last executing test programs:

17.494640595s ago: executing program 2 (id=939):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x2)
socket$pppoe(0x18, 0x1, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000040))
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="16f74784c902", 'veth1_macvtap\x00'}}, 0x1e)
close(r1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x58, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {0xb}, [@generic="621fed1973c3e934d0570c7cc96749e4684d940a29fb1a4a5edfcb25a56218f91da24a6d9b7aa776869b679e23c2e7a2f5f55563395b7b58acf45170", @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
epoll_create1(0x0)
socket(0x1d, 0x2, 0x6)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000280)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv6=@dccp_packet={0x2, 0x6, ',Kh', 0x128, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, {[@srh={0x3a, 0x10, 0x4, 0x8, 0x40, 0x0, 0x5, [@local, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x9}]}, @srh={0x29, 0x4, 0x4, 0x2, 0x7f, 0x70, 0x6, [@loopback, @loopback]}, @dstopts={0x3a, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}, @hao={0xc9, 0x10, @loopback}]}], {{0x4e24, 0x5e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x3, 0x0, "19b321", 0xa, "d439bd"}}}}}, 0x15e)

17.493708535s ago: executing program 4 (id=940):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.492241635s ago: executing program 4 (id=941):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x68, r2, 0x1, 0x70bd28, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0xc, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10004}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
unshare(0x20040600)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0xfffff800, 0x4}, 0xc)

17.489051217s ago: executing program 4 (id=945):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r3, 0x0, 0xa)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (fail_nth: 5)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x340, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x180, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)

17.374596462s ago: executing program 1 (id=946):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xeb, &(0x7f00000005c0)=""/235}, 0x94)

16.995163575s ago: executing program 3 (id=948):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getpeername(r1, 0x0, &(0x7f0000000100))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x61, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x80, 0x2002}, {"f78fcd8820e4fd4092745c6d3b6dfa1fd7f9393bdf4b08c69118d1e50e542dc9e54a8660618f27615189fc0556a7972aceebb21955ed4842f3"}}}}}}, 0x0)

16.934635726s ago: executing program 1 (id=949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x100, 0x69}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'virt_wifi0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4e}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x0, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL, @NL80211_MNTR_FLAG_PLCPFAIL]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000380)="4249c2368bb8dd2c7f0a323cf53a")
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000000))

16.898147877s ago: executing program 3 (id=950):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53", 0x3e}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0xffd, @local, 0x2}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r5, 0x1, 0xf0bd2a, 0x25dfcbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40208c0}, 0xc180)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2c020400)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xc}}, 0x26)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x7, [{0x5, 0x204c}, {0x7fff, 0xfff}, {0xffffffff, 0xae8}, {0xa, 0x4eb6}, {0xf, 0x2}, {0x4, 0x7}, {0xb, 0x1}]}})

16.86953552s ago: executing program 4 (id=951):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$unix(0x1, 0x1, 0x0)
unshare(0x2040400)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r1, 0xfeda6000)
setsockopt$sock_int(r0, 0x1, 0x54, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000004700)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2, &(0x7f0000004300)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18}, @iv={0xe0, 0x117, 0x2, 0xc8, "6313c7f429b6006ab8ae45e7f7a771437a2faf7e7d4073c0c7ae3ad31426dc0e9b32f979c9ae2096e8de359e8c619deddd15abc0439d3370d46a8bcafebe73e0f95ffce2f53e656e42cae32a2fb0ef69f5d207081e75b0bf12913e77f75c8bdc075ee9eba2bd688ea0d1a139edd5e455c6d005a7280927663280ddc416c8cda97793d83fe8e314d3d520c05b9338b7009b24e28b3214421ff5d62b0f7f5ff8d3b465a82cca95152b12615242e5b4b3eafab13c877fcd895b7b9a6054bc9c3ea0a40e70e72014b1e5"}, @iv={0x58, 0x117, 0x2, 0x3e, "17188ab710443ae97d1196763aefb55c3676bda51220bf83e4876d745c8f360afb6e886bf619fde6d9da6b52f435a05e6e6d6265b9d20fde206e835c716f"}], 0x180}, {0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004480)="272a74846326211f0aee2817585e2acab68f0107138c784dbb6df893d2931dfa5ad550b0b242c139c0904ca913fffa177d4a37d9954dc547400afa4eed46def829393f7035c60044b7cadff9983293b62819940eb537342471876852008087bc4740cb00", 0x64}], 0x1, &(0x7f0000004540)=[@iv={0x90, 0x117, 0x2, 0x77, "1b765badaec0647a88ecb64dba44be42d48a1f99500823523a2837dcde43243a266691837c9010acdeb2b70640e425c0df193f496076f39206a88d4437fcfa6e15c2095c6c29e513001d9cbfbefb8f4902c538cab9f26d599e175d287e4d51cad7b076a474eeca243c2336bd25f864d8bff91135998ec3"}, @iv={0x60, 0x117, 0x2, 0x46, "b1c536d292a6d31cfb55d310c2702788c20ce182841d9f58fdb3a7c692ee8eb47b4379f8e366281a21eddb5b463c52f24c6fc57b566feefd8524b7040bee016f8f64c9320113"}, @op={0x18}, @iv={0x70, 0x117, 0x2, 0x5a, "c3f4781556882eea474d13cbae3fff74f2a91d107c75c5bd4b6e0fb5f419cc3d5f1c7ed0f8f9be8078ff908011c855b57b32fc924ddfe4b4249cc2d5eb128646ff3ee0b739edd290b681e49e7891eb932b7755ab20c24cddb885"}, @iv={0x40, 0x117, 0x2, 0x2b, "8f801aaec5043f3bc72fc7f78ef531551ecafe82c2087ed6458b4ec9078071ca3e3b0a5ad45205d80f3be2"}], 0x1b8, 0x20004815}], 0x2, 0x40800)
recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r4, 0x0, 0x0, 0x800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
unshare(0x20000400)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r6, &(0x7f0000000940)={0x1f, @none}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002d40)={'ip_vti0\x00', &(0x7f0000002d00)={'ip_vti0\x00', 0x0, 0x70f, 0x700, 0xd, 0x1a, {{0x7, 0x4, 0x2, 0x37, 0x1c, 0x67, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @local, {[@timestamp={0x44, 0x8, 0xfa, 0x0, 0xf, [0x8]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x800, 0xa0}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r9}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x28}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), r10)

16.754367509s ago: executing program 0 (id=952):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.746997367s ago: executing program 2 (id=953):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007cc0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100293d8800fcdbdf253400000008000300", @ANYRES32, @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
socket$inet(0x2, 0x80000, 0x48800005)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x3, 0xf9, 0x7f, 0x8}, {0x3, 0xe, 0xec, 0x1200000}]}, 0x10)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000065c0)=0x2, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x8c7fe, &(0x7f0000000000)={0x2, 0x5e24, @rand_addr=0x64010102}, 0x10)

16.567790538s ago: executing program 0 (id=954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f0000000600)=""/222, 0xde}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x3, &(0x7f0000000400)=""/76, 0x4c}, 0x40000002)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="598847167aa3eeecd678a4be219c9f7ac36dd422be5e395f6579a0878eb84f76bdd866c510f785691711178ee5cb9450f77f56bbaf73c14c1ebd44", 0x3b}, {&(0x7f00000005c0)="b786bc4294b02f59a1cb691b04822a3154b2b17f39", 0x15}], 0x2, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)

16.501768027s ago: executing program 1 (id=955):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.500647866s ago: executing program 2 (id=956):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket(0x8, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000240)={<r6=>0x0, 0x0, 0x20, 0xffffffff, 0xf91}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x1000}, 0x8)
connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x0, 0x1, 0x2}}, 0x26)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00'], 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x40, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000330000009500000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x45269e145181d739, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.498981654s ago: executing program 4 (id=957):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000240)=[{0x0}], 0x1)

16.471160637s ago: executing program 1 (id=958):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x81, <r0=>0x0}, 0x8)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bind$inet6(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x5, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000cab000))
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/287, 0x11f}, {&(0x7f0000002100)=""/4056, 0xfd8}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000940)=""/212, 0xd4}], 0x8}, 0x40012100)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0014"], 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r4, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000080)=""/11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)

16.318029519s ago: executing program 1 (id=959):
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x20004800)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b000000000000070000000000000000f0ff000000", 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2)

16.316779668s ago: executing program 2 (id=960):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0004335da87943c6c6b6dcc7863bbd7000fdd5df2501000000080001006b0000000c"], 0x28}}, 0x60008045)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004"], 0x50}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, &(0x7f00000001c0))
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000200)=0xb, 0x4)

16.215173228s ago: executing program 1 (id=961):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000000006}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x804)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000696bfa69d3c43a8eb1aff7620000000900000000000000d876", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@struct={0xc, 0x7, 0x0, 0x4, 0x0, 0x0, [{0xd, 0x1, 0xf}, {0x1, 0x1, 0x2}, {0x5, 0x3, 0xfffffffb}, {0x10, 0x1, 0x4}, {0xe, 0x4, 0x2}, {0x4, 0x3, 0x6}, {0x7, 0x0, 0x9}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x1}]}, {0x0, [0x71, 0x0]}}, &(0x7f00000002c0)=""/166, 0x8c, 0xa6, 0x0, 0x8, 0x10000}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x4, @multicast, 'ip6gretap0\x00'}}, 0x1e)
connect$pppoe(r8, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r8, 0x4008b100, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

15.930719111s ago: executing program 3 (id=962):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000084000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

15.929583508s ago: executing program 3 (id=963):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee246d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000a00)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2f000000, 0xe, 0x0, &(0x7f0000000780)="5ceced9e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r2}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0, r6}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x4041)

15.891341556s ago: executing program 3 (id=964):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.85726083s ago: executing program 3 (id=965):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bond0\x00'})
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES8=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@private, @initdev, <r6=>0x0}, &(0x7f0000000240)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', r6, 0x29, 0x7a, 0x1b, 0x1, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0x10, 0xfff}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.606433052s ago: executing program 0 (id=966):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x10002, @empty, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd70000000000001"], 0xd4}}, 0x4080)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$bt_rfcomm(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x20084, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="df2500"/20, @ANYRES32=r6, @ANYBLOB="1808000001a201001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket(0x23, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x7f}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000", @ANYRES8=0x0, @ANYRES32=r9], 0x30}}, 0x0)
listen(0xffffffffffffffff, 0x0)
r10 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r10, &(0x7f0000000080), 0x10)
sendmmsg(r10, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)="8e25683302fa2883a92d15187808c17c08c49f5d06ac2d8092767aab166a120ade2e8c4328bc2bb87e13b8f73db3c41b9fc182391ff17033c8287863536c7964dc40619a4205c7de45cff0ac8170838d2f0d3e0f0823ce0fbeb2c7b56a49b6d47b04665c", 0x64}], 0x2}}], 0x1, 0x24000054)
shutdown(r7, 0x0)
recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0)

15.588480678s ago: executing program 0 (id=967):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f00000016c0)=""/4055, &(0x7f0000001080)=0xfd7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @generic={0x28, "2f04584c5c5b71e750a5b738de99"}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb5}, @ax25={0x3, @null, 0x2}, 0xffff, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000200)='netdevsim0\x00', 0xe9e, 0x7044, 0x1})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x5, <r3=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r1, r2, 0x2f, 0x2020, 0x4, @void, @void, @value=r3}, 0x20)

15.554225546s ago: executing program 0 (id=968):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000001200010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)

15.47835804s ago: executing program 4 (id=969):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/17, 0x27, 0x11, 0x1, 0x40007ff}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r5, 0x0, 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12)
readv(r6, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
r9 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r10, 0x1, 0xd, 0x0, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000500), 0xe)

15.445016043s ago: executing program 0 (id=970):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket(0x8, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000240)={<r6=>0x0, 0x0, 0x20, 0xffffffff, 0xf91}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x1000}, 0x8)
connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x0, 0x1, 0x2}}, 0x26)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00'], 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x40, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000330000009500000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x45269e145181d739, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.420826561s ago: executing program 2 (id=971):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "540500", 0x8, 0x2c, 0x0, @local, @local, {[@routing={0x3a, 0x0, 0x0, 0x7, 0xff8d}]}}}}}, 0x0)

15.23364818s ago: executing program 2 (id=972):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x1e0, r2, 0x801, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x14}, 0x20008840)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x100000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x2c}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0x32}, @in6=@private0, {0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x800000000, 0x20000000008, 0x2000000006}, {0x0, 0x8, 0x9}, {0xf6, 0x0, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x1}}, 0xf0}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000"], 0x50)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x4000, 0xfffffffd, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x7}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x44}}, 0x0)
r8 = socket$kcm(0x2d, 0x2, 0x0)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xd1, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r12, @ANYBLOB="41000e008000ae84ffffffffffff080211000000ffffffffffff00000000000000000000070001000406f0027f0006a7060206002503018c087206030303030303000000080026006c09000108000c006400000008000d"], 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="16712abd7000ffdbdf250100000008000300", @ANYRES32=r3, @ANYBLOB="0c5899008009000036000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c110}, 0x8045)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000640)="04a47a510df4d9e5caa4cd6e8b72ca17", 0x10)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x80000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000019020202020202010882848b960c121824"], 0x36)

1.18471939s ago: executing program 32 (id=961):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000000006}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x804)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000696bfa69d3c43a8eb1aff7620000000900000000000000d876", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@struct={0xc, 0x7, 0x0, 0x4, 0x0, 0x0, [{0xd, 0x1, 0xf}, {0x1, 0x1, 0x2}, {0x5, 0x3, 0xfffffffb}, {0x10, 0x1, 0x4}, {0xe, 0x4, 0x2}, {0x4, 0x3, 0x6}, {0x7, 0x0, 0x9}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x1}]}, {0x0, [0x71, 0x0]}}, &(0x7f00000002c0)=""/166, 0x8c, 0xa6, 0x0, 0x8, 0x10000}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x4, @multicast, 'ip6gretap0\x00'}}, 0x1e)
connect$pppoe(r8, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r8, 0x4008b100, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

664.812443ms ago: executing program 33 (id=965):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bond0\x00'})
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES8=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@private, @initdev, <r6=>0x0}, &(0x7f0000000240)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', r6, 0x29, 0x7a, 0x1b, 0x1, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0x10, 0xfff}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

146.248171ms ago: executing program 34 (id=970):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket(0x8, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000240)={<r6=>0x0, 0x0, 0x20, 0xffffffff, 0xf91}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0x1000}, 0x8)
connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x0, 0x1, 0x2}}, 0x26)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2000010071bb34f82bd4ae83c2cd97eac5306b0758798a408e13601eaf349b92b55636c683cabe822665ee857792311a536d28a111d8aad6137ccaf72dac7633b4c7baa27b3c16b2a187f52297ff8d2e0fd32356c531765761370a0969ad1a81b1174d538962d934e0143f616875c7a5c578f67586bfcdf9640f3be772221f634d2928cb696c9f9f02809fc4920b267096608fd9556b4e703885fa577b40c73b3cb093b014adb911fffe0b3b1a9ac71c4c66cf1739fb95c9f261ff6514559832e3c4f68e4836233ed1f7480082decc8d6d550a3a393287c047c72c365b55edc379f6b176afd551da7eca86c3613f79eb5a54234d989657ea50dccb366f12349db56ddeaabca9abd29f948673614c8c1d379e735456ee61949c1f949e76ee26a8b7ea33a885b25fe28c73c19cf8b0d14486ccbb37832e456a22b6c7a0940a4d0c21", @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00'], 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x40, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000330000009500000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x45269e145181d739, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

76.0556ms ago: executing program 35 (id=972):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x1e0, r2, 0x801, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x14}, 0x20008840)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x100000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x2c}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0x32}, @in6=@private0, {0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x800000000, 0x20000000008, 0x2000000006}, {0x0, 0x8, 0x9}, {0xf6, 0x0, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x1}}, 0xf0}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000"], 0x50)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x4000, 0xfffffffd, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x7}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x44}}, 0x0)
r8 = socket$kcm(0x2d, 0x2, 0x0)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xd1, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r12, @ANYBLOB="41000e008000ae84ffffffffffff080211000000ffffffffffff00000000000000000000070001000406f0027f0006a7060206002503018c087206030303030303000000080026006c09000108000c006400000008000d"], 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="16712abd7000ffdbdf250100000008000300", @ANYRES32=r3, @ANYBLOB="0c5899008009000036000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c110}, 0x8045)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000640)="04a47a510df4d9e5caa4cd6e8b72ca17", 0x10)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x80000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000019020202020202010882848b960c121824"], 0x36)

0s ago: executing program 36 (id=969):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/17, 0x27, 0x11, 0x1, 0x40007ff}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r5, 0x0, 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000000c0), 0x12)
readv(r6, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
r9 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$sock_linger(r10, 0x1, 0xd, 0x0, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000500), 0xe)

kernel console output (not intermixed with test programs):

6
[  122.748008][ T7152] FAULT_INJECTION: forcing a failure.
[  122.748008][ T7152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  122.774089][ T7119] tipc: Disabling bearer <eth:syzkaller0>
[  122.782458][ T7151] xt_hashlimit: max too large, truncated to 1048576
[  122.789142][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.4.359 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  122.789167][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.789177][ T7152] Call Trace:
[  122.789185][ T7152]  <TASK>
[  122.789193][ T7152]  dump_stack_lvl+0x189/0x250
[  122.789218][ T7152]  ? __pfx____ratelimit+0x10/0x10
[  122.789237][ T7152]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.789257][ T7152]  ? __pfx__printk+0x10/0x10
[  122.789281][ T7152]  ? fs_reclaim_acquire+0x7d/0x100
[  122.789308][ T7152]  should_fail_ex+0x414/0x560
[  122.789332][ T7152]  prepare_alloc_pages+0x213/0x610
[  122.789354][ T7152]  __alloc_frozen_pages_noprof+0x123/0x370
[  122.789375][ T7152]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  122.789402][ T7152]  ? policy_nodemask+0x27c/0x720
[  122.789431][ T7152]  alloc_pages_mpol+0x232/0x4a0
[  122.789459][ T7152]  alloc_pages_noprof+0xa9/0x190
[  122.789484][ T7152]  pte_alloc_one+0x21/0x170
[  122.789506][ T7152]  __handle_mm_fault+0x294d/0x5620
[  122.789549][ T7152]  ? __pfx___handle_mm_fault+0x10/0x10
[  122.789592][ T7152]  ? find_vma+0xe7/0x160
[  122.789614][ T7152]  ? __pfx_find_vma+0x10/0x10
[  122.789637][ T7152]  handle_mm_fault+0x40a/0x8e0
[  122.789669][ T7152]  do_user_addr_fault+0x764/0x1390
[  122.789704][ T7152]  exc_page_fault+0x76/0xf0
[  122.789726][ T7152]  asm_exc_page_fault+0x26/0x30
[  122.789743][ T7152] RIP: 0010:strncpy_from_user+0x1bc/0x290
[  122.789760][ T7152] Code: c1 e8 03 49 01 c4 e9 8d 00 00 00 e8 fe e7 ca fc 48 f7 dd 49 89 ec 48 8b 1c 24 31 ff 4c 89 ee e8 ca ec ca fc 49 83 ed 01 72 44 <43> 8a 2c 27 4a 8d 3c 23 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00
[  122.789774][ T7152] RSP: 0018:ffffc90004507c98 EFLAGS: 00050206
[  122.789791][ T7152] RAX: ffffffff84f54046 RBX: ffffc90004507d60 RCX: ffff888034f40000
[  122.789813][ T7152] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000
[  122.789823][ T7152] RBP: fffffffffffffff8 R08: ffffc90004507d6a R09: 1ffff920008a0fad
[  122.789835][ T7152] R10: dffffc0000000000 R11: fffff520008a0fae R12: 0000000000000000
[  122.789847][ T7152] R13: 000000000000000a R14: 000000000000000b R15: 00002000000003c0
[  122.789867][ T7152]  ? strncpy_from_user+0x1b6/0x290
[  122.789891][ T7152]  ? strncpy_from_user+0x1b6/0x290
[  122.789912][ T7152]  mptcp_setsockopt+0x12f6/0x3560
[  122.789944][ T7152]  ? aa_sk_perm+0x81e/0x950
[  122.789960][ T7152]  ? __pfx_mptcp_setsockopt+0x10/0x10
[  122.789986][ T7152]  ? __pfx_aa_sk_perm+0x10/0x10
[  122.790008][ T7152]  ? aa_sock_opt_perm+0x74/0x110
[  122.790027][ T7152]  ? sock_common_setsockopt+0x36/0xc0
[  122.790044][ T7152]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  122.790061][ T7152]  do_sock_setsockopt+0x17c/0x1b0
[  122.790085][ T7152]  __x64_sys_setsockopt+0x13f/0x1b0
[  122.790108][ T7152]  do_syscall_64+0xfa/0x3b0
[  122.790125][ T7152]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.790143][ T7152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.790159][ T7152]  ? clear_bhb_loop+0x60/0xb0
[  122.790179][ T7152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.790194][ T7152] RIP: 0033:0x7f8b5d18e9a9
[  122.790210][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.790222][ T7152] RSP: 002b:00007f8b5e040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  122.790239][ T7152] RAX: ffffffffffffffda RBX: 00007f8b5d3b5fa0 RCX: 00007f8b5d18e9a9
[  122.790251][ T7152] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000004
[  122.790261][ T7152] RBP: 00007f8b5e040090 R08: 000000000000000b R09: 0000000000000000
[  122.790271][ T7152] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[  122.790282][ T7152] R13: 0000000000000000 R14: 00007f8b5d3b5fa0 R15: 00007ffe32d31988
[  122.790312][ T7152]  </TASK>
[  123.203288][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'.
[  123.245227][ T4669] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.355338][   T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.492355][   T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.500621][   T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.655243][ T7173] lo speed is unknown, defaulting to 1000
[  123.710070][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'.
[  123.754336][ T7173] lo speed is unknown, defaulting to 1000
[  123.801087][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.808375][ T7178] bridge0: port 2(bridge_slave_1) entered listening state
[  123.815839][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.823141][ T7178] bridge0: port 1(bridge_slave_0) entered listening state
[  123.932769][ T7178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.973029][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.021447][ T7173] lo speed is unknown, defaulting to 1000
[  124.339690][ T7202] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  124.366565][ T7202] Cannot find set identified by id 0 to match
[  124.392892][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'.
[  124.437279][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'.
[  124.806994][   T10] lo speed is unknown, defaulting to 1000
[  124.813810][ T7173] infiniband syz0: set active
[  124.837399][ T7173] infiniband syz0: added lo
[  124.854147][ T7173] syz0: rxe_create_cq: returned err = -12
[  124.860504][ T7173] infiniband syz0: Couldn't create ib_mad CQ
[  124.867194][ T7173] infiniband syz0: Couldn't open port 1
[  124.978103][ T7173] RDS/IB: syz0: added
[  124.991030][ T7173] smc: adding ib device syz0 with port count 1
[  124.998339][ T7173] smc:    ib device syz0 port 1 has pnetid 
[  125.009953][   T10] lo speed is unknown, defaulting to 1000
[  125.024554][ T7173] lo speed is unknown, defaulting to 1000
[  125.565341][ T7224] lo speed is unknown, defaulting to 1000
[  125.834855][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.208887][ T7173] lo speed is unknown, defaulting to 1000
[  126.789492][ T7173] lo speed is unknown, defaulting to 1000
[  127.359649][ T7173] lo speed is unknown, defaulting to 1000
[  127.718763][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'.
[  127.749367][ T7299] 8021q: VLANs not supported on caif0
[  128.117735][ T7173] lo speed is unknown, defaulting to 1000
[  128.402664][ T7325] FAULT_INJECTION: forcing a failure.
[  128.402664][ T7325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.435205][ T7325] CPU: 0 UID: 0 PID: 7325 Comm: syz.0.405 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  128.435231][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  128.435241][ T7325] Call Trace:
[  128.435248][ T7325]  <TASK>
[  128.435256][ T7325]  dump_stack_lvl+0x189/0x250
[  128.435282][ T7325]  ? __pfx____ratelimit+0x10/0x10
[  128.435302][ T7325]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.435322][ T7325]  ? __pfx__printk+0x10/0x10
[  128.435358][ T7325]  should_fail_ex+0x414/0x560
[  128.435382][ T7325]  _copy_to_user+0x31/0xb0
[  128.435408][ T7325]  simple_read_from_buffer+0xe1/0x170
[  128.435437][ T7325]  proc_fail_nth_read+0x1df/0x250
[  128.435458][ T7325]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  128.435479][ T7325]  ? rw_verify_area+0x258/0x650
[  128.435499][ T7325]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  128.435518][ T7325]  vfs_read+0x200/0x980
[  128.435546][ T7325]  ? __pfx___mutex_lock+0x10/0x10
[  128.435566][ T7325]  ? __pfx_vfs_read+0x10/0x10
[  128.435589][ T7325]  ? __fget_files+0x2a/0x420
[  128.435610][ T7325]  ? __fget_files+0x3a0/0x420
[  128.435624][ T7325]  ? __fget_files+0x2a/0x420
[  128.435648][ T7325]  ksys_read+0x145/0x250
[  128.435672][ T7325]  ? __pfx_ksys_read+0x10/0x10
[  128.435689][ T7325]  ? rcu_is_watching+0x15/0xb0
[  128.435715][ T7325]  ? do_syscall_64+0xbe/0x3b0
[  128.435739][ T7325]  do_syscall_64+0xfa/0x3b0
[  128.435757][ T7325]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.435775][ T7325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.435792][ T7325]  ? clear_bhb_loop+0x60/0xb0
[  128.435814][ T7325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.435830][ T7325] RIP: 0033:0x7f7b2cf8d3bc
[  128.435846][ T7325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  128.435860][ T7325] RSP: 002b:00007f7b2decb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  128.435879][ T7325] RAX: ffffffffffffffda RBX: 00007f7b2d1b5fa0 RCX: 00007f7b2cf8d3bc
[  128.435892][ T7325] RDX: 000000000000000f RSI: 00007f7b2decb0a0 RDI: 0000000000000005
[  128.435903][ T7325] RBP: 00007f7b2decb090 R08: 0000000000000000 R09: 0000000000000000
[  128.435913][ T7325] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001
[  128.435942][ T7325] R13: 0000000000000000 R14: 00007f7b2d1b5fa0 R15: 00007fffce8dda78
[  128.435973][ T7325]  </TASK>
[  128.893801][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'.
[  129.098557][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'.
[  129.770598][ T7357] lo speed is unknown, defaulting to 1000
[  130.045991][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  130.301703][ T7380] netlink: 'syz.3.425': attribute type 7 has an invalid length.
[  130.874232][ T7400] bond0: entered promiscuous mode
[  130.879452][ T7400] bond_slave_0: entered promiscuous mode
[  130.888126][ T7400] bond_slave_1: entered promiscuous mode
[  130.906594][ T7400] hsr1: entered allmulticast mode
[  130.945960][ T7400] bond0: entered allmulticast mode
[  130.951129][ T7400] bond_slave_0: entered allmulticast mode
[  130.984656][ T7400] bond_slave_1: entered allmulticast mode
[  131.000824][ T7400] batadv0: entered allmulticast mode
[  131.009883][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'.
[  131.021320][ T7400] 8021q: adding VLAN 0 to HW filter on device hsr1
[  131.036289][ T7400] bond0: left promiscuous mode
[  131.041218][ T7400] bond_slave_0: left promiscuous mode
[  131.068330][ T7400] bond_slave_1: left promiscuous mode
[  131.096286][ T7403] lo speed is unknown, defaulting to 1000
[  131.096455][ T7402] syzkaller0: entered promiscuous mode
[  131.107897][ T7402] syzkaller0: entered allmulticast mode
[  131.323826][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[  131.694728][ T7436] netlink: 84 bytes leftover after parsing attributes in process `syz.1.437'.
[  132.198255][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'.
[  132.317328][ T7453] vlan2: entered promiscuous mode
[  132.612732][ T7469] FAULT_INJECTION: forcing a failure.
[  132.612732][ T7469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.660722][ T7469] CPU: 1 UID: 0 PID: 7469 Comm: syz.1.446 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  132.660748][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  132.660758][ T7469] Call Trace:
[  132.660765][ T7469]  <TASK>
[  132.660774][ T7469]  dump_stack_lvl+0x189/0x250
[  132.660810][ T7469]  ? __pfx____ratelimit+0x10/0x10
[  132.660829][ T7469]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.660849][ T7469]  ? __pfx__printk+0x10/0x10
[  132.660872][ T7469]  ? __might_fault+0xb0/0x130
[  132.660905][ T7469]  should_fail_ex+0x414/0x560
[  132.660928][ T7469]  _copy_from_iter+0x1db/0x16f0
[  132.660954][ T7469]  ? rcu_is_watching+0x15/0xb0
[  132.660976][ T7469]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  132.660999][ T7469]  ? __pfx__copy_from_iter+0x10/0x10
[  132.661022][ T7469]  ? __build_skb_around+0x257/0x3e0
[  132.661045][ T7469]  ? netlink_sendmsg+0x642/0xb30
[  132.661062][ T7469]  ? skb_put+0x11b/0x210
[  132.661085][ T7469]  netlink_sendmsg+0x6b2/0xb30
[  132.661114][ T7469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.661136][ T7469]  ? aa_sock_msg_perm+0x94/0x160
[  132.661156][ T7469]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  132.661173][ T7469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  132.661192][ T7469]  __sock_sendmsg+0x21c/0x270
[  132.661220][ T7469]  ____sys_sendmsg+0x505/0x830
[  132.661247][ T7469]  ? __pfx_____sys_sendmsg+0x10/0x10
[  132.661278][ T7469]  ? import_iovec+0x74/0xa0
[  132.661305][ T7469]  ___sys_sendmsg+0x21f/0x2a0
[  132.661329][ T7469]  ? __pfx____sys_sendmsg+0x10/0x10
[  132.661387][ T7469]  ? __fget_files+0x2a/0x420
[  132.661402][ T7469]  ? __fget_files+0x3a0/0x420
[  132.661429][ T7469]  __x64_sys_sendmsg+0x19b/0x260
[  132.661452][ T7469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  132.661482][ T7469]  ? __pfx_ksys_write+0x10/0x10
[  132.661502][ T7469]  ? rcu_is_watching+0x15/0xb0
[  132.661526][ T7469]  ? do_syscall_64+0xbe/0x3b0
[  132.661549][ T7469]  do_syscall_64+0xfa/0x3b0
[  132.661567][ T7469]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.661584][ T7469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.661600][ T7469]  ? clear_bhb_loop+0x60/0xb0
[  132.661620][ T7469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.661637][ T7469] RIP: 0033:0x7fe8edd8e9a9
[  132.661652][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.661664][ T7469] RSP: 002b:00007fe8eec4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  132.661682][ T7469] RAX: ffffffffffffffda RBX: 00007fe8edfb5fa0 RCX: 00007fe8edd8e9a9
[  132.661693][ T7469] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  132.661704][ T7469] RBP: 00007fe8eec4d090 R08: 0000000000000000 R09: 0000000000000000
[  132.661714][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.661724][ T7469] R13: 0000000000000000 R14: 00007fe8edfb5fa0 R15: 00007ffd7357e6d8
[  132.661750][ T7469]  </TASK>
[  132.961585][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  132.968216][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.029750][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'.
[  133.064401][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'.
[  133.078394][ T7476] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  133.316447][ T7485] netlink: 84 bytes leftover after parsing attributes in process `syz.1.451'.
[  133.439446][ T7494] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  133.730482][ T7505] netlink: 'syz.1.456': attribute type 15 has an invalid length.
[  133.760103][ T7505] netlink: 666 bytes leftover after parsing attributes in process `syz.1.456'.
[  133.846931][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[  133.865882][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[  134.011096][ T5973] lo speed is unknown, defaulting to 1000
[  134.542549][ T7533] nbd1: detected capacity change from 0 to 127
[  134.615165][ T7548] netlink: 84 bytes leftover after parsing attributes in process `syz.1.466'.
[  134.673946][ T7534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  134.734914][ T7552] netlink: 'syz.3.467': attribute type 10 has an invalid length.
[  134.811481][ T7552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.467'.
[  134.899745][ T7549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.978106][ T7549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  135.035572][ T7552] batman_adv: batadv0: Adding interface: virt_wifi0
[  135.044172][ T7552] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  135.069184][ T7552] batman_adv: batadv0: Interface activated: virt_wifi0
[  135.102476][ T5844] block nbd1: Receive control failed (result -104)
[  135.197473][ T7549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.210976][ T7549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  135.316478][ T7549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.327017][ T7549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  135.423992][ T7572] Cannot find del_set index 4 as target
[  135.436935][ T7549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.450213][ T7549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  135.477603][ T7572] batadv0: entered promiscuous mode
[  135.483460][ T7572] vlan3: entered promiscuous mode
[  135.554635][   T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  135.579346][   T59] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  135.615954][   T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  135.645362][   T59] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  135.686546][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  135.703528][   T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  135.746651][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  135.765224][   T49] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  136.137539][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[  136.160164][ T7596] tipc: Started in network mode
[  136.176926][ T7596] tipc: Node identity bad2aebe1a8c, cluster identity 4711
[  136.199095][ T7596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.254763][ T7596] tipc: Resetting bearer <eth:syzkaller0>
[  136.363347][ T7592] tipc: Disabling bearer <eth:syzkaller0>
[  136.630169][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[  136.710362][ T7615] nbd: must specify a device to reconfigure
[  136.841035][ T7623] netlink: 'syz.0.483': attribute type 2 has an invalid length.
[  136.928959][ T7591] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  137.312560][ T7642] nbd0: detected capacity change from 127 to 134217728
[  137.331614][ T6033] blk_print_req_error: 138 callbacks suppressed
[  137.331632][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.377646][ T6033] buffer_io_error: 138 callbacks suppressed
[  137.377664][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.399737][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.429570][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.436628][ T7650] syz_tun: entered promiscuous mode
[  137.459002][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.459046][ T7650] vlan3: entered promiscuous mode
[  137.498460][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.524388][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.544427][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.565150][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.576558][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.585534][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.606837][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.632470][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.664287][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.702924][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.741313][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.770205][ T6033] ldm_validate_partition_table(): Disk read failed.
[  137.780503][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.833283][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.841230][ T6033] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  137.861342][ T6033] Buffer I/O error on dev nbd0, logical block 0, async page read
[  137.897554][ T6033] Dev nbd0: unable to read RDB block 0
[  137.910687][ T6033]  nbd0: unable to read partition table
[  137.944757][ T6033] ldm_validate_partition_table(): Disk read failed.
[  137.989144][ T6033] Dev nbd0: unable to read RDB block 0
[  138.011784][ T6033]  nbd0: unable to read partition table
[  138.299824][ T7682] FAULT_INJECTION: forcing a failure.
[  138.299824][ T7682] name failslab, interval 1, probability 0, space 0, times 0
[  138.333094][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.2.500 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  138.333120][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  138.333129][ T7682] Call Trace:
[  138.333137][ T7682]  <TASK>
[  138.333144][ T7682]  dump_stack_lvl+0x189/0x250
[  138.333168][ T7682]  ? __pfx____ratelimit+0x10/0x10
[  138.333187][ T7682]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.333207][ T7682]  ? __pfx__printk+0x10/0x10
[  138.333233][ T7682]  ? __pfx___might_resched+0x10/0x10
[  138.333251][ T7682]  ? fs_reclaim_acquire+0x7d/0x100
[  138.333270][ T7682]  should_fail_ex+0x414/0x560
[  138.333294][ T7682]  should_failslab+0xa8/0x100
[  138.333319][ T7682]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  138.333341][ T7682]  ? __alloc_skb+0x112/0x2d0
[  138.333361][ T7682]  __alloc_skb+0x112/0x2d0
[  138.333380][ T7682]  batadv_netlink_set_mesh+0xc90/0x1210
[  138.333408][ T7682]  genl_family_rcv_msg_doit+0x212/0x300
[  138.333437][ T7682]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  138.333470][ T7682]  ? bpf_lsm_capable+0x9/0x20
[  138.333490][ T7682]  ? security_capable+0x7e/0x2e0
[  138.333513][ T7682]  genl_rcv_msg+0x60e/0x790
[  138.333538][ T7682]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.333555][ T7682]  ? __pfx_batadv_pre_doit+0x10/0x10
[  138.333575][ T7682]  ? __pfx_batadv_netlink_set_mesh+0x10/0x10
[  138.333597][ T7682]  ? __pfx_batadv_post_doit+0x10/0x10
[  138.333621][ T7682]  ? __asan_memcpy+0x40/0x70
[  138.333639][ T7682]  ? __pfx_ref_tracker_free+0x10/0x10
[  138.333665][ T7682]  netlink_rcv_skb+0x208/0x470
[  138.333680][ T7682]  ? __lock_acquire+0xab9/0xd20
[  138.333696][ T7682]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.333719][ T7682]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.333757][ T7682]  ? down_read+0x1ad/0x2e0
[  138.333782][ T7682]  genl_rcv+0x28/0x40
[  138.333802][ T7682]  netlink_unicast+0x82f/0x9e0
[  138.333837][ T7682]  ? __pfx_netlink_unicast+0x10/0x10
[  138.333865][ T7682]  ? netlink_sendmsg+0x642/0xb30
[  138.333881][ T7682]  ? skb_put+0x11b/0x210
[  138.333905][ T7682]  netlink_sendmsg+0x805/0xb30
[  138.333949][ T7682]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.333971][ T7682]  ? aa_sock_msg_perm+0x94/0x160
[  138.333993][ T7682]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.334010][ T7682]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.334030][ T7682]  __sock_sendmsg+0x21c/0x270
[  138.334059][ T7682]  ____sys_sendmsg+0x505/0x830
[  138.334087][ T7682]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.334116][ T7682]  ? import_iovec+0x74/0xa0
[  138.334142][ T7682]  ___sys_sendmsg+0x21f/0x2a0
[  138.334165][ T7682]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.334219][ T7682]  ? __fget_files+0x2a/0x420
[  138.334232][ T7682]  ? __fget_files+0x3a0/0x420
[  138.334258][ T7682]  __x64_sys_sendmsg+0x19b/0x260
[  138.334282][ T7682]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.334312][ T7682]  ? __pfx_ksys_write+0x10/0x10
[  138.334331][ T7682]  ? rcu_is_watching+0x15/0xb0
[  138.334355][ T7682]  ? do_syscall_64+0xbe/0x3b0
[  138.334378][ T7682]  do_syscall_64+0xfa/0x3b0
[  138.334395][ T7682]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.334413][ T7682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.334430][ T7682]  ? clear_bhb_loop+0x60/0xb0
[  138.334451][ T7682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.334468][ T7682] RIP: 0033:0x7f102b58e9a9
[  138.334484][ T7682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.334497][ T7682] RSP: 002b:00007f102c3a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.334516][ T7682] RAX: ffffffffffffffda RBX: 00007f102b7b5fa0 RCX: 00007f102b58e9a9
[  138.334528][ T7682] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003
[  138.334540][ T7682] RBP: 00007f102c3a2090 R08: 0000000000000000 R09: 0000000000000000
[  138.334551][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.334561][ T7682] R13: 0000000000000000 R14: 00007f102b7b5fa0 R15: 00007ffc5ff12e88
[  138.334592][ T7682]  </TASK>
[  139.230658][ T7698] __nla_validate_parse: 1 callbacks suppressed
[  139.230676][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'.
[  139.651402][ T7727] FAULT_INJECTION: forcing a failure.
[  139.651402][ T7727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.671513][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.3.515 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  139.671539][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  139.671549][ T7727] Call Trace:
[  139.671556][ T7727]  <TASK>
[  139.671564][ T7727]  dump_stack_lvl+0x189/0x250
[  139.671590][ T7727]  ? __pfx____ratelimit+0x10/0x10
[  139.671617][ T7727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.671637][ T7727]  ? __pfx__printk+0x10/0x10
[  139.671660][ T7727]  ? __might_fault+0xb0/0x130
[  139.671695][ T7727]  should_fail_ex+0x414/0x560
[  139.671717][ T7727]  _copy_from_user+0x2d/0xb0
[  139.671741][ T7727]  ___sys_sendmsg+0x158/0x2a0
[  139.671764][ T7727]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.671820][ T7727]  ? __fget_files+0x2a/0x420
[  139.671835][ T7727]  ? __fget_files+0x3a0/0x420
[  139.671862][ T7727]  __x64_sys_sendmsg+0x19b/0x260
[  139.671886][ T7727]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  139.671917][ T7727]  ? __pfx_ksys_write+0x10/0x10
[  139.671937][ T7727]  ? rcu_is_watching+0x15/0xb0
[  139.671962][ T7727]  ? do_syscall_64+0xbe/0x3b0
[  139.671984][ T7727]  do_syscall_64+0xfa/0x3b0
[  139.672001][ T7727]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.672017][ T7727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.672033][ T7727]  ? clear_bhb_loop+0x60/0xb0
[  139.672064][ T7727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.672079][ T7727] RIP: 0033:0x7fdf7158e9a9
[  139.672094][ T7727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.672107][ T7727] RSP: 002b:00007fdf7232d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.672126][ T7727] RAX: ffffffffffffffda RBX: 00007fdf717b5fa0 RCX: 00007fdf7158e9a9
[  139.672138][ T7727] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  139.672148][ T7727] RBP: 00007fdf7232d090 R08: 0000000000000000 R09: 0000000000000000
[  139.672158][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.672167][ T7727] R13: 0000000000000000 R14: 00007fdf717b5fa0 R15: 00007fff8498f9b8
[  139.672193][ T7727]  </TASK>
[  139.985869][ T7738] IPv6: Can't replace route, no match found
[  140.008468][ T7737] IPv6: Can't replace route, no match found
[  140.057263][ T7739] netlink: 84 bytes leftover after parsing attributes in process `syz.3.516'.
[  140.388464][ T7743] netlink: 48 bytes leftover after parsing attributes in process `syz.2.517'.
[  140.447567][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'.
[  140.777154][ T7756] Cannot find del_set index 4 as target
[  140.884857][ T7756] vlan3: entered promiscuous mode
[  141.177691][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'.
[  141.311222][ T7767] Driver unsupported XDP return value 0 on prog  (id 155) dev N/A, expect packet loss!
[  141.381568][ T7772] netlink: 17 bytes leftover after parsing attributes in process `syz.2.524'.
[  141.403174][ T7764] netlink: 'syz.1.522': attribute type 7 has an invalid length.
[  141.422225][ T7764] netlink: 'syz.1.522': attribute type 8 has an invalid length.
[  141.452312][ T7764] netlink: 'syz.1.522': attribute type 4 has an invalid length.
[  141.488969][ T7764] netlink: 116 bytes leftover after parsing attributes in process `syz.1.522'.
[  142.055632][ T7798] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.538964][ T7798] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.668638][ T7798] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.870596][ T7798] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.284940][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'.
[  143.339787][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'.
[  143.434765][ T7849] bridge0: port 3(vlan2) entered blocking state
[  143.457335][ T7849] bridge0: port 3(vlan2) entered disabled state
[  143.483191][ T7849] vlan2: entered allmulticast mode
[  143.522271][ T7849] bridge0: entered allmulticast mode
[  143.547290][ T7849] vlan2: left allmulticast mode
[  143.552605][ T7849] bridge0: left allmulticast mode
[  143.668989][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'.
[  143.675244][ T7851] lo speed is unknown, defaulting to 1000
[  144.003436][ T7863] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[  144.042346][ T7863] netlink: 'syz.1.549': attribute type 2 has an invalid length.
[  144.338088][ T7871] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  144.479788][ T7874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.743814][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.762690][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'.
[  144.829414][ T7876] lo speed is unknown, defaulting to 1000
[  145.318647][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'.
[  145.378454][ T7872] lo speed is unknown, defaulting to 1000
[  145.870476][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'.
[  145.891135][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'.
[  145.912570][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'.
[  145.921743][ T7908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'.
[  146.204555][ T7912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.565'.
[  146.215648][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'.
[  146.276206][ T7904] lo speed is unknown, defaulting to 1000
[  146.760883][   T30] audit: type=1800 audit(1753436785.789:3): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.571" name="blkio.bfq.time_recursive" dev="tmpfs" ino=556 res=0 errno=0
[  147.160573][ T7931] lo speed is unknown, defaulting to 1000
[  147.497114][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'.
[  147.729372][ T7942] vlan2: entered promiscuous mode
[  147.783566][ T7947] netlink: 'syz.3.578': attribute type 1 has an invalid length.
[  147.984063][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.027997][ T7950] batadv_slave_1: entered promiscuous mode
[  148.043566][ T7948] batadv_slave_1: left promiscuous mode
[  148.781123][ T7969] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  148.835483][ T7969] macsec1: entered promiscuous mode
[  148.873211][ T7969] macsec1: entered allmulticast mode
[  148.901571][ T7969] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  149.314021][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'.
[  149.985417][ T8007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.023844][ T8011] netlink: 596 bytes leftover after parsing attributes in process `syz.4.603'.
[  150.061809][ T8014] FAULT_INJECTION: forcing a failure.
[  150.061809][ T8014] name failslab, interval 1, probability 0, space 0, times 0
[  150.063331][ T8011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.603'.
[  150.081800][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.0.602 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  150.081828][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.081838][ T8014] Call Trace:
[  150.081845][ T8014]  <TASK>
[  150.081853][ T8014]  dump_stack_lvl+0x189/0x250
[  150.081879][ T8014]  ? __pfx____ratelimit+0x10/0x10
[  150.081899][ T8014]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.081919][ T8014]  ? __pfx__printk+0x10/0x10
[  150.081943][ T8014]  ? __lock_acquire+0xab9/0xd20
[  150.081970][ T8014]  should_fail_ex+0x414/0x560
[  150.081993][ T8014]  should_failslab+0xa8/0x100
[  150.082020][ T8014]  kmem_cache_alloc_noprof+0x73/0x3c0
[  150.082051][ T8014]  ? skb_clone+0x212/0x3a0
[  150.082076][ T8014]  skb_clone+0x212/0x3a0
[  150.082101][ T8014]  __netlink_deliver_tap+0x404/0x850
[  150.082133][ T8014]  ? netlink_deliver_tap+0x2e/0x1b0
[  150.082152][ T8014]  netlink_deliver_tap+0x19c/0x1b0
[  150.082171][ T8014]  netlink_unicast+0x7fa/0x9e0
[  150.082204][ T8014]  ? __pfx_netlink_unicast+0x10/0x10
[  150.082230][ T8014]  ? netlink_sendmsg+0x642/0xb30
[  150.082246][ T8014]  ? skb_put+0x11b/0x210
[  150.082268][ T8014]  netlink_sendmsg+0x805/0xb30
[  150.082295][ T8014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.082317][ T8014]  ? aa_sock_msg_perm+0x94/0x160
[  150.082337][ T8014]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.082354][ T8014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.082373][ T8014]  __sock_sendmsg+0x21c/0x270
[  150.082400][ T8014]  ____sys_sendmsg+0x505/0x830
[  150.082427][ T8014]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.082457][ T8014]  ? import_iovec+0x74/0xa0
[  150.082483][ T8014]  ___sys_sendmsg+0x21f/0x2a0
[  150.082505][ T8014]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.082564][ T8014]  ? __fget_files+0x2a/0x420
[  150.082578][ T8014]  ? __fget_files+0x3a0/0x420
[  150.082604][ T8014]  __x64_sys_sendmsg+0x19b/0x260
[  150.082627][ T8014]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.082658][ T8014]  ? __pfx_ksys_write+0x10/0x10
[  150.082677][ T8014]  ? rcu_is_watching+0x15/0xb0
[  150.082701][ T8014]  ? do_syscall_64+0xbe/0x3b0
[  150.082725][ T8014]  do_syscall_64+0xfa/0x3b0
[  150.082742][ T8014]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.082759][ T8014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.082776][ T8014]  ? clear_bhb_loop+0x60/0xb0
[  150.082795][ T8014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.082811][ T8014] RIP: 0033:0x7f7b2cf8e9a9
[  150.082827][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.082840][ T8014] RSP: 002b:00007f7b2deaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.082858][ T8014] RAX: ffffffffffffffda RBX: 00007f7b2d1b6080 RCX: 00007f7b2cf8e9a9
[  150.082871][ T8014] RDX: 0000000000043044 RSI: 00002000000000c0 RDI: 0000000000000005
[  150.082881][ T8014] RBP: 00007f7b2deaa090 R08: 0000000000000000 R09: 0000000000000000
[  150.082892][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.082901][ T8014] R13: 0000000000000000 R14: 00007f7b2d1b6080 R15: 00007fffce8dda78
[  150.082929][ T8014]  </TASK>
[  150.384021][ T8019] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  150.911117][ T8035] syzkaller1: entered promiscuous mode
[  150.932783][ T8035] syzkaller1: entered allmulticast mode
[  151.141810][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'.
[  151.278609][ T8043] netlink: 248 bytes leftover after parsing attributes in process `syz.3.612'.
[  151.330314][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.612'.
[  151.512305][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'.
[  151.832447][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  152.275957][ T8090] netlink: 144 bytes leftover after parsing attributes in process `syz.3.626'.
[  152.283264][ T8080] bond_slave_0: entered promiscuous mode
[  152.290896][ T8080] bond_slave_1: entered promiscuous mode
[  152.323488][ T8080] vlan3: entered promiscuous mode
[  152.349039][ T8080] bond0: entered promiscuous mode
[  152.357819][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.625'.
[  152.368282][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.625'.
[  152.439493][ T8086] dummy0: entered promiscuous mode
[  152.455466][ T8086] bond0: entered promiscuous mode
[  152.468721][ T8086] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  152.550208][ T8094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.779795][ T8094] syzkaller0: entered promiscuous mode
[  152.806177][ T8094] syzkaller0: entered allmulticast mode
[  152.859177][ T8094] tipc: Resetting bearer <eth:syzkaller0>
[  153.079310][ T8093] tipc: Resetting bearer <eth:syzkaller0>
[  153.341230][ T8125] FAULT_INJECTION: forcing a failure.
[  153.341230][ T8125] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  153.355193][ T8125] CPU: 0 UID: 0 PID: 8125 Comm: syz.1.633 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  153.355219][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  153.355229][ T8125] Call Trace:
[  153.355237][ T8125]  <TASK>
[  153.355244][ T8125]  dump_stack_lvl+0x189/0x250
[  153.355270][ T8125]  ? __pfx____ratelimit+0x10/0x10
[  153.355290][ T8125]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.355310][ T8125]  ? __pfx__printk+0x10/0x10
[  153.355334][ T8125]  ? fs_reclaim_acquire+0x7d/0x100
[  153.355361][ T8125]  should_fail_ex+0x414/0x560
[  153.355385][ T8125]  prepare_alloc_pages+0x213/0x610
[  153.355411][ T8125]  __alloc_frozen_pages_noprof+0x123/0x370
[  153.355434][ T8125]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  153.355464][ T8125]  ? policy_nodemask+0x27c/0x720
[  153.355484][ T8125]  ? __lock_acquire+0xab9/0xd20
[  153.355506][ T8125]  alloc_pages_bulk_noprof+0x560/0x710
[  153.355532][ T8125]  ? alloc_pages_noprof+0xbe/0x190
[  153.355559][ T8125]  kasan_populate_vmalloc+0xba/0x1a0
[  153.355586][ T8125]  alloc_vmap_area+0xd51/0x1490
[  153.355626][ T8125]  ? __pfx_alloc_vmap_area+0x10/0x10
[  153.355648][ T8125]  ? __kasan_kmalloc+0x93/0xb0
[  153.355671][ T8125]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  153.355694][ T8125]  ? __get_vm_area_node+0x13f/0x300
[  153.355716][ T8125]  ? prealloc_init+0x123/0x630
[  153.355746][ T8125]  __get_vm_area_node+0x1f8/0x300
[  153.355776][ T8125]  __vmalloc_node_range_noprof+0x301/0x12f0
[  153.355800][ T8125]  ? prealloc_init+0x123/0x630
[  153.355821][ T8125]  ? __lock_acquire+0xab9/0xd20
[  153.355861][ T8125]  ? do_raw_spin_lock+0x121/0x290
[  153.355887][ T8125]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  153.355916][ T8125]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  153.355938][ T8125]  bpf_map_area_alloc+0x12d/0x180
[  153.355957][ T8125]  ? prealloc_init+0x123/0x630
[  153.355983][ T8125]  prealloc_init+0x123/0x630
[  153.356010][ T8125]  ? __percpu_counter_init_many+0x364/0x380
[  153.356039][ T8125]  htab_map_alloc+0x6ce/0xc70
[  153.356073][ T8125]  map_create+0xaa0/0x1310
[  153.356101][ T8125]  ? security_bpf+0x7e/0x300
[  153.356122][ T8125]  __sys_bpf+0x67e/0x860
[  153.356148][ T8125]  ? __pfx___sys_bpf+0x10/0x10
[  153.356194][ T8125]  ? rcu_is_watching+0x15/0xb0
[  153.356223][ T8125]  __x64_sys_bpf+0x7c/0x90
[  153.356246][ T8125]  do_syscall_64+0xfa/0x3b0
[  153.356264][ T8125]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.356282][ T8125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.356299][ T8125]  ? clear_bhb_loop+0x60/0xb0
[  153.356320][ T8125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.356337][ T8125] RIP: 0033:0x7fe8edd8e9a9
[  153.356353][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.356367][ T8125] RSP: 002b:00007fe8eec4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  153.356386][ T8125] RAX: ffffffffffffffda RBX: 00007fe8edfb5fa0 RCX: 00007fe8edd8e9a9
[  153.356399][ T8125] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000
[  153.356410][ T8125] RBP: 00007fe8eec4d090 R08: 0000000000000000 R09: 0000000000000000
[  153.356421][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.356431][ T8125] R13: 0000000000000000 R14: 00007fe8edfb5fa0 R15: 00007ffd7357e6d8
[  153.356460][ T8125]  </TASK>
[  153.685220][ T5973] tipc: Node number set to 4052607162
[  154.044594][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  154.052664][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  154.546899][ T8145] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  154.553573][ T8145] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  155.009747][ T8093] tipc: Disabling bearer <eth:syzkaller0>
[  155.053057][ T8122] vlan3: entered promiscuous mode
[  155.058142][ T8122] veth1: entered promiscuous mode
[  155.121386][ T8126] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.136247][ T8147] __nla_validate_parse: 4 callbacks suppressed
[  155.136264][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'.
[  155.482411][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.642'.
[  155.544531][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'.
[  155.793636][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'.
[  155.804671][ T8177] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  155.832164][ T8177] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  155.856725][ T8182] netlink: 84 bytes leftover after parsing attributes in process `syz.0.648'.
[  156.095702][ T5844] Bluetooth: hci4: link tx timeout
[  156.101649][ T5844] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.112511][ T5844] Bluetooth: hci4: link tx timeout
[  156.117656][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.171707][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'.
[  156.214708][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'.
[  156.364597][ T8195] bridge0: port 1(vlan3) entered blocking state
[  156.392256][ T8195] bridge0: port 1(vlan3) entered disabled state
[  156.398797][ T8195] vlan3: entered allmulticast mode
[  156.473201][ T8195] bridge0: entered allmulticast mode
[  156.544711][ T8208] netlink: 'syz.1.658': attribute type 1 has an invalid length.
[  156.553621][ T8195] vlan3: left allmulticast mode
[  156.558506][ T8195] bridge0: left allmulticast mode
[  156.565995][ T8208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.658'.
[  157.435839][ T8219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.663'.
[  157.808697][ T8221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  157.886412][ T8227] netlink: 'syz.4.663': attribute type 4 has an invalid length.
[  157.960454][ T8229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.666'.
[  158.198275][ T5844] Bluetooth: hci4: command 0x0406 tx timeout
[  158.944500][ T8222] lo speed is unknown, defaulting to 1000
[  159.012486][ T8237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.276300][ T8243] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  159.303780][ T8243] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  159.384438][ T8238] syzkaller0: entered promiscuous mode
[  159.390161][ T8238] syzkaller0: entered allmulticast mode
[  159.401953][ T8252] syz_tun: entered allmulticast mode
[  159.455374][ T8252] syz_tun: left allmulticast mode
[  159.460912][ T8234] tipc: Resetting bearer <eth:syzkaller0>
[  159.500892][ T8234] tipc: Disabling bearer <eth:syzkaller0>
[  159.598925][ T8254] tipc: Started in network mode
[  159.604864][ T8254] tipc: Node identity e60baad31b26, cluster identity 4711
[  159.625671][ T8254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.682533][ T8256] syzkaller0: entered promiscuous mode
[  159.688412][ T8256] syzkaller0: entered allmulticast mode
[  159.712421][ T8254] tipc: Resetting bearer <eth:syzkaller0>
[  159.721321][ T8261] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  159.727826][ T8261] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  159.743636][ T8253] tipc: Resetting bearer <eth:syzkaller0>
[  159.782897][ T8253] tipc: Disabling bearer <eth:syzkaller0>
[  159.901624][ T8268] veth0: entered promiscuous mode
[  160.168124][ T8263] syz.2.675: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  160.229867][ T8263] CPU: 0 UID: 0 PID: 8263 Comm: syz.2.675 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  160.229893][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.229903][ T8263] Call Trace:
[  160.229910][ T8263]  <TASK>
[  160.229918][ T8263]  dump_stack_lvl+0x189/0x250
[  160.229948][ T8263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.229969][ T8263]  ? __pfx__printk+0x10/0x10
[  160.229999][ T8263]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  160.230022][ T8263]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  160.230045][ T8263]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  160.230070][ T8263]  warn_alloc+0x214/0x310
[  160.230094][ T8263]  ? __pfx_warn_alloc+0x10/0x10
[  160.230124][ T8263]  ? __get_vm_area_node+0x28f/0x300
[  160.230150][ T8263]  ? xskq_create+0xbf/0x170
[  160.230172][ T8263]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  160.230229][ T8263]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.230256][ T8263]  ? xskq_create+0x56/0x170
[  160.230274][ T8263]  ? __kasan_kmalloc+0x93/0xb0
[  160.230300][ T8263]  vmalloc_user_noprof+0xad/0xf0
[  160.230324][ T8263]  ? xskq_create+0xbf/0x170
[  160.230342][ T8263]  xskq_create+0xbf/0x170
[  160.230363][ T8263]  xsk_init_queue+0xb0/0x110
[  160.230382][ T8263]  xsk_setsockopt+0x57b/0x8d0
[  160.230401][ T8263]  ? __pfx_xsk_setsockopt+0x10/0x10
[  160.230425][ T8263]  ? __pfx_aa_sk_perm+0x10/0x10
[  160.230445][ T8263]  ? __fget_files+0x2a/0x420
[  160.230459][ T8263]  ? aa_sock_opt_perm+0x74/0x110
[  160.230480][ T8263]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  160.230498][ T8263]  ? __pfx_xsk_setsockopt+0x10/0x10
[  160.230516][ T8263]  do_sock_setsockopt+0x17c/0x1b0
[  160.230542][ T8263]  __x64_sys_setsockopt+0x13f/0x1b0
[  160.230567][ T8263]  do_syscall_64+0xfa/0x3b0
[  160.230586][ T8263]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.230603][ T8263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.230620][ T8263]  ? clear_bhb_loop+0x60/0xb0
[  160.230641][ T8263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.230657][ T8263] RIP: 0033:0x7f102b58e9a9
[  160.230674][ T8263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.230688][ T8263] RSP: 002b:00007f102c3a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  160.230707][ T8263] RAX: ffffffffffffffda RBX: 00007f102b7b5fa0 RCX: 00007f102b58e9a9
[  160.230720][ T8263] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  160.230730][ T8263] RBP: 00007f102b610d69 R08: 0000000000000004 R09: 0000000000000000
[  160.230740][ T8263] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  160.230750][ T8263] R13: 0000000000000000 R14: 00007f102b7b5fa0 R15: 00007ffc5ff12e88
[  160.230781][ T8263]  </TASK>
[  160.231966][ T8263] Mem-Info:
[  160.396445][ T5844] Bluetooth: hci4: command 0x0406 tx timeout
[  160.398632][ T8263] active_anon:8639 inactive_anon:0 isolated_anon:0
[  160.398632][ T8263]  active_file:1886 inactive_file:39866 isolated_file:0
[  160.398632][ T8263]  unevictable:768 dirty:610 writeback:0
[  160.398632][ T8263]  slab_reclaimable:11096 slab_unreclaimable:103652
[  160.398632][ T8263]  mapped:36752 shmem:4254 pagetables:1107
[  160.398632][ T8263]  sec_pagetables:0 bounce:0
[  160.398632][ T8263]  kernel_misc_reclaimable:0
[  160.398632][ T8263]  free:1311769 free_pcp:22014 free_cma:0
[  160.683300][ T8263] Node 0 active_anon:34356kB inactive_anon:0kB active_file:7544kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147008kB dirty:2440kB writeback:0kB shmem:15480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11408kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.952529][ T8263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  161.052766][ T8263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.160381][ T8263] lowmem_reserve[]: 0 2498 2499 2499 2499
[  161.172229][ T8263] Node 0 DMA32 free:1330856kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34200kB inactive_anon:0kB active_file:7544kB inactive_file:157680kB unevictable:1536kB writepending:2448kB present:3129332kB managed:2558296kB mlocked:0kB bounce:0kB free_pcp:69544kB local_pcp:42340kB free_cma:0kB
[  161.316914][ T8263] lowmem_reserve[]: 0 0 1 1 1
[  161.339655][ T8263] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  161.388253][ T8295] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  161.417479][ T8263] lowmem_reserve[]: 0 0 0 0 0
[  161.428266][ T8295] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  161.443241][ T8263] Node 1 Normal free:3901544kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:7456kB free_cma:0kB
[  161.534531][ T8263] lowmem_reserve[]: 0 0 0 0 0
[  161.556727][ T8263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  161.583205][ T8263] Node 0 DMA32: 94*4kB (UM) 99*8kB (UM) 1101*16kB (UM) 624*32kB (UM) 230*64kB (UM) 50*128kB (UME) 53*256kB (UME) 15*512kB (UME) 18*1024kB (UM) 8*2048kB (UE) 297*4096kB (UM) = 1332448kB
[  161.604757][ T8263] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  161.645280][ T8263] Node 1 Normal: 168*4kB (UE) 37*8kB (UM) 36*16kB (UME) 77*32kB (UME) 23*64kB (UME) 4*128kB (UM) 3*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901544kB
[  161.668540][ T8263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.678271][ T8263] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.691613][ T8263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.715614][ T8299] netlink: 'syz.0.684': attribute type 13 has an invalid length.
[  161.716321][ T8263] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.724458][ T8299] netlink: 'syz.0.684': attribute type 17 has an invalid length.
[  161.740520][ T8263] 46003 total pagecache pages
[  161.745681][ T8263] 0 pages in swap cache
[  161.749915][ T8263] Free swap  = 124996kB
[  161.782406][ T8263] Total swap = 124996kB
[  161.789272][ T8263] 2097051 pages RAM
[  161.810792][ T8263] 0 pages HighMem/MovableOnly
[  161.820533][ T8263] 425435 pages reserved
[  161.849338][ T8263] 0 pages cma reserved
[  161.882032][ T8306] __nla_validate_parse: 3 callbacks suppressed
[  161.904399][ T8299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.922186][ T8306] netlink: 88 bytes leftover after parsing attributes in process `syz.3.685'.
[  162.041874][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[  162.242437][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'.
[  162.638750][ T8333] netlink: 'syz.2.694': attribute type 9 has an invalid length.
[  162.660276][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  162.720306][ T8333] hsr0: entered promiscuous mode
[  162.735603][ T8333] macvlan2: entered promiscuous mode
[  162.751520][ T8333] macvlan2: entered allmulticast mode
[  162.770634][ T8333] hsr0: entered allmulticast mode
[  162.784268][ T8333] hsr_slave_0: entered allmulticast mode
[  162.789962][ T8333] hsr_slave_1: entered allmulticast mode
[  163.292846][ T8352] bond0: Unable to set up delay as MII monitoring is disabled
[  163.356700][ T8352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.371120][ T8352] batadv_slave_1: entered promiscuous mode
[  163.398196][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'.
[  163.962881][ T8373] openvswitch: netlink: Message has 4 unknown bytes.
[  163.969640][ T8373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.467312][   T10] IPVS: starting estimator thread 0...
[  164.521518][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.536999][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'.
[  164.644279][ T8393] IPVS: using max 26 ests per chain, 62400 per kthread
[  164.845124][ T8412] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.724'.
[  164.913698][   T95] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 30 seconds
[  164.925097][   T95] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 30 seconds
[  164.936444][   T95] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 30 seconds
[  164.947444][   T95] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 30 seconds
[  165.005782][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  165.009566][ T8416] IPv6: sit1: Disabled Multicast RS
[  165.325207][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'.
[  165.430797][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  165.944635][ T8454] netlink: 'syz.4.739': attribute type 1 has an invalid length.
[  166.256792][ T8467] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  166.278290][ T8467] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  167.008528][ T8500] __nla_validate_parse: 4 callbacks suppressed
[  167.008546][ T8500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'.
[  167.124486][ T8504] Cannot find del_set index 4 as target
[  167.141603][ T8504] vlan2: entered promiscuous mode
[  167.320830][ T8508] sctp: [Deprecated]: syz.0.761 (pid 8508) Use of int in max_burst socket option.
[  167.320830][ T8508] Use struct sctp_assoc_value instead
[  167.376332][ T5848] block nbd2: Receive control failed (result -104)
[  167.704909][ T8523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.724026][ T8523] syzkaller0: entered promiscuous mode
[  167.741742][ T8523] syzkaller0: entered allmulticast mode
[  167.778379][ T8523] tipc: Resetting bearer <eth:syzkaller0>
[  167.801781][ T8522] tipc: Resetting bearer <eth:syzkaller0>
[  167.817537][ T8522] tipc: Disabling bearer <eth:syzkaller0>
[  167.915986][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  168.219848][ T8536] lo speed is unknown, defaulting to 1000
[  168.291166][ T8546] netlink: 48 bytes leftover after parsing attributes in process `syz.1.773'.
[  168.397966][ T8548] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  168.408797][ T8548] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  168.525002][ T8546] bridge_slave_0: left allmulticast mode
[  168.530691][ T8546] bridge_slave_0: left promiscuous mode
[  168.537987][   T24] IPVS: starting estimator thread 0...
[  168.593586][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.644948][ T8557] IPVS: using max 28 ests per chain, 67200 per kthread
[  168.657158][ T8546] bridge_slave_1: left allmulticast mode
[  168.714752][ T8546] bridge_slave_1: left promiscuous mode
[  168.765416][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.804699][ T8566] netlink: 'syz.2.782': attribute type 1 has an invalid length.
[  168.831974][ T8546] bond0: (slave bond_slave_0): Releasing backup interface
[  168.880795][ T8546] bond_slave_0: left allmulticast mode
[  168.939558][ T8546] bond0: (slave bond_slave_1): Releasing backup interface
[  169.035629][ T8546] bond_slave_1: left allmulticast mode
[  169.114990][ T8546] team0: Port device team_slave_0 removed
[  169.180405][ T8546] team0: Port device team_slave_1 removed
[  169.211664][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.219464][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.241583][ T8546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.260910][ T8546] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.293552][ T8559] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  169.336387][ T8563] bpq0: entered promiscuous mode
[  169.341542][ T8563] bpq0: entered allmulticast mode
[  169.381604][ T8566] bond2: entered promiscuous mode
[  169.388108][ T8566] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.411956][ T8569] bond2: (slave bridge1): making interface the new active one
[  169.419797][ T8569] bridge1: entered promiscuous mode
[  169.426171][ T8569] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  170.225300][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  170.295049][ T8616] netlink: 84 bytes leftover after parsing attributes in process `syz.0.794'.
[  170.306959][ T8617] tipc: Enabled bearer <eth:team0>, priority 10
[  170.325111][ T8617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.619202][ T8632] syz.4.800 uses old SIOCAX25GETINFO
[  170.837415][ T8638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'.
[  170.847665][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'.
[  170.862490][ T8638] 8021q: VLANs not supported on vcan0
[  170.952614][ T8650] xt_TCPMSS: Only works on TCP SYN packets
[  171.096827][ T8658] netlink: 84 bytes leftover after parsing attributes in process `syz.1.807'.
[  171.226959][ T8660] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  171.240044][ T8660] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  171.409159][ T8668] batadv_slave_1: entered promiscuous mode
[  171.417784][ T8668] FAULT_INJECTION: forcing a failure.
[  171.417784][ T8668] name failslab, interval 1, probability 0, space 0, times 0
[  171.430981][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.3.812 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  171.431007][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  171.431018][ T8668] Call Trace:
[  171.431026][ T8668]  <TASK>
[  171.431033][ T8668]  dump_stack_lvl+0x189/0x250
[  171.431060][ T8668]  ? __pfx____ratelimit+0x10/0x10
[  171.431080][ T8668]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.431100][ T8668]  ? __pfx__printk+0x10/0x10
[  171.431125][ T8668]  ? __lock_acquire+0xab9/0xd20
[  171.431153][ T8668]  should_fail_ex+0x414/0x560
[  171.431178][ T8668]  should_failslab+0xa8/0x100
[  171.431205][ T8668]  kmem_cache_alloc_noprof+0x73/0x3c0
[  171.431227][ T8668]  ? skb_clone+0x212/0x3a0
[  171.431254][ T8668]  skb_clone+0x212/0x3a0
[  171.431280][ T8668]  __netlink_deliver_tap+0x404/0x850
[  171.431312][ T8668]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.431333][ T8668]  netlink_deliver_tap+0x19c/0x1b0
[  171.431352][ T8668]  netlink_unicast+0x7fa/0x9e0
[  171.431387][ T8668]  ? __pfx_netlink_unicast+0x10/0x10
[  171.431414][ T8668]  ? netlink_sendmsg+0x642/0xb30
[  171.431430][ T8668]  ? skb_put+0x11b/0x210
[  171.431453][ T8668]  netlink_sendmsg+0x805/0xb30
[  171.431483][ T8668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.431506][ T8668]  ? aa_sock_msg_perm+0x94/0x160
[  171.431527][ T8668]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.431546][ T8668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.431564][ T8668]  __sock_sendmsg+0x21c/0x270
[  171.431613][ T8668]  sock_write_iter+0x258/0x330
[  171.431640][ T8668]  ? __pfx_sock_write_iter+0x10/0x10
[  171.431675][ T8668]  ? bpf_lsm_file_permission+0x9/0x20
[  171.431694][ T8668]  ? security_file_permission+0x75/0x290
[  171.431729][ T8668]  vfs_write+0x54b/0xa90
[  171.431757][ T8668]  ? __pfx_sock_write_iter+0x10/0x10
[  171.431779][ T8668]  ? __pfx_vfs_write+0x10/0x10
[  171.431812][ T8668]  ? __fget_files+0x2a/0x420
[  171.431836][ T8668]  ksys_write+0x145/0x250
[  171.431866][ T8668]  ? __pfx_ksys_write+0x10/0x10
[  171.431883][ T8668]  ? rcu_is_watching+0x15/0xb0
[  171.431903][ T8668]  ? do_syscall_64+0xbe/0x3b0
[  171.431922][ T8668]  do_syscall_64+0xfa/0x3b0
[  171.431936][ T8668]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.431951][ T8668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.431964][ T8668]  ? clear_bhb_loop+0x60/0xb0
[  171.431981][ T8668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.431994][ T8668] RIP: 0033:0x7fdf7158e9a9
[  171.432007][ T8668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.432019][ T8668] RSP: 002b:00007fdf7232d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  171.432038][ T8668] RAX: ffffffffffffffda RBX: 00007fdf717b5fa0 RCX: 00007fdf7158e9a9
[  171.432051][ T8668] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000005
[  171.432062][ T8668] RBP: 00007fdf7232d090 R08: 0000000000000000 R09: 0000000000000000
[  171.432072][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.432082][ T8668] R13: 0000000000000000 R14: 00007fdf717b5fa0 R15: 00007fff8498f9b8
[  171.432110][ T8668]  </TASK>
[  171.827538][ T8667] batadv_slave_1: left promiscuous mode
[  171.976895][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.814'.
[  172.223709][ T8690] netlink: 84 bytes leftover after parsing attributes in process `syz.3.820'.
[  172.256123][ T8689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.304533][ T8683] netlink: 'syz.2.818': attribute type 3 has an invalid length.
[  172.354344][ T8696] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  172.378621][ T8696] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  172.414860][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.594875][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'.
[  172.784753][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'.
[  172.841371][ T8721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.851199][ T8721] syzkaller0: entered promiscuous mode
[  172.856965][ T8721] syzkaller0: entered allmulticast mode
[  172.874930][ T8721] tipc: Resetting bearer <eth:syzkaller0>
[  172.882428][ T8720] tipc: Resetting bearer <eth:syzkaller0>
[  172.897087][ T8720] tipc: Disabling bearer <eth:syzkaller0>
[  173.001758][ T8723] netlink: 'syz.1.832': attribute type 39 has an invalid length.
[  173.450036][ T8742] netlink: 84 bytes leftover after parsing attributes in process `syz.4.836'.
[  173.480833][ T8730] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  173.510609][ T8730] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  173.735837][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[  173.777858][ T8756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.807331][ T8756] syzkaller0: entered promiscuous mode
[  173.815639][ T8756] syzkaller0: entered allmulticast mode
[  173.881515][ T8756] tipc: Resetting bearer <eth:syzkaller0>
[  173.915327][ T8753] tipc: Resetting bearer <eth:syzkaller0>
[  173.985786][ T8753] tipc: Disabling bearer <eth:syzkaller0>
[  174.508872][ T8776] syzkaller1: entered promiscuous mode
[  174.532632][ T8776] syzkaller1: entered allmulticast mode
[  174.728663][ T8790] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  174.737822][ T8790] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  174.771580][ T8791] netlink: 84 bytes leftover after parsing attributes in process `syz.3.852'.
[  175.020680][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.855'.
[  175.079389][ T8798] bond0: entered promiscuous mode
[  175.095748][ T8798] bond0: left promiscuous mode
[  175.101387][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'.
[  175.237711][ T8807] netlink: zone id is out of range
[  175.289152][ T8807] netlink: zone id is out of range
[  175.363151][ T8807] netlink: zone id is out of range
[  175.368767][ T8807] netlink: zone id is out of range
[  175.452097][ T8807] netlink: zone id is out of range
[  175.567008][ T8807] netlink: zone id is out of range
[  175.666895][ T8807] netlink: zone id is out of range
[  175.693786][ T8807] netlink: zone id is out of range
[  175.763109][ T8807] netlink: zone id is out of range
[  175.768490][ T8807] netlink: zone id is out of range
[  175.902458][ T8807] netlink: zone id is out of range
[  175.908128][ T8807] netlink: zone id is out of range
[  176.053961][ T8829] vlan2: entered promiscuous mode
[  176.059147][ T8829] bond0: entered promiscuous mode
[  176.173467][ T8834] FAULT_INJECTION: forcing a failure.
[  176.173467][ T8834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.220459][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.0.869 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  176.220486][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  176.220497][ T8834] Call Trace:
[  176.220505][ T8834]  <TASK>
[  176.220513][ T8834]  dump_stack_lvl+0x189/0x250
[  176.220539][ T8834]  ? __pfx____ratelimit+0x10/0x10
[  176.220559][ T8834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.220579][ T8834]  ? __pfx__printk+0x10/0x10
[  176.220602][ T8834]  ? __might_fault+0xb0/0x130
[  176.220634][ T8834]  should_fail_ex+0x414/0x560
[  176.220658][ T8834]  _copy_from_iter+0x1db/0x16f0
[  176.220683][ T8834]  ? rcu_is_watching+0x15/0xb0
[  176.220704][ T8834]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  176.220728][ T8834]  ? __pfx__copy_from_iter+0x10/0x10
[  176.220751][ T8834]  ? __build_skb_around+0x257/0x3e0
[  176.220775][ T8834]  ? netlink_sendmsg+0x642/0xb30
[  176.220791][ T8834]  ? skb_put+0x11b/0x210
[  176.220812][ T8834]  netlink_sendmsg+0x6b2/0xb30
[  176.220841][ T8834]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.220863][ T8834]  ? aa_sock_msg_perm+0x94/0x160
[  176.220883][ T8834]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  176.220900][ T8834]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.220919][ T8834]  __sock_sendmsg+0x21c/0x270
[  176.220947][ T8834]  ____sys_sendmsg+0x505/0x830
[  176.220975][ T8834]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.221006][ T8834]  ? import_iovec+0x74/0xa0
[  176.221033][ T8834]  ___sys_sendmsg+0x21f/0x2a0
[  176.221056][ T8834]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.221125][ T8834]  ? __fget_files+0x2a/0x420
[  176.221140][ T8834]  ? __fget_files+0x3a0/0x420
[  176.221167][ T8834]  __x64_sys_sendmsg+0x19b/0x260
[  176.221192][ T8834]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  176.221222][ T8834]  ? __pfx_ksys_write+0x10/0x10
[  176.221241][ T8834]  ? rcu_is_watching+0x15/0xb0
[  176.221265][ T8834]  ? do_syscall_64+0xbe/0x3b0
[  176.221290][ T8834]  do_syscall_64+0xfa/0x3b0
[  176.221307][ T8834]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.221324][ T8834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.221339][ T8834]  ? clear_bhb_loop+0x60/0xb0
[  176.221359][ T8834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.221376][ T8834] RIP: 0033:0x7f7b2cf8e9a9
[  176.221391][ T8834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.221406][ T8834] RSP: 002b:00007f7b2decb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.221426][ T8834] RAX: ffffffffffffffda RBX: 00007f7b2d1b5fa0 RCX: 00007f7b2cf8e9a9
[  176.221438][ T8834] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  176.221449][ T8834] RBP: 00007f7b2decb090 R08: 0000000000000000 R09: 0000000000000000
[  176.221459][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.221470][ T8834] R13: 0000000000000000 R14: 00007f7b2d1b5fa0 R15: 00007fffce8dda78
[  176.221499][ T8834]  </TASK>
[  176.745824][ T8837] lo speed is unknown, defaulting to 1000
[  177.129472][ T8864] Bluetooth: MGMT ver 1.23
[  177.135603][ T8858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.145210][ T8860] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  177.155520][ T8860] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  177.166861][ T8858] syzkaller0: entered promiscuous mode
[  177.173020][ T8858] syzkaller0: entered allmulticast mode
[  177.228424][ T8865] batadv_slave_1: entered promiscuous mode
[  177.256880][ T8858] tipc: Resetting bearer <eth:syzkaller0>
[  177.268362][ T8857] tipc: Resetting bearer <eth:syzkaller0>
[  177.290430][ T8857] tipc: Disabling bearer <eth:syzkaller0>
[  177.458314][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'.
[  177.873414][ T8888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.887'.
[  177.891062][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'.
[  178.030236][ T8863] batadv_slave_1: left promiscuous mode
[  178.040410][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'.
[  178.498947][ T8910] bridge0: port 3(dummy0) entered disabled state
[  178.505698][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.513232][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.675949][ T8910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.691160][ T8910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.025846][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.072810][   T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.081742][   T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.104912][   T76] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.180822][ T8949] netlink: 'syz.2.900': attribute type 1 has an invalid length.
[  179.349206][ T8949] bond3: entered promiscuous mode
[  179.354932][ T8949] 8021q: adding VLAN 0 to HW filter on device bond3
[  179.400504][ T8953] 8021q: adding VLAN 0 to HW filter on device bond3
[  179.415243][ T8953] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  179.426172][ T8953] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  179.447604][ T8953] bond3: (slave wireguard0): making interface the new active one
[  179.455632][ T8953] wireguard0: entered promiscuous mode
[  179.462674][ T8953] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  180.135422][ T8995] netlink: 136 bytes leftover after parsing attributes in process `syz.2.913'.
[  180.528153][ T9007] x_tables: unsorted entry at hook 3
[  180.867833][ T9013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.906114][ T9013] syzkaller0: entered promiscuous mode
[  180.914137][ T9013] syzkaller0: entered allmulticast mode
[  180.997213][ T9013] tipc: Resetting bearer <eth:syzkaller0>
[  181.006208][ T9020] netlink: 'syz.1.926': attribute type 9 has an invalid length.
[  181.056935][ T9010] tipc: Resetting bearer <eth:syzkaller0>
[  181.093087][ T9010] tipc: Disabling bearer <eth:syzkaller0>
[  181.108573][ T9025] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  181.277908][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'.
[  181.305290][ T9031] netlink: 84 bytes leftover after parsing attributes in process `syz.1.929'.
[  181.368843][ T9041] netlink: 'syz.1.929': attribute type 10 has an invalid length.
[  181.377414][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.929'.
[  181.408549][ T9041] batman_adv: batadv0: Adding interface: virt_wifi0
[  181.432597][ T9041] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  181.481357][ T9041] batman_adv: batadv0: Interface activated: virt_wifi0
[  181.495748][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'.
[  181.511823][ T9046] geneve2: entered promiscuous mode
[  181.517974][ T9046] geneve2: entered allmulticast mode
[  182.151552][ T9073] syzkaller1: entered promiscuous mode
[  182.167827][ T9073] syzkaller1: entered allmulticast mode
[  182.811178][ T9088] batadv_slave_1: entered promiscuous mode
[  182.828983][ T9088] FAULT_INJECTION: forcing a failure.
[  182.828983][ T9088] name failslab, interval 1, probability 0, space 0, times 0
[  182.841904][ T9088] CPU: 1 UID: 0 PID: 9088 Comm: syz.4.945 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  182.841931][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  182.841941][ T9088] Call Trace:
[  182.841949][ T9088]  <TASK>
[  182.841957][ T9088]  dump_stack_lvl+0x189/0x250
[  182.841983][ T9088]  ? __pfx____ratelimit+0x10/0x10
[  182.842003][ T9088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.842022][ T9088]  ? __pfx__printk+0x10/0x10
[  182.842051][ T9088]  ? __lock_acquire+0xab9/0xd20
[  182.842076][ T9088]  should_fail_ex+0x414/0x560
[  182.842101][ T9088]  should_failslab+0xa8/0x100
[  182.842125][ T9088]  kmem_cache_alloc_noprof+0x73/0x3c0
[  182.842146][ T9088]  ? skb_clone+0x212/0x3a0
[  182.842164][ T9088]  ? __pfx_skb_network_protocol+0x10/0x10
[  182.842189][ T9088]  skb_clone+0x212/0x3a0
[  182.842208][ T9088]  ? dev_queue_xmit_nit+0x25a/0xcc0
[  182.842228][ T9088]  dev_queue_xmit_nit+0x416/0xcc0
[  182.842247][ T9088]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  182.842275][ T9088]  dev_hard_start_xmit+0x1be/0x830
[  182.842312][ T9088]  __dev_queue_xmit+0x1b8d/0x3b50
[  182.842344][ T9088]  ? __dev_queue_xmit+0x27b/0x3b50
[  182.842384][ T9088]  ? __pfx___dev_queue_xmit+0x10/0x10
[  182.842418][ T9088]  ? __copy_skb_header+0xa7/0x550
[  182.842440][ T9088]  ? __asan_memcpy+0x40/0x70
[  182.842459][ T9088]  ? __skb_clone+0x63/0x7a0
[  182.842483][ T9088]  ? __skb_clone+0x483/0x7a0
[  182.842511][ T9088]  ? skb_clone+0x246/0x3a0
[  182.842536][ T9088]  __netlink_deliver_tap+0x5ad/0x850
[  182.842569][ T9088]  ? netlink_deliver_tap+0x2e/0x1b0
[  182.842589][ T9088]  netlink_deliver_tap+0x19c/0x1b0
[  182.842610][ T9088]  netlink_unicast+0x7fa/0x9e0
[  182.842645][ T9088]  ? __pfx_netlink_unicast+0x10/0x10
[  182.842671][ T9088]  ? netlink_sendmsg+0x642/0xb30
[  182.842688][ T9088]  ? skb_put+0x11b/0x210
[  182.842721][ T9088]  netlink_sendmsg+0x805/0xb30
[  182.842749][ T9088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.842771][ T9088]  ? aa_sock_msg_perm+0x94/0x160
[  182.842791][ T9088]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.842809][ T9088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.842828][ T9088]  __sock_sendmsg+0x21c/0x270
[  182.842857][ T9088]  sock_write_iter+0x258/0x330
[  182.842883][ T9088]  ? __pfx_sock_write_iter+0x10/0x10
[  182.842917][ T9088]  ? bpf_lsm_file_permission+0x9/0x20
[  182.842932][ T9088]  ? security_file_permission+0x75/0x290
[  182.842959][ T9088]  vfs_write+0x54b/0xa90
[  182.842981][ T9088]  ? __pfx_sock_write_iter+0x10/0x10
[  182.843000][ T9088]  ? __pfx_vfs_write+0x10/0x10
[  182.843027][ T9088]  ? __fget_files+0x2a/0x420
[  182.843046][ T9088]  ksys_write+0x145/0x250
[  182.843067][ T9088]  ? __pfx_ksys_write+0x10/0x10
[  182.843081][ T9088]  ? rcu_is_watching+0x15/0xb0
[  182.843102][ T9088]  ? do_syscall_64+0xbe/0x3b0
[  182.843121][ T9088]  do_syscall_64+0xfa/0x3b0
[  182.843135][ T9088]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.843149][ T9088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.843162][ T9088]  ? clear_bhb_loop+0x60/0xb0
[  182.843179][ T9088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.843192][ T9088] RIP: 0033:0x7f8b5d18e9a9
[  182.843205][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.843217][ T9088] RSP: 002b:00007f8b5e040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  182.843232][ T9088] RAX: ffffffffffffffda RBX: 00007f8b5d3b5fa0 RCX: 00007f8b5d18e9a9
[  182.843242][ T9088] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000005
[  182.843251][ T9088] RBP: 00007f8b5e040090 R08: 0000000000000000 R09: 0000000000000000
[  182.843259][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.843267][ T9088] R13: 0000000000000000 R14: 00007f8b5d3b5fa0 R15: 00007ffe32d31988
[  182.843291][ T9088]  </TASK>
[  183.226802][ T9081] batadv_slave_1: left promiscuous mode
[  183.244103][ T9091] pim6reg1: entered promiscuous mode
[  183.249438][ T9091] pim6reg1: entered allmulticast mode
[  183.366109][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'.
[  183.654457][ T9114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.953'.
[  183.837437][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'.
[  183.881072][ T9122] netlink: 'syz.1.958': attribute type 29 has an invalid length.
[  183.890640][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'.
[  183.895383][ T9122] netlink: 'syz.1.958': attribute type 29 has an invalid length.
[  184.112495][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.119784][    C0] bridge0: topology change detected, propagating
[  184.126497][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.133769][    C0] bridge0: topology change detected, propagating
[  184.485520][ T9146] syzkaller0: entered promiscuous mode
[  184.491138][ T9146] syzkaller0: entered allmulticast mode
[  184.631973][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'.
[  184.768649][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  184.778930][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  184.898194][ T9156] lo speed is unknown, defaulting to 1000
[  184.933923][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[  185.218045][ T9171] netlink: 'syz.2.972': attribute type 3 has an invalid length.
[  194.356528][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.913840][ T5216] udevd[5216]: worker [5895] /devices/virtual/block/nbd1 is taking a long time
[  194.993591][   T95] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 60 seconds
[  195.006646][   T95] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 60 seconds
[  195.017617][   T95] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 60 seconds
[  195.028789][   T95] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 60 seconds
[  199.255993][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  199.265522][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  199.273946][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  199.283632][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  199.291437][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.327559][ T9174] lo speed is unknown, defaulting to 1000
[  199.579007][ T9174] chnl_net:caif_netlink_parms(): no params data found
[  199.739263][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.751800][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.759595][ T9174] bridge_slave_0: entered allmulticast mode
[  199.774079][ T9174] bridge_slave_0: entered promiscuous mode
[  199.791439][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.800048][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.812626][ T9174] bridge_slave_1: entered allmulticast mode
[  199.820501][ T9174] bridge_slave_1: entered promiscuous mode
[  199.871478][ T5166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  199.883235][ T5166] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  199.893108][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.898576][ T5166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  199.910920][ T5166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  199.915321][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.927808][ T5166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.971261][ T9174] team0: Port device team_slave_0 added
[  199.980308][ T9174] team0: Port device team_slave_1 added
[  200.025236][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.034361][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.061342][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.074488][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.081715][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.111709][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.124089][ T9183] lo speed is unknown, defaulting to 1000
[  200.370094][ T9174] hsr_slave_0: entered promiscuous mode
[  200.394136][ T9174] hsr_slave_1: entered promiscuous mode
[  200.400501][ T9174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.438958][ T9174] Cannot create hsr debugfs directory
[  200.846349][ T5166] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  200.855395][ T5166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  200.863937][ T5166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  200.884924][ T5166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  200.896954][ T5166] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  200.927368][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  200.946365][ T9194] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  200.955140][ T9195] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  200.955625][ T9194] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  200.971072][ T9194] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  200.978459][ T9195] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  200.990126][ T9194] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  200.993557][ T9195] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  201.000019][ T9194] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  201.020833][ T9194] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  201.160630][ T9188] lo speed is unknown, defaulting to 1000
[  201.312300][ T9194] Bluetooth: hci5: command tx timeout
[  201.338013][ T9183] chnl_net:caif_netlink_parms(): no params data found
[  201.408635][ T9190] lo speed is unknown, defaulting to 1000
[  201.503555][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.510771][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.519470][ T9183] bridge_slave_0: entered allmulticast mode
[  201.528093][ T9183] bridge_slave_0: entered promiscuous mode
[  201.543422][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.550649][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.558912][ T9194] Bluetooth: hci3: command 0x0406 tx timeout
[  201.562747][ T9197] Bluetooth: hci2: command 0x0406 tx timeout
[  201.566580][ T9194] Bluetooth: hci1: command 0x0406 tx timeout
[  201.577626][ T9183] bridge_slave_1: entered allmulticast mode
[  201.587264][ T9183] bridge_slave_1: entered promiscuous mode
[  201.671283][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.699330][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.735458][ T9191] lo speed is unknown, defaulting to 1000
[  201.829823][ T9183] team0: Port device team_slave_0 added
[  201.876508][ T9183] team0: Port device team_slave_1 added
[  201.952399][ T5858] Bluetooth: hci6: command tx timeout
[  202.006018][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.013616][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.049770][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.097008][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.104218][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.131609][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.165171][ T9188] chnl_net:caif_netlink_parms(): no params data found
[  202.310563][ T9183] hsr_slave_0: entered promiscuous mode
[  202.317955][ T9183] hsr_slave_1: entered promiscuous mode
[  202.324466][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.332320][ T9183] Cannot create hsr debugfs directory
[  202.457495][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.464819][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.471996][ T9188] bridge_slave_0: entered allmulticast mode
[  202.480119][ T9188] bridge_slave_0: entered promiscuous mode
[  202.488788][ T9190] chnl_net:caif_netlink_parms(): no params data found
[  202.511908][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.520144][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.527997][ T9188] bridge_slave_1: entered allmulticast mode
[  202.535395][ T9188] bridge_slave_1: entered promiscuous mode
[  202.637388][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.652906][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.828074][ T9188] team0: Port device team_slave_0 added
[  202.841357][ T9188] team0: Port device team_slave_1 added
[  202.848448][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.856046][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.864031][ T9190] bridge_slave_0: entered allmulticast mode
[  202.871252][ T9190] bridge_slave_0: entered promiscuous mode
[  202.886034][ T9191] chnl_net:caif_netlink_parms(): no params data found
[  202.933555][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.940755][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.949135][ T9190] bridge_slave_1: entered allmulticast mode
[  202.956488][ T9190] bridge_slave_1: entered promiscuous mode
[  202.985137][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.992706][ T5858] Bluetooth: hci7: command tx timeout
[  202.996888][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.024424][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.039047][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.046541][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.072765][ T5848] Bluetooth: hci8: command tx timeout
[  203.073346][ T5858] Bluetooth: hci9: command tx timeout
[  203.080382][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.165250][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.178493][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.268953][ T9190] team0: Port device team_slave_0 added
[  203.307582][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.315548][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.324933][ T9191] bridge_slave_0: entered allmulticast mode
[  203.332932][ T9191] bridge_slave_0: entered promiscuous mode
[  203.341470][ T9190] team0: Port device team_slave_1 added
[  203.361479][ T9188] hsr_slave_0: entered promiscuous mode
[  203.368601][ T9188] hsr_slave_1: entered promiscuous mode
[  203.375441][ T9188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.383251][ T9188] Cannot create hsr debugfs directory
[  203.389034][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.396619][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.402177][ T5858] Bluetooth: hci5: command tx timeout
[  203.409389][ T9191] bridge_slave_1: entered allmulticast mode
[  203.417490][ T9191] bridge_slave_1: entered promiscuous mode
[  203.499729][ T9191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.532014][ T9191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.558749][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.566227][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.592251][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.636216][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.643857][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.670992][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.717462][ T9191] team0: Port device team_slave_0 added
[  203.778666][ T9191] team0: Port device team_slave_1 added
[  203.805022][ T9190] hsr_slave_0: entered promiscuous mode
[  203.811436][ T9190] hsr_slave_1: entered promiscuous mode
[  203.817827][ T9190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.825456][ T9190] Cannot create hsr debugfs directory
[  203.871705][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.878945][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.905483][ T9191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.939375][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.946609][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.974334][ T9191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.039010][ T5858] Bluetooth: hci6: command tx timeout
[  204.136057][ T9191] hsr_slave_0: entered promiscuous mode
[  204.143497][ T9191] hsr_slave_1: entered promiscuous mode
[  204.149617][ T9191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.157758][ T9191] Cannot create hsr debugfs directory
[  205.072410][ T5858] Bluetooth: hci7: command tx timeout
[  205.152442][ T5848] Bluetooth: hci8: command tx timeout
[  205.155461][ T5858] Bluetooth: hci9: command tx timeout
[  205.472953][ T5858] Bluetooth: hci5: command tx timeout
[  206.112652][ T5858] Bluetooth: hci6: command tx timeout
[  207.152616][ T5858] Bluetooth: hci7: command tx timeout
[  207.232497][ T5848] Bluetooth: hci8: command tx timeout
[  207.238035][ T5858] Bluetooth: hci9: command tx timeout
[  207.552360][ T5858] Bluetooth: hci5: command tx timeout
[  208.192866][ T5858] Bluetooth: hci6: command tx timeout
[  209.238743][ T5858] Bluetooth: hci7: command tx timeout
[  209.312430][ T5858] Bluetooth: hci9: command tx timeout
[  209.317886][ T5858] Bluetooth: hci8: command tx timeout
[  225.077457][   T95] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 90 seconds
[  225.089421][   T95] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 90 seconds
[  225.100506][   T95] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 90 seconds
[  225.111524][   T95] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 90 seconds
[  255.162993][   T95] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 120 seconds
[  255.174054][   T95] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 120 seconds
[  255.185174][   T95] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 120 seconds
[  255.196254][   T95] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 120 seconds
[  255.796191][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  259.997774][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  260.011254][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  260.020069][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  260.028258][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  260.043062][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  260.091679][ T9223] lo speed is unknown, defaulting to 1000
[  260.101795][ T5848] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  260.119316][ T5848] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  260.132789][ T5848] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  260.141940][ T5848] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  260.153171][ T5848] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  260.372091][ T9225] lo speed is unknown, defaulting to 1000
[  260.666924][ T5848] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  260.676246][ T5848] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  260.684549][ T5848] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  260.693400][ T5848] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  260.701651][ T5848] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  260.936124][ T9230] lo speed is unknown, defaulting to 1000
[  260.979172][ T9223] chnl_net:caif_netlink_parms(): no params data found
[  261.299739][ T5848] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  261.338740][ T5848] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  261.349677][ T5848] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  261.359184][ T5848] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  261.367353][ T5848] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  261.482697][ T5848] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  261.493751][ T5848] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  261.519107][ T5848] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  261.528754][ T5848] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  261.536957][ T5848] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  261.566717][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.574694][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.581906][ T9223] bridge_slave_0: entered allmulticast mode
[  261.590027][ T9223] bridge_slave_0: entered promiscuous mode
[  261.614641][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.630267][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.639129][ T9223] bridge_slave_1: entered allmulticast mode
[  261.654127][ T9223] bridge_slave_1: entered promiscuous mode
[  261.725457][ T9225] chnl_net:caif_netlink_parms(): no params data found
[  261.760281][ T9223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.778231][ T9223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.834416][ T9237] lo speed is unknown, defaulting to 1000
[  261.891987][ T9223] team0: Port device team_slave_0 added
[  261.927498][ T9223] team0: Port device team_slave_1 added
[  262.094861][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.101847][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.112270][ T5848] Bluetooth: hci10: command tx timeout
[  262.135037][ T9223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.152221][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.159284][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.186101][ T9223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.197051][ T5848] Bluetooth: hci11: command tx timeout
[  262.220384][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.227792][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.236280][ T9225] bridge_slave_0: entered allmulticast mode
[  262.244887][ T9225] bridge_slave_0: entered promiscuous mode
[  262.257468][ T9242] lo speed is unknown, defaulting to 1000
[  262.318231][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.325526][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.333364][ T9225] bridge_slave_1: entered allmulticast mode
[  262.341599][ T9225] bridge_slave_1: entered promiscuous mode
[  262.523398][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.561275][ T9223] hsr_slave_0: entered promiscuous mode
[  262.576568][ T9223] hsr_slave_1: entered promiscuous mode
[  262.583070][ T9223] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.590617][ T9223] Cannot create hsr debugfs directory
[  262.599694][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.652812][ T9225] team0: Port device team_slave_0 added
[  262.671264][ T9230] chnl_net:caif_netlink_parms(): no params data found
[  262.688417][ T9225] team0: Port device team_slave_1 added
[  262.753197][ T5848] Bluetooth: hci12: command tx timeout
[  262.824845][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.831852][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.858758][ T9225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.871683][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.878763][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.905268][ T9225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.101192][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.108590][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.116714][ T9230] bridge_slave_0: entered allmulticast mode
[  263.125034][ T9230] bridge_slave_0: entered promiscuous mode
[  263.137866][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.145234][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.153039][ T9230] bridge_slave_1: entered allmulticast mode
[  263.161732][ T9230] bridge_slave_1: entered promiscuous mode
[  263.199037][ T9225] hsr_slave_0: entered promiscuous mode
[  263.205866][ T9225] hsr_slave_1: entered promiscuous mode
[  263.212114][ T9225] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.219792][ T9225] Cannot create hsr debugfs directory
[  263.291211][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.328221][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.392749][ T5848] Bluetooth: hci13: command tx timeout
[  263.514739][ T9230] team0: Port device team_slave_0 added
[  263.553797][ T9230] team0: Port device team_slave_1 added
[  263.632445][ T5848] Bluetooth: hci14: command tx timeout
[  263.701037][ T9237] chnl_net:caif_netlink_parms(): no params data found
[  263.723532][ T9242] chnl_net:caif_netlink_parms(): no params data found
[  263.738039][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.745136][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.773750][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.831320][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.842254][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.868282][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.010534][ T9230] hsr_slave_0: entered promiscuous mode
[  264.017438][ T9230] hsr_slave_1: entered promiscuous mode
[  264.024364][ T9230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  264.031924][ T9230] Cannot create hsr debugfs directory
[  264.177996][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.186380][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.194221][ T5848] Bluetooth: hci10: command tx timeout
[  264.201263][ T9242] bridge_slave_0: entered allmulticast mode
[  264.209235][ T9242] bridge_slave_0: entered promiscuous mode
[  264.238361][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.246413][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.254102][ T9237] bridge_slave_0: entered allmulticast mode
[  264.261162][ T9237] bridge_slave_0: entered promiscuous mode
[  264.272432][ T5848] Bluetooth: hci11: command tx timeout
[  264.282640][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.289962][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.297462][ T9242] bridge_slave_1: entered allmulticast mode
[  264.308074][ T9242] bridge_slave_1: entered promiscuous mode
[  264.331730][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.339295][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.347434][ T9237] bridge_slave_1: entered allmulticast mode
[  264.361935][ T9237] bridge_slave_1: entered promiscuous mode
[  264.471279][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.486165][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.520251][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.563595][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.660903][ T9237] team0: Port device team_slave_0 added
[  264.698591][ T9242] team0: Port device team_slave_0 added
[  264.708196][ T9242] team0: Port device team_slave_1 added
[  264.717122][ T9237] team0: Port device team_slave_1 added
[  264.775136][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.782726][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.809662][ T9237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.832888][ T5848] Bluetooth: hci12: command tx timeout
[  264.851770][ T9237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.858776][ T9237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.885574][ T9237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.922858][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.929814][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.956309][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.969020][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.976072][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.003066][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.076850][ T9237] hsr_slave_0: entered promiscuous mode
[  265.083885][ T9237] hsr_slave_1: entered promiscuous mode
[  265.090280][ T9237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.099149][ T9237] Cannot create hsr debugfs directory
[  265.178806][ T9242] hsr_slave_0: entered promiscuous mode
[  265.186045][ T9242] hsr_slave_1: entered promiscuous mode
[  265.192851][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.200399][ T9242] Cannot create hsr debugfs directory
[  265.472379][ T5848] Bluetooth: hci13: command tx timeout
[  265.712321][ T5848] Bluetooth: hci14: command tx timeout
[  266.272438][ T5848] Bluetooth: hci10: command tx timeout
[  266.352455][ T5848] Bluetooth: hci11: command tx timeout
[  266.912409][ T5848] Bluetooth: hci12: command tx timeout
[  267.552456][ T5848] Bluetooth: hci13: command tx timeout
[  267.792280][ T5848] Bluetooth: hci14: command tx timeout
[  268.352246][ T5848] Bluetooth: hci10: command tx timeout
[  268.432892][ T5848] Bluetooth: hci11: command tx timeout
[  268.992280][ T5848] Bluetooth: hci12: command tx timeout
[  269.632302][ T5848] Bluetooth: hci13: command tx timeout
[  269.872441][ T5848] Bluetooth: hci14: command tx timeout
[  285.232714][   T95] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 150 seconds
[  285.243605][   T95] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 150 seconds
[  285.254852][   T95] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 150 seconds
[  285.266388][   T95] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 150 seconds
[  315.312946][   T95] block nbd1: Possible stuck request ffff88802589e000: control (read@0,1024B). Runtime 180 seconds
[  315.323839][   T95] block nbd1: Possible stuck request ffff88802589e1c0: control (read@1024,1024B). Runtime 180 seconds
[  315.334932][   T95] block nbd1: Possible stuck request ffff88802589e380: control (read@2048,1024B). Runtime 180 seconds
[  315.346008][   T95] block nbd1: Possible stuck request ffff88802589e540: control (read@3072,1024B). Runtime 180 seconds
[  317.236921][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.472233][ T5216] udevd[5216]: worker [5895] /devices/virtual/block/nbd1 timeout; kill it
[  317.480948][ T5216] udevd[5216]: seq 12235 '/devices/virtual/block/nbd1' killed
[  320.178337][ T5858] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  320.193455][ T5858] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  320.205989][ T5854] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  320.208019][ T9194] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  320.215624][ T5854] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  320.223060][ T9194] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  320.228917][ T5854] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  320.236204][ T9194] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  320.253758][ T9194] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  320.261634][ T9194] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  320.312910][ T9270] lo speed is unknown, defaulting to 1000
[  320.609338][ T9268] lo speed is unknown, defaulting to 1000
[  320.726990][ T9194] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  320.736365][ T9194] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  320.750195][ T9194] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  320.782273][ T9194] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  320.790156][ T9194] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  321.153389][ T9273] lo speed is unknown, defaulting to 1000
[  321.165762][ T5858] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  321.175187][ T5858] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  321.183767][ T5858] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  321.203018][ T5858] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  321.210854][ T5858] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  321.324345][ T9270] chnl_net:caif_netlink_parms(): no params data found
[  321.668483][ T5858] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  321.692755][ T5858] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  321.704486][ T5858] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  321.713426][ T5858] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  321.724433][ T5858] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  321.750276][ T9279] lo speed is unknown, defaulting to 1000
[  321.825892][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.833454][ T9270] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.840741][ T9270] bridge_slave_0: entered allmulticast mode
[  321.849367][ T9270] bridge_slave_0: entered promiscuous mode
[  321.901362][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.910029][ T9270] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.930993][ T9270] bridge_slave_1: entered allmulticast mode
[  321.952846][ T9270] bridge_slave_1: entered promiscuous mode
[  321.966347][ T9268] chnl_net:caif_netlink_parms(): no params data found
[  322.133027][ T9270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.151319][ T9270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.252996][ T9270] team0: Port device team_slave_0 added
[  322.272612][ T9194] Bluetooth: hci15: command tx timeout
[  322.278992][ T9285] lo speed is unknown, defaulting to 1000
[  322.323197][ T9270] team0: Port device team_slave_1 added
[  322.358583][ T9194] Bluetooth: hci16: command tx timeout
[  322.421621][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.442484][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.450086][ T9268] bridge_slave_0: entered allmulticast mode
[  322.477771][ T9268] bridge_slave_0: entered promiscuous mode
[  322.566617][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.574305][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.581751][ T9268] bridge_slave_1: entered allmulticast mode
[  322.589701][ T9268] bridge_slave_1: entered promiscuous mode
[  322.665641][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.676138][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.702572][ T9270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.715555][ T9270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.722665][ T9270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.748787][ T9270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.808583][ T9268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.826017][ T9273] chnl_net:caif_netlink_parms(): no params data found
[  322.842382][   T51] Bluetooth: hci17: command tx timeout
[  322.866290][ T9268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.984966][ T9270] hsr_slave_0: entered promiscuous mode
[  322.991446][ T9270] hsr_slave_1: entered promiscuous mode
[  322.998255][ T9270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.005957][ T9270] Cannot create hsr debugfs directory
[  323.042769][ T9268] team0: Port device team_slave_0 added
[  323.101233][ T9268] team0: Port device team_slave_1 added
[  323.273306][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.280284][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.306628][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.317843][   T51] Bluetooth: hci18: command tx timeout
[  323.331795][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.339238][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.366292][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.400976][ T9279] chnl_net:caif_netlink_parms(): no params data found
[  323.436638][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.444243][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.451631][ T9273] bridge_slave_0: entered allmulticast mode
[  323.460015][ T9273] bridge_slave_0: entered promiscuous mode
[  323.519707][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.527177][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.534999][ T9273] bridge_slave_1: entered allmulticast mode
[  323.542845][ T9273] bridge_slave_1: entered promiscuous mode
[  323.660769][ T9268] hsr_slave_0: entered promiscuous mode
[  323.667720][ T9268] hsr_slave_1: entered promiscuous mode
[  323.676014][ T9268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.684156][ T9268] Cannot create hsr debugfs directory
[  323.792383][   T51] Bluetooth: hci19: command tx timeout
[  323.803207][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.816477][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.945084][ T9285] chnl_net:caif_netlink_parms(): no params data found
[  323.987317][ T9273] team0: Port device team_slave_0 added
[  324.010236][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.018189][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.025748][ T9279] bridge_slave_0: entered allmulticast mode
[  324.033605][ T9279] bridge_slave_0: entered promiscuous mode
[  324.061650][ T9273] team0: Port device team_slave_1 added
[  324.118466][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.126583][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.134620][ T9279] bridge_slave_1: entered allmulticast mode
[  324.141746][ T9279] bridge_slave_1: entered promiscuous mode
[  324.174217][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.181209][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.208614][ T9273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.221905][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.229005][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.256228][ T9273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.352225][   T51] Bluetooth: hci15: command tx timeout
[  324.361779][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.377711][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.432730][ T9194] Bluetooth: hci7: command 0x0406 tx timeout
[  324.435677][ T5166] Bluetooth: hci6: command 0x0406 tx timeout
[  324.438878][ T9194] Bluetooth: hci9: command 0x0406 tx timeout
[  324.447177][ T5166] Bluetooth: hci16: command tx timeout
[  324.450905][ T9194] Bluetooth: hci8: command 0x0406 tx timeout
[  324.463530][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  324.590476][ T9273] hsr_slave_0: entered promiscuous mode
[  324.599741][ T9273] hsr_slave_1: entered promiscuous mode
[  324.607473][ T9273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.615422][ T9273] Cannot create hsr debugfs directory
[  324.639722][ T9279] team0: Port device team_slave_0 added
[  324.647464][ T9285] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.655162][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.663081][ T9285] bridge_slave_0: entered allmulticast mode
[  324.670307][ T9285] bridge_slave_0: entered promiscuous mode
[  324.729715][ T9279] team0: Port device team_slave_1 added
[  324.754671][ T9285] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.761865][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.770311][ T9285] bridge_slave_1: entered allmulticast mode
[  324.779074][ T9285] bridge_slave_1: entered promiscuous mode
[  324.839839][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.847605][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.873881][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.912490][ T5858] Bluetooth: hci17: command tx timeout
[  324.940538][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.947993][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.974228][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.075417][ T9285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.090990][ T9285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.216626][ T9285] team0: Port device team_slave_0 added
[  325.230949][ T9279] hsr_slave_0: entered promiscuous mode
[  325.238271][ T9279] hsr_slave_1: entered promiscuous mode
[  325.244656][ T9279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.252289][ T9279] Cannot create hsr debugfs directory
[  325.277325][ T9285] team0: Port device team_slave_1 added
[  325.377567][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.385102][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.411321][ T9285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.411340][ T5858] Bluetooth: hci18: command tx timeout
[  325.468892][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.476518][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.502914][ T9285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.611892][ T9285] hsr_slave_0: entered promiscuous mode
[  325.618532][ T9285] hsr_slave_1: entered promiscuous mode
[  325.626616][ T9285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.635429][ T9285] Cannot create hsr debugfs directory
[  325.875319][ T5858] Bluetooth: hci19: command tx timeout
[  326.432651][ T5858] Bluetooth: hci15: command tx timeout
[  326.512539][ T5858] Bluetooth: hci16: command tx timeout
[  326.992450][ T5858] Bluetooth: hci17: command tx timeout
[  327.476335][ T5858] Bluetooth: hci18: command tx timeout
[  327.953299][ T5858] Bluetooth: hci19: command tx timeout
[  328.512261][ T5858] Bluetooth: hci15: command tx timeout
[  328.592301][ T5858] Bluetooth: hci16: command tx timeout
[  329.072304][ T5858] Bluetooth: hci17: command tx timeout
[  329.552277][ T5858] Bluetooth: hci18: command tx timeout
[  330.032304][ T5858] Bluetooth: hci19: command tx timeout
[  336.432983][   T31] INFO: task syz.1.961:9135 blocked for more than 143 seconds.
[  336.440617][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  336.448733][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.457829][   T31] task:syz.1.961       state:D stack:25992 pid:9135  tgid:9134  ppid:5852   task_flags:0x480140 flags:0x00004004
[  336.470831][   T31] Call Trace:
[  336.474393][   T31]  <TASK>
[  336.477551][   T31]  __schedule+0x16fd/0x4cf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  336.482357][   T31]  ? __lock_acquire+0xab9/0xd20
[  336.487371][   T31]  ? schedule+0x165/0x360
[  336.491733][   T31]  ? __lock_acquire+0xab9/0xd20
[  336.497089][   T31]  ? __pfx___schedule+0x10/0x10
[  336.503461][   T31]  ? schedule+0x91/0x360
[  336.507742][   T31]  schedule+0x165/0x360
[  336.511932][   T31]  blk_mq_freeze_queue_wait+0xf4/0x170
[  336.517564][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  336.523777][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  336.529869][   T31]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  336.572306][   T31]  queue_limits_commit_update_frozen+0x5e/0x360
[  336.592446][   T31]  ? nbd_set_size+0x2bb/0x6c0
[  336.597187][   T31]  nbd_set_size+0x494/0x6c0
[  336.601724][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  336.610822][   T31]  ? __mutex_trylock_common+0x153/0x260
[  336.616567][   T31]  ? __mutex_lock+0x330/0xe80
[  336.621269][   T31]  ? nla_memcpy+0x5b/0xc0
[  336.625703][   T31]  nbd_genl_size_set+0x2eb/0x3c0
[  336.630672][   T31]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  336.636259][   T31]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  336.642328][   T31]  ? bpf_lsm_capable+0x9/0x20
[  336.647579][   T31]  ? security_capable+0x7e/0x2e0
[  336.652642][   T31]  ? radix_tree_lookup+0x240/0x290
[  336.657801][   T31]  nbd_genl_reconfigure+0x409/0x1870
[  336.663487][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  336.669238][   T31]  ? __nla_parse+0x40/0x60
[  336.673925][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  336.680497][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  336.686347][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  336.692509][   T31]  ? stack_trace_save+0x9c/0xe0
[  336.697557][   T31]  genl_rcv_msg+0x60e/0x790
[  336.702299][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.707389][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  336.713429][   T31]  netlink_rcv_skb+0x208/0x470
[  336.718209][   T31]  ? __lock_acquire+0xab9/0xd20
[  336.723162][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.728210][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  336.733611][   T31]  ? down_read+0x1ad/0x2e0
[  336.738049][   T31]  genl_rcv+0x28/0x40
[  336.742119][   T31]  netlink_unicast+0x82f/0x9e0
[  336.746914][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  336.752363][   T31]  ? netlink_sendmsg+0x642/0xb30
[  336.757337][   T31]  ? skb_put+0x11b/0x210
[  336.761601][   T31]  netlink_sendmsg+0x805/0xb30
[  336.766498][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.771798][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  336.776909][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  336.782274][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.787786][   T31]  __sock_sendmsg+0x21c/0x270
[  336.792608][   T31]  ____sys_sendmsg+0x505/0x830
[  336.797399][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.803356][   T31]  ? import_iovec+0x74/0xa0
[  336.807899][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  336.812649][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.818057][   T31]  ? __fget_files+0x2a/0x420
[  336.823577][   T31]  ? __fget_files+0x3a0/0x420
[  336.828287][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  336.834535][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.840038][   T31]  ? rcu_is_watching+0x15/0xb0
[  336.844881][   T31]  ? do_syscall_64+0xbe/0x3b0
[  336.849572][   T31]  do_syscall_64+0xfa/0x3b0
[  336.854328][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.859553][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.865738][   T31]  ? clear_bhb_loop+0x60/0xb0
[  336.870432][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.876676][   T31] RIP: 0033:0x7fe8edd8e9a9
[  336.881217][   T31] RSP: 002b:00007fe8eec4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.889945][   T31] RAX: ffffffffffffffda RBX: 00007fe8edfb5fa0 RCX: 00007fe8edd8e9a9
[  336.898109][   T31] RDX: 0000000000000804 RSI: 0000200000002940 RDI: 0000000000000004
[  336.906212][   T31] RBP: 00007fe8ede10d69 R08: 0000000000000000 R09: 0000000000000000
[  336.914488][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.922717][   T31] R13: 0000000000000000 R14: 00007fe8edfb5fa0 R15: 00007ffd7357e6d8
[  336.930858][   T31]  </TASK>
[  336.934338][   T31] INFO: task syz.3.965:9145 blocked for more than 143 seconds.
[  336.942445][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  336.950298][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.959107][   T31] task:syz.3.965       state:D stack:24040 pid:9145  tgid:9144  ppid:5847   task_flags:0x400140 flags:0x00004004
[  336.971104][   T31] Call Trace:
[  336.974506][   T31]  <TASK>
[  336.977450][   T31]  __schedule+0x16fd/0x4cf0
[  336.982149][   T31]  ? __lock_acquire+0xab9/0xd20
[  336.987015][   T31]  ? schedule+0x165/0x360
[  336.991477][   T31]  ? __pfx___schedule+0x10/0x10
[  336.996622][   T31]  ? schedule+0x91/0x360
[  337.000885][   T31]  schedule+0x165/0x360
[  337.005154][   T31]  schedule_preempt_disabled+0x13/0x30
[  337.010628][   T31]  __mutex_lock+0x724/0xe80
[  337.015284][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  337.020441][   T31]  ? __mutex_lock+0x51b/0xe80
[  337.025221][   T31]  ? genl_rcv_msg+0x10d/0x790
[  337.029908][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  337.035199][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  337.040376][   T31]  ? radix_tree_lookup+0x240/0x290
[  337.045629][   T31]  genl_rcv_msg+0x10d/0x790
[  337.050150][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.055366][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  337.060415][   T31]  ? __asan_memcpy+0x40/0x70
[  337.065100][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  337.070502][   T31]  netlink_rcv_skb+0x208/0x470
[  337.076034][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.080910][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.086021][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  337.091449][   T31]  ? down_read+0x1ad/0x2e0
[  337.096065][   T31]  genl_rcv+0x28/0x40
[  337.100060][   T31]  netlink_unicast+0x82f/0x9e0
[  337.104982][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  337.110283][   T31]  ? netlink_sendmsg+0x642/0xb30
[  337.115366][   T31]  ? skb_put+0x11b/0x210
[  337.119623][   T31]  netlink_sendmsg+0x805/0xb30
[  337.124460][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.129756][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  337.134855][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.140151][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.145545][   T31]  __sock_sendmsg+0x21c/0x270
[  337.150237][   T31]  __sys_sendto+0x3bd/0x520
[  337.155373][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  337.160429][   T31]  ? count_memcg_event_mm+0x21/0x260
[  337.165803][   T31]  ? exc_page_fault+0x76/0xf0
[  337.170584][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  337.176153][   T31]  __x64_sys_sendto+0xde/0x100
[  337.180936][   T31]  do_syscall_64+0xfa/0x3b0
[  337.185588][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.190797][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.197200][   T31]  ? clear_bhb_loop+0x60/0xb0
[  337.201910][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.207928][   T31] RIP: 0033:0x7fdf7159083c
[  337.212474][   T31] RSP: 002b:00007fdf7232bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  337.220943][   T31] RAX: ffffffffffffffda RBX: 00007fdf7232bfc0 RCX: 00007fdf7159083c
[  337.229031][   T31] RDX: 0000000000000020 RSI: 00007fdf7232c010 RDI: 0000000000000005
[  337.237367][   T31] RBP: 0000000000000000 R08: 00007fdf7232bf14 R09: 000000000000000c
[  337.245427][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  337.254082][   T31] R13: 00007fdf7232bf68 R14: 00007fdf7232c010 R15: 0000000000000000
[  337.262278][   T31]  </TASK>
[  337.265352][   T31] INFO: task syz.4.969:9154 blocked for more than 144 seconds.
[  337.274472][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  337.282174][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  337.290852][   T31] task:syz.4.969       state:D stack:28120 pid:9154  tgid:9153  ppid:5846   task_flags:0x400140 flags:0x00004004
[  337.303695][   T31] Call Trace:
[  337.307031][   T31]  <TASK>
[  337.309991][   T31]  __schedule+0x16fd/0x4cf0
[  337.314628][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.319489][   T31]  ? schedule+0x165/0x360
[  337.324057][   T31]  ? __pfx___schedule+0x10/0x10
[  337.328926][   T31]  ? schedule+0x91/0x360
[  337.333251][   T31]  schedule+0x165/0x360
[  337.337417][   T31]  schedule_preempt_disabled+0x13/0x30
[  337.343065][   T31]  __mutex_lock+0x724/0xe80
[  337.347579][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  337.352940][   T31]  ? __mutex_lock+0x51b/0xe80
[  337.357632][   T31]  ? genl_rcv_msg+0x10d/0x790
[  337.362458][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  337.367530][   T31]  ? stack_trace_save+0x9c/0xe0
[  337.372500][   T31]  ? radix_tree_lookup+0x240/0x290
[  337.377622][   T31]  genl_rcv_msg+0x10d/0x790
[  337.382297][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.387160][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.392513][   T31]  netlink_rcv_skb+0x208/0x470
[  337.397409][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.402383][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.407428][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  337.412814][   T31]  ? down_read+0x1ad/0x2e0
[  337.417244][   T31]  genl_rcv+0x28/0x40
[  337.421269][   T31]  netlink_unicast+0x82f/0x9e0
[  337.426243][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  337.431543][   T31]  ? netlink_sendmsg+0x642/0xb30
[  337.436568][   T31]  ? skb_put+0x11b/0x210
[  337.440819][   T31]  netlink_sendmsg+0x805/0xb30
[  337.445739][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.451041][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  337.456075][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.461372][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.466846][   T31]  __sock_sendmsg+0x21c/0x270
[  337.471550][   T31]  __sys_sendto+0x3bd/0x520
[  337.476242][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  337.481294][   T31]  ? count_memcg_event_mm+0x21/0x260
[  337.487062][   T31]  ? rcu_is_watching+0x15/0xb0
[  337.491854][   T31]  __x64_sys_sendto+0xde/0x100
[  337.496716][   T31]  do_syscall_64+0xfa/0x3b0
[  337.501350][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.506743][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.512902][   T31]  ? clear_bhb_loop+0x60/0xb0
[  337.517596][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.523637][   T31] RIP: 0033:0x7f8b5d19083c
[  337.528063][   T31] RSP: 002b:00007f8b5e03eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  337.536554][   T31] RAX: ffffffffffffffda RBX: 00007f8b5e03efc0 RCX: 00007f8b5d19083c
[  337.544705][   T31] RDX: 0000000000000020 RSI: 00007f8b5e03f010 RDI: 000000000000000a
[  337.553234][   T31] RBP: 0000000000000000 R08: 00007f8b5e03ef14 R09: 000000000000000c
[  337.561223][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  337.569363][   T31] R13: 00007f8b5e03ef68 R14: 00007f8b5e03f010 R15: 0000000000000000
[  337.577630][   T31]  </TASK>
[  337.580666][   T31] INFO: task syz.0.970:9158 blocked for more than 144 seconds.
[  337.591037][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  337.599408][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  337.608778][   T31] task:syz.0.970       state:D stack:28616 pid:9158  tgid:9157  ppid:5842   task_flags:0x400040 flags:0x00004004
[  337.621037][   T31] Call Trace:
[  337.625602][   T31]  <TASK>
[  337.628560][   T31]  __schedule+0x16fd/0x4cf0
[  337.633319][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.638198][   T31]  ? schedule+0x165/0x360
[  337.642620][   T31]  ? __pfx___schedule+0x10/0x10
[  337.647498][   T31]  ? schedule+0x91/0x360
[  337.651746][   T31]  schedule+0x165/0x360
[  337.656334][   T31]  schedule_preempt_disabled+0x13/0x30
[  337.661936][   T31]  __mutex_lock+0x724/0xe80
[  337.666519][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  337.671822][   T31]  ? __mutex_lock+0x51b/0xe80
[  337.676738][   T31]  ? genl_rcv_msg+0x10d/0x790
[  337.681444][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  337.686541][   T31]  ? stack_trace_save+0x9c/0xe0
[  337.691499][   T31]  ? radix_tree_lookup+0x240/0x290
[  337.696742][   T31]  genl_rcv_msg+0x10d/0x790
[  337.701263][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.706372][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.711439][   T31]  netlink_rcv_skb+0x208/0x470
[  337.720273][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.726884][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.733317][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  337.738642][   T31]  ? down_read+0x1ad/0x2e0
[  337.743134][   T31]  genl_rcv+0x28/0x40
[  337.747189][   T31]  netlink_unicast+0x82f/0x9e0
[  337.752321][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  337.757634][   T31]  ? netlink_sendmsg+0x642/0xb30
[  337.763126][   T31]  ? skb_put+0x11b/0x210
[  337.767398][   T31]  netlink_sendmsg+0x805/0xb30
[  337.772319][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.777710][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  337.782718][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.788118][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.793691][   T31]  __sock_sendmsg+0x21c/0x270
[  337.798403][   T31]  __sys_sendto+0x3bd/0x520
[  337.802990][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  337.808274][   T31]  ? count_memcg_event_mm+0x21/0x260
[  337.813785][   T31]  ? exc_page_fault+0x76/0xf0
[  337.818491][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  337.823873][   T31]  __x64_sys_sendto+0xde/0x100
[  337.828661][   T31]  do_syscall_64+0xfa/0x3b0
[  337.833541][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.838757][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.846040][   T31]  ? clear_bhb_loop+0x60/0xb0
[  337.850742][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.856745][   T31] RIP: 0033:0x7f7b2cf9083c
[  337.861176][   T31] RSP: 002b:00007f7b2dec9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  337.869702][   T31] RAX: ffffffffffffffda RBX: 00007f7b2dec9fc0 RCX: 00007f7b2cf9083c
[  337.878294][   T31] RDX: 000000000000001c RSI: 00007f7b2deca010 RDI: 0000000000000003
[  337.886388][   T31] RBP: 0000000000000000 R08: 00007f7b2dec9f14 R09: 000000000000000c
[  337.894518][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  337.902594][   T31] R13: 00007f7b2dec9f68 R14: 00007f7b2deca010 R15: 0000000000000000
[  337.910720][   T31]  </TASK>
[  337.913942][   T31] INFO: task syz.2.972:9167 blocked for more than 144 seconds.
[  337.921491][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  337.929219][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  337.938033][   T31] task:syz.2.972       state:D stack:28184 pid:9167  tgid:9166  ppid:5850   task_flags:0x400040 flags:0x00004004
[  337.950556][   T31] Call Trace:
[  337.954531][   T31]  <TASK>
[  337.957489][   T31]  __schedule+0x16fd/0x4cf0
[  337.962109][   T31]  ? __lock_acquire+0xab9/0xd20
[  337.966988][   T31]  ? schedule+0x165/0x360
[  337.971345][   T31]  ? __pfx___schedule+0x10/0x10
[  337.976455][   T31]  ? schedule+0x91/0x360
[  337.980704][   T31]  schedule+0x165/0x360
[  337.985115][   T31]  schedule_preempt_disabled+0x13/0x30
[  337.990631][   T31]  __mutex_lock+0x724/0xe80
[  337.995283][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  338.000414][   T31]  ? __mutex_lock+0x51b/0xe80
[  338.005273][   T31]  ? genl_rcv_msg+0x10d/0x790
[  338.009971][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  338.015301][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  338.020450][   T31]  ? radix_tree_lookup+0x240/0x290
[  338.025740][   T31]  genl_rcv_msg+0x10d/0x790
[  338.030265][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.035590][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  338.040638][   T31]  ? __asan_memcpy+0x40/0x70
[  338.045332][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  338.050715][   T31]  netlink_rcv_skb+0x208/0x470
[  338.055692][   T31]  ? __lock_acquire+0xab9/0xd20
[  338.060551][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.065835][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  338.071159][   T31]  ? down_read+0x1ad/0x2e0
[  338.075713][   T31]  genl_rcv+0x28/0x40
[  338.079713][   T31]  netlink_unicast+0x82f/0x9e0
[  338.084591][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  338.089936][   T31]  ? netlink_sendmsg+0x642/0xb30
[  338.095065][   T31]  ? skb_put+0x11b/0x210
[  338.099327][   T31]  netlink_sendmsg+0x805/0xb30
[  338.104188][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.109487][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  338.114914][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  338.120216][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.125571][   T31]  __sock_sendmsg+0x21c/0x270
[  338.130434][   T31]  __sys_sendto+0x3bd/0x520
[  338.135048][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  338.140088][   T31]  ? count_memcg_event_mm+0x21/0x260
[  338.145454][   T31]  ? exc_page_fault+0x76/0xf0
[  338.150149][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  338.155609][   T31]  __x64_sys_sendto+0xde/0x100
[  338.160384][   T31]  do_syscall_64+0xfa/0x3b0
[  338.164964][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.170166][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.176555][   T31]  ? clear_bhb_loop+0x60/0xb0
[  338.181251][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.187200][   T31] RIP: 0033:0x7f102b59083c
[  338.191619][   T31] RSP: 002b:00007f102c3a0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  338.206138][   T31] RAX: ffffffffffffffda RBX: 00007f102c3a0fc0 RCX: 00007f102b59083c
[  338.214349][   T31] RDX: 0000000000000020 RSI: 00007f102c3a1010 RDI: 0000000000000004
[  338.222649][   T31] RBP: 0000000000000000 R08: 00007f102c3a0f14 R09: 000000000000000c
[  338.230634][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  338.238704][   T31] R13: 00007f102c3a0f68 R14: 00007f102c3a1010 R15: 0000000000000000
[  338.246819][   T31]  </TASK>
[  338.249895][   T31] INFO: task syz.2.972:9168 blocked for more than 145 seconds.
[  338.257522][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  338.265226][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.274760][   T31] task:syz.2.972       state:D stack:27992 pid:9168  tgid:9166  ppid:5850   task_flags:0x400040 flags:0x00004004
[  338.287046][   T31] Call Trace:
[  338.290349][   T31]  <TASK>
[  338.293344][   T31]  __schedule+0x16fd/0x4cf0
[  338.297869][   T31]  ? __lock_acquire+0xab9/0xd20
[  338.302856][   T31]  ? schedule+0x165/0x360
[  338.307208][   T31]  ? __pfx___schedule+0x10/0x10
[  338.312179][   T31]  ? schedule+0x91/0x360
[  338.316437][   T31]  schedule+0x165/0x360
[  338.320821][   T31]  schedule_preempt_disabled+0x13/0x30
[  338.326501][   T31]  __mutex_lock+0x724/0xe80
[  338.331019][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  338.336698][   T31]  ? __mutex_lock+0x51b/0xe80
[  338.341477][   T31]  ? genl_rcv_msg+0x10d/0x790
[  338.346273][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  338.351302][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  338.356917][   T31]  ? radix_tree_lookup+0x240/0x290
[  338.362516][   T31]  genl_rcv_msg+0x10d/0x790
[  338.367061][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.372343][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  338.377382][   T31]  ? __asan_memcpy+0x40/0x70
[  338.382473][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  338.387874][   T31]  netlink_rcv_skb+0x208/0x470
[  338.393243][   T31]  ? __lock_acquire+0xab9/0xd20
[  338.398117][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.403529][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  338.408853][   T31]  ? down_read+0x1ad/0x2e0
[  338.413544][   T31]  genl_rcv+0x28/0x40
[  338.417538][   T31]  netlink_unicast+0x82f/0x9e0
[  338.422829][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  338.428325][   T31]  ? netlink_sendmsg+0x642/0xb30
[  338.433876][   T31]  ? skb_put+0x11b/0x210
[  338.438139][   T31]  netlink_sendmsg+0x805/0xb30
[  338.443286][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.448591][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  338.453825][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  338.459125][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.465262][   T31]  __sock_sendmsg+0x21c/0x270
[  338.469961][   T31]  __sys_sendto+0x3bd/0x520
[  338.474986][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  338.480046][   T31]  ? count_memcg_event_mm+0x21/0x260
[  338.485901][   T31]  ? exc_page_fault+0x76/0xf0
[  338.490595][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  338.496328][   T31]  __x64_sys_sendto+0xde/0x100
[  338.501105][   T31]  do_syscall_64+0xfa/0x3b0
[  338.506937][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.512646][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.518742][   T31]  ? clear_bhb_loop+0x60/0xb0
[  338.524125][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.530038][   T31] RIP: 0033:0x7f102b59083c
[  338.535028][   T31] RSP: 002b:00007f102c37fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  338.543889][   T31] RAX: ffffffffffffffda RBX: 00007f102c37ffc0 RCX: 00007f102b59083c
[  338.551876][   T31] RDX: 0000000000000020 RSI: 00007f102c380010 RDI: 0000000000000003
[  338.560378][   T31] RBP: 0000000000000000 R08: 00007f102c37ff14 R09: 000000000000000c
[  338.568743][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  338.577043][   T31] R13: 00007f102c37ff68 R14: 00007f102c380010 R15: 0000000000000000
[  338.585409][   T31]  </TASK>
[  338.588582][   T31] INFO: task syz.2.972:9170 blocked for more than 145 seconds.
[  338.596843][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  338.604841][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.614074][   T31] task:syz.2.972       state:D stack:25352 pid:9170  tgid:9166  ppid:5850   task_flags:0x400140 flags:0x00004004
[  338.626682][   T31] Call Trace:
[  338.629976][   T31]  <TASK>
[  338.633477][   T31]  __schedule+0x16fd/0x4cf0
[  338.638026][   T31]  ? __lock_acquire+0xab9/0xd20
[  338.643401][   T31]  ? schedule+0x165/0x360
[  338.647754][   T31]  ? __pfx___schedule+0x10/0x10
[  338.653141][   T31]  ? schedule+0x91/0x360
[  338.657405][   T31]  schedule+0x165/0x360
[  338.661566][   T31]  schedule_preempt_disabled+0x13/0x30
[  338.667592][   T31]  __mutex_lock+0x724/0xe80
[  338.672647][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  338.677910][   T31]  ? __mutex_lock+0x51b/0xe80
[  338.683195][   T31]  ? genl_rcv_msg+0x10d/0x790
[  338.687906][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  338.693419][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  338.698560][   T31]  ? radix_tree_lookup+0x240/0x290
[  338.704130][   T31]  genl_rcv_msg+0x10d/0x790
[  338.708665][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.714220][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  338.719266][   T31]  ? __asan_memcpy+0x40/0x70
[  338.724490][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  338.730132][   T31]  netlink_rcv_skb+0x208/0x470
[  338.735384][   T31]  ? __lock_acquire+0xab9/0xd20
[  338.740248][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.745697][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  338.751129][   T31]  ? down_read+0x1ad/0x2e0
[  338.756164][   T31]  genl_rcv+0x28/0x40
[  338.760159][   T31]  netlink_unicast+0x82f/0x9e0
[  338.765427][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  338.770737][   T31]  ? netlink_sendmsg+0x642/0xb30
[  338.776307][   T31]  ? skb_put+0x11b/0x210
[  338.780571][   T31]  netlink_sendmsg+0x805/0xb30
[  338.785802][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.791112][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  338.796199][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  338.801503][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.806882][   T31]  __sock_sendmsg+0x21c/0x270
[  338.811573][   T31]  __sys_sendto+0x3bd/0x520
[  338.816177][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  338.821241][   T31]  ? fd_install+0x97/0x540
[  338.825767][   T31]  ? fd_install+0x30d/0x540
[  338.830292][   T31]  __x64_sys_sendto+0xde/0x100
[  338.835590][   T31]  do_syscall_64+0xfa/0x3b0
[  338.840117][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  338.845396][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.851469][   T31]  ? clear_bhb_loop+0x60/0xb0
[  338.856300][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.862261][   T31] RIP: 0033:0x7f102b59083c
[  338.866683][   T31] RSP: 002b:00007f102c35ee90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  338.875330][   T31] RAX: ffffffffffffffda RBX: 00007f102c35efa0 RCX: 00007f102b59083c
[  338.883391][   T31] RDX: 0000000000000028 RSI: 00007f102c35eff0 RDI: 0000000000000008
[  338.891365][   T31] RBP: 0000000000000000 R08: 00007f102c35eee4 R09: 000000000000000c
[  338.899424][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  338.907469][   T31] R13: 00007f102c35ef38 R14: 00007f102c35eff0 R15: 0000000000000000
[  338.915737][   T31]  </TASK>
[  338.918802][   T31] INFO: task syz.2.972:9171 blocked for more than 145 seconds.
[  338.926466][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  338.934359][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.943312][   T31] task:syz.2.972       state:D stack:25832 pid:9171  tgid:9166  ppid:5850   task_flags:0x400140 flags:0x00004004
[  338.955366][   T31] Call Trace:
[  338.958646][   T31]  <TASK>
[  338.961564][   T31]  __schedule+0x16fd/0x4cf0
[  338.966188][   T31]  ? __lock_acquire+0xab9/0xd20
[  338.971044][   T31]  ? schedule+0x165/0x360
[  338.975436][   T31]  ? __pfx___schedule+0x10/0x10
[  338.980297][   T31]  ? schedule+0x91/0x360
[  338.984726][   T31]  schedule+0x165/0x360
[  338.988900][   T31]  schedule_preempt_disabled+0x13/0x30
[  338.994944][   T31]  __mutex_lock+0x724/0xe80
[  338.999477][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  339.004712][   T31]  ? __mutex_lock+0x51b/0xe80
[  339.009408][   T31]  ? genl_rcv_msg+0x10d/0x790
[  339.014164][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  339.019195][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  339.024426][   T31]  ? radix_tree_lookup+0x240/0x290
[  339.029557][   T31]  genl_rcv_msg+0x10d/0x790
[  339.034223][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.039482][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  339.045132][   T31]  ? __asan_memcpy+0x40/0x70
[  339.049902][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  339.055752][   T31]  netlink_rcv_skb+0x208/0x470
[  339.060707][   T31]  ? __lock_acquire+0xab9/0xd20
[  339.065675][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.070733][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.076172][   T31]  ? down_read+0x1ad/0x2e0
[  339.080612][   T31]  genl_rcv+0x28/0x40
[  339.084707][   T31]  netlink_unicast+0x82f/0x9e0
[  339.089503][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  339.095099][   T31]  ? netlink_sendmsg+0x642/0xb30
[  339.100051][   T31]  ? skb_put+0x11b/0x210
[  339.104408][   T31]  netlink_sendmsg+0x805/0xb30
[  339.109196][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.114590][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  339.119546][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.124914][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.130206][   T31]  __sock_sendmsg+0x21c/0x270
[  339.134961][   T31]  __sys_sendto+0x3bd/0x520
[  339.139686][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  339.144835][   T31]  ? fd_install+0x97/0x540
[  339.149268][   T31]  ? fd_install+0x30d/0x540
[  339.154271][   T31]  __x64_sys_sendto+0xde/0x100
[  339.159074][   T31]  do_syscall_64+0xfa/0x3b0
[  339.164050][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.169300][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.175690][   T31]  ? clear_bhb_loop+0x60/0xb0
[  339.180471][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.186700][   T31] RIP: 0033:0x7f102b59083c
[  339.191127][   T31] RSP: 002b:00007f102c33dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  339.199975][   T31] RAX: ffffffffffffffda RBX: 00007f102c33dfc0 RCX: 00007f102b59083c
[  339.208325][   T31] RDX: 0000000000000020 RSI: 00007f102c33e010 RDI: 000000000000000d
[  339.216370][   T31] RBP: 0000000000000000 R08: 00007f102c33df14 R09: 000000000000000c
[  339.224456][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d
[  339.238319][   T31] R13: 00007f102c33df68 R14: 00007f102c33e010 R15: 0000000000000000
[  339.246758][   T31]  </TASK>
[  339.249852][   T31] INFO: task syz.2.972:9172 blocked for more than 146 seconds.
[  339.257475][   T31]       Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0
[  339.265225][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  339.274308][   T31] task:syz.2.972       state:D stack:26984 pid:9172  tgid:9166  ppid:5850   task_flags:0x400040 flags:0x00004004
[  339.286513][   T31] Call Trace:
[  339.289800][   T31]  <TASK>
[  339.292817][   T31]  __schedule+0x16fd/0x4cf0
[  339.297344][   T31]  ? __lock_acquire+0xab9/0xd20
[  339.302337][   T31]  ? schedule+0x165/0x360
[  339.306689][   T31]  ? __pfx___schedule+0x10/0x10
[  339.311564][   T31]  ? schedule+0x91/0x360
[  339.316027][   T31]  schedule+0x165/0x360
[  339.320200][   T31]  schedule_preempt_disabled+0x13/0x30
[  339.325769][   T31]  __mutex_lock+0x724/0xe80
[  339.330289][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  339.335492][   T31]  ? __mutex_lock+0x51b/0xe80
[  339.340187][   T31]  ? genl_rcv_msg+0x10d/0x790
[  339.345174][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  339.350209][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  339.355419][   T31]  ? radix_tree_lookup+0x240/0x290
[  339.360549][   T31]  genl_rcv_msg+0x10d/0x790
[  339.365187][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.370234][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  339.375351][   T31]  ? __asan_memcpy+0x40/0x70
[  339.379953][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  339.385662][   T31]  netlink_rcv_skb+0x208/0x470
[  339.390438][   T31]  ? __lock_acquire+0xab9/0xd20
[  339.395877][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.400945][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.406411][   T31]  ? down_read+0x1ad/0x2e0
[  339.410853][   T31]  genl_rcv+0x28/0x40
[  339.414910][   T31]  netlink_unicast+0x82f/0x9e0
[  339.419694][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  339.425170][   T31]  ? netlink_sendmsg+0x642/0xb30
[  339.430121][   T31]  ? skb_put+0x11b/0x210
[  339.434486][   T31]  netlink_sendmsg+0x805/0xb30
[  339.439273][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.444668][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  339.449835][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.455201][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.460603][   T31]  __sock_sendmsg+0x21c/0x270
[  339.465423][   T31]  __sys_sendto+0x3bd/0x520
[  339.469944][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  339.475258][   T31]  ? fd_install+0x97/0x540
[  339.479723][   T31]  ? fd_install+0x30d/0x540
[  339.484361][   T31]  __x64_sys_sendto+0xde/0x100
[  339.489145][   T31]  do_syscall_64+0xfa/0x3b0
[  339.493987][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  339.499209][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.505714][   T31]  ? clear_bhb_loop+0x60/0xb0
[  339.510411][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.516797][   T31] RIP: 0033:0x7f102b59083c
[  339.521226][   T31] RSP: 002b:00007f102c31ce90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  339.530129][   T31] RAX: ffffffffffffffda RBX: 00007f102c31cfa0 RCX: 00007f102b59083c
[  339.538359][   T31] RDX: 0000000000000028 RSI: 00007f102c31cff0 RDI: 000000000000000e
[  339.546759][   T31] RBP: 0000000000000000 R08: 00007f102c31cee4 R09: 000000000000000c
[  339.555666][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e
[  339.564469][   T31] R13: 00007f102c31cf38 R14: 00007f102c31cff0 R15: 0000000000000000
[  339.572817][   T31]  </TASK>
[  339.575952][   T31] 
[  339.575952][   T31] Showing all locks held in the system:
[  339.584140][   T31] 1 lock held by khungtaskd/31:
[  339.588997][   T31]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  339.598986][   T31] 2 locks held by getty/5606:
[  339.604032][   T31]  #0: ffff88814c1e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  339.613918][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  339.624119][   T31] 1 lock held by udevd/5895:
[  339.628716][   T31]  #0: ffff88802522f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  339.638217][   T31] 6 locks held by syz.1.961/9135:
[  339.643444][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.651784][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.660852][   T31]  #2: ffff8880257f2230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  339.671308][   T31]  #3: ffff888142b20700 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a2/0x6c0
[  339.681008][   T31]  #4: ffff888142b200a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  339.693240][   T31]  #5: ffff888142b200e0 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  339.705637][   T31] 2 locks held by syz.3.965/9145:
[  339.710662][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.719343][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.728453][   T31] 2 locks held by syz.4.969/9154:
[  339.733563][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.741815][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.750959][   T31] 2 locks held by syz.0.970/9158:
[  339.756387][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.764672][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.773729][   T31] 2 locks held by syz.2.972/9167:
[  339.778754][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.787065][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.796293][   T31] 2 locks held by syz.2.972/9168:
[  339.801333][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.809608][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.818692][   T31] 2 locks held by syz.2.972/9170:
[  339.824022][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.832330][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.841321][   T31] 2 locks held by syz.2.972/9171:
[  339.846426][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.854906][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.864066][   T31] 2 locks held by syz.2.972/9172:
[  339.869131][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.877482][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.886547][   T31] 2 locks held by syz-executor/9174:
[  339.891836][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.900071][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.909134][   T31] 2 locks held by syz-executor/9183:
[  339.914499][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.922821][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.931816][   T31] 2 locks held by syz-executor/9188:
[  339.937358][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.945644][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.954864][   T31] 2 locks held by syz-executor/9190:
[  339.960360][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.968661][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  339.977813][   T31] 2 locks held by syz-executor/9191:
[  339.983163][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  339.991369][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.000490][   T31] 2 locks held by syz-executor/9223:
[  340.005847][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.014233][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.023345][   T31] 2 locks held by syz-executor/9225:
[  340.028630][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.037471][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.046822][   T31] 2 locks held by syz-executor/9230:
[  340.052185][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.060534][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.069606][   T31] 2 locks held by syz-executor/9237:
[  340.075044][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.083400][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.092446][   T31] 2 locks held by syz-executor/9242:
[  340.097737][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.106022][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.115223][   T31] 2 locks held by syz-executor/9268:
[  340.120516][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.129096][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.138306][   T31] 2 locks held by syz-executor/9270:
[  340.143773][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.152306][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.161313][   T31] 2 locks held by syz-executor/9273:
[  340.166915][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.175235][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.184285][   T31] 2 locks held by syz-executor/9279:
[  340.189580][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.198028][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.207123][   T31] 2 locks held by syz-executor/9285:
[  340.212474][   T31]  #0: ffffffff8f5849f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  340.220736][   T31]  #1: ffffffff8f584808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  340.229781][   T31] 
[  340.232198][   T31] =============================================
[  340.232198][   T31] 
[  340.240632][   T31] NMI backtrace for cpu 1
[  340.240649][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  340.240665][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  340.240673][   T31] Call Trace:
[  340.240680][   T31]  <TASK>
[  340.240686][   T31]  dump_stack_lvl+0x189/0x250
[  340.240706][   T31]  ? __wake_up_klogd+0xd9/0x110
[  340.240727][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.240742][   T31]  ? __pfx__printk+0x10/0x10
[  340.240770][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  340.240792][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  340.240811][   T31]  ? _printk+0xcf/0x120
[  340.240831][   T31]  ? __pfx__printk+0x10/0x10
[  340.240850][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  340.240866][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  340.240888][   T31]  watchdog+0xfee/0x1030
[  340.240902][   T31]  ? watchdog+0x1de/0x1030
[  340.240920][   T31]  kthread+0x70e/0x8a0
[  340.240941][   T31]  ? __pfx_watchdog+0x10/0x10
[  340.240953][   T31]  ? __pfx_kthread+0x10/0x10
[  340.240972][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.240985][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.240999][   T31]  ? __pfx_kthread+0x10/0x10
[  340.241017][   T31]  ret_from_fork+0x3fc/0x770
[  340.241034][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  340.241052][   T31]  ? __switch_to_asm+0x39/0x70
[  340.241068][   T31]  ? __switch_to_asm+0x33/0x70
[  340.241083][   T31]  ? __pfx_kthread+0x10/0x10
[  340.241102][   T31]  ret_from_fork_asm+0x1a/0x30
[  340.241130][   T31]  </TASK>
[  340.241138][   T31] Sending NMI from CPU 1 to CPUs 0:
[  340.399539][    C0] NMI backtrace for cpu 0
[  340.399555][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  340.399575][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  340.399586][    C0] Workqueue: bat_events batadv_nc_worker
[  340.399605][    C0] RIP: 0010:__lock_acquire+0x45c/0xd20
[  340.399623][    C0] Code: f9 ff bd ff ff ff ff 0f 4c e9 ff c5 45 8d 7c 24 01 49 ff cc 44 89 f9 83 c1 fe 78 44 44 89 e3 81 e3 ff ff ff 7f 83 f9 31 73 1d <48> 8d 0c 9b 8b 8c cf 10 0b 00 00 31 c1 41 ff cf 49 ff cc f7 c1 00
[  340.399637][    C0] RSP: 0018:ffffc900001278f0 EFLAGS: 00000097
[  340.399650][    C0] RAX: 0000000000020007 RBX: 0000000000000000 RCX: 0000000000000000
[  340.399660][    C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88801d290000
[  340.399670][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b3e31c2
[  340.399680][    C0] R10: dffffc0000000000 R11: ffffffff8b3e30f0 R12: 0000000000000000
[  340.399691][    C0] R13: 0000000000000001 R14: ffff88801d290b40 R15: 0000000000000002
[  340.399702][    C0] FS:  0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000
[  340.399715][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.399725][    C0] CR2: 0000555e3ff3a4d8 CR3: 000000000df38000 CR4: 00000000003526f0
[  340.399740][    C0] Call Trace:
[  340.399747][    C0]  <TASK>
[  340.399758][    C0]  ? batadv_nc_worker+0xd2/0x610
[  340.399771][    C0]  lock_acquire+0x120/0x360
[  340.399791][    C0]  ? batadv_nc_worker+0xd2/0x610
[  340.399808][    C0]  ? batadv_nc_worker+0xd2/0x610
[  340.399821][    C0]  ? batadv_nc_worker+0xd2/0x610
[  340.399835][    C0]  batadv_nc_worker+0xef/0x610
[  340.399847][    C0]  ? batadv_nc_worker+0xd2/0x610
[  340.399861][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  340.399879][    C0]  process_scheduled_works+0xae1/0x17b0
[  340.399907][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.399930][    C0]  worker_thread+0x8a0/0xda0
[  340.399956][    C0]  kthread+0x70e/0x8a0
[  340.399976][    C0]  ? __pfx_worker_thread+0x10/0x10
[  340.399992][    C0]  ? __pfx_kthread+0x10/0x10
[  340.400010][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.400025][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.400040][    C0]  ? __pfx_kthread+0x10/0x10
[  340.400058][    C0]  ret_from_fork+0x3fc/0x770
[  340.400075][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  340.400092][    C0]  ? __switch_to_asm+0x39/0x70
[  340.400110][    C0]  ? __switch_to_asm+0x33/0x70
[  340.400126][    C0]  ? __pfx_kthread+0x10/0x10
[  340.400145][    C0]  ret_from_fork_asm+0x1a/0x30
[  340.400169][    C0]  </TASK>
[  340.401740][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  340.656551][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-01894-gfaa60990a541 #0 PREEMPT(full) 
[  340.668602][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  340.678753][   T31] Call Trace:
[  340.682027][   T31]  <TASK>
[  340.684940][   T31]  dump_stack_lvl+0x99/0x250
[  340.689543][   T31]  ? __asan_memcpy+0x40/0x70
[  340.694158][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.699342][   T31]  ? __pfx__printk+0x10/0x10
[  340.703944][   T31]  panic+0x2db/0x790
[  340.707823][   T31]  ? __pfx_panic+0x10/0x10
[  340.712220][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  340.718010][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  340.723366][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  340.729525][   T31]  watchdog+0x102d/0x1030
[  340.733852][   T31]  ? watchdog+0x1de/0x1030
[  340.738252][   T31]  kthread+0x70e/0x8a0
[  340.742303][   T31]  ? __pfx_watchdog+0x10/0x10
[  340.747046][   T31]  ? __pfx_kthread+0x10/0x10
[  340.751622][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.756821][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.762006][   T31]  ? __pfx_kthread+0x10/0x10
[  340.766595][   T31]  ret_from_fork+0x3fc/0x770
[  340.771170][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  340.776270][   T31]  ? __switch_to_asm+0x39/0x70
[  340.781036][   T31]  ? __switch_to_asm+0x33/0x70
[  340.785868][   T31]  ? __pfx_kthread+0x10/0x10
[  340.790446][   T31]  ret_from_fork_asm+0x1a/0x30
[  340.795222][   T31]  </TASK>
[  340.798633][   T31] Kernel Offset: disabled
[  340.803045][   T31] Rebooting in 86400 seconds..