238.419195][T10878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.484375][T10882] IPVS: sh: FWM 3 0x00000003 - no destination available
[  238.492111][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  238.503361][T10889] syzkaller0: entered promiscuous mode
[  238.509935][T10889] syzkaller0: entered allmulticast mode
[  238.517932][T10886] lo speed is unknown, defaulting to 1000
[  238.539990][T10886] gretap0 speed is unknown, defaulting to 1000
[  238.542878][T10878] tipc: Resetting bearer <eth:syzkaller0>
[  238.578247][T10877] tipc: Resetting bearer <eth:syzkaller0>
[  238.691246][T10893] FAULT_INJECTION: forcing a failure.
[  238.691246][T10893] name failslab, interval 1, probability 0, space 0, times 0
[  238.710641][T10877] tipc: Disabling bearer <eth:syzkaller0>
[  238.737165][T10893] CPU: 1 UID: 0 PID: 10893 Comm: syz.3.1399 Not tainted syzkaller #0 PREEMPT(full) 
[  238.737195][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  238.737207][T10893] Call Trace:
[  238.737216][T10893]  <TASK>
[  238.737225][T10893]  dump_stack_lvl+0xe8/0x150
[  238.737260][T10893]  should_fail_ex+0x412/0x560
[  238.737297][T10893]  should_failslab+0xa8/0x100
[  238.737325][T10893]  __kmalloc_cache_noprof+0x88/0x660
[  238.737350][T10893]  ? sctp_add_bind_addr+0x8c/0x370
[  238.737386][T10893]  sctp_add_bind_addr+0x8c/0x370
[  238.737421][T10893]  sctp_copy_local_addr_list+0x314/0x4f0
[  238.737454][T10893]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  238.737483][T10893]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  238.737603][T10893]  ? sctp_v4_is_any+0x35/0x60
[  238.737621][T10893]  ? sctp_copy_one_addr+0x93/0x360
[  238.737655][T10893]  sctp_bind_addr_copy+0xb3/0x3c0
[  238.737685][T10893]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  238.737716][T10893]  sctp_connect_new_asoc+0x2ff/0x6b0
[  238.737743][T10893]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  238.737773][T10893]  ? __local_bh_enable_ip+0xd0/0x130
[  238.737797][T10893]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  238.737822][T10893]  ? security_sctp_bind_connect+0x7e/0x2c0
[  238.737851][T10893]  sctp_sendmsg+0x1528/0x2c10
[  238.737890][T10893]  ? __pfx_sctp_sendmsg+0x10/0x10
[  238.737917][T10893]  ? aa_sk_perm+0x6d5/0x900
[  238.737953][T10893]  ? __pfx_aa_sk_perm+0x10/0x10
[  238.737984][T10893]  ? sock_rps_record_flow+0x19/0x350
[  238.738013][T10893]  ? inet_sendmsg+0x2f4/0x370
[  238.738041][T10893]  ____sys_sendmsg+0x80a/0x9f0
[  238.738079][T10893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  238.738115][T10893]  ? import_iovec+0x73/0xa0
[  238.738143][T10893]  ___sys_sendmsg+0x2a5/0x360
[  238.738176][T10893]  ? __pfx____sys_sendmsg+0x10/0x10
[  238.738209][T10893]  ? kstrtouint+0x6e/0xe0
[  238.738268][T10893]  ? __fget_files+0x2a/0x420
[  238.738297][T10893]  ? __fget_files+0x3a0/0x420
[  238.738338][T10893]  __sys_sendmmsg+0x27c/0x4e0
[  238.738372][T10893]  ? __pfx___sys_sendmmsg+0x10/0x10
[  238.738395][T10893]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  238.738445][T10893]  ? ksys_write+0x242/0x270
[  238.738470][T10893]  ? __pfx_ksys_write+0x10/0x10
[  238.738510][T10893]  __x64_sys_sendmmsg+0xa0/0xc0
[  238.738539][T10893]  do_syscall_64+0x14d/0xf80
[  238.738568][T10893]  ? trace_irq_disable+0x3b/0x150
[  238.738585][T10893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.738606][T10893]  ? clear_bhb_loop+0x40/0x90
[  238.738631][T10893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.738651][T10893] RIP: 0033:0x7f59eb19c799
[  238.738671][T10893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.738688][T10893] RSP: 002b:00007f59ec11c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  238.738712][T10893] RAX: ffffffffffffffda RBX: 00007f59eb415fa0 RCX: 00007f59eb19c799
[  238.738727][T10893] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003
[  238.738740][T10893] RBP: 00007f59ec11c090 R08: 0000000000000000 R09: 0000000000000000
[  238.738752][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  238.738763][T10893] R13: 00007f59eb416038 R14: 00007f59eb415fa0 R15: 00007ffca8fbf6a8
[  238.738798][T10893]  </TASK>
[  239.389641][T10904] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1404'.
[  239.406659][T10909] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1404'.
[  239.502758][T10906] batadv0: entered promiscuous mode
[  239.509930][T10906] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  240.489855][T10953] 8021q: VLANs not supported on tunl0
[  240.501844][T10953] netlink: 'syz.2.1418': attribute type 12 has an invalid length.
[  240.511095][T10953] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1418'.
[  240.730710][T10968] IPv6: NLM_F_CREATE should be specified when creating new route
[  240.758639][T10968] netlink: 'syz.0.1423': attribute type 1 has an invalid length.
[  240.972711][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'.
[  241.085533][T10985] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  241.159756][T10988] syz_tun: entered allmulticast mode
[  241.291753][T10991] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  241.297009][T10993] netlink: 'syz.0.1434': attribute type 58 has an invalid length.
[  241.747827][T11015] netlink: 4708 bytes leftover after parsing attributes in process `syz.4.1441'.
[  241.749905][T11014] FAULT_INJECTION: forcing a failure.
[  241.749905][T11014] name failslab, interval 1, probability 0, space 0, times 0
[  241.794601][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'.
[  241.804967][T11014] CPU: 1 UID: 0 PID: 11014 Comm: syz.3.1442 Not tainted syzkaller #0 PREEMPT(full) 
[  241.804994][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  241.805005][T11014] Call Trace:
[  241.805013][T11014]  <TASK>
[  241.805020][T11014]  dump_stack_lvl+0xe8/0x150
[  241.805054][T11014]  should_fail_ex+0x412/0x560
[  241.805087][T11014]  should_failslab+0xa8/0x100
[  241.805116][T11014]  __kmalloc_cache_noprof+0x88/0x660
[  241.805141][T11014]  ? unix_prepare_fpl+0xf3/0x590
[  241.805162][T11014]  ? __kmalloc_cache_noprof+0x15b/0x660
[  241.805189][T11014]  unix_prepare_fpl+0xf3/0x590
[  241.805216][T11014]  unix_scm_to_skb+0x293/0x3f0
[  241.805251][T11014]  unix_dgram_sendmsg+0x48b/0x18e0
[  241.805309][T11014]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  241.805338][T11014]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  241.805381][T11014]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  241.805414][T11014]  ____sys_sendmsg+0x972/0x9f0
[  241.805450][T11014]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.805487][T11014]  ? import_iovec+0x73/0xa0
[  241.805514][T11014]  ___sys_sendmsg+0x2a5/0x360
[  241.805545][T11014]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.805609][T11014]  ? __fget_files+0x2a/0x420
[  241.805638][T11014]  ? __fget_files+0x3a0/0x420
[  241.805688][T11014]  __x64_sys_sendmsg+0x1bd/0x2a0
[  241.805716][T11014]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.805749][T11014]  ? __pfx_ksys_write+0x10/0x10
[  241.805783][T11014]  do_syscall_64+0x14d/0xf80
[  241.805811][T11014]  ? trace_irq_disable+0x3b/0x150
[  241.805829][T11014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.805850][T11014]  ? clear_bhb_loop+0x40/0x90
[  241.805874][T11014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.805894][T11014] RIP: 0033:0x7f59eb19c799
[  241.805914][T11014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.805932][T11014] RSP: 002b:00007f59ec11c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.805954][T11014] RAX: ffffffffffffffda RBX: 00007f59eb415fa0 RCX: 00007f59eb19c799
[  241.805968][T11014] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000004
[  241.805981][T11014] RBP: 00007f59ec11c090 R08: 0000000000000000 R09: 0000000000000000
[  241.805999][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  241.806011][T11014] R13: 00007f59eb416038 R14: 00007f59eb415fa0 R15: 00007ffca8fbf6a8
[  241.806043][T11014]  </TASK>
[  242.139747][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  242.155299][T11017] netlink: 'syz.3.1443': attribute type 9 has an invalid length.
[  242.163290][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'.
[  242.180461][T11017] gretap0: entered promiscuous mode
[  242.186177][T11017] macvlan2: entered promiscuous mode
[  242.192818][T11017] macvlan2: entered allmulticast mode
[  242.198265][T11017] gretap0: entered allmulticast mode
[  242.222260][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'.
[  242.231609][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1443'.
[  243.061728][T11046] tipc: Started in network mode
[  243.066672][T11046] tipc: Node identity 2e1681470ba1, cluster identity 4711
[  243.110981][T11046] tipc: Enabled bearer <eth:hsr0>, priority 10
[  243.544597][T11070] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1460'.
[  243.588483][T11070] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1460'.
[  243.630083][T11078] netlink: 'syz.0.1463': attribute type 1 has an invalid length.
[  243.638624][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1462'.
[  243.670854][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1462'.
[  243.787397][T11092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1462'.
[  243.797552][T11092] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1462'.
[  243.870592][T11078] 8021q: adding VLAN 0 to HW filter on device bond6
[  243.938203][T11085] bond6: (slave veth11): Enslaving as an active interface with a down link
[  244.197601][T11104] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1467'.
[  244.231573][  T797] tipc: Node number set to 632783175
[  244.677387][T11104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.735458][T11104] veth0_vlan: left promiscuous mode
[  244.804455][T11104] bond0: left promiscuous mode
[  244.809589][T11104] bond_slave_0: left promiscuous mode
[  244.816608][T11104] bond_slave_1: left promiscuous mode
[  244.902757][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'.
[  244.927722][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.991060][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.019875][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.050026][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.164396][T11148] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  245.261030][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'.
[  245.271760][T11157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1475'.
[  245.281934][T11155] netem: incorrect ge model size
[  245.287341][T11155] netem: change failed
[  245.308158][T11156] netlink: 'syz.4.1476': attribute type 39 has an invalid length.
[  245.423090][T11156] syz_tun (unregistering): left allmulticast mode
[  245.685756][T11172] netlink: 'syz.2.1481': attribute type 9 has an invalid length.
[  246.786895][T11223] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  247.011520][T11239] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:21
[  247.124242][T11242] syzkaller0: entered promiscuous mode
[  247.136236][T11242] syzkaller0: entered allmulticast mode
[  247.267904][T11242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.446517][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  247.483542][T11267] FAULT_INJECTION: forcing a failure.
[  247.483542][T11267] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.540023][T11267] CPU: 1 UID: 0 PID: 11267 Comm: syz.0.1508 Not tainted syzkaller #0 PREEMPT(full) 
[  247.540055][T11267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  247.540067][T11267] Call Trace:
[  247.540076][T11267]  <TASK>
[  247.540084][T11267]  dump_stack_lvl+0xe8/0x150
[  247.540120][T11267]  should_fail_ex+0x412/0x560
[  247.540155][T11267]  _copy_from_user+0x2d/0xb0
[  247.540180][T11267]  generic_map_update_batch+0x648/0x990
[  247.540216][T11267]  ? __pfx_generic_map_update_batch+0x10/0x10
[  247.540242][T11267]  ? __fget_files+0x2a/0x420
[  247.540277][T11267]  ? __pfx_generic_map_update_batch+0x10/0x10
[  247.540300][T11267]  bpf_map_do_batch+0x39b/0x630
[  247.540326][T11267]  __sys_bpf+0x7c1/0x950
[  247.540347][T11267]  ? __pfx___sys_bpf+0x10/0x10
[  247.540381][T11267]  ? ksys_write+0x242/0x270
[  247.540405][T11267]  ? __pfx_ksys_write+0x10/0x10
[  247.540448][T11267]  __x64_sys_bpf+0x7c/0x90
[  247.540476][T11267]  do_syscall_64+0x14d/0xf80
[  247.540505][T11267]  ? trace_irq_disable+0x3b/0x150
[  247.540521][T11267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.540542][T11267]  ? clear_bhb_loop+0x40/0x90
[  247.540567][T11267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.540586][T11267] RIP: 0033:0x7fa2ff39c799
[  247.540606][T11267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.540622][T11267] RSP: 002b:00007fa3001f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  247.540644][T11267] RAX: ffffffffffffffda RBX: 00007fa2ff615fa0 RCX: 00007fa2ff39c799
[  247.540659][T11267] RDX: 0000000000000086 RSI: 0000200000000300 RDI: 000000000000001a
[  247.540671][T11267] RBP: 00007fa3001f5090 R08: 0000000000000000 R09: 0000000000000000
[  247.540684][T11267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  247.540696][T11267] R13: 00007fa2ff616038 R14: 00007fa2ff615fa0 R15: 00007ffc255f44d8
[  247.540728][T11267]  </TASK>
[  247.848270][T11241] tipc: Disabling bearer <eth:syzkaller0>
[  248.275386][T11293] FAULT_INJECTION: forcing a failure.
[  248.275386][T11293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.293344][T11293] CPU: 0 UID: 0 PID: 11293 Comm: syz.4.1513 Not tainted syzkaller #0 PREEMPT(full) 
[  248.293374][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  248.293385][T11293] Call Trace:
[  248.293393][T11293]  <TASK>
[  248.293402][T11293]  dump_stack_lvl+0xe8/0x150
[  248.293437][T11293]  should_fail_ex+0x412/0x560
[  248.293472][T11293]  _copy_from_user+0x2d/0xb0
[  248.293496][T11293]  copy_from_sockptr+0x48/0x70
[  248.293528][T11293]  ip_mroute_setsockopt+0x74f/0x1090
[  248.293569][T11293]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[  248.293603][T11293]  ? get_pid_task+0x20/0x1f0
[  248.293647][T11293]  do_ip_setsockopt+0xf1e/0x2ea0
[  248.293687][T11293]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  248.293715][T11293]  ? aa_sk_perm+0x6d5/0x900
[  248.293763][T11293]  ? __pfx_aa_sk_perm+0x10/0x10
[  248.293793][T11293]  ? __fget_files+0x2a/0x420
[  248.293821][T11293]  ? aa_sock_opt_perm+0xff/0x1a0
[  248.293855][T11293]  ip_setsockopt+0x66/0x110
[  248.293881][T11293]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  248.293905][T11293]  do_sock_setsockopt+0x17c/0x1b0
[  248.293937][T11293]  __x64_sys_setsockopt+0x13d/0x1b0
[  248.293970][T11293]  do_syscall_64+0x14d/0xf80
[  248.293998][T11293]  ? trace_irq_disable+0x3b/0x150
[  248.294015][T11293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.294036][T11293]  ? clear_bhb_loop+0x40/0x90
[  248.294062][T11293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.294083][T11293] RIP: 0033:0x7fbd3f79c799
[  248.294102][T11293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.294120][T11293] RSP: 002b:00007fbd40639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  248.294142][T11293] RAX: ffffffffffffffda RBX: 00007fbd3fa15fa0 RCX: 00007fbd3f79c799
[  248.294157][T11293] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000007
[  248.294169][T11293] RBP: 00007fbd40639090 R08: 0000000000000010 R09: 0000000000000000
[  248.294182][T11293] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  248.294194][T11293] R13: 00007fbd3fa16038 R14: 00007fbd3fa15fa0 R15: 00007ffef39eccb8
[  248.294228][T11293]  </TASK>
[  248.928519][T11318] lo speed is unknown, defaulting to 1000
[  248.983749][T11318] gretap0 speed is unknown, defaulting to 1000
[  251.600879][T11305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.892607][T11370] __nla_validate_parse: 3 callbacks suppressed
[  251.892630][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'.
[  251.961989][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'.
[  251.995147][T11376] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  252.035085][T11376] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  252.055170][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'.
[  252.085545][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1531'.
[  252.140986][T11380] team0: entered promiscuous mode
[  252.179013][T11380] team_slave_0: entered promiscuous mode
[  252.199565][T11380] team_slave_1: entered promiscuous mode
[  252.254450][T11380] team0: left promiscuous mode
[  252.290021][T11380] team_slave_0: left promiscuous mode
[  252.312240][T11380] team_slave_1: left promiscuous mode
[  252.438876][T11396] syzkaller1: entered promiscuous mode
[  252.449808][T11396] syzkaller1: entered allmulticast mode
[  253.294936][T11434] IPVS: sh: FWM 3 0x00000003 - no destination available
[  253.310445][T11436] lo speed is unknown, defaulting to 1000
[  253.325292][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  253.326468][T11439] netlink: 'syz.4.1546': attribute type 4 has an invalid length.
[  253.348130][T11436] gretap0 speed is unknown, defaulting to 1000
[  253.382175][T11439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1546'.
[  253.960637][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'.
[  255.589864][T11418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.859064][T11485] syzkaller0: entered promiscuous mode
[  255.879817][T11485] syzkaller0: entered allmulticast mode
[  255.889186][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1557'.
[  255.978532][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'.
[  256.040561][ T1299] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  256.050356][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  256.300702][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'.
[  256.387645][T11507] nbd: socks must be embedded in a SOCK_ITEM attr
[  256.413986][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'.
[  256.417570][ T9367] block nbd64: NBD_DISCONNECT
[  256.448088][T11507] nbd: socks must be embedded in a SOCK_ITEM attr
[  256.481405][ T5961] block nbd64: NBD_DISCONNECT
[  256.748763][ T5961] udevd[5961]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  257.030546][T11531] lo speed is unknown, defaulting to 1000
[  257.038289][T11531] gretap0 speed is unknown, defaulting to 1000
[  257.066215][T11535] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1569'.
[  257.093444][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'.
[  257.261920][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1572'.
[  257.321365][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 30 seconds
[  257.336406][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 30 seconds
[  257.347995][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 30 seconds
[  257.359421][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 30 seconds
[  257.543554][T11554] FAULT_INJECTION: forcing a failure.
[  257.543554][T11554] name failslab, interval 1, probability 0, space 0, times 0
[  257.573187][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.2.1575 Not tainted syzkaller #0 PREEMPT(full) 
[  257.573219][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  257.573232][T11554] Call Trace:
[  257.573240][T11554]  <TASK>
[  257.573249][T11554]  dump_stack_lvl+0xe8/0x150
[  257.573284][T11554]  should_fail_ex+0x412/0x560
[  257.573320][T11554]  should_failslab+0xa8/0x100
[  257.573349][T11554]  __kmalloc_cache_noprof+0x88/0x660
[  257.573383][T11554]  ? unix_prepare_fpl+0xf3/0x590
[  257.573405][T11554]  ? __kmalloc_cache_noprof+0x15b/0x660
[  257.573433][T11554]  unix_prepare_fpl+0xf3/0x590
[  257.573462][T11554]  unix_scm_to_skb+0x293/0x3f0
[  257.573496][T11554]  unix_dgram_sendmsg+0x48b/0x18e0
[  257.573555][T11554]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  257.573584][T11554]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  257.573634][T11554]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  257.573668][T11554]  ____sys_sendmsg+0x972/0x9f0
[  257.573706][T11554]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.573742][T11554]  ? import_iovec+0x73/0xa0
[  257.573769][T11554]  ___sys_sendmsg+0x2a5/0x360
[  257.573802][T11554]  ? __pfx____sys_sendmsg+0x10/0x10
[  257.573866][T11554]  ? __fget_files+0x2a/0x420
[  257.573895][T11554]  ? __fget_files+0x3a0/0x420
[  257.573934][T11554]  __x64_sys_sendmsg+0x1bd/0x2a0
[  257.573964][T11554]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  257.574000][T11554]  ? __pfx_ksys_write+0x10/0x10
[  257.574035][T11554]  do_syscall_64+0x14d/0xf80
[  257.574062][T11554]  ? trace_irq_disable+0x3b/0x150
[  257.574080][T11554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.574102][T11554]  ? clear_bhb_loop+0x40/0x90
[  257.574125][T11554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.574145][T11554] RIP: 0033:0x7f438459c799
[  257.574166][T11554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.574183][T11554] RSP: 002b:00007f43853d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.574208][T11554] RAX: ffffffffffffffda RBX: 00007f4384815fa0 RCX: 00007f438459c799
[  257.574238][T11554] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000004
[  257.574251][T11554] RBP: 00007f43853d4090 R08: 0000000000000000 R09: 0000000000000000
[  257.574264][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  257.574276][T11554] R13: 00007f4384816038 R14: 00007f4384815fa0 R15: 00007ffc132f7f08
[  257.574309][T11554]  </TASK>
[  258.058021][T11565] netlink: 'syz.1.1580': attribute type 12 has an invalid length.
[  258.097757][T11565] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1580'.
[  258.114174][T11569] FAULT_INJECTION: forcing a failure.
[  258.114174][T11569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.168633][T11569] CPU: 0 UID: 0 PID: 11569 Comm: syz.4.1582 Not tainted syzkaller #0 PREEMPT(full) 
[  258.168663][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  258.168675][T11569] Call Trace:
[  258.168683][T11569]  <TASK>
[  258.168692][T11569]  dump_stack_lvl+0xe8/0x150
[  258.168736][T11569]  should_fail_ex+0x412/0x560
[  258.168771][T11569]  _copy_from_user+0x2d/0xb0
[  258.168796][T11569]  csum_and_copy_from_iter_full+0x1e7/0x1f00
[  258.168847][T11569]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  258.168899][T11569]  ? rcu_is_watching+0x15/0xb0
[  258.168928][T11569]  ? trace_kmalloc+0x2a/0x110
[  258.168955][T11569]  ip_generic_getfrag+0x149/0x2d0
[  258.168986][T11569]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  258.169012][T11569]  ? __alloc_skb+0x4e5/0x7d0
[  258.169031][T11569]  ? skb_put+0x11b/0x210
[  258.169057][T11569]  __ip_append_data+0x31af/0x3f30
[  258.169102][T11569]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  258.169147][T11569]  ? __pfx___ip_append_data+0x10/0x10
[  258.169172][T11569]  ? do_raw_spin_lock+0x12b/0x2f0
[  258.169195][T11569]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  258.169218][T11569]  ip_append_data+0x10d/0x190
[  258.169245][T11569]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  258.169271][T11569]  udp_sendmsg+0x4d9/0x21a0
[  258.169299][T11569]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  258.169329][T11569]  ? __lock_acquire+0x6b5/0x2cf0
[  258.169361][T11569]  ? __lock_acquire+0x6b5/0x2cf0
[  258.169385][T11569]  ? __pfx_udp_sendmsg+0x10/0x10
[  258.169430][T11569]  ? aa_sk_perm+0x6d5/0x900
[  258.169463][T11569]  ? __pfx_aa_sk_perm+0x10/0x10
[  258.169488][T11569]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  258.169521][T11569]  ? __fget_files+0x3a0/0x420
[  258.169548][T11569]  ? sock_rps_record_flow+0x19/0x350
[  258.169570][T11569]  ? __pfx_inet_sendmsg+0x10/0x10
[  258.169594][T11569]  ? inet_sendmsg+0x29c/0x370
[  258.169615][T11569]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  258.169637][T11569]  ? __pfx_inet_sendmsg+0x10/0x10
[  258.169666][T11569]  __sys_sendto+0x5de/0x710
[  258.169691][T11569]  ? __pfx___sys_sendto+0x10/0x10
[  258.169720][T11569]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  258.169753][T11569]  ? __fget_files+0x3a0/0x420
[  258.169792][T11569]  ? ksys_write+0x242/0x270
[  258.169818][T11569]  ? __pfx_ksys_write+0x10/0x10
[  258.169846][T11569]  __x64_sys_sendto+0xde/0x100
[  258.169875][T11569]  do_syscall_64+0x14d/0xf80
[  258.169903][T11569]  ? trace_irq_disable+0x3b/0x150
[  258.169920][T11569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.169941][T11569]  ? clear_bhb_loop+0x40/0x90
[  258.169967][T11569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.169986][T11569] RIP: 0033:0x7fbd3f79c799
[  258.170007][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.170024][T11569] RSP: 002b:00007fbd40639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  258.170047][T11569] RAX: ffffffffffffffda RBX: 00007fbd3fa15fa0 RCX: 00007fbd3f79c799
[  258.170062][T11569] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003
[  258.170074][T11569] RBP: 00007fbd40639090 R08: 0000000000000000 R09: 0000000011000a00
[  258.170088][T11569] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002
[  258.170100][T11569] R13: 00007fbd3fa16038 R14: 00007fbd3fa15fa0 R15: 00007ffef39eccb8
[  258.170134][T11569]  </TASK>
[  258.927926][T11583] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1587'.
[  259.023431][T11583] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1587'.
[  259.066565][T11583] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.280600][T11595] batadv_slave_0: entered promiscuous mode
[  259.320102][T11596] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.384401][T11596] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.482113][T11594] batadv_slave_0: left promiscuous mode
[  259.488701][T11593] lo speed is unknown, defaulting to 1000
[  259.496801][T11596] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.521792][T11596] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.591763][T11593] gretap0 speed is unknown, defaulting to 1000
[  259.629478][T11596] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.666207][T11596] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.737096][T11604] netlink: 'syz.2.1593': attribute type 1 has an invalid length.
[  259.762053][T11596] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.773637][T11596] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.063448][T11606] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  260.187990][T11606] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  260.271218][T11604] macvlan2: entered promiscuous mode
[  260.290522][T11604] macvlan2: entered allmulticast mode
[  260.307225][T11604] bond2: entered promiscuous mode
[  260.317092][T11604] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  260.331115][T11604] bond2: left promiscuous mode
[  260.420514][T11615] lo speed is unknown, defaulting to 1000
[  260.508833][T11615] gretap0 speed is unknown, defaulting to 1000
[  260.628215][   T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.649295][   T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.804878][   T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.817806][   T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.980197][   T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  260.998214][   T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.089771][   T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.109793][   T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.193688][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'.
[  261.223313][T11653] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  261.237563][T11653] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  261.277824][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1604'.
[  261.287208][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1604'.
[  261.359468][T11653] team0: entered promiscuous mode
[  261.404933][T11653] team_slave_0: entered promiscuous mode
[  261.425315][T11653] team_slave_1: entered promiscuous mode
[  261.442110][T11653] bond0: entered promiscuous mode
[  261.449752][T11653] bond_slave_0: entered promiscuous mode
[  261.455872][T11653] bond_slave_1: entered promiscuous mode
[  261.506510][T11653] bond0: left promiscuous mode
[  261.518689][T11653] bond_slave_0: left promiscuous mode
[  261.550129][T11653] bond_slave_1: left promiscuous mode
[  261.572675][T11653] team0: left promiscuous mode
[  261.577512][T11653] team_slave_0: left promiscuous mode
[  261.599103][T11653] team_slave_1: left promiscuous mode
[  261.915406][T11680] netlink: 'syz.3.1612': attribute type 15 has an invalid length.
[  261.959875][T11680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1612'.
[  261.976202][T11683] netlink: 'syz.2.1613': attribute type 9 has an invalid length.
[  261.986362][T11683] netlink: 'syz.2.1613': attribute type 6 has an invalid length.
[  262.090463][T11684] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) !
[  262.126692][T11684] syzkaller0: entered promiscuous mode
[  262.162145][T11684] syzkaller0: entered allmulticast mode
[  262.222675][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'.
[  262.248933][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'.
[  262.261030][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'.
[  262.261508][T11695] netlink: 'syz.3.1617': attribute type 12 has an invalid length.
[  262.278549][T11695] netlink: 'syz.3.1617': attribute type 11 has an invalid length.
[  262.387115][T11698] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí
[  262.387115][T11698] 3ìUH†5rºBnœ�æ
[  262.860030][T11729] netlink: 'syz.2.1625': attribute type 4 has an invalid length.
[  263.497594][T11755] FAULT_INJECTION: forcing a failure.
[  263.497594][T11755] name failslab, interval 1, probability 0, space 0, times 0
[  263.505483][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1634'.
[  263.558078][T11755] CPU: 0 UID: 0 PID: 11755 Comm: syz.1.1633 Not tainted syzkaller #0 PREEMPT(full) 
[  263.558107][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  263.558118][T11755] Call Trace:
[  263.558126][T11755]  <TASK>
[  263.558135][T11755]  dump_stack_lvl+0xe8/0x150
[  263.558170][T11755]  should_fail_ex+0x412/0x560
[  263.558206][T11755]  should_failslab+0xa8/0x100
[  263.558234][T11755]  __kmalloc_cache_noprof+0x88/0x660
[  263.558257][T11755]  ? sctp_add_bind_addr+0x8c/0x370
[  263.558291][T11755]  sctp_add_bind_addr+0x8c/0x370
[  263.558325][T11755]  sctp_copy_local_addr_list+0x314/0x4f0
[  263.558358][T11755]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  263.558386][T11755]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  263.558420][T11755]  ? sctp_v4_is_any+0x35/0x60
[  263.558439][T11755]  ? sctp_copy_one_addr+0x93/0x360
[  263.558471][T11755]  sctp_bind_addr_copy+0xb3/0x3c0
[  263.558509][T11755]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  263.558539][T11755]  sctp_connect_new_asoc+0x2ff/0x6b0
[  263.558565][T11755]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  263.558596][T11755]  ? __local_bh_enable_ip+0xd0/0x130
[  263.558621][T11755]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  263.558655][T11755]  ? security_sctp_bind_connect+0x7e/0x2c0
[  263.558685][T11755]  sctp_sendmsg+0x1528/0x2c10
[  263.558725][T11755]  ? __pfx_sctp_sendmsg+0x10/0x10
[  263.558750][T11755]  ? aa_sk_perm+0x6d5/0x900
[  263.558788][T11755]  ? __pfx_aa_sk_perm+0x10/0x10
[  263.558820][T11755]  ? sock_rps_record_flow+0x19/0x350
[  263.558848][T11755]  ? inet_sendmsg+0x2f4/0x370
[  263.558877][T11755]  ____sys_sendmsg+0x80a/0x9f0
[  263.558914][T11755]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.558951][T11755]  ? import_iovec+0x73/0xa0
[  263.558979][T11755]  ___sys_sendmsg+0x2a5/0x360
[  263.559013][T11755]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.559080][T11755]  ? __fget_files+0x2a/0x420
[  263.559109][T11755]  ? __fget_files+0x3a0/0x420
[  263.559151][T11755]  __x64_sys_sendmsg+0x1bd/0x2a0
[  263.559180][T11755]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.559216][T11755]  ? __pfx_ksys_write+0x10/0x10
[  263.559253][T11755]  do_syscall_64+0x14d/0xf80
[  263.559282][T11755]  ? trace_irq_disable+0x3b/0x150
[  263.559300][T11755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.559321][T11755]  ? clear_bhb_loop+0x40/0x90
[  263.559347][T11755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.559367][T11755] RIP: 0033:0x7fd64b19c799
[  263.559386][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.559404][T11755] RSP: 002b:00007fd64c0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.559427][T11755] RAX: ffffffffffffffda RBX: 00007fd64b415fa0 RCX: 00007fd64b19c799
[  263.559441][T11755] RDX: 0000000000000881 RSI: 0000200000000700 RDI: 0000000000000003
[  263.559454][T11755] RBP: 00007fd64c0a5090 R08: 0000000000000000 R09: 0000000000000000
[  263.559466][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  263.559478][T11755] R13: 00007fd64b416038 R14: 00007fd64b415fa0 R15: 00007ffc86e84428
[  263.559512][T11755]  </TASK>
[  263.883554][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1634'.
[  263.999383][T11770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1636'.
[  264.151306][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1640'.
[  264.161568][T11777] FAULT_INJECTION: forcing a failure.
[  264.161568][T11777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.248633][T11777] CPU: 1 UID: 0 PID: 11777 Comm: syz.3.1639 Not tainted syzkaller #0 PREEMPT(full) 
[  264.248664][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  264.248677][T11777] Call Trace:
[  264.248686][T11777]  <TASK>
[  264.248694][T11777]  dump_stack_lvl+0xe8/0x150
[  264.248729][T11777]  should_fail_ex+0x412/0x560
[  264.248765][T11777]  _copy_from_user+0x2d/0xb0
[  264.248790][T11777]  ___sys_sendmsg+0x1c6/0x360
[  264.248824][T11777]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.248885][T11777]  ? __fget_files+0x2a/0x420
[  264.248913][T11777]  ? __fget_files+0x3a0/0x420
[  264.248954][T11777]  __x64_sys_sendmsg+0x1bd/0x2a0
[  264.248983][T11777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  264.249019][T11777]  ? __pfx_ksys_write+0x10/0x10
[  264.249054][T11777]  do_syscall_64+0x14d/0xf80
[  264.249083][T11777]  ? trace_irq_disable+0x3b/0x150
[  264.249100][T11777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.249121][T11777]  ? clear_bhb_loop+0x40/0x90
[  264.249146][T11777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.249167][T11777] RIP: 0033:0x7f59eb19c799
[  264.249186][T11777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.249204][T11777] RSP: 002b:00007f59ec11c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.249228][T11777] RAX: ffffffffffffffda RBX: 00007f59eb415fa0 RCX: 00007f59eb19c799
[  264.249242][T11777] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[  264.249255][T11777] RBP: 00007f59ec11c090 R08: 0000000000000000 R09: 0000000000000000
[  264.249267][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.249280][T11777] R13: 00007f59eb416038 R14: 00007f59eb415fa0 R15: 00007ffca8fbf6a8
[  264.249313][T11777]  </TASK>
[  264.563777][T11792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.652800][T11792] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1643'.
[  264.771001][T11798] syzkaller0: entered promiscuous mode
[  264.776719][T11798] syzkaller0: entered allmulticast mode
[  264.891496][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'.
[  265.043646][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1653'.
[  265.092576][T11810] delete_channel: no stack
[  265.102211][T11817] xt_hashlimit: size too large, truncated to 1048576
[  265.110144][T11817] xt_hashlimit: max too large, truncated to 1048576
[  265.412832][T11831] macvlan0: entered promiscuous mode
[  265.429600][T11831] netlink: 'syz.2.1658': attribute type 2 has an invalid length.
[  265.785143][T11842] syzkaller0: entered promiscuous mode
[  265.800173][T11842] syzkaller0: entered allmulticast mode
[  265.863562][T11848] tap0: tun_chr_ioctl cmd 1074025680
[  265.914412][T11848] syzkaller1: entered promiscuous mode
[  265.920229][T11848] syzkaller1: entered allmulticast mode
[  266.224461][T11867] lo speed is unknown, defaulting to 1000
[  266.245334][T11867] gretap0 speed is unknown, defaulting to 1000
[  266.259029][T11862] IPVS: sh: FWM 3 0x00000003 - no destination available
[  266.329318][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  266.342054][T11871] netlink: 'syz.1.1675': attribute type 3 has an invalid length.
[  266.357048][T11871] bridge0: entered promiscuous mode
[  266.377338][T11871] ip6gretap0: entered promiscuous mode
[  266.476963][T11871] debugfs: 'hsr2' already exists in 'hsr'
[  266.499939][T11871] Cannot create hsr debugfs directory
[  266.507233][T11871] hsr2: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  266.536699][T11871] hsr2: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  267.656082][T11916] ÿ1Ie5nè‹Ò: entered promiscuous mode
[  267.915859][T11923] __nla_validate_parse: 4 callbacks suppressed
[  267.915881][T11923] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1686'.
[  268.653508][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'.
[  268.682074][T11948] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1699'.
[  268.732224][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1701'.
[  268.800838][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'.
[  268.814592][T11955] netlink: 'syz.0.1700': attribute type 2 has an invalid length.
[  268.882232][T11959] netlink: 'syz.0.1700': attribute type 2 has an invalid length.
[  268.913290][T11955] !©�9: entered promiscuous mode
[  268.934450][T11959] !©�9: left promiscuous mode
[  268.964799][ T5882] IPVS: starting estimator thread 0...
[  269.021452][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1704'.
[  269.060172][T11963] IPVS: using max 28 ests per chain, 67200 per kthread
[  269.479001][T11987] --map-set only usable from mangle table
[  269.778703][T11999] netlink: 200072 bytes leftover after parsing attributes in process `syz.0.1715'.
[  270.342481][T12018] tipc: Started in network mode
[  270.347434][T12018] tipc: Node identity 464794b1b2e4, cluster identity 4711
[  270.371080][T12018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.396628][T12018] syzkaller0: entered promiscuous mode
[  270.402809][T12018] syzkaller0: entered allmulticast mode
[  270.425621][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'.
[  270.444862][T12021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'.
[  271.008235][T12044] syzkaller1: entered promiscuous mode
[  271.030867][T12044] syzkaller1: entered allmulticast mode
[  271.060067][T12014] tipc: Resetting bearer <eth:syzkaller0>
[  271.109347][T12014] tipc: Disabling bearer <eth:syzkaller0>
[  271.498182][T12066] FAULT_INJECTION: forcing a failure.
[  271.498182][T12066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.546534][T12066] CPU: 1 UID: 0 PID: 12066 Comm: syz.4.1736 Not tainted syzkaller #0 PREEMPT(full) 
[  271.546565][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  271.546578][T12066] Call Trace:
[  271.546587][T12066]  <TASK>
[  271.546595][T12066]  dump_stack_lvl+0xe8/0x150
[  271.546631][T12066]  should_fail_ex+0x412/0x560
[  271.546665][T12066]  _copy_from_user+0x2d/0xb0
[  271.546688][T12066]  generic_map_update_batch+0x69a/0x990
[  271.546725][T12066]  ? __pfx_generic_map_update_batch+0x10/0x10
[  271.546752][T12066]  ? __fget_files+0x2a/0x420
[  271.546789][T12066]  ? __pfx_generic_map_update_batch+0x10/0x10
[  271.546815][T12066]  bpf_map_do_batch+0x39b/0x630
[  271.546842][T12066]  __sys_bpf+0x7c1/0x950
[  271.546865][T12066]  ? __pfx___sys_bpf+0x10/0x10
[  271.546900][T12066]  ? ksys_write+0x242/0x270
[  271.546926][T12066]  ? __pfx_ksys_write+0x10/0x10
[  271.546956][T12066]  __x64_sys_bpf+0x7c/0x90
[  271.546985][T12066]  do_syscall_64+0x14d/0xf80
[  271.547014][T12066]  ? trace_irq_disable+0x3b/0x150
[  271.547031][T12066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.547052][T12066]  ? clear_bhb_loop+0x40/0x90
[  271.547075][T12066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.547094][T12066] RIP: 0033:0x7fbd3f79c799
[  271.547114][T12066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.547131][T12066] RSP: 002b:00007fbd40639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  271.547155][T12066] RAX: ffffffffffffffda RBX: 00007fbd3fa15fa0 RCX: 00007fbd3f79c799
[  271.547169][T12066] RDX: 0000000000000086 RSI: 0000200000000300 RDI: 000000000000001a
[  271.547182][T12066] RBP: 00007fbd40639090 R08: 0000000000000000 R09: 0000000000000000
[  271.547194][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  271.547206][T12066] R13: 00007fbd3fa16038 R14: 00007fbd3fa15fa0 R15: 00007ffef39eccb8
[  271.547238][T12066]  </TASK>
[  272.011758][T12074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.213640][T12074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.412298][T12074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.548089][T12074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.583489][T12095] IPVS: sh: FWM 3 0x00000003 - no destination available
[  272.587576][T12103] FAULT_INJECTION: forcing a failure.
[  272.587576][T12103] name failslab, interval 1, probability 0, space 0, times 0
[  272.603759][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  272.640030][T12103] CPU: 1 UID: 0 PID: 12103 Comm: syz.4.1747 Not tainted syzkaller #0 PREEMPT(full) 
[  272.640059][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  272.640070][T12103] Call Trace:
[  272.640079][T12103]  <TASK>
[  272.640088][T12103]  dump_stack_lvl+0xe8/0x150
[  272.640122][T12103]  should_fail_ex+0x412/0x560
[  272.640155][T12103]  should_failslab+0xa8/0x100
[  272.640182][T12103]  __kmalloc_cache_noprof+0x88/0x660
[  272.640203][T12103]  ? sctp_v6_to_sk_saddr+0x100/0x1c0
[  272.640232][T12103]  ? sctp_association_new+0x89/0x25e0
[  272.640253][T12103]  ? __asan_memcpy+0x40/0x70
[  272.640275][T12103]  sctp_association_new+0x89/0x25e0
[  272.640297][T12103]  ? sctp_do_bind+0x661/0x9d0
[  272.640324][T12103]  ? __ipv6_addr_type+0x14d/0x2f0
[  272.640361][T12103]  sctp_connect_new_asoc+0x2e4/0x6b0
[  272.640387][T12103]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  272.640411][T12103]  ? __ipv6_addr_type+0x14d/0x2f0
[  272.640435][T12103]  ? sctp_inet6_send_verify+0x6e/0x300
[  272.640461][T12103]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[  272.640485][T12103]  __sctp_connect+0x5cb/0xdc0
[  272.640520][T12103]  ? __pfx___sctp_connect+0x10/0x10
[  272.640538][T12103]  ? sctp_setsockopt+0x21c/0x12c0
[  272.640558][T12103]  ? security_sctp_bind_connect+0x7e/0x2c0
[  272.640588][T12103]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  272.640618][T12103]  sctp_setsockopt+0x708/0x12c0
[  272.640639][T12103]  ? sock_common_setsockopt+0x36/0xc0
[  272.640658][T12103]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  272.640680][T12103]  do_sock_setsockopt+0x17c/0x1b0
[  272.640709][T12103]  __x64_sys_setsockopt+0x13d/0x1b0
[  272.640739][T12103]  do_syscall_64+0x14d/0xf80
[  272.640767][T12103]  ? trace_irq_disable+0x3b/0x150
[  272.640783][T12103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.640802][T12103]  ? clear_bhb_loop+0x40/0x90
[  272.640826][T12103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.640845][T12103] RIP: 0033:0x7fbd3f79c799
[  272.640864][T12103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.640880][T12103] RSP: 002b:00007fbd40639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  272.640902][T12103] RAX: ffffffffffffffda RBX: 00007fbd3fa15fa0 RCX: 00007fbd3f79c799
[  272.640916][T12103] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  272.640928][T12103] RBP: 00007fbd40639090 R08: 0000000000000048 R09: 0000000000000000
[  272.640939][T12103] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  272.640951][T12103] R13: 00007fbd3fa16038 R14: 00007fbd3fa15fa0 R15: 00007ffef39eccb8
[  272.640984][T12103]  </TASK>
[  272.915133][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'.
[  272.978752][T12100] lo speed is unknown, defaulting to 1000
[  272.986928][T12100] gretap0 speed is unknown, defaulting to 1000
[  273.428098][T12124] vlan3: entered allmulticast mode
[  273.439810][T12124] macvtap0: entered allmulticast mode
[  273.494278][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1753'.
[  273.498452][ T8123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.503718][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1753'.
[  273.531277][ T8123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.672210][ T8123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.693903][T12136] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  273.908096][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.024511][T12148] FAULT_INJECTION: forcing a failure.
[  274.024511][T12148] name failslab, interval 1, probability 0, space 0, times 0
[  274.039210][T12148] CPU: 1 UID: 0 PID: 12148 Comm: syz.3.1760 Not tainted syzkaller #0 PREEMPT(full) 
[  274.039238][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  274.039250][T12148] Call Trace:
[  274.039258][T12148]  <TASK>
[  274.039266][T12148]  dump_stack_lvl+0xe8/0x150
[  274.039300][T12148]  should_fail_ex+0x412/0x560
[  274.039335][T12148]  should_failslab+0xa8/0x100
[  274.039363][T12148]  __kmalloc_cache_noprof+0x88/0x660
[  274.039388][T12148]  ? sctp_add_bind_addr+0x8c/0x370
[  274.039434][T12148]  sctp_add_bind_addr+0x8c/0x370
[  274.039466][T12148]  sctp_copy_local_addr_list+0x314/0x4f0
[  274.039498][T12148]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  274.039525][T12148]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  274.039556][T12148]  ? sctp_v4_is_any+0x35/0x60
[  274.039574][T12148]  ? sctp_copy_one_addr+0x93/0x360
[  274.039606][T12148]  sctp_bind_addr_copy+0xb3/0x3c0
[  274.039634][T12148]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  274.039669][T12148]  sctp_connect_new_asoc+0x2ff/0x6b0
[  274.039696][T12148]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  274.039726][T12148]  ? __local_bh_enable_ip+0xd0/0x130
[  274.039750][T12148]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  274.039774][T12148]  ? security_sctp_bind_connect+0x7e/0x2c0
[  274.039803][T12148]  sctp_sendmsg+0x1528/0x2c10
[  274.039840][T12148]  ? __pfx_sctp_sendmsg+0x10/0x10
[  274.039865][T12148]  ? aa_sk_perm+0x6d5/0x900
[  274.039901][T12148]  ? __pfx_aa_sk_perm+0x10/0x10
[  274.039931][T12148]  ? sock_rps_record_flow+0x19/0x350
[  274.039958][T12148]  ? inet_sendmsg+0x2f4/0x370
[  274.039984][T12148]  ____sys_sendmsg+0x80a/0x9f0
[  274.040013][T12148]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.040042][T12148]  ? import_iovec+0x73/0xa0
[  274.040064][T12148]  ___sys_sendmsg+0x2a5/0x360
[  274.040090][T12148]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.040116][T12148]  ? kstrtouint+0x6e/0xe0
[  274.040162][T12148]  ? __fget_files+0x2a/0x420
[  274.040185][T12148]  ? __fget_files+0x3a0/0x420
[  274.040218][T12148]  __sys_sendmmsg+0x27c/0x4e0
[  274.040244][T12148]  ? __pfx___sys_sendmmsg+0x10/0x10
[  274.040263][T12148]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  274.040302][T12148]  ? ksys_write+0x242/0x270
[  274.040323][T12148]  ? __pfx_ksys_write+0x10/0x10
[  274.040347][T12148]  __x64_sys_sendmmsg+0xa0/0xc0
[  274.040370][T12148]  do_syscall_64+0x14d/0xf80
[  274.040393][T12148]  ? trace_irq_disable+0x3b/0x150
[  274.040407][T12148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.040431][T12148]  ? clear_bhb_loop+0x40/0x90
[  274.040451][T12148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.040467][T12148] RIP: 0033:0x7f59eb19c799
[  274.040485][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.040500][T12148] RSP: 002b:00007f59ec11c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  274.040519][T12148] RAX: ffffffffffffffda RBX: 00007f59eb415fa0 RCX: 00007f59eb19c799
[  274.040530][T12148] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003
[  274.040541][T12148] RBP: 00007f59ec11c090 R08: 0000000000000000 R09: 0000000000000000
[  274.040550][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  274.040560][T12148] R13: 00007f59eb416038 R14: 00007f59eb415fa0 R15: 00007ffca8fbf6a8
[  274.040587][T12148]  </TASK>
[  274.391463][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'.
[  274.982330][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1772'.
[  275.432298][T12205] netlink: 'syz.2.1776': attribute type 13 has an invalid length.
[  275.531917][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'.
[  275.562495][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'.
[  277.389332][T12267] ip6_vti0: Caught tx_queue_len zero misconfig
[  277.498921][T12268] FAULT_INJECTION: forcing a failure.
[  277.498921][T12268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.513836][T12268] CPU: 0 UID: 0 PID: 12268 Comm: syz.0.1788 Not tainted syzkaller #0 PREEMPT(full) 
[  277.513866][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  277.513878][T12268] Call Trace:
[  277.513886][T12268]  <TASK>
[  277.513894][T12268]  dump_stack_lvl+0xe8/0x150
[  277.513929][T12268]  should_fail_ex+0x412/0x560
[  277.514003][T12268]  _copy_to_user+0x31/0xb0
[  277.514028][T12268]  simple_read_from_buffer+0xe1/0x170
[  277.514061][T12268]  proc_fail_nth_read+0x1bb/0x230
[  277.514094][T12268]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.514126][T12268]  ? rw_verify_area+0x2a6/0x4d0
[  277.514147][T12268]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.514194][T12268]  vfs_read+0x20c/0xa70
[  277.514215][T12268]  ? fdget_pos+0x246/0x320
[  277.514237][T12268]  ? __pfx___mutex_lock+0x10/0x10
[  277.514256][T12268]  ? __pfx_vfs_read+0x10/0x10
[  277.514278][T12268]  ? __fget_files+0x2a/0x420
[  277.514311][T12268]  ? __fget_files+0x3a0/0x420
[  277.514337][T12268]  ? __fget_files+0x2a/0x420
[  277.514374][T12268]  ksys_read+0x150/0x270
[  277.514397][T12268]  ? __pfx_ksys_read+0x10/0x10
[  277.514440][T12268]  do_syscall_64+0x14d/0xf80
[  277.514467][T12268]  ? trace_irq_disable+0x3b/0x150
[  277.514484][T12268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.514505][T12268]  ? clear_bhb_loop+0x40/0x90
[  277.514530][T12268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.514549][T12268] RIP: 0033:0x7fa2ff35cfce
[  277.514567][T12268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  277.514583][T12268] RSP: 002b:00007fa3001f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  277.514605][T12268] RAX: ffffffffffffffda RBX: 00007fa3001f56c0 RCX: 00007fa2ff35cfce
[  277.514619][T12268] RDX: 000000000000000f RSI: 00007fa3001f50a0 RDI: 0000000000000003
[  277.514632][T12268] RBP: 00007fa3001f5090 R08: 0000000000000000 R09: 0000000000000000
[  277.514644][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  277.514655][T12268] R13: 00007fa2ff616038 R14: 00007fa2ff615fa0 R15: 00007ffc255f44d8
[  277.514686][T12268]  </TASK>
[  278.092462][T12298] netlink: 'syz.1.1799': attribute type 9 has an invalid length.
[  278.488030][T12306] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  278.521450][T12306] bond0 (unregistering): Released all slaves
[  278.727234][T12318] netlink: 'syz.1.1805': attribute type 5 has an invalid length.
[  278.889170][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1806'.
[  278.941308][T12321] netlink: 'syz.3.1806': attribute type 30 has an invalid length.
[  278.950909][T12321] netlink: 'syz.3.1806': attribute type 30 has an invalid length.
[  279.131383][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'.
[  279.182055][T12335] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  279.209069][T12335] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  279.255068][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1809'.
[  279.264379][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1809'.
[  279.573310][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'.
[  279.613907][T12351] team0: Port device team_slave_0 removed
[  280.080988][T12375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1820'.
[  280.646550][T12404] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1828'.
[  280.702742][T12408] syzkaller1: entered promiscuous mode
[  280.714336][T12408] syzkaller1: entered allmulticast mode
[  281.058646][T12423] netlink: 'syz.3.1837': attribute type 21 has an invalid length.
[  281.090668][T12424] netlink: 'syz.2.1836': attribute type 3 has an invalid length.
[  281.119002][T12424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'.
[  281.134919][T12426] lo: Caught tx_queue_len zero misconfig
[  281.226119][T12429] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  281.623834][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'.
[  281.639411][T12421] FAULT_INJECTION: forcing a failure.
[  281.639411][T12421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.692886][T12421] CPU: 0 UID: 0 PID: 12421 Comm: syz.0.1835 Not tainted syzkaller #0 PREEMPT(full) 
[  281.692919][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.692931][T12421] Call Trace:
[  281.692940][T12421]  <TASK>
[  281.692948][T12421]  dump_stack_lvl+0xe8/0x150
[  281.692984][T12421]  should_fail_ex+0x412/0x560
[  281.693019][T12421]  _copy_from_user+0x2d/0xb0
[  281.693044][T12421]  bpf_obj_get_info_by_fd+0x511/0x32f0
[  281.693084][T12421]  ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10
[  281.693109][T12421]  ? kstrtouint+0x6e/0xe0
[  281.693140][T12421]  ? __lock_acquire+0x6b5/0x2cf0
[  281.693178][T12421]  ? get_pid_task+0x20/0x1f0
[  281.693230][T12421]  ? bpf_lsm_bpf+0x9/0x20
[  281.693255][T12421]  ? security_bpf+0x7e/0x2d0
[  281.693283][T12421]  __sys_bpf+0x66e/0x950
[  281.693303][T12421]  ? __pfx___sys_bpf+0x10/0x10
[  281.693345][T12421]  ? ksys_write+0x242/0x270
[  281.693369][T12421]  ? __pfx_ksys_write+0x10/0x10
[  281.693398][T12421]  __x64_sys_bpf+0x7c/0x90
[  281.693426][T12421]  do_syscall_64+0x14d/0xf80
[  281.693453][T12421]  ? trace_irq_disable+0x3b/0x150
[  281.693469][T12421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.693488][T12421]  ? clear_bhb_loop+0x40/0x90
[  281.693512][T12421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.693530][T12421] RIP: 0033:0x7fa2ff39c799
[  281.693549][T12421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.693566][T12421] RSP: 002b:00007fa3001f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  281.693588][T12421] RAX: ffffffffffffffda RBX: 00007fa2ff615fa0 RCX: 00007fa2ff39c799
[  281.693602][T12421] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f
[  281.693614][T12421] RBP: 00007fa3001f5090 R08: 0000000000000000 R09: 0000000000000000
[  281.693626][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.693637][T12421] R13: 00007fa2ff616038 R14: 00007fa2ff615fa0 R15: 00007ffc255f44d8
[  281.693669][T12421]  </TASK>
[  282.168281][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1854'.
[  282.261941][T12473] FAULT_INJECTION: forcing a failure.
[  282.261941][T12473] name failslab, interval 1, probability 0, space 0, times 0
[  282.306415][T12473] CPU: 0 UID: 0 PID: 12473 Comm: syz.1.1852 Not tainted syzkaller #0 PREEMPT(full) 
[  282.306446][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  282.306458][T12473] Call Trace:
[  282.306467][T12473]  <TASK>
[  282.306475][T12473]  dump_stack_lvl+0xe8/0x150
[  282.306511][T12473]  should_fail_ex+0x412/0x560
[  282.306547][T12473]  should_failslab+0xa8/0x100
[  282.306585][T12473]  __kmalloc_cache_noprof+0x88/0x660
[  282.306611][T12473]  ? sctp_add_bind_addr+0x8c/0x370
[  282.306648][T12473]  sctp_add_bind_addr+0x8c/0x370
[  282.306682][T12473]  sctp_copy_local_addr_list+0x314/0x4f0
[  282.306716][T12473]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  282.306745][T12473]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  282.306781][T12473]  ? sctp_v4_is_any+0x35/0x60
[  282.306799][T12473]  ? sctp_copy_one_addr+0x93/0x360
[  282.306833][T12473]  sctp_bind_addr_copy+0xb3/0x3c0
[  282.306864][T12473]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  282.306895][T12473]  sctp_connect_new_asoc+0x2ff/0x6b0
[  282.306922][T12473]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  282.306952][T12473]  ? __local_bh_enable_ip+0xd0/0x130
[  282.306973][T12473]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  282.306994][T12473]  ? security_sctp_bind_connect+0x7e/0x2c0
[  282.307023][T12473]  sctp_sendmsg+0x1528/0x2c10
[  282.307062][T12473]  ? __pfx_sctp_sendmsg+0x10/0x10
[  282.307090][T12473]  ? aa_sk_perm+0x6d5/0x900
[  282.307127][T12473]  ? __pfx_aa_sk_perm+0x10/0x10
[  282.307159][T12473]  ? sock_rps_record_flow+0x19/0x350
[  282.307188][T12473]  ? inet_sendmsg+0x2f4/0x370
[  282.307216][T12473]  ____sys_sendmsg+0x80a/0x9f0
[  282.307254][T12473]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.307290][T12473]  ? import_iovec+0x73/0xa0
[  282.307316][T12473]  ___sys_sendmsg+0x2a5/0x360
[  282.307346][T12473]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.307376][T12473]  ? kstrtouint+0x6e/0xe0
[  282.307429][T12473]  ? __fget_files+0x2a/0x420
[  282.307457][T12473]  ? __fget_files+0x3a0/0x420
[  282.307498][T12473]  __sys_sendmmsg+0x27c/0x4e0
[  282.307531][T12473]  ? __pfx___sys_sendmmsg+0x10/0x10
[  282.307554][T12473]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  282.307637][T12473]  ? ksys_write+0x242/0x270
[  282.307664][T12473]  ? __pfx_ksys_write+0x10/0x10
[  282.307695][T12473]  __x64_sys_sendmmsg+0xa0/0xc0
[  282.307724][T12473]  do_syscall_64+0x14d/0xf80
[  282.307753][T12473]  ? trace_irq_disable+0x3b/0x150
[  282.307771][T12473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.307792][T12473]  ? clear_bhb_loop+0x40/0x90
[  282.307817][T12473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.307838][T12473] RIP: 0033:0x7fd64b19c799
[  282.307859][T12473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.307878][T12473] RSP: 002b:00007fd64c0a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  282.307901][T12473] RAX: ffffffffffffffda RBX: 00007fd64b415fa0 RCX: 00007fd64b19c799
[  282.307916][T12473] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003
[  282.307930][T12473] RBP: 00007fd64c0a5090 R08: 0000000000000000 R09: 0000000000000000
[  282.307942][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  282.307955][T12473] R13: 00007fd64b416038 R14: 00007fd64b415fa0 R15: 00007ffc86e84428
[  282.307990][T12473]  </TASK>
[  283.387718][T12514] ipvlan2: entered promiscuous mode
[  283.740987][T12532] netlink: 'syz.3.1874': attribute type 9 has an invalid length.
[  283.753133][T12532] netlink: 'syz.3.1874': attribute type 6 has an invalid length.
[  284.414672][T12563] __nla_validate_parse: 2 callbacks suppressed
[  284.414695][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  284.445300][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'.
[  284.653698][T12581] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1893'.
[  284.930732][T12595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1897'.
[  284.961727][T12595] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1897'.
[  285.025254][T12597] lo speed is unknown, defaulting to 1000
[  285.042489][T12597] gretap0 speed is unknown, defaulting to 1000
[  285.325019][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1903'.
[  285.369011][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1903'.
[  285.415926][T12618] netlink: 'syz.2.1904': attribute type 4 has an invalid length.
[  285.438851][T12617] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1905'.
[  285.722694][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1906'.
[  285.998036][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'.
[  286.254466][T12636] lo speed is unknown, defaulting to 1000
[  286.266322][T12646] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  286.407243][T12636] gretap0 speed is unknown, defaulting to 1000
[  286.413871][T12646] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  286.650999][T12662] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  287.392320][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 60 seconds
[  287.405791][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 60 seconds
[  287.417209][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 60 seconds
[  287.435117][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 60 seconds
[  289.412328][T12735] netlink: 'syz.2.1943': attribute type 29 has an invalid length.
[  289.423321][T12735] netlink: 'syz.2.1943': attribute type 29 has an invalid length.
[  289.449969][T12735] netlink: 'syz.2.1943': attribute type 32 has an invalid length.
[  289.458462][T12735] __nla_validate_parse: 2 callbacks suppressed
[  289.458484][T12735] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1943'.
[  292.449848][ T5193] udevd[5193]: worker [5892] /devices/virtual/block/nbd1 is taking a long time
[  302.302591][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.311970][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.320497][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.334321][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.343682][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.355039][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.355087][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.370151][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.381470][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.393489][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.427234][T12744] lo speed is unknown, defaulting to 1000
[  302.438083][T12744] gretap0 speed is unknown, defaulting to 1000
[  302.454250][T12746] lo speed is unknown, defaulting to 1000
[  302.575801][T12746] gretap0 speed is unknown, defaulting to 1000
[  302.780990][T12744] chnl_net:caif_netlink_parms(): no params data found
[  302.920161][T12744] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.927843][T12744] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.935763][T12744] bridge_slave_0: entered allmulticast mode
[  302.943423][T12744] bridge_slave_0: entered promiscuous mode
[  302.951744][T12744] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.958995][T12744] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.966496][T12744] bridge_slave_1: entered allmulticast mode
[  302.973660][T12744] bridge_slave_1: entered promiscuous mode
[  303.013912][T12744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.028673][T12744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.076520][T12744] team0: Port device team_slave_0 added
[  303.090559][T12744] team0: Port device team_slave_1 added
[  303.140892][T12744] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.147896][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.175083][T12744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.199909][T12744] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.206991][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.233867][T12744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.274597][T12746] chnl_net:caif_netlink_parms(): no params data found
[  303.365637][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.376773][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.386665][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.389090][T12744] hsr_slave_0: entered promiscuous mode
[  303.401086][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.401662][T12744] hsr_slave_1: entered promiscuous mode
[  303.415612][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.415877][T12744] debugfs: 'hsr0' already exists in 'hsr'
[  303.429478][T12744] Cannot create hsr debugfs directory
[  303.513388][T12746] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.521243][T12746] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.528837][T12746] bridge_slave_0: entered allmulticast mode
[  303.536766][T12746] bridge_slave_0: entered promiscuous mode
[  303.561149][T12746] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.568459][T12746] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.576213][T12746] bridge_slave_1: entered allmulticast mode
[  303.583421][T12746] bridge_slave_1: entered promiscuous mode
[  303.590780][T12759] lo speed is unknown, defaulting to 1000
[  303.612350][T12759] gretap0 speed is unknown, defaulting to 1000
[  303.661087][T12746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.687985][T12746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.871502][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  303.875833][T12746] team0: Port device team_slave_0 added
[  303.887540][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  303.896171][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  303.904986][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  303.920596][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  303.920972][T12746] team0: Port device team_slave_1 added
[  304.052226][T12746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.059198][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.085613][T12746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.106289][T12765] lo speed is unknown, defaulting to 1000
[  304.130934][T12746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.137985][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.164266][T12746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.183981][T12765] gretap0 speed is unknown, defaulting to 1000
[  304.275638][T12746] hsr_slave_0: entered promiscuous mode
[  304.286361][T12746] hsr_slave_1: entered promiscuous mode
[  304.293791][T12746] debugfs: 'hsr0' already exists in 'hsr'
[  304.300289][T12746] Cannot create hsr debugfs directory
[  304.431099][ T5833] Bluetooth: hci5: command tx timeout
[  304.437247][ T5835] Bluetooth: hci6: command tx timeout
[  304.554462][T12759] chnl_net:caif_netlink_parms(): no params data found
[  304.773758][T12759] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.781280][T12759] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.788851][T12759] bridge_slave_0: entered allmulticast mode
[  304.797414][T12759] bridge_slave_0: entered promiscuous mode
[  304.821492][T12759] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.840045][T12759] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.847937][T12759] bridge_slave_1: entered allmulticast mode
[  304.856192][T12759] bridge_slave_1: entered promiscuous mode
[  304.900971][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.916694][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.956127][T12759] team0: Port device team_slave_0 added
[  304.962421][T12765] chnl_net:caif_netlink_parms(): no params data found
[  304.975944][T12759] team0: Port device team_slave_1 added
[  305.023883][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.030937][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.057830][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.080519][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.087634][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.114049][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.185738][T12765] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.193374][T12765] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.200942][T12765] bridge_slave_0: entered allmulticast mode
[  305.208339][T12765] bridge_slave_0: entered promiscuous mode
[  305.226253][T12765] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.234081][T12765] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.241547][T12765] bridge_slave_1: entered allmulticast mode
[  305.248782][T12765] bridge_slave_1: entered promiscuous mode
[  305.262112][T12759] hsr_slave_0: entered promiscuous mode
[  305.268643][T12759] hsr_slave_1: entered promiscuous mode
[  305.275234][T12759] debugfs: 'hsr0' already exists in 'hsr'
[  305.281082][T12759] Cannot create hsr debugfs directory
[  305.321546][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.341130][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.395816][T12765] team0: Port device team_slave_0 added
[  305.411064][T12765] team0: Port device team_slave_1 added
[  305.457209][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.464530][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.490656][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.501251][ T5835] Bluetooth: hci7: command tx timeout
[  305.518222][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.525802][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.553145][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.635725][T12765] hsr_slave_0: entered promiscuous mode
[  305.642342][T12765] hsr_slave_1: entered promiscuous mode
[  305.649318][T12765] debugfs: 'hsr0' already exists in 'hsr'
[  305.655351][T12765] Cannot create hsr debugfs directory
[  305.818278][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  305.828357][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  305.838542][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  305.848849][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  305.859323][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  305.949220][T12780] lo speed is unknown, defaulting to 1000
[  305.955675][ T5833] Bluetooth: hci8: command tx timeout
[  305.968831][T12780] gretap0 speed is unknown, defaulting to 1000
[  306.217460][T12780] chnl_net:caif_netlink_parms(): no params data found
[  306.290998][T12780] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.298152][T12780] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.305819][T12780] bridge_slave_0: entered allmulticast mode
[  306.313476][T12780] bridge_slave_0: entered promiscuous mode
[  306.321876][T12780] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.329063][T12780] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.336868][T12780] bridge_slave_1: entered allmulticast mode
[  306.344240][T12780] bridge_slave_1: entered promiscuous mode
[  306.373619][T12780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.385808][T12780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.415665][T12780] team0: Port device team_slave_0 added
[  306.423723][T12780] team0: Port device team_slave_1 added
[  306.449134][T12780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.456233][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.483107][T12780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.495364][T12780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.502469][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.509905][ T5833] Bluetooth: hci6: command tx timeout
[  306.529993][ T5835] Bluetooth: hci5: command tx timeout
[  306.540169][T12780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.581988][T12780] hsr_slave_0: entered promiscuous mode
[  306.588673][T12780] hsr_slave_1: entered promiscuous mode
[  306.596698][T12780] debugfs: 'hsr0' already exists in 'hsr'
[  306.602698][T12780] Cannot create hsr debugfs directory
[  307.550048][ T5835] Bluetooth: hci7: command tx timeout
[  307.950290][ T5835] Bluetooth: hci9: command tx timeout
[  308.030005][ T5835] Bluetooth: hci8: command tx timeout
[  308.591074][ T5835] Bluetooth: hci5: command tx timeout
[  308.591112][ T5833] Bluetooth: hci6: command tx timeout
[  309.629988][ T5833] Bluetooth: hci7: command tx timeout
[  310.036167][ T5833] Bluetooth: hci9: command tx timeout
[  310.110001][ T5833] Bluetooth: hci8: command tx timeout
[  310.669909][ T5833] Bluetooth: hci5: command tx timeout
[  310.680063][ T5833] Bluetooth: hci6: command tx timeout
[  311.709997][ T5833] Bluetooth: hci7: command tx timeout
[  312.110253][ T5833] Bluetooth: hci9: command tx timeout
[  312.190014][ T5833] Bluetooth: hci8: command tx timeout
[  314.190284][ T5833] Bluetooth: hci9: command tx timeout
[  317.473618][ T1299] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  317.482776][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 90 seconds
[  317.493800][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 90 seconds
[  317.494234][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.505347][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 90 seconds
[  317.523325][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 90 seconds
[  347.552337][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 120 seconds
[  347.563271][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 120 seconds
[  347.574648][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 120 seconds
[  347.586847][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 120 seconds
[  362.400627][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  362.413134][   T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  362.421082][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  362.421992][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  362.438311][   T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  362.438534][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  362.450052][   T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  362.455042][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  362.470466][   T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  362.478459][   T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  362.527403][T12793] lo speed is unknown, defaulting to 1000
[  362.537006][T12793] gretap0 speed is unknown, defaulting to 1000
[  362.550864][T12795] lo speed is unknown, defaulting to 1000
[  362.668678][T12795] gretap0 speed is unknown, defaulting to 1000
[  362.902806][T12793] chnl_net:caif_netlink_parms(): no params data found
[  363.017775][T12793] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.025524][T12793] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.033400][T12793] bridge_slave_0: entered allmulticast mode
[  363.041742][T12793] bridge_slave_0: entered promiscuous mode
[  363.063255][T12793] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.076714][T12793] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.084416][T12793] bridge_slave_1: entered allmulticast mode
[  363.091843][T12793] bridge_slave_1: entered promiscuous mode
[  363.140129][T12793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.158383][T12793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.207155][T12793] team0: Port device team_slave_0 added
[  363.213264][T12795] chnl_net:caif_netlink_parms(): no params data found
[  363.226697][T12793] team0: Port device team_slave_1 added
[  363.305925][T12793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.313514][T12793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.340139][T12793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.363838][T12793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.371973][T12793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.400170][T12793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.453443][ T5828] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  363.472616][ T5828] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  363.481465][ T5828] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  363.489479][T12795] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.497107][T12795] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.500406][ T5828] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  363.505496][T12795] bridge_slave_0: entered allmulticast mode
[  363.513430][ T5828] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  363.521388][T12795] bridge_slave_0: entered promiscuous mode
[  363.557928][T12795] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.565610][T12795] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.573261][T12795] bridge_slave_1: entered allmulticast mode
[  363.580692][T12795] bridge_slave_1: entered promiscuous mode
[  363.616335][T12793] hsr_slave_0: entered promiscuous mode
[  363.622981][T12793] hsr_slave_1: entered promiscuous mode
[  363.629358][T12793] debugfs: 'hsr0' already exists in 'hsr'
[  363.635521][T12793] Cannot create hsr debugfs directory
[  363.658337][T12795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.676224][T12795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.740585][T12810] lo speed is unknown, defaulting to 1000
[  363.743885][T12795] team0: Port device team_slave_0 added
[  363.762496][T12795] team0: Port device team_slave_1 added
[  363.768227][T12810] gretap0 speed is unknown, defaulting to 1000
[  363.816694][T12795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.824439][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.851788][T12795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.881996][T12795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.889074][T12795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.916406][T12795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.053235][T12795] hsr_slave_0: entered promiscuous mode
[  364.060263][T12795] hsr_slave_1: entered promiscuous mode
[  364.066704][T12795] debugfs: 'hsr0' already exists in 'hsr'
[  364.072843][T12795] Cannot create hsr debugfs directory
[  364.453467][T12810] chnl_net:caif_netlink_parms(): no params data found
[  364.511147][ T5828] Bluetooth: hci10: command tx timeout
[  364.512025][ T5833] Bluetooth: hci11: command tx timeout
[  364.524787][ T5833] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  364.540025][ T5833] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  364.551064][ T5833] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  364.561256][ T5833] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  364.570235][ T5833] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  364.629101][T12810] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.636588][T12810] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.644972][T12810] bridge_slave_0: entered allmulticast mode
[  364.653235][T12810] bridge_slave_0: entered promiscuous mode
[  364.662062][T12810] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.670525][T12810] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.677927][T12810] bridge_slave_1: entered allmulticast mode
[  364.685583][T12810] bridge_slave_1: entered promiscuous mode
[  364.728458][T12816] lo speed is unknown, defaulting to 1000
[  364.733144][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.744752][T12816] gretap0 speed is unknown, defaulting to 1000
[  364.748486][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.847353][T12810] team0: Port device team_slave_0 added
[  364.864196][T12810] team0: Port device team_slave_1 added
[  364.953784][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.961134][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.987878][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.018715][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.025860][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.052545][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.134634][T12810] hsr_slave_0: entered promiscuous mode
[  365.141563][T12810] hsr_slave_1: entered promiscuous mode
[  365.147830][T12810] debugfs: 'hsr0' already exists in 'hsr'
[  365.154740][T12810] Cannot create hsr debugfs directory
[  365.443733][T12816] chnl_net:caif_netlink_parms(): no params data found
[  365.542418][T12816] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.550860][T12816] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.558171][T12816] bridge_slave_0: entered allmulticast mode
[  365.560103][   T51] Bluetooth: hci12: command tx timeout
[  365.567825][T12816] bridge_slave_0: entered promiscuous mode
[  365.578374][T12816] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.585674][T12816] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.593095][T12816] bridge_slave_1: entered allmulticast mode
[  365.601128][T12816] bridge_slave_1: entered promiscuous mode
[  365.634885][T12816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.648305][T12816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.686600][T12816] team0: Port device team_slave_0 added
[  365.708515][T12816] team0: Port device team_slave_1 added
[  365.746528][T12816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.754299][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.780802][T12816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.794029][T12816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.801260][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.827867][T12816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.925850][T12816] hsr_slave_0: entered promiscuous mode
[  365.933099][T12816] hsr_slave_1: entered promiscuous mode
[  365.939896][T12816] debugfs: 'hsr0' already exists in 'hsr'
[  365.945657][T12816] Cannot create hsr debugfs directory
[  365.961120][ T5833] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  365.972000][ T5833] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  365.981008][ T5833] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  365.991355][ T5833] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  365.999477][ T5833] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  366.088014][T12828] lo speed is unknown, defaulting to 1000
[  366.097157][T12828] gretap0 speed is unknown, defaulting to 1000
[  366.387145][T12828] chnl_net:caif_netlink_parms(): no params data found
[  366.525009][T12828] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.532667][T12828] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.540233][T12828] bridge_slave_0: entered allmulticast mode
[  366.547644][T12828] bridge_slave_0: entered promiscuous mode
[  366.565084][T12828] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.572650][T12828] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.580329][T12828] bridge_slave_1: entered allmulticast mode
[  366.587845][T12828] bridge_slave_1: entered promiscuous mode
[  366.593919][   T51] Bluetooth: hci11: command tx timeout
[  366.599891][   T51] Bluetooth: hci13: command tx timeout
[  366.599923][ T5833] Bluetooth: hci10: command tx timeout
[  366.646343][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.662120][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.692885][T12828] team0: Port device team_slave_0 added
[  366.701598][T12828] team0: Port device team_slave_1 added
[  366.728116][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.736011][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.763053][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.775997][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.783488][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.809551][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.853617][T12828] hsr_slave_0: entered promiscuous mode
[  366.860819][T12828] hsr_slave_1: entered promiscuous mode
[  366.867358][T12828] debugfs: 'hsr0' already exists in 'hsr'
[  366.873526][T12828] Cannot create hsr debugfs directory
[  367.629799][ T5833] Bluetooth: hci12: command tx timeout
[  368.030465][ T5833] Bluetooth: hci14: command tx timeout
[  368.673573][ T5833] Bluetooth: hci13: command tx timeout
[  368.673608][   T51] Bluetooth: hci11: command tx timeout
[  368.680385][ T5828] Bluetooth: hci10: command tx timeout
[  369.709849][ T5828] Bluetooth: hci12: command tx timeout
[  370.119863][ T5828] Bluetooth: hci14: command tx timeout
[  370.749816][ T5828] Bluetooth: hci11: command tx timeout
[  370.750041][ T5833] Bluetooth: hci10: command tx timeout
[  370.756350][ T5835] Bluetooth: hci13: command tx timeout
[  371.789856][ T5835] Bluetooth: hci12: command tx timeout
[  372.190337][ T5835] Bluetooth: hci14: command tx timeout
[  372.829896][ T5835] Bluetooth: hci13: command tx timeout
[  374.270146][ T5828] Bluetooth: hci14: command tx timeout
[  375.870857][ T5828] Bluetooth: hci3: command 0x0405 tx timeout
[  377.634150][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 150 seconds
[  377.645216][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 150 seconds
[  377.656989][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 150 seconds
[  377.668909][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 150 seconds
[  378.913459][ T1299] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.923593][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  407.710371][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 180 seconds
[  407.722928][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 180 seconds
[  407.734146][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 180 seconds
[  407.745303][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 180 seconds
[  408.918531][ T5193] udevd[5193]: worker [5892] /devices/virtual/block/nbd1 timeout; kill it
[  408.927690][ T5193] udevd[5193]: seq 15240 '/devices/virtual/block/nbd1' killed
[  422.489434][ T5828] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  422.499178][ T5828] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  422.507861][ T5828] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  422.519375][ T5828] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  422.527357][ T5828] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  422.539384][ T5835] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  422.549902][ T5835] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  422.563319][ T5835] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  422.572712][ T5835] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  422.581602][ T5835] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  422.587543][T12842] lo speed is unknown, defaulting to 1000
[  422.608790][T12842] gretap0 speed is unknown, defaulting to 1000
[  422.637321][T12844] lo speed is unknown, defaulting to 1000
[  422.759547][T12844] gretap0 speed is unknown, defaulting to 1000
[  422.939258][T12842] chnl_net:caif_netlink_parms(): no params data found
[  423.088799][T12842] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.096504][T12842] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.103962][T12842] bridge_slave_0: entered allmulticast mode
[  423.112453][T12842] bridge_slave_0: entered promiscuous mode
[  423.125604][T12842] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.133293][T12842] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.141071][T12842] bridge_slave_1: entered allmulticast mode
[  423.148524][T12842] bridge_slave_1: entered promiscuous mode
[  423.182340][T12842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.197387][T12842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.241010][T12842] team0: Port device team_slave_0 added
[  423.257336][T12842] team0: Port device team_slave_1 added
[  423.306656][T12842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.313772][T12842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.340129][T12842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.358454][T12842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.366363][T12842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.399975][T12842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.467463][T12844] chnl_net:caif_netlink_parms(): no params data found
[  423.496357][T12842] hsr_slave_0: entered promiscuous mode
[  423.504085][T12842] hsr_slave_1: entered promiscuous mode
[  423.510835][T12842] debugfs: 'hsr0' already exists in 'hsr'
[  423.516707][T12842] Cannot create hsr debugfs directory
[  423.604726][ T5835] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  423.620268][ T5835] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  423.628750][ T5835] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  423.640744][ T5835] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  423.651748][ T5835] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  423.734182][T12844] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.741642][T12844] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.749221][T12844] bridge_slave_0: entered allmulticast mode
[  423.757126][T12844] bridge_slave_0: entered promiscuous mode
[  423.775866][T12844] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.784862][T12844] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.792970][T12844] bridge_slave_1: entered allmulticast mode
[  423.800597][T12844] bridge_slave_1: entered promiscuous mode
[  423.838698][T12856] lo speed is unknown, defaulting to 1000
[  423.857952][T12856] gretap0 speed is unknown, defaulting to 1000
[  423.869428][T12844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.904865][T12844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.002822][T12844] team0: Port device team_slave_0 added
[  424.029186][T12844] team0: Port device team_slave_1 added
[  424.093582][T12844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.102003][T12844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.129127][T12844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.154539][T12844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.161601][T12844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.188103][T12844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.298222][T12844] hsr_slave_0: entered promiscuous mode
[  424.306968][T12844] hsr_slave_1: entered promiscuous mode
[  424.314827][T12844] debugfs: 'hsr0' already exists in 'hsr'
[  424.321506][T12844] Cannot create hsr debugfs directory
[  424.509408][T12856] chnl_net:caif_netlink_parms(): no params data found
[  424.600155][ T5835] Bluetooth: hci15: command tx timeout
[  424.647849][T12856] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.655360][T12856] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.663043][T12856] bridge_slave_0: entered allmulticast mode
[  424.670641][T12856] bridge_slave_0: entered promiscuous mode
[  424.678775][T12856] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.688036][ T5835] Bluetooth: hci16: command tx timeout
[  424.695463][T12856] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.703269][T12856] bridge_slave_1: entered allmulticast mode
[  424.710822][T12856] bridge_slave_1: entered promiscuous mode
[  424.746083][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.759114][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.801035][T12856] team0: Port device team_slave_0 added
[  424.809050][T12856] team0: Port device team_slave_1 added
[  424.834691][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.841853][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.868496][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.894776][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.902102][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.932753][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.028098][T12856] hsr_slave_0: entered promiscuous mode
[  425.035722][T12856] hsr_slave_1: entered promiscuous mode
[  425.045797][T12870] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  425.049034][T12856] debugfs: 'hsr0' already exists in 'hsr'
[  425.061746][T12856] Cannot create hsr debugfs directory
[  425.062171][T12870] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  425.077459][T12870] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  425.086367][T12870] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  425.095768][T12870] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  425.192473][T12868] lo speed is unknown, defaulting to 1000
[  425.224475][T12868] gretap0 speed is unknown, defaulting to 1000
[  425.610111][T12868] chnl_net:caif_netlink_parms(): no params data found
[  425.710012][ T5844] Bluetooth: hci17: command tx timeout
[  425.713728][T12868] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.723954][T12868] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.731645][T12868] bridge_slave_0: entered allmulticast mode
[  425.739110][T12868] bridge_slave_0: entered promiscuous mode
[  425.748028][T12868] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.755616][T12868] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.763550][T12868] bridge_slave_1: entered allmulticast mode
[  425.771405][T12868] bridge_slave_1: entered promiscuous mode
[  425.805293][T12868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.817578][T12868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.848308][T12868] team0: Port device team_slave_0 added
[  425.856785][T12868] team0: Port device team_slave_1 added
[  425.883966][T12868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.891291][T12868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.917593][T12868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.932414][T12868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.939403][T12868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.966860][T12868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.035872][T12868] hsr_slave_0: entered promiscuous mode
[  426.043420][T12868] hsr_slave_1: entered promiscuous mode
[  426.050719][T12868] debugfs: 'hsr0' already exists in 'hsr'
[  426.056490][T12868] Cannot create hsr debugfs directory
[  426.066931][T12870] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  426.078317][T12870] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  426.089835][T12870] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  426.098306][T12870] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  426.106902][T12870] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  426.193088][T12878] lo speed is unknown, defaulting to 1000
[  426.208118][T12878] gretap0 speed is unknown, defaulting to 1000
[  426.498721][T12878] chnl_net:caif_netlink_parms(): no params data found
[  426.621770][T12878] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.629253][T12878] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.637410][T12878] bridge_slave_0: entered allmulticast mode
[  426.645021][T12878] bridge_slave_0: entered promiscuous mode
[  426.660489][T12878] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.668082][T12878] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.675727][ T5844] Bluetooth: hci15: command tx timeout
[  426.682552][T12878] bridge_slave_1: entered allmulticast mode
[  426.690265][T12878] bridge_slave_1: entered promiscuous mode
[  426.744290][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.753922][ T5844] Bluetooth: hci16: command tx timeout
[  426.759046][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.792980][T12878] team0: Port device team_slave_0 added
[  426.801489][T12878] team0: Port device team_slave_1 added
[  426.826562][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.834230][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.861678][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.874379][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.881379][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.908021][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.954655][T12878] hsr_slave_0: entered promiscuous mode
[  426.961366][T12878] hsr_slave_1: entered promiscuous mode
[  426.968099][T12878] debugfs: 'hsr0' already exists in 'hsr'
[  426.974100][T12878] Cannot create hsr debugfs directory
[  427.072155][ T5844] Bluetooth: hci5: command 0x0406 tx timeout
[  427.078324][ T5844] Bluetooth: hci6: command 0x0406 tx timeout
[  427.085099][T12870] Bluetooth: hci8: command 0x0406 tx timeout
[  427.093202][T12870] Bluetooth: hci7: command 0x0406 tx timeout
[  427.151441][   T51] Bluetooth: hci18: command tx timeout
[  427.789929][   T51] Bluetooth: hci17: command tx timeout
[  428.190188][   T51] Bluetooth: hci19: command tx timeout
[  428.750151][   T51] Bluetooth: hci15: command tx timeout
[  428.829904][   T51] Bluetooth: hci16: command tx timeout
[  429.230235][   T51] Bluetooth: hci18: command tx timeout
[  429.870311][   T51] Bluetooth: hci17: command tx timeout
[  430.269891][ T5828] Bluetooth: hci19: command tx timeout
[  430.829965][ T5828] Bluetooth: hci15: command tx timeout
[  430.919812][ T5828] Bluetooth: hci16: command tx timeout
[  431.310356][ T5828] Bluetooth: hci18: command tx timeout
[  431.949861][ T5828] Bluetooth: hci17: command tx timeout
[  432.192547][ T5828] Bluetooth: hci9: command 0x0406 tx timeout
[  432.350025][   T51] Bluetooth: hci19: command tx timeout
[  433.390892][   T51] Bluetooth: hci18: command tx timeout
[  434.429800][   T51] Bluetooth: hci19: command tx timeout
[  437.791457][ T1682] block nbd1: Possible stuck request ffff8880271e0000: control (read@0,1024B). Runtime 210 seconds
[  437.802626][ T1682] block nbd1: Possible stuck request ffff8880271e0200: control (read@1024,1024B). Runtime 210 seconds
[  437.813961][ T1682] block nbd1: Possible stuck request ffff8880271e0400: control (read@2048,1024B). Runtime 210 seconds
[  437.825387][ T1682] block nbd1: Possible stuck request ffff8880271e0600: control (read@3072,1024B). Runtime 210 seconds
[  440.354359][ T1299] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  440.363810][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  449.950370][   T31] INFO: task syz.4.1924:12680 blocked for more than 143 seconds.
[  449.958432][   T31]       Not tainted syzkaller #0
[  449.963729][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  449.972813][   T31] task:syz.4.1924      state:D stack:26344 pid:12680 tgid:12677 ppid:5826   task_flags:0x400140 flags:0x00080002
[  449.984952][   T31] Call Trace:
[  449.988249][   T31]  <TASK>
[  449.991605][   T31]  __schedule+0x15dd/0x52d0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  449.996249][   T31]  ? __pfx___schedule+0x10/0x10
[  450.001345][   T31]  ? schedule+0x90/0x360
[  450.005860][   T31]  schedule+0x164/0x360
[  450.010130][   T31]  schedule_preempt_disabled+0x13/0x30
[  450.015961][   T31]  __mutex_lock+0x7fe/0x1300
[  450.020722][   T31]  ? __mutex_lock+0x5ac/0x1300
[  450.025560][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  450.030597][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  450.059851][   T31]  ? __dev_queue_xmit+0x28b/0x3870
[  450.065054][   T31]  ? radix_tree_lookup+0x240/0x290
[  450.096219][   T31]  genl_rcv_msg+0x10b/0x7a0
[  450.108108][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.114241][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.119233][   T31]  netlink_rcv_skb+0x232/0x4b0
[  450.124183][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.129557][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.135020][   T31]  ? down_read+0x272/0x2e0
[  450.139911][   T31]  ? genl_rcv+0xd/0x40
[  450.144110][   T31]  genl_rcv+0x28/0x40
[  450.148181][   T31]  netlink_unicast+0x80f/0x9b0
[  450.153111][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  450.158532][   T31]  ? netlink_sendmsg+0x650/0xb40
[  450.163680][   T31]  ? skb_put+0x11b/0x210
[  450.168173][   T31]  netlink_sendmsg+0x813/0xb40
[  450.173221][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.178578][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  450.183855][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.189186][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.194940][   T31]  __sys_sendto+0x672/0x710
[  450.199795][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  450.204882][   T31]  ? fd_install+0x94/0x3d0
[  450.209405][   T31]  ? fd_install+0x306/0x3d0
[  450.214224][   T31]  __x64_sys_sendto+0xde/0x100
[  450.219060][   T31]  do_syscall_64+0x14d/0xf80
[  450.223984][   T31]  ? trace_irq_disable+0x3b/0x150
[  450.230190][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.236374][   T31]  ? clear_bhb_loop+0x40/0x90
[  450.241154][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.247174][   T31] RIP: 0033:0x7fbd3f75cfce
[  450.251668][   T31] RSP: 002b:00007fbd40637e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  450.260440][   T31] RAX: ffffffffffffffda RBX: 00007fbd406396c0 RCX: 00007fbd3f75cfce
[  450.268543][   T31] RDX: 0000000000000020 RSI: 00007fbd40638000 RDI: 0000000000000006
[  450.276872][   T31] RBP: 0000000000000000 R08: 00007fbd40637f04 R09: 000000000000000c
[  450.285302][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  450.293832][   T31] R13: 00007fbd40637f58 R14: 00007fbd40638000 R15: 0000000000000000
[  450.302119][   T31]  </TASK>
[  450.305191][   T31] INFO: task syz.1.1926:12679 blocked for more than 143 seconds.
[  450.313155][   T31]       Not tainted syzkaller #0
[  450.318204][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.327176][   T31] task:syz.1.1926      state:D stack:26120 pid:12679 tgid:12678 ppid:5825   task_flags:0x480140 flags:0x00080002
[  450.339488][   T31] Call Trace:
[  450.342851][   T31]  <TASK>
[  450.345787][   T31]  __schedule+0x15dd/0x52d0
[  450.350497][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.355477][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  450.360572][   T31]  ? __pfx___schedule+0x10/0x10
[  450.365950][   T31]  ? schedule+0x90/0x360
[  450.370655][   T31]  schedule+0x164/0x360
[  450.374934][   T31]  blk_mq_freeze_queue_wait+0x101/0x180
[  450.380570][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  450.386671][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  450.393073][   T31]  queue_limits_commit_update_frozen+0x55/0xd0
[  450.399260][   T31]  nbd_set_size+0x454/0x680
[  450.403935][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  450.409262][   T31]  ? nla_memcpy+0x5b/0xc0
[  450.413761][   T31]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  450.419198][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  450.425103][   T31]  ? rcu_is_watching+0x15/0xb0
[  450.430615][   T31]  ? trace_kmalloc+0x2a/0x110
[  450.435348][   T31]  ? __nla_parse+0x40/0x60
[  450.439880][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  450.446396][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  450.452863][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  450.458470][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  450.464816][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.469835][   T31]  genl_rcv_msg+0x61c/0x7a0
[  450.474574][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.479687][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  450.485611][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.490776][   T31]  netlink_rcv_skb+0x232/0x4b0
[  450.495596][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.501208][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.506901][   T31]  ? down_read+0x272/0x2e0
[  450.511941][   T31]  ? genl_rcv+0xd/0x40
[  450.516166][   T31]  genl_rcv+0x28/0x40
[  450.520743][   T31]  netlink_unicast+0x80f/0x9b0
[  450.525800][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  450.531265][   T31]  ? netlink_sendmsg+0x650/0xb40
[  450.536414][   T31]  ? skb_put+0x11b/0x210
[  450.540931][   T31]  netlink_sendmsg+0x813/0xb40
[  450.545812][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.551178][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  450.556161][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.561637][   T31]  ____sys_sendmsg+0x972/0x9f0
[  450.566459][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.571844][   T31]  ? import_iovec+0x73/0xa0
[  450.576400][   T31]  ___sys_sendmsg+0x2a5/0x360
[  450.581195][   T31]  ? try_to_wake_up+0x832/0x1390
[  450.586262][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.591862][   T31]  ? futex_wake+0x4ac/0x580
[  450.596444][   T31]  ? call_rcu+0x644/0x890
[  450.601069][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  450.606051][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.611824][   T31]  ? rcu_is_watching+0x15/0xb0
[  450.616640][   T31]  do_syscall_64+0x14d/0xf80
[  450.621522][   T31]  ? trace_irq_disable+0x3b/0x150
[  450.626654][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.633072][   T31]  ? clear_bhb_loop+0x40/0x90
[  450.637941][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.644091][   T31] RIP: 0033:0x7fd64b19c799
[  450.648638][   T31] RSP: 002b:00007fd64c0a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.657241][   T31] RAX: ffffffffffffffda RBX: 00007fd64b415fa0 RCX: 00007fd64b19c799
[  450.665543][   T31] RDX: 00000000000040c0 RSI: 00002000000005c0 RDI: 0000000000000004
[  450.673846][   T31] RBP: 00007fd64b232c99 R08: 0000000000000000 R09: 0000000000000000
[  450.682060][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  450.690314][   T31] R13: 00007fd64b416038 R14: 00007fd64b415fa0 R15: 00007ffc86e84428
[  450.698449][   T31]  </TASK>
[  450.701631][   T31] INFO: task syz.0.1930:12697 blocked for more than 144 seconds.
[  450.709564][   T31]       Not tainted syzkaller #0
[  450.714960][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  450.724009][   T31] task:syz.0.1930      state:D stack:27640 pid:12697 tgid:12696 ppid:5836   task_flags:0x400140 flags:0x00080002
[  450.736361][   T31] Call Trace:
[  450.739716][   T31]  <TASK>
[  450.742759][   T31]  __schedule+0x15dd/0x52d0
[  450.747365][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.752627][   T31]  ? __pfx___schedule+0x10/0x10
[  450.757522][   T31]  ? schedule+0x90/0x360
[  450.761992][   T31]  schedule+0x164/0x360
[  450.766279][   T31]  schedule_preempt_disabled+0x13/0x30
[  450.771892][   T31]  __mutex_lock+0x7fe/0x1300
[  450.776518][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  450.781874][   T31]  ? __mutex_lock+0x5ac/0x1300
[  450.786683][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  450.791561][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  450.796613][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.801739][   T31]  ? radix_tree_lookup+0x240/0x290
[  450.806892][   T31]  genl_rcv_msg+0x10b/0x7a0
[  450.811521][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.816587][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  450.821760][   T31]  netlink_rcv_skb+0x232/0x4b0
[  450.826559][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.831945][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.837364][   T31]  ? down_read+0x272/0x2e0
[  450.842123][   T31]  ? genl_rcv+0xd/0x40
[  450.846402][   T31]  genl_rcv+0x28/0x40
[  450.850483][   T31]  netlink_unicast+0x80f/0x9b0
[  450.855293][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  450.860784][   T31]  ? netlink_sendmsg+0x650/0xb40
[  450.865746][   T31]  ? skb_put+0x11b/0x210
[  450.870076][   T31]  netlink_sendmsg+0x813/0xb40
[  450.874946][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.880475][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  450.885455][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.890889][   T31]  ____sys_sendmsg+0x972/0x9f0
[  450.895968][   T31]  ? futex_unqueue+0x211/0x240
[  450.900842][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.906195][   T31]  ? import_iovec+0x73/0xa0
[  450.911071][   T31]  ___sys_sendmsg+0x2a5/0x360
[  450.915792][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.921402][   T31]  ? futex_wait+0x29a/0x380
[  450.926218][   T31]  ? __fget_files+0x2a/0x420
[  450.930879][   T31]  ? __fget_files+0x3a0/0x420
[  450.935768][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  450.940929][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.946443][   T31]  ? rcu_is_watching+0x15/0xb0
[  450.951290][   T31]  do_syscall_64+0x14d/0xf80
[  450.955905][   T31]  ? trace_irq_disable+0x3b/0x150
[  450.961061][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.967192][   T31]  ? clear_bhb_loop+0x40/0x90
[  450.972439][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.978455][   T31] RIP: 0033:0x7fa2ff39c799
[  450.983143][   T31] RSP: 002b:00007fa3001f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.991842][   T31] RAX: ffffffffffffffda RBX: 00007fa2ff615fa0 RCX: 00007fa2ff39c799
[  450.999972][   T31] RDX: 00000000240080d0 RSI: 00002000000029c0 RDI: 0000000000000048
[  451.008008][   T31] RBP: 00007fa2ff432c99 R08: 0000000000000000 R09: 0000000000000000
[  451.016096][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.024329][   T31] R13: 00007fa2ff616038 R14: 00007fa2ff615fa0 R15: 00007ffc255f44d8
[  451.032400][   T31]  </TASK>
[  451.035562][   T31] INFO: task syz.3.1941:12726 blocked for more than 144 seconds.
[  451.046160][   T31]       Not tainted syzkaller #0
[  451.051858][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.060789][   T31] task:syz.3.1941      state:D stack:26120 pid:12726 tgid:12725 ppid:5831   task_flags:0x400140 flags:0x00080002
[  451.072917][   T31] Call Trace:
[  451.076337][   T31]  <TASK>
[  451.079383][   T31]  __schedule+0x15dd/0x52d0
[  451.084140][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.089383][   T31]  ? __pfx___schedule+0x10/0x10
[  451.094790][   T31]  ? schedule+0x90/0x360
[  451.099275][   T31]  schedule+0x164/0x360
[  451.103538][   T31]  schedule_preempt_disabled+0x13/0x30
[  451.109074][   T31]  __mutex_lock+0x7fe/0x1300
[  451.113762][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  451.119034][   T31]  ? __mutex_lock+0x5ac/0x1300
[  451.124729][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  451.129548][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  451.134946][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.140034][   T31]  ? radix_tree_lookup+0x240/0x290
[  451.145720][   T31]  genl_rcv_msg+0x10b/0x7a0
[  451.150617][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.155683][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.160778][   T31]  netlink_rcv_skb+0x232/0x4b0
[  451.165561][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.171199][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.176540][   T31]  ? down_read+0x272/0x2e0
[  451.181188][   T31]  ? genl_rcv+0xd/0x40
[  451.185384][   T31]  genl_rcv+0x28/0x40
[  451.189451][   T31]  netlink_unicast+0x80f/0x9b0
[  451.194401][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  451.199802][   T31]  ? netlink_sendmsg+0x650/0xb40
[  451.204760][   T31]  ? skb_put+0x11b/0x210
[  451.209194][   T31]  netlink_sendmsg+0x813/0xb40
[  451.214044][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.219536][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  451.224639][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  451.231319][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.236879][   T31]  __sys_sendto+0x672/0x710
[  451.241803][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  451.246988][   T31]  ? exc_page_fault+0x6a/0xc0
[  451.251775][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  451.257103][   T31]  __x64_sys_sendto+0xde/0x100
[  451.261926][   T31]  do_syscall_64+0x14d/0xf80
[  451.266630][   T31]  ? trace_irq_disable+0x3b/0x150
[  451.271942][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.278051][   T31]  ? clear_bhb_loop+0x40/0x90
[  451.282870][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.289128][   T31] RIP: 0033:0x7f59eb15cfce
[  451.293770][   T31] RSP: 002b:00007f59ec11ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  451.302409][   T31] RAX: ffffffffffffffda RBX: 00007f59ec11c6c0 RCX: 00007f59eb15cfce
[  451.310968][   T31] RDX: 000000000000001c RSI: 00007f59ec11b000 RDI: 0000000000000005
[  451.319076][   T31] RBP: 0000000000000000 R08: 00007f59ec11af04 R09: 000000000000000c
[  451.327148][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  451.335266][   T31] R13: 00007f59ec11af58 R14: 00007f59ec11b000 R15: 0000000000000000
[  451.343619][   T31]  </TASK>
[  451.346874][   T31] INFO: task syz.2.1945:12740 blocked for more than 144 seconds.
[  451.354853][   T31]       Not tainted syzkaller #0
[  451.360042][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.368739][   T31] task:syz.2.1945      state:D stack:26248 pid:12740 tgid:12738 ppid:5824   task_flags:0x400040 flags:0x00080002
[  451.381286][   T31] Call Trace:
[  451.384775][   T31]  <TASK>
[  451.387826][   T31]  __schedule+0x15dd/0x52d0
[  451.392494][   T31]  ? __pfx___schedule+0x10/0x10
[  451.397407][   T31]  ? schedule+0x90/0x360
[  451.401757][   T31]  schedule+0x164/0x360
[  451.406080][   T31]  schedule_preempt_disabled+0x13/0x30
[  451.411872][   T31]  __mutex_lock+0x7fe/0x1300
[  451.416591][   T31]  ? __mutex_lock+0x5ac/0x1300
[  451.421444][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  451.426237][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  451.431347][   T31]  ? __dev_queue_xmit+0x28b/0x3870
[  451.436573][   T31]  ? radix_tree_lookup+0x240/0x290
[  451.441852][   T31]  genl_rcv_msg+0x10b/0x7a0
[  451.446401][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.451665][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.456690][   T31]  netlink_rcv_skb+0x232/0x4b0
[  451.461634][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.466706][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.472326][   T31]  ? down_read+0x272/0x2e0
[  451.476964][   T31]  ? genl_rcv+0xd/0x40
[  451.481201][   T31]  genl_rcv+0x28/0x40
[  451.485223][   T31]  netlink_unicast+0x80f/0x9b0
[  451.490227][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  451.495718][   T31]  ? netlink_sendmsg+0x650/0xb40
[  451.500727][   T31]  ? skb_put+0x11b/0x210
[  451.505014][   T31]  netlink_sendmsg+0x813/0xb40
[  451.509887][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.515239][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  451.520381][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  451.525787][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.531157][   T31]  __sys_sendto+0x672/0x710
[  451.535686][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  451.540882][   T31]  ? exc_page_fault+0x6a/0xc0
[  451.545856][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  451.554471][   T31]  __x64_sys_sendto+0xde/0x100
[  451.559564][   T31]  do_syscall_64+0x14d/0xf80
[  451.564363][   T31]  ? trace_irq_disable+0x3b/0x150
[  451.569401][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.575663][   T31]  ? clear_bhb_loop+0x40/0x90
[  451.580429][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.586525][   T31] RIP: 0033:0x7f438455cfce
[  451.591211][   T31] RSP: 002b:00007f43853b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  451.599933][   T31] RAX: ffffffffffffffda RBX: 00007f43853b36c0 RCX: 00007f438455cfce
[  451.608024][   T31] RDX: 0000000000000020 RSI: 00007f43853b2000 RDI: 0000000000000009
[  451.616283][   T31] RBP: 0000000000000000 R08: 00007f43853b1f04 R09: 000000000000000c
[  451.624422][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  451.632947][   T31] R13: 00007f43853b1f58 R14: 00007f43853b2000 R15: 0000000000000000
[  451.641920][   T31]  </TASK>
[  451.645175][   T31] INFO: task syz-executor:12744 blocked for more than 145 seconds.
[  451.653162][   T31]       Not tainted syzkaller #0
[  451.658119][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.666940][   T31] task:syz-executor    state:D stack:22880 pid:12744 tgid:12744 ppid:1      task_flags:0x400140 flags:0x00080002
[  451.679472][   T31] Call Trace:
[  451.682845][   T31]  <TASK>
[  451.685805][   T31]  __schedule+0x15dd/0x52d0
[  451.690508][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.695578][   T31]  ? __pfx___schedule+0x10/0x10
[  451.700538][   T31]  ? schedule+0x90/0x360
[  451.705008][   T31]  schedule+0x164/0x360
[  451.709195][   T31]  schedule_preempt_disabled+0x13/0x30
[  451.715046][   T31]  __mutex_lock+0x7fe/0x1300
[  451.720004][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  451.725334][   T31]  ? __mutex_lock+0x5ac/0x1300
[  451.730169][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  451.734887][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  451.740161][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.745263][   T31]  ? radix_tree_lookup+0x240/0x290
[  451.750530][   T31]  genl_rcv_msg+0x10b/0x7a0
[  451.755170][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.760275][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.765258][   T31]  netlink_rcv_skb+0x232/0x4b0
[  451.770353][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  451.775517][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.781099][   T31]  ? down_read+0x272/0x2e0
[  451.785563][   T31]  ? genl_rcv+0xd/0x40
[  451.790047][   T31]  genl_rcv+0x28/0x40
[  451.794165][   T31]  netlink_unicast+0x80f/0x9b0
[  451.798943][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  451.804322][   T31]  ? netlink_sendmsg+0x650/0xb40
[  451.809445][   T31]  ? skb_put+0x11b/0x210
[  451.813767][   T31]  netlink_sendmsg+0x813/0xb40
[  451.818599][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.824165][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  451.829250][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  451.834739][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.840194][   T31]  __sys_sendto+0x672/0x710
[  451.844706][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  451.849906][   T31]  ? fd_install+0x94/0x3d0
[  451.854364][   T31]  ? fd_install+0x306/0x3d0
[  451.859001][   T31]  __x64_sys_sendto+0xde/0x100
[  451.863860][   T31]  do_syscall_64+0x14d/0xf80
[  451.868574][   T31]  ? trace_irq_disable+0x3b/0x150
[  451.874059][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.880583][   T31]  ? clear_bhb_loop+0x40/0x90
[  451.885265][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.891323][   T31] RIP: 0033:0x7fa67e35cfce
[  451.895768][   T31] RSP: 002b:00007ffde9b198d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  451.904933][   T31] RAX: ffffffffffffffda RBX: 000055557ea33500 RCX: 00007fa67e35cfce
[  451.913267][   T31] RDX: 0000000000000020 RSI: 00007fa67f144670 RDI: 0000000000000005
[  451.921444][   T31] RBP: 0000000000000001 R08: 00007ffde9b19954 R09: 000000000000000c
[  451.929533][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  451.937846][   T31] R13: 00007ffde9b199a8 R14: 00007fa67f144670 R15: 0000000000000000
[  451.945979][   T31]  </TASK>
[  451.949075][   T31] INFO: task syz-executor:12746 blocked for more than 145 seconds.
[  451.957528][   T31]       Not tainted syzkaller #0
[  451.962707][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  451.971550][   T31] task:syz-executor    state:D stack:22784 pid:12746 tgid:12746 ppid:1      task_flags:0x400140 flags:0x00080002
[  451.983761][   T31] Call Trace:
[  451.987163][   T31]  <TASK>
[  451.990211][   T31]  __schedule+0x15dd/0x52d0
[  451.994789][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  451.999828][   T31]  ? __pfx___schedule+0x10/0x10
[  452.004734][   T31]  ? schedule+0x90/0x360
[  452.009086][   T31]  schedule+0x164/0x360
[  452.013313][   T31]  schedule_preempt_disabled+0x13/0x30
[  452.018908][   T31]  __mutex_lock+0x7fe/0x1300
[  452.023622][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  452.028938][   T31]  ? __mutex_lock+0x5ac/0x1300
[  452.033956][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  452.038716][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  452.044053][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.049205][   T31]  ? radix_tree_lookup+0x240/0x290
[  452.054467][   T31]  genl_rcv_msg+0x10b/0x7a0
[  452.059462][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.064605][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.069637][   T31]  netlink_rcv_skb+0x232/0x4b0
[  452.074522][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.079550][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  452.085111][   T31]  ? down_read+0x272/0x2e0
[  452.089552][   T31]  ? genl_rcv+0xd/0x40
[  452.093702][   T31]  genl_rcv+0x28/0x40
[  452.097686][   T31]  netlink_unicast+0x80f/0x9b0
[  452.102639][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  452.108062][   T31]  ? netlink_sendmsg+0x650/0xb40
[  452.113335][   T31]  ? skb_put+0x11b/0x210
[  452.117725][   T31]  netlink_sendmsg+0x813/0xb40
[  452.122597][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.128093][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  452.133164][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.138493][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.143861][   T31]  __sys_sendto+0x672/0x710
[  452.148408][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  452.153671][   T31]  ? fd_install+0x94/0x3d0
[  452.158118][   T31]  ? fd_install+0x306/0x3d0
[  452.162790][   T31]  __x64_sys_sendto+0xde/0x100
[  452.167578][   T31]  do_syscall_64+0x14d/0xf80
[  452.172255][   T31]  ? trace_irq_disable+0x3b/0x150
[  452.177296][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.183416][   T31]  ? clear_bhb_loop+0x40/0x90
[  452.188117][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.194392][   T31] RIP: 0033:0x7f6edf75cfce
[  452.198828][   T31] RSP: 002b:00007ffd74979e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  452.207320][   T31] RAX: ffffffffffffffda RBX: 00005555666f6500 RCX: 00007f6edf75cfce
[  452.215386][   T31] RDX: 0000000000000020 RSI: 00007f6ee0544670 RDI: 0000000000000005
[  452.223532][   T31] RBP: 0000000000000001 R08: 00007ffd74979f14 R09: 000000000000000c
[  452.231781][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  452.239813][   T31] R13: 00007ffd74979f68 R14: 00007f6ee0544670 R15: 0000000000000000
[  452.248005][   T31]  </TASK>
[  452.251104][   T31] INFO: task syz-executor:12759 blocked for more than 145 seconds.
[  452.259009][   T31]       Not tainted syzkaller #0
[  452.264341][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  452.273260][   T31] task:syz-executor    state:D stack:22088 pid:12759 tgid:12759 ppid:1      task_flags:0x400140 flags:0x00080002
[  452.285342][   T31] Call Trace:
[  452.288648][   T31]  <TASK>
[  452.291799][   T31]  __schedule+0x15dd/0x52d0
[  452.296346][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.301559][   T31]  ? __pfx___schedule+0x10/0x10
[  452.306532][   T31]  ? schedule+0x90/0x360
[  452.310931][   T31]  schedule+0x164/0x360
[  452.315129][   T31]  schedule_preempt_disabled+0x13/0x30
[  452.320748][   T31]  __mutex_lock+0x7fe/0x1300
[  452.325355][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  452.330816][   T31]  ? __mutex_lock+0x5ac/0x1300
[  452.335721][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  452.340725][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  452.345890][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.351041][   T31]  ? radix_tree_lookup+0x240/0x290
[  452.356193][   T31]  genl_rcv_msg+0x10b/0x7a0
[  452.360797][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.365893][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.371052][   T31]  netlink_rcv_skb+0x232/0x4b0
[  452.375857][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.381129][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  452.386551][   T31]  ? down_read+0x272/0x2e0
[  452.391043][   T31]  ? genl_rcv+0xd/0x40
[  452.395175][   T31]  genl_rcv+0x28/0x40
[  452.399258][   T31]  netlink_unicast+0x80f/0x9b0
[  452.404147][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  452.409478][   T31]  ? netlink_sendmsg+0x650/0xb40
[  452.414744][   T31]  ? skb_put+0x11b/0x210
[  452.419050][   T31]  netlink_sendmsg+0x813/0xb40
[  452.424014][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.429439][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  452.434687][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.440579][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.445936][   T31]  __sys_sendto+0x672/0x710
[  452.450605][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  452.455666][   T31]  ? fd_install+0x94/0x3d0
[  452.460171][   T31]  ? fd_install+0x306/0x3d0
[  452.464713][   T31]  __x64_sys_sendto+0xde/0x100
[  452.469515][   T31]  do_syscall_64+0x14d/0xf80
[  452.474514][   T31]  ? trace_irq_disable+0x3b/0x150
[  452.479914][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.486047][   T31]  ? clear_bhb_loop+0x40/0x90
[  452.491017][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.496943][   T31] RIP: 0033:0x7fd2a435cfce
[  452.501445][   T31] RSP: 002b:00007ffd509be358 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  452.510506][   T31] RAX: ffffffffffffffda RBX: 000055556aae0500 RCX: 00007fd2a435cfce
[  452.518531][   T31] RDX: 0000000000000020 RSI: 00007fd2a5144670 RDI: 0000000000000005
[  452.526734][   T31] RBP: 0000000000000001 R08: 00007ffd509be3d4 R09: 000000000000000c
[  452.534808][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  452.542881][   T31] R13: 00007ffd509be428 R14: 00007fd2a5144670 R15: 0000000000000000
[  452.551006][   T31]  </TASK>
[  452.554052][   T31] INFO: task syz-executor:12765 blocked for more than 145 seconds.
[  452.562104][   T31]       Not tainted syzkaller #0
[  452.567050][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  452.576068][   T31] task:syz-executor    state:D stack:22240 pid:12765 tgid:12765 ppid:1      task_flags:0x400140 flags:0x00080002
[  452.588204][   T31] Call Trace:
[  452.594832][   T31]  <TASK>
[  452.597790][   T31]  __schedule+0x15dd/0x52d0
[  452.602384][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.607449][   T31]  ? __pfx___schedule+0x10/0x10
[  452.612500][   T31]  ? schedule+0x90/0x360
[  452.616782][   T31]  schedule+0x164/0x360
[  452.621119][   T31]  schedule_preempt_disabled+0x13/0x30
[  452.626613][   T31]  __mutex_lock+0x7fe/0x1300
[  452.631375][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  452.636606][   T31]  ? __mutex_lock+0x5ac/0x1300
[  452.641454][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  452.646172][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  452.651267][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.656229][   T31]  ? radix_tree_lookup+0x240/0x290
[  452.661428][   T31]  genl_rcv_msg+0x10b/0x7a0
[  452.665964][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.671126][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  452.676094][   T31]  netlink_rcv_skb+0x232/0x4b0
[  452.680923][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.686240][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  452.691611][   T31]  ? down_read+0x272/0x2e0
[  452.696240][   T31]  ? genl_rcv+0xd/0x40
[  452.700717][   T31]  genl_rcv+0x28/0x40
[  452.704807][   T31]  netlink_unicast+0x80f/0x9b0
[  452.709770][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  452.715261][   T31]  ? netlink_sendmsg+0x650/0xb40
[  452.720475][   T31]  ? skb_put+0x11b/0x210
[  452.724767][   T31]  netlink_sendmsg+0x813/0xb40
[  452.729546][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.734992][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  452.740181][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.745763][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.751286][   T31]  __sys_sendto+0x672/0x710
[  452.755904][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  452.761151][   T31]  ? fd_install+0x94/0x3d0
[  452.765607][   T31]  ? fd_install+0x306/0x3d0
[  452.770455][   T31]  __x64_sys_sendto+0xde/0x100
[  452.775288][   T31]  do_syscall_64+0x14d/0xf80
[  452.780071][   T31]  ? trace_irq_disable+0x3b/0x150
[  452.785376][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.791516][   T31]  ? clear_bhb_loop+0x40/0x90
[  452.796232][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.802228][   T31] RIP: 0033:0x7effbc55cfce
[  452.806920][   T31] RSP: 002b:00007ffea92c12b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  452.815654][   T31] RAX: ffffffffffffffda RBX: 0000555593b81500 RCX: 00007effbc55cfce
[  452.823693][   T31] RDX: 0000000000000020 RSI: 00007effbd344670 RDI: 0000000000000005
[  452.831757][   T31] RBP: 0000000000000001 R08: 00007ffea92c1334 R09: 000000000000000c
[  452.839813][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  452.848315][   T31] R13: 00007ffea92c1388 R14: 00007effbd344670 R15: 0000000000000000
[  452.856557][   T31]  </TASK>
[  452.859722][   T31] 
[  452.859722][   T31] Showing all locks held in the system:
[  452.867463][   T31] 1 lock held by khungtaskd/31:
[  452.872412][   T31]  #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  452.882395][   T31] 2 locks held by getty/5585:
[  452.887087][   T31]  #0: ffff8880352030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  452.897040][   T31]  #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  452.907738][   T31] 1 lock held by udevd/5892:
[  452.912501][   T31]  #0: ffff888026be0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  452.922508][   T31] 2 locks held by syz.4.1924/12680:
[  452.927710][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  452.936066][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  452.945203][   T31] 6 locks held by syz.1.1926/12679:
[  452.950543][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  452.958856][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  452.968241][   T31]  #2: ffff888026beaa78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  452.978759][   T31]  #3: ffff888026b319d0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  452.988390][   T31]  #4: ffff888026b31370 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  453.000789][   T31]  #5: ffff888026b313a8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  453.013289][   T31] 2 locks held by syz.0.1930/12697:
[  453.018512][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.026810][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.036486][   T31] 2 locks held by syz.3.1941/12726:
[  453.041765][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.050195][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.059271][   T31] 2 locks held by syz.2.1945/12740:
[  453.064583][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.073094][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.082242][   T31] 2 locks held by syz-executor/12744:
[  453.087735][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.096084][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.105285][   T31] 2 locks held by syz-executor/12746:
[  453.110821][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.119221][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.128465][   T31] 2 locks held by syz-executor/12759:
[  453.133894][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.142493][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.151752][   T31] 2 locks held by syz-executor/12765:
[  453.157144][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.165457][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.174599][   T31] 2 locks held by syz-executor/12780:
[  453.180265][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.188497][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.197574][   T31] 2 locks held by syz-executor/12793:
[  453.203104][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.211372][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.220622][   T31] 2 locks held by syz-executor/12795:
[  453.226084][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.235720][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.244793][   T31] 2 locks held by syz-executor/12810:
[  453.250472][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.258752][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.268144][   T31] 2 locks held by syz-executor/12816:
[  453.273572][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.281994][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.291424][   T31] 2 locks held by syz-executor/12828:
[  453.296922][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.305277][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.314524][   T31] 2 locks held by syz-executor/12842:
[  453.320067][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.328295][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.337498][   T31] 2 locks held by syz-executor/12844:
[  453.342950][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.351292][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.360472][   T31] 2 locks held by syz-executor/12856:
[  453.365936][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.374275][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.383458][   T31] 2 locks held by syz-executor/12868:
[  453.388894][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.397621][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.407127][   T31] 2 locks held by syz-executor/12878:
[  453.412547][   T31]  #0: ffffffff8fc37a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  453.420860][   T31]  #1: ffffffff8fc378c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  453.430398][   T31] 
[  453.432838][   T31] =============================================
[  453.432838][   T31] 
[  453.441418][   T31] NMI backtrace for cpu 0
[  453.441436][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  453.441459][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  453.441469][   T31] Call Trace:
[  453.441476][   T31]  <TASK>
[  453.441483][   T31]  dump_stack_lvl+0xe8/0x150
[  453.441516][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  453.441541][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  453.441567][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  453.441595][   T31]  sys_info+0x135/0x170
[  453.441614][   T31]  watchdog+0xfd9/0x1030
[  453.441638][   T31]  ? watchdog+0x21a/0x1030
[  453.441665][   T31]  kthread+0x388/0x470
[  453.441683][   T31]  ? __pfx_watchdog+0x10/0x10
[  453.441699][   T31]  ? __pfx_kthread+0x10/0x10
[  453.441718][   T31]  ret_from_fork+0x51e/0xb90
[  453.441748][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  453.441772][   T31]  ? __switch_to+0xc7d/0x1450
[  453.441800][   T31]  ? __pfx_kthread+0x10/0x10
[  453.441821][   T31]  ret_from_fork_asm+0x1a/0x30
[  453.441857][   T31]  </TASK>
[  453.441867][   T31] Sending NMI from CPU 0 to CPUs 1:
[  453.553416][    C1] NMI backtrace for cpu 1
[  453.553436][    C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  453.553455][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  453.553466][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  453.553497][    C1] RIP: 0010:debug_smp_processor_id+0x0/0x20
[  453.553516][    C1] Code: 80 db 82 8e 4c 89 f6 e8 5e 73 3a f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 c7 c7 20 ca 27 8c 48 c7 c6 60 ca 27 8c eb 1c 66 66
[  453.553531][    C1] RSP: 0018:ffffc90000b97850 EFLAGS: 00000283
[  453.553545][    C1] RAX: 0000000000000001 RBX: 000000000000029a RCX: ffff88801af41e80
[  453.553557][    C1] RDX: 0000000000000000 RSI: ffffffff8b781f8a RDI: ffffffff8e75e620
[  453.553567][    C1] RBP: ffffc90000b97a30 R08: ffffffff8b781f8a R09: ffffffff8e75e620
[  453.553578][    C1] R10: dffffc0000000000 R11: ffffed100fc4ed17 R12: ffff888059597e00
[  453.553590][    C1] R13: ffffffff8b781f8a R14: ffffffff8e75e620 R15: ffff88807c6fd4d0
[  453.553602][    C1] FS:  0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000
[  453.553615][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.553626][    C1] CR2: 000055fbdf9b0ee8 CR3: 000000007d6b2000 CR4: 00000000003526f0
[  453.553643][    C1] Call Trace:
[  453.553649][    C1]  <TASK>
[  453.553655][    C1]  rcu_is_watching+0x15/0xb0
[  453.553680][    C1]  lock_release+0x4b/0x3d0
[  453.553700][    C1]  ? batadv_iv_ogm_schedule+0x43a/0xf50
[  453.553724][    C1]  batadv_iv_ogm_schedule+0x71f/0xf50
[  453.553749][    C1]  ? batadv_iv_ogm_schedule+0x43a/0xf50
[  453.553769][    C1]  ? __pfx_batadv_iv_ogm_schedule+0x10/0x10
[  453.553809][    C1]  ? batadv_send_skb_packet+0x426/0x690
[  453.553836][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x6c8/0x7e0
[  453.553862][    C1]  ? process_scheduled_works+0xa8d/0x18c0
[  453.553883][    C1]  process_scheduled_works+0xb6e/0x18c0
[  453.553916][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  453.553938][    C1]  ? assign_work+0x3d5/0x5e0
[  453.553958][    C1]  worker_thread+0xa53/0xfc0
[  453.553990][    C1]  kthread+0x388/0x470
[  453.554006][    C1]  ? __pfx_worker_thread+0x10/0x10
[  453.554025][    C1]  ? __pfx_kthread+0x10/0x10
[  453.554041][    C1]  ret_from_fork+0x51e/0xb90
[  453.554062][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  453.554081][    C1]  ? __switch_to+0xc7d/0x1450
[  453.554100][    C1]  ? __pfx_kthread+0x10/0x10
[  453.554115][    C1]  ret_from_fork_asm+0x1a/0x30
[  453.554144][    C1]  </TASK>
[  453.805252][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  453.812240][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  453.821346][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  453.831486][   T31] Call Trace:
[  453.834765][   T31]  <TASK>
[  453.837785][   T31]  vpanic+0x56c/0xa60
[  453.841791][   T31]  ? __pfx___schedule+0x10/0x10
[  453.846645][   T31]  ? __pfx_vpanic+0x10/0x10
[  453.851577][   T31]  ? __pfx_console_unlock+0x10/0x10
[  453.856781][   T31]  panic+0xc5/0xd0
[  453.860516][   T31]  ? __pfx_panic+0x10/0x10
[  453.865034][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  453.870512][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  453.876690][   T31]  watchdog+0x1023/0x1030
[  453.881033][   T31]  ? watchdog+0x21a/0x1030
[  453.885458][   T31]  kthread+0x388/0x470
[  453.889537][   T31]  ? __pfx_watchdog+0x10/0x10
[  453.894226][   T31]  ? __pfx_kthread+0x10/0x10
[  453.899000][   T31]  ret_from_fork+0x51e/0xb90
[  453.903840][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  453.908961][   T31]  ? __switch_to+0xc7d/0x1450
[  453.913656][   T31]  ? __pfx_kthread+0x10/0x10
[  453.918395][   T31]  ret_from_fork_asm+0x1a/0x30
[  453.923451][   T31]  </TASK>
[  453.927209][   T31] Kernel Offset: disabled
[  453.931658][   T31] Rebooting in 86400 seconds..