last executing test programs: 20.685949964s ago: executing program 3 (id=1266): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000440)='M', 0x1}], 0x1}}], 0x1, 0x4040040) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000002c0)={r5, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000040)) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) socket$kcm(0x2, 0xa, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000cbbbbbbbb8266bbbbbbbbbbbb88f7"], 0x12) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r7, @ANYBLOB="87a33680d21e3730b8fc9a5ebfbe54f5a5bde10623d6315eb95ca83b28b69c573b4395ca0eb4383f962d54aef475e410040e54742d2c2ded9891bc4b393607420e6a9303b30581ff70343a78176685486ebf2ae255e907e9ecc10ddc058ac8762823e5aff0391f0469fedd56b9bfd78586cfde7d5098a1b5c475"], 0x3c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r9, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r9, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/63, 0x3d}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/247, 0x8}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f0000000a40)=""/240, 0xf0}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000e40)=""/139, 0x8b}, {&(0x7f0000000d40)=""/239, 0xef}], 0x8, &(0x7f0000000840)=""/216, 0xd8}, 0x7}, {{&(0x7f0000000940)=@ieee802154, 0x80, 0x0, 0xfffffffffffffe8e}, 0x9}], 0x2, 0x22, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10) 20.24044349s ago: executing program 3 (id=1271): socket(0x2, 0x80805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) write$rfkill(r5, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x1, 0x1}, 0x8) vmsplice(r5, &(0x7f0000000c40)=[{&(0x7f0000000400)="6f1e276ca370a2520de548d3e44ee1e85e15325cb34ade2d862ff0a312ca05c7fd37a1847ec78670d0de8dfb6908bdf0c8f569806db2ba255b09280e2f7cf506704a2fd48e9586aea6b4d6066d37135ceacc2d5f5e3147066eb124ddf07e88d563d5fe4e37545ad489116418c30c3856a3d4ffa06d51d46b2ede05547f5c6e97fd033800f8c362abf4dae255c66df7fa852ed4334c8a43432760b75e9ffb2d1fb218bdea7253bf61f6a2bdb345b038b8191bfd07a3a7d67093742e97a44b63f4b82e2e17d255f215d8b100", 0xcb}, {0x0}, {&(0x7f0000001100)="a6", 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x30, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) shutdown(r1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cfd7000eaffffff1c0003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006001800128008000100736974000c00028008000300ac141400"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) 19.852153508s ago: executing program 4 (id=1275): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011000f14001e000bd8a34c0000000000000000", 0x17) (fail_nth: 8) 19.381941556s ago: executing program 4 (id=1276): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0xb4b, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17b6b, 0x51267}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 19.296245846s ago: executing program 4 (id=1279): syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x9, 0x3, 0xbf96}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000080)='\x00', 0x280000, &(0x7f00000000c0)={@align=0x8, {0x6, 0x4, 0x8, 0x4}}, 0x3ff, &(0x7f0000000100), &(0x7f0000000140)=0xfffffeff}, {[0x0, 0x3, 0x8001, 0xbeed]}, 0x200, 0x6b, &(0x7f0000000180)=""/107}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4044010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x75, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xc8, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10, 0x69}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000080) pselect6(0x40, &(0x7f00000009c0)={0x1, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x6, 0x8, 0x4}, &(0x7f0000000a00)={0x1, 0x46a, 0x1, 0x7, 0x8, 0xb}, &(0x7f0000000a40)={0x1, 0xffffffffffffff56, 0x5, 0xf450, 0xffff, 0xffffffffffff7fff, 0x8000000000000001, 0x1}, &(0x7f0000000a80), &(0x7f0000000b00)={&(0x7f0000000ac0)={[0x120]}, 0x8}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c00), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000840}, 0x4048081) preadv(r3, &(0x7f0000002240)=[{&(0x7f0000000d00)=""/102, 0x66}, {&(0x7f0000000d80)=""/138, 0x8a}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/251, 0xfb}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/189, 0xbd}, {&(0x7f0000002100)=""/45, 0x2d}, {&(0x7f0000002140)=""/232, 0xe8}], 0x8, 0xc, 0x7) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000003b80)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003b40)={&(0x7f0000002300)={0x1804, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "885ae972"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "5be41319c0c422145f93bf08cc507caa3c2879c1cf624a635e05d4ce7f693e7efdf11bc493fd86c6da376bbd70275069310538fb614f5f1733b65542470ea4448f5a75195e921dd9adc0642a910200826cbdeaed3044ad9cf0f019f3b68bd71956a77495e0fefc67e6c03384787090d95bcafe40d4e4cba250627ac34a15fa631d996b84d4a1152f4fcdbab991bba5d8703dee6f9e827e8e919629b859bc678c6cdb7bbca4e77de2d8c04c6eb1e55bc3c497494257ef9f459f00fb59f16f718555231b9226e00c7f5316"}]}, @ETHTOOL_A_FEATURES_WANTED={0x160, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "f5803d326e277b92f3ff22b8915c5c91517f19e5061cf01c1f174cb9eb3dd7da7132b03696932352c1753a3abb5d68a030c53068edfb1d2eba08ecb495b665eaaa98b2c8f201ee207dc338c778f6c2729e86c640cf08e305248c4cd3dc785ed2bd1c1f54993a132680616a14cffad26704cfbb87173474fcfea9f4b817646969927c7dd76844ee833c19f0a1e97c51172ca759a585369cef2636f8c97434619d2ac6701fa8f3e95bbb5602b9e85d4ad2280e5789fa0262b707015a6a7800f32d56d2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_team\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[,]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "ab3bf9a52d7c8fcbd45d852b49b7947d43acfff9763ce4ccab84cabc1a79ac58861cb836a350f561a0a1f590"}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x62, 0x5, "7a54b6052da533e9e538c75f24f1a0a78a666311ac248708f1e3be9a313f410dde3c49705c4c90b4e0915f864b2f7fdf4f66b858cf2100726d30a9a6137c2669f8d1f891b866615baf2eeec0d9e17dde075b42f26e3ef10cbb211a996c88"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$:%/\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8f}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-.{-+\xc8\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "2cad0be39936d9811a1aed373c412bda89bb9fc4e2cdd1b385b0117b41474e8c7c2ccf7fcfca49dc2d162a279a99478a4c15f219253b7bb9af38078328af27b1919e490edd1f113a7616918f019a2f57abc9741d3cf51850ddbddfd58e326c81f4cacf4360eefb5a58fc8e55b32848"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1380, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "fbbbf7ce271f59ee34487397f5ebcabc35dff7994e70056ed508893af134f11c8ec4c8f91557264ee1cbf24d0d3295d4623e7265642d306cee00a67169af075d4e101e28d1d73e788798dfd99e5a347ce9dbc8d8de963c73aa6454cb9c005599eec4fc9a150e5770f00a27f28a8c35036323d079e9bd28a12482e9d1f02551c77ace095197b2fc576623c55c1f92f8c7fbcf0c55076683282d9713a03413236c4122011f91fcbf735f918f5a49a2907eeb6bc08c8aec64759a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "da85ea03692496ef69c78e1ea482587dc2262150540bd4671bdfc54bf53d03a71cd83bdbbeb89c3a51c1a169c37e2949d6565868e293c0cfd1537ebdc8f6e133b92c6991b0bf274b11be303f7aac65f10e42cd775601f09b19446fafde1a1e8033f1b1435062765df3d2fd2510278fba03163515fad31fad82c898beaa4aa3d1f47b8c0086120f4dcafe1051a598ff314f58b93d014213de367580737fdb044ec07ede41f9ee9c8e87cba67ba2b9f419ed53fc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6f}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "2a5a421a9ccf1628726fcdc09dccff8aad24bbdd8dcc79fcfd8830f3adcfe0937d39484a1d40ce89bd28aba98aaf915e8d841b2a8e327cbe658ae48f8cea3455a7358389023a73d934831b9fb229e47554309a96ed87131c6ac7aca5e1b03af55be99bfd02b33c1380e14596846b365b0ea831e3bc327df59f0e49824f1518f7573f5a9cab0db7826de7215ac37a39fd298ea1498896e432397d26600d89e6c80aab25d739c23b4761973cdcd640fa54ca4244b822d787125718"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "1ba60764e3f19d900fa8106095328575c1ac73553ec2da971e78182a7e16494b1e7dbaf1e929e5f8a2b0e703ed44f09b0c481ef013abeee3b134fdf8c853739a2191897bdb34e284c2f5624f2c0e16a8fd8f2dc58238a3bc4169be5b76dfbfc599ab531ed624143a60faa708a92d88872f418409abcb0167626fed8fd9268545eb1a66d14c3f175cf964045775e3217e9e4829d1f803837120711cad18c6dcc1f7573fb2f1ac8c76c74c96107343f22dba80e1333601f0f0dc0701ffb1281d56053ae116e75d209aa4a216983e0f3abd762f12d43448653c674d2590b34f2502d7bcd6a42233ab361c157f8c"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x1804}, 0x1, 0x0, 0x0, 0x60008005}, 0x0) recvfrom$inet6(r1, &(0x7f0000003bc0)=""/26, 0x1a, 0x20, &(0x7f0000003c00)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x2}, 0x4}, 0x1c) r8 = socket(0x27, 0x5, 0x5983dfd8) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r9, 0x118, 0x4, &(0x7f0000003c40)=""/4096, 0x1000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000004d00)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc40c4}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000004d80), r1) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000004e40)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x5041}, 0x40004000) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000004e80)={r8}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000004f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x1c, r12, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x404c010) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) 19.111564781s ago: executing program 3 (id=1282): r0 = socket(0x11, 0xa, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24) 19.062196265s ago: executing program 2 (id=1283): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x19, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x70}, 0x94) (fail_nth: 18) 18.556320212s ago: executing program 3 (id=1284): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510000006000000180000000500000000000000060000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000faffffffb702000008000000b50a00000000000085000000190000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x7f, @vifc_lcl_ifindex=0x1, @multicast2}, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r3) write(r2, &(0x7f0000000280)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800050001000000", 0x34) 18.509748953s ago: executing program 4 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 18.345376423s ago: executing program 2 (id=1286): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011000f14001e000bd8a34c0000000000000000", 0x17) (fail_nth: 9) 18.272503976s ago: executing program 1 (id=1287): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf2501000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40001}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x8fb, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x84) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000100)={0x40000006}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000000)="fc", 0x1) splice(r9, 0x0, r7, 0x0, 0x1, 0xb) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r11, 0x0, r11, &(0x7f0000000500)=0x3, 0xff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x7e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000700)=r7, 0x4) 17.703940353s ago: executing program 2 (id=1288): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000301010300000000000000000a0000041400198008000200800800000800010048010000100001800c0002800500010022000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c00"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011000f14001e000bd8a34c0000000000000000", 0x17) close(r1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 17.703356915s ago: executing program 4 (id=1289): r0 = socket$inet_sctp(0x2, 0x4, 0x84) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8e5}, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1ffc) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002a00)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) accept4(r0, 0x0, 0x0, 0x0) 17.637906732s ago: executing program 3 (id=1291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00001111000f14001e000bd8a34c0000000000000000", 0x17) 17.589083229s ago: executing program 1 (id=1292): socket(0x2, 0x80805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) write$rfkill(r5, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x1, 0x1}, 0x8) vmsplice(r5, &(0x7f0000000c40)=[{&(0x7f0000000400)="6f1e276ca370a2520de548d3e44ee1e85e15325cb34ade2d862ff0a312ca05c7fd37a1847ec78670d0de8dfb6908bdf0c8f569806db2ba255b09280e2f7cf506704a2fd48e9586aea6b4d6066d37135ceacc2d5f5e3147066eb124ddf07e88d563d5fe4e37545ad489116418c30c3856a3d4ffa06d51d46b2ede05547f5c6e97fd033800f8c362abf4dae255c66df7fa852ed4334c8a43432760b75e9ffb2d1fb218bdea7253bf61f6a2bdb345b038b8191bfd07a3a7d67093742e97a44b63f4b82e2e17d255f215d8b100", 0xcb}, {0x0}, {&(0x7f0000001100)="a6", 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x30, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) shutdown(r1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cfd7000eaffffff1c0003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006001800128008000100736974000c00028008000300ac141400"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) 17.576302703s ago: executing program 0 (id=1293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000500), &(0x7f0000000540)=0xfffffffffffffcd6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000304020000000200000000000400", @ANYRES32=0x0, @ANYBLOB="00430000800000011c0012800b0001006272696467650000120002800600090022760000"], 0x3c}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x40408c1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x44}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4080) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x9000000}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x102, @private1, 0x5}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000000701ff79c3f70a0000000007000002"], 0x14}, 0x1, 0x0, 0x0, 0xc012}, 0x4000040) r9 = socket$inet6(0xa, 0x2, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$nl_route(r11, 0x0, 0x40840) writev(r10, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1) 17.325336753s ago: executing program 3 (id=1294): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x82316000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480)=0x5035, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000005c0)="388fcd0a4423f9afb72befd252bb5eae1c5eb4587b0cc8e369e6f877a8a58448", 0x20}], 0x1, 0x0, 0x0, 0x20004800}, 0x4800) syz_genetlink_get_family_id$nl802154(0x0, r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="a000308014000400403a050c5baee2004ef2b6d713459a7a8000018008000100000000001c00038008000200020000000600010002000000060003005d55000005000200030000003f00038006000300a3aa0000080002000000000006000100ffff000008000200010000000800020002000000060003000000000006000100ffff00000c000500010000000000"], 0xbc}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fcc4df25030000000c00020001000000000000000c0005000200000000040000080001000000000000000300753d7225000000007884099186ffc7028f3d1dffee1d4cc8943a43a1d74282daf44c71f4924190e493ce"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x702b396c7b056326) 17.320920225s ago: executing program 2 (id=1295): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000240)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000240)=0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xb1}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x18c9d50b, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xb1}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x18c9d50b, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 17.130696706s ago: executing program 2 (id=1296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000019000100fcffffff01dcdf250a000000fd04000b0000000008001e00010000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x200000d4}, 0x4050) 16.8654711s ago: executing program 2 (id=1297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="0203fe020e00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff030005000000000002000000b21414aa00000000000000000200080008000000340000000000000002001300ff"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd607428dd001800018900907800ed5d00fe80000000000000000000000000008cad02545ae7dbd8c6430aa5ea71510a4db9cc8b9b8f63a9a515109076ebc2d0bb881adcc88ab23fe5731aa7d1adfc156a123666f20d31ec4c5fb937fa0e241110074bb35b92fffdb2f53fe7154b4e1b29fbb3de58e620c914aefa6edbfc5bc4a6142ec26b08059650e73388c2ca3e31cb499eae8e8c4ac6d9ed535f1690d086fb4046f028b66ef7d8130a90526225dba7b3b95dd65cd8f32d453ccbdf89ee888269380782d0324c7ccff7006187"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff8, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000000}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a000000004e110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e20"], 0x0) 16.819560917s ago: executing program 1 (id=1298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff02000000020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x5000000) 16.764084361s ago: executing program 1 (id=1299): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011000f14001e000bd8a34c0000000000000000", 0x17) (fail_nth: 10) 16.657610251s ago: executing program 1 (id=1300): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800ffc085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) 16.656185883s ago: executing program 4 (id=1301): write$tun(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000800000003000000ffff000045040fc0006500000402907800000000e0000001110190780a010100c7645fc3ae9d593f9279b57bd0638df0d70c38b5f2325f351c836a5c99ee51c3c1a19ab7b6aa18b93bf86ba6ae2466e3fcaa9fa457307a87320275e92d0bc3909dae2d6f1cc79ade5afc7daeddf1796ea8ba37e0f52c2dd33d406d9af3313af25cef508e05f77a3f6faeeeda2748ef2957ec8917388d7416a7f9e6736c7f5819ea64645d8d332953d418d08fdb39f3e64f12b0d7205201db04721b9194d62623049aa715b9ff79a756d0867c2bcf2b7743c7e4ebb2500d3458aefbdaf820e8f71fe759c3a3c412ec42072e8b7ea70ea56a77314dc7c5338f1b648bfd6d163c8b2293235f3f3143d1422603a985ad5e75e8409fcf20ec37bd15285b90e272a3dac39c96370c39d35df6d851f0ed6a0ee03fdc1242ab1798627fbb01750b790b9ba89cf8de9885776768e90d507b125678a293d8732894fed9adf8fe294f1280d6c6f33e4a0edb16722a35575a91596f25caa34fe040ccf1f0ba06ab15192666039869cfe38253ff3b2d7842bc31540c874e2f77450f9a0bbf9a7995a4145c51465e594b5185f44877fbc52e37e4288c8bdb37bccb22115cdbaf0d25ce0792716fbd2f30e78f706f3ad4df813991cc95391bff951fa6b03b6b2d95728397c1f6064a8db0146d4e795135d1a57d134517123a8cd26a3b5a176e72566bf863d90bb081411ff98b5666d658686df2c751e46537cc31a440a44a64055d37aab592a2eaeff9aad5320d8554c850870511133f83fcd42c639eac3ab5e2a6d5f5b7c02542ebe5e8d98b27a300d71ce3ddb3df2e04f4a616a7465de6d9239b7ecbd0d8ccb13d76ff1a84edcea63667afb2fd9f980293331261f5b45c321c2b575c767478368a2a67fe7e990b836a70827b78a6163e10d11ec115e2881cbf98d5dbaa8218ce28e8e62ef0285347b8051f44c97b404ef1fefea382007b7b7971ae5b43a7b92a3909a6d893bcefb6d82dbb02c080001a29f40f2514bd43ad7b4179756accbef1286b8d9a1720f0aa191b7099cc87eb4ef3d3a5e8a1e265204b1b4412fd6b5e02779eea609d65aeec8642e5463256bf5bc331183f4c8c316b4873f901c9ed75e800dee2eaa3ba4ca1358cd9637ae009e5b2d3e45c253f41de02c42a7f25f90b5e6b5597d027b0997cbc1032539cc66690ba1c33af9fbfb6bf65631a50f3f06b5197170555d8892e28ff274504792e4db5f1dd461f06bbabe3cf92f89225a07a5b9f296b1e9ac812530a6e1b44c68554b7129d6c121617fc8a3f6ce68ef48442bfdb08b0b7478c49f105cce850ed01fbbb61005c0ec2ee01003fb72f6e57495206412f490c7e9972a6b0d0cb3fb5b3cc83cd89eae6a584adaabd8342d52827849984f9d7927813f97025bdfeabca76530c20a0b19d3422e08a24aebf85f61ecd49a73f252bddea5a61e57953293a89f63a39336a0c71f9415efaab11ecd8a4c67d8af319a8afbcc7054acaac8bce5e2690e795fe899bde257937a810712570e7537362e852aa9e9177b0a8413ec53d0c46eb3dbfd32a3f1e0bd22709952ca877e7d1d916be0505960f27d256e1a2d755a21ec9bb46fa23ed348536d2fb961b193cae9bb2782c8c0f7434579709a66424762fcb8c09cbd57ef4f9e763d305ecc7409cfa76f839ba18d4a72249996d23883765f2aff6142d666d8d8397b828bab23932601ae0fc91953768ef692c0eef4ce53a53913ec1dbcb8ed2072d42b42de956ad34876980b108171b40ffba7b3f66946ba3baed74012fb808fb99a82ee3457bf506cea1c58869989044f38800366cbf48a5e2a82b5965d4d294d597d0f4b43044df0cfec961b0198bb5aed16cd9bef07199182d65f2694347c34016578c504ffc753015aa8b893e94a742ddf810bedb27184b893510bfdc93f5ba3ea9243f83e5d59d5d38d82ca54db76e3cecec033a19e918634b3770df8221d41fce17c0568101b45f0046c523c05f994cdb9f00cb0f93f7d7b86e6a11385fd7bc00b2c38fccc79bb4ba64513a052c33009a6c7c825ccfaa15b8f0797d37c1733c8ad9741f4f6b48887f42556695d28710e7756fa4167880219ca87565c960828fcd894aeb0fa5712c06d32ed6fcee4cf4c709e4fcf31a469d807d3c478302cef33ebefe419c1b5a017abef23584f04b87a9299ea77b51159190c688a950bfb34ad2533dadee91b260419e0016a59ed38b4a9d7781b92ec6b182760c6d9dcd8ad6f8f17343e9492b91415e638f00456e0b8dab9970efad1265378a16aded542d38fbc65a661a4d4328738f71a456e61ef5c8a05e78b64fe10f56793726505ea447e0b2698d2d3291c81f123dbba92eada37ef5a8a8ec7f8a4f3d26bffccbd1d0bebdc3f3742ef7e5a2754ae51aba7a9d9cfa0ff8aecc8c9ac6f4d97024620ec260a8115312da1fce4c1b40faf3750ae0c0915d4e5b738eb01b4effa1508da21514e07c92e90bb242ac6d77db9c67cd1d2c01b21e3fc8f1adadab1ca9bc616929f3f1007ab69baf3c0184c727b660c151e08f4981f76a1280589952e36acc9b3c17c6f664344c116f2fe02b7fb81ca974415c62d0079632122226fef098b9ebc1391e38770080cf743b0c2dd21ed2e088b834f425b5409847628a8d27ae9c8706155e85dee6a437a09271166b8a9aee9deed3268e77bd4fd7eda123a6f1e0dd2e6f6785a20cfcf56f82d96344382c7eefe97cd0a258c24daa700693c2dbfe3010219fa2db274560f7bb8955847fea45052fce44a41d1c9434dbc66454a40daec9cf7b9e1b8c79811ab33426780f74b847c03992dd836ae9d29e207ebddcd14aae4dab4b6d3774d6d9e78c2d82c225ad712cd436fd939d6ab2897190373a36b3a9bd2dccc2b1379faa1c18bd5509931e6cdbb680cc4151506aa153bfcd54ea605cbd5c11a551a180cb71d11789a5dd0925168be646cf7cd491b28546c1"], 0xfce) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 16.621763215s ago: executing program 1 (id=1302): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x40000000000000d8, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '.\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xac546980ac8b25a5) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x1c}, @void, @llc={@llc={0xff, 0xe, 'j', "8ceb394d0c8761e58396e5240f01e2db803bcf46912c9717eda37fa48c89769973f1bbd50fe6546b369c3eb93fb4e0fbd6a03a096c4638de42f800cd51278c73946b3d55e298e5470000d54ba3754062c9492107ed3949ea740fa0ef4ee978"}}}, 0x66) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) 16.532753429s ago: executing program 0 (id=1303): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0xf8, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@private2, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x6c}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000004, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}}, 0xf8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 15.643624423s ago: executing program 0 (id=1304): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) (async) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="a15e5c1e20aa6e1bcacbde659b30ea44aadd7d9f34be36cf5e09867aac4e9b59e3720ac42a70f28237cd52613e45690d28d18b03d8513e2e18f41306a65cd70cc50655425aaec01aa87cc513f90cc4f8132865a1a01fa4012c3195672bbf545c5947626021c84f41d02af597f38f20ee2aafc20199b6e51a113997dfb1d27f6a4e47e51987118d56fac870bb", 0x8c}, {&(0x7f0000000340)="a19b352927fd77a19858876b64ff1c06b8b5c06548807e650a8552f22c93c119d2782a9a80875e55cb73cbae1f0e00d8d746e2aa2b2cd81a91507980a51d7feb920efa745c49199714c37814c8bc14b967cc87ba8154d58403a59c8669ce6211968e31f1b8c0062a1a8bb4f148a47d87f388bed1f7e5a1d186e2eaf714254ab8f53fac447db701dbe48fd49436027bb50f74edaf2a73652df89f8917a0761c78a3c664f5f2b79bca68d6", 0xaa}, {&(0x7f0000000540)="0c8428699218a13be53957b5e4fe3f14e633ecf815dd85f4f4a1d4c2158cb09f", 0x20}, {&(0x7f0000000580)="ca4f7d67136c0075aabf2b9c293de99aac79f466646fc9a0762733a03cc91adb5f7d63a1de31ca8fdcdec233391d5293cbaa767ea235100f74e291b1f88e8660307a99fe3ca5b60bbfa39e61f49931966d6dd7f2dab3c257d06f8635921d28452479225ded3cada396cdd0453542cc8d5c60374b3f6c789d0fc8dcebe98023742e0b5ffea6380bd3a4507519d97c847e3f4ec53a46c14aa73df236f59e3fe9a48ed0d7fa3d564faa65a305b816081a72aae600e88a777c41cb09", 0xba}, {&(0x7f0000000640)="583f0fb622d82c70a200dbcd7afefafed10c6a932535eb92c8fa89e58071fe69a15b27f05df26148268d7904efd95df5d61da0d089d0c97ba5b80a61a6c97a1811e6c08e5772fba59f62bd9f8ef3f14bd0e3b365a8cc1d9bd1a2d0d3b445a64978d8427d1e84b891d4624cd8437a95df8132270331096779306ff8a7d1f2c8d996f45f59d100b9d951f52ab7f1a8a4ab05527e7458df3b9f5b49b837f138058cb4ed8df0b4d03813a3020327fb641e29213d176fd43c24f6a321c8b5d064b0f607c236dca34651d250face97d83897b6532bc510633586fc1edaa32b2cbcd919f5833d3300b30dbac526", 0xea}], 0x5}, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 15.55725507s ago: executing program 0 (id=1305): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x20000000) write(r0, &(0x7f0000000040)="4c00000011000f14001e000bd8a34c0000000000000000", 0x17) 15.540633555s ago: executing program 0 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="bcdbb59469b252e9984301c88c6e70ea687f571a8c3b63370214c03a6578fea61d471eb71fe34899d916b3730406ba6a0f03132c9fba80e740939c56178efbace179decb9a9d05cf0fdad8"], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/47, 0x2f}, 0x5}], 0x1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x2200, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8044) r4 = socket(0xa, 0x80000, 0x3b) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) 15.327622485s ago: executing program 0 (id=1307): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x204, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xc8, 0x45, "eaf9121141df669e76f4706828b89320f916d9ac68612bacfe3ac3ae73d6a510e2a63c7aaa6d3cd7972268b31728c8e83fe9a106043596de8296ec5a45a7c3912e974334f29b87a8c5d4f0958caaf56c8adbb38fc516bb55666a94cefcb4c8fed550c7f2094f7d1311fcdd586ce127058277e9599b3f51a183177d7585401cddabbdd9fc4f0e2a3b6c0435cf465f96900953b3ad6e3af3e194bd4c2bd7062a27767d6c353dd247050b5c896cddb1b832219541cca2113e061c5a5b582b98410a308de9a4"}, @NL80211_ATTR_TESTDATA={0x76, 0x45, "534029528bbf69a0551ab31d3d53a63573e1abb4e9eb4115b3c13a7dc0fd0bc1d3c2026ed2c01361e18fd0147d92e7eb00e4c1fcc0566abd745d81474d170eb0c88bcae610ef649c6c42aa16f90173cf8dd2f1398629816a37491cac179a66e3581467caeb08fcdb13be976d61d099b31cc5"}, @NL80211_ATTR_TESTDATA={0xad, 0x45, "c958274d523ad6afc688d66789f3017d5232f7f0bd2c701d565b993c77fccf99702f2a66cb270ab069bef33b76ca34751d989218b9fb87837fb9b8f73ea57f738b7e50d5a76f304af092e76d39373898cac4041d841e676231e4cf8f1442abe9033246bf0f053eb8a981a57c7df655c8d9af192199f578916a91afa2c55253fd8d2d43fef2f41e2d97f8c6523e482249738f5f7c9d54793d6ddf3a44d1de2154bb23b866b001e78c79"}]}, 0x204}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@generic={0x3, 0xff, 0x2619}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x10) socketpair(0x9, 0x5, 0x3, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x44800) socketpair(0xb, 0x800, 0x6, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r3, 0x26, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x10, 0x5}, {0x40, 0x7}, {0x9, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x2}, {0x8, 0x1}, {0x20, 0x1}, {0xb, 0x3}, {0xfb, 0x7}], "842f873466a08904"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x70, 0x1}, {0x6, 0x7}, {0xff, 0x2}, {0xe, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x74, 0x2}, {0x9, 0x1}, {0xd0, 0x2}, {0x7, 0x6}, {0x2, 0x4}, {0x81, 0x3}, {0x9, 0x6}, {0xd, 0x3}], "e016dc81375ff73d"}}]}, 0x70}}, 0x44100) socket$inet6(0xa, 0x4, 0x7) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r4) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000940)={r1, 0x9}, &(0x7f0000000980)=0x8) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000b00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20048050) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000f40)={&(0x7f0000000d40)=0xfa, 0xffff, &(0x7f0000000d80)=[{}, {}], &(0x7f0000000f00)}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), 0xffffffffffffffff) 1.510477443s ago: executing program 32 (id=1302): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x40000000000000d8, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '.\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xac546980ac8b25a5) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x1c}, @void, @llc={@llc={0xff, 0xe, 'j', "8ceb394d0c8761e58396e5240f01e2db803bcf46912c9717eda37fa48c89769973f1bbd50fe6546b369c3eb93fb4e0fbd6a03a096c4638de42f800cd51278c73946b3d55e298e5470000d54ba3754062c9492107ed3949ea740fa0ef4ee978"}}}, 0x66) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) 1.466032863s ago: executing program 33 (id=1297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="0203fe020e00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff030005000000000002000000b21414aa00000000000000000200080008000000340000000000000002001300ff"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd607428dd001800018900907800ed5d00fe80000000000000000000000000008cad02545ae7dbd8c6430aa5ea71510a4db9cc8b9b8f63a9a515109076ebc2d0bb881adcc88ab23fe5731aa7d1adfc156a123666f20d31ec4c5fb937fa0e241110074bb35b92fffdb2f53fe7154b4e1b29fbb3de58e620c914aefa6edbfc5bc4a6142ec26b08059650e73388c2ca3e31cb499eae8e8c4ac6d9ed535f1690d086fb4046f028b66ef7d8130a90526225dba7b3b95dd65cd8f32d453ccbdf89ee888269380782d0324c7ccff7006187"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff8, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000000}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a000000004e110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e20"], 0x0) 1.421432855s ago: executing program 34 (id=1294): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x82316000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480)=0x5035, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000005c0)="388fcd0a4423f9afb72befd252bb5eae1c5eb4587b0cc8e369e6f877a8a58448", 0x20}], 0x1, 0x0, 0x0, 0x20004800}, 0x4800) syz_genetlink_get_family_id$nl802154(0x0, r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="a000308014000400403a050c5baee2004ef2b6d713459a7a8000018008000100000000001c00038008000200020000000600010002000000060003005d55000005000200030000003f00038006000300a3aa0000080002000000000006000100ffff000008000200010000000800020002000000060003000000000006000100ffff00000c000500010000000000"], 0xbc}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fcc4df25030000000c00020001000000000000000c0005000200000000040000080001000000000000000300753d7225000000007884099186ffc7028f3d1dffee1d4cc8943a43a1d74282daf44c71f4924190e493ce"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x702b396c7b056326) 1.375932683s ago: executing program 35 (id=1301): write$tun(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000800000003000000ffff000045040fc0006500000402907800000000e0000001110190780a010100c7645fc3ae9d593f9279b57bd0638df0d70c38b5f2325f351c836a5c99ee51c3c1a19ab7b6aa18b93bf86ba6ae2466e3fcaa9fa457307a87320275e92d0bc3909dae2d6f1cc79ade5afc7daeddf1796ea8ba37e0f52c2dd33d406d9af3313af25cef508e05f77a3f6faeeeda2748ef2957ec8917388d7416a7f9e6736c7f5819ea64645d8d332953d418d08fdb39f3e64f12b0d7205201db04721b9194d62623049aa715b9ff79a756d0867c2bcf2b7743c7e4ebb2500d3458aefbdaf820e8f71fe759c3a3c412ec42072e8b7ea70ea56a77314dc7c5338f1b648bfd6d163c8b2293235f3f3143d1422603a985ad5e75e8409fcf20ec37bd15285b90e272a3dac39c96370c39d35df6d851f0ed6a0ee03fdc1242ab1798627fbb01750b790b9ba89cf8de9885776768e90d507b125678a293d8732894fed9adf8fe294f1280d6c6f33e4a0edb16722a35575a91596f25caa34fe040ccf1f0ba06ab15192666039869cfe38253ff3b2d7842bc31540c874e2f77450f9a0bbf9a7995a4145c51465e594b5185f44877fbc52e37e4288c8bdb37bccb22115cdbaf0d25ce0792716fbd2f30e78f706f3ad4df813991cc95391bff951fa6b03b6b2d95728397c1f6064a8db0146d4e795135d1a57d134517123a8cd26a3b5a176e72566bf863d90bb081411ff98b5666d658686df2c751e46537cc31a440a44a64055d37aab592a2eaeff9aad5320d8554c850870511133f83fcd42c639eac3ab5e2a6d5f5b7c02542ebe5e8d98b27a300d71ce3ddb3df2e04f4a616a7465de6d9239b7ecbd0d8ccb13d76ff1a84edcea63667afb2fd9f980293331261f5b45c321c2b575c767478368a2a67fe7e990b836a70827b78a6163e10d11ec115e2881cbf98d5dbaa8218ce28e8e62ef0285347b8051f44c97b404ef1fefea382007b7b7971ae5b43a7b92a3909a6d893bcefb6d82dbb02c080001a29f40f2514bd43ad7b4179756accbef1286b8d9a1720f0aa191b7099cc87eb4ef3d3a5e8a1e265204b1b4412fd6b5e02779eea609d65aeec8642e5463256bf5bc331183f4c8c316b4873f901c9ed75e800dee2eaa3ba4ca1358cd9637ae009e5b2d3e45c253f41de02c42a7f25f90b5e6b5597d027b0997cbc1032539cc66690ba1c33af9fbfb6bf65631a50f3f06b5197170555d8892e28ff274504792e4db5f1dd461f06bbabe3cf92f89225a07a5b9f296b1e9ac812530a6e1b44c68554b7129d6c121617fc8a3f6ce68ef48442bfdb08b0b7478c49f105cce850ed01fbbb61005c0ec2ee01003fb72f6e57495206412f490c7e9972a6b0d0cb3fb5b3cc83cd89eae6a584adaabd8342d52827849984f9d7927813f97025bdfeabca76530c20a0b19d3422e08a24aebf85f61ecd49a73f252bddea5a61e57953293a89f63a39336a0c71f9415efaab11ecd8a4c67d8af319a8afbcc7054acaac8bce5e2690e795fe899bde257937a810712570e7537362e852aa9e9177b0a8413ec53d0c46eb3dbfd32a3f1e0bd22709952ca877e7d1d916be0505960f27d256e1a2d755a21ec9bb46fa23ed348536d2fb961b193cae9bb2782c8c0f7434579709a66424762fcb8c09cbd57ef4f9e763d305ecc7409cfa76f839ba18d4a72249996d23883765f2aff6142d666d8d8397b828bab23932601ae0fc91953768ef692c0eef4ce53a53913ec1dbcb8ed2072d42b42de956ad34876980b108171b40ffba7b3f66946ba3baed74012fb808fb99a82ee3457bf506cea1c58869989044f38800366cbf48a5e2a82b5965d4d294d597d0f4b43044df0cfec961b0198bb5aed16cd9bef07199182d65f2694347c34016578c504ffc753015aa8b893e94a742ddf810bedb27184b893510bfdc93f5ba3ea9243f83e5d59d5d38d82ca54db76e3cecec033a19e918634b3770df8221d41fce17c0568101b45f0046c523c05f994cdb9f00cb0f93f7d7b86e6a11385fd7bc00b2c38fccc79bb4ba64513a052c33009a6c7c825ccfaa15b8f0797d37c1733c8ad9741f4f6b48887f42556695d28710e7756fa4167880219ca87565c960828fcd894aeb0fa5712c06d32ed6fcee4cf4c709e4fcf31a469d807d3c478302cef33ebefe419c1b5a017abef23584f04b87a9299ea77b51159190c688a950bfb34ad2533dadee91b260419e0016a59ed38b4a9d7781b92ec6b182760c6d9dcd8ad6f8f17343e9492b91415e638f00456e0b8dab9970efad1265378a16aded542d38fbc65a661a4d4328738f71a456e61ef5c8a05e78b64fe10f56793726505ea447e0b2698d2d3291c81f123dbba92eada37ef5a8a8ec7f8a4f3d26bffccbd1d0bebdc3f3742ef7e5a2754ae51aba7a9d9cfa0ff8aecc8c9ac6f4d97024620ec260a8115312da1fce4c1b40faf3750ae0c0915d4e5b738eb01b4effa1508da21514e07c92e90bb242ac6d77db9c67cd1d2c01b21e3fc8f1adadab1ca9bc616929f3f1007ab69baf3c0184c727b660c151e08f4981f76a1280589952e36acc9b3c17c6f664344c116f2fe02b7fb81ca974415c62d0079632122226fef098b9ebc1391e38770080cf743b0c2dd21ed2e088b834f425b5409847628a8d27ae9c8706155e85dee6a437a09271166b8a9aee9deed3268e77bd4fd7eda123a6f1e0dd2e6f6785a20cfcf56f82d96344382c7eefe97cd0a258c24daa700693c2dbfe3010219fa2db274560f7bb8955847fea45052fce44a41d1c9434dbc66454a40daec9cf7b9e1b8c79811ab33426780f74b847c03992dd836ae9d29e207ebddcd14aae4dab4b6d3774d6d9e78c2d82c225ad712cd436fd939d6ab2897190373a36b3a9bd2dccc2b1379faa1c18bd5509931e6cdbb680cc4151506aa153bfcd54ea605cbd5c11a551a180cb71d11789a5dd0925168be646cf7cd491b28546c1"], 0xfce) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 0s ago: executing program 36 (id=1307): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x204, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xc8, 0x45, "eaf9121141df669e76f4706828b89320f916d9ac68612bacfe3ac3ae73d6a510e2a63c7aaa6d3cd7972268b31728c8e83fe9a106043596de8296ec5a45a7c3912e974334f29b87a8c5d4f0958caaf56c8adbb38fc516bb55666a94cefcb4c8fed550c7f2094f7d1311fcdd586ce127058277e9599b3f51a183177d7585401cddabbdd9fc4f0e2a3b6c0435cf465f96900953b3ad6e3af3e194bd4c2bd7062a27767d6c353dd247050b5c896cddb1b832219541cca2113e061c5a5b582b98410a308de9a4"}, @NL80211_ATTR_TESTDATA={0x76, 0x45, "534029528bbf69a0551ab31d3d53a63573e1abb4e9eb4115b3c13a7dc0fd0bc1d3c2026ed2c01361e18fd0147d92e7eb00e4c1fcc0566abd745d81474d170eb0c88bcae610ef649c6c42aa16f90173cf8dd2f1398629816a37491cac179a66e3581467caeb08fcdb13be976d61d099b31cc5"}, @NL80211_ATTR_TESTDATA={0xad, 0x45, "c958274d523ad6afc688d66789f3017d5232f7f0bd2c701d565b993c77fccf99702f2a66cb270ab069bef33b76ca34751d989218b9fb87837fb9b8f73ea57f738b7e50d5a76f304af092e76d39373898cac4041d841e676231e4cf8f1442abe9033246bf0f053eb8a981a57c7df655c8d9af192199f578916a91afa2c55253fd8d2d43fef2f41e2d97f8c6523e482249738f5f7c9d54793d6ddf3a44d1de2154bb23b866b001e78c79"}]}, 0x204}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@generic={0x3, 0xff, 0x2619}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x10) socketpair(0x9, 0x5, 0x3, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x44800) socketpair(0xb, 0x800, 0x6, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r3, 0x26, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x10, 0x5}, {0x40, 0x7}, {0x9, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x2}, {0x8, 0x1}, {0x20, 0x1}, {0xb, 0x3}, {0xfb, 0x7}], "842f873466a08904"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x70, 0x1}, {0x6, 0x7}, {0xff, 0x2}, {0xe, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x74, 0x2}, {0x9, 0x1}, {0xd0, 0x2}, {0x7, 0x6}, {0x2, 0x4}, {0x81, 0x3}, {0x9, 0x6}, {0xd, 0x3}], "e016dc81375ff73d"}}]}, 0x70}}, 0x44100) socket$inet6(0xa, 0x4, 0x7) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r4) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000940)={r1, 0x9}, &(0x7f0000000980)=0x8) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000b00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20048050) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000f40)={&(0x7f0000000d40)=0xfa, 0xffff, &(0x7f0000000d80)=[{}, {}], &(0x7f0000000f00)}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), 0xffffffffffffffff) kernel console output (not intermixed with test programs): e RSI: 0000000000000001 RDI: 0000000000000003 [ 211.041699][ T9543] RBP: 00007f27b7479090 R08: 0000200000000280 R09: 0000000000000000 [ 211.041710][ T9543] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 211.041720][ T9543] R13: 00007f27b6826038 R14: 00007f27b6825fa0 R15: 00007ffc740620e8 [ 211.041744][ T9543] [ 211.458257][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 211.460804][ T9552] x_tables: duplicate underflow at hook 3 [ 211.547924][ T9470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.838055][ T9557] netlink: 'syz.2.893': attribute type 12 has an invalid length. [ 211.838080][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 211.958905][ T9565] netlink: 'syz.4.896': attribute type 3 has an invalid length. [ 211.963341][ T9567] netlink: 68 bytes leftover after parsing attributes in process `syz.3.898'. [ 211.963780][ T9565] netlink: 'syz.4.896': attribute type 4 has an invalid length. [ 212.211450][ T9565] xt_CT: No such helper "snmp_trap" [ 212.288071][ T9580] FAULT_INJECTION: forcing a failure. [ 212.288071][ T9580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.288108][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.2.900 Not tainted syzkaller #0 PREEMPT(full) [ 212.288133][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.288148][ T9580] Call Trace: [ 212.288156][ T9580] [ 212.288165][ T9580] dump_stack_lvl+0xe8/0x150 [ 212.288211][ T9580] should_fail_ex+0x410/0x560 [ 212.288243][ T9580] _copy_to_user+0x31/0xb0 [ 212.288280][ T9580] sk_getsockopt+0x1d7c/0x28b0 [ 212.288322][ T9580] ? __pfx_sk_getsockopt+0x10/0x10 [ 212.288356][ T9580] ? lock_acquire+0x115/0x350 [ 212.288379][ T9580] ? get_pid_task+0x20/0x1f0 [ 212.288414][ T9580] ? lock_acquire+0x115/0x350 [ 212.288461][ T9580] do_sock_getsockopt+0x2bd/0x7e0 [ 212.288499][ T9580] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 212.288545][ T9580] ? __fget_files+0x3a2/0x420 [ 212.288578][ T9580] ? __fget_files+0x2a/0x420 [ 212.288617][ T9580] __x64_sys_getsockopt+0x1a4/0x240 [ 212.288655][ T9580] do_syscall_64+0x166/0x520 [ 212.288679][ T9580] ? trace_irq_disable+0x3b/0x140 [ 212.288702][ T9580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.288726][ T9580] ? clear_bhb_loop+0x70/0xc0 [ 212.288754][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.288777][ T9580] RIP: 0033:0x7f463739e159 [ 212.288798][ T9580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.288818][ T9580] RSP: 002b:00007f46382ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 212.288843][ T9580] RAX: ffffffffffffffda RBX: 00007f4637625fa0 RCX: 00007f463739e159 [ 212.288860][ T9580] RDX: 000000000000001e RSI: 0000000000000001 RDI: 0000000000000003 [ 212.288874][ T9580] RBP: 00007f46382ba090 R08: 0000200000000280 R09: 0000000000000000 [ 212.288890][ T9580] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 212.288905][ T9580] R13: 00007f4637626038 R14: 00007f4637625fa0 R15: 00007ffc3d3e9ee8 [ 212.288940][ T9580] [ 212.675589][ T9596] Bluetooth: hci0: unsupported parameter 5135 [ 212.675614][ T9596] Bluetooth: hci0: unsupported parameter 4369 [ 212.675629][ T9596] Bluetooth: hci0: unsupported parameter 5135 [ 212.675642][ T9596] Bluetooth: hci0: unsupported parameter 4369 [ 213.016227][ T9609] C: renamed from veth1_to_team (while UP) [ 213.039056][ T9609] netlink: 'syz.3.908': attribute type 4 has an invalid length. [ 213.039084][ T9609] __nla_validate_parse: 1 callbacks suppressed [ 213.039098][ T9609] netlink: 116 bytes leftover after parsing attributes in process `syz.3.908'. [ 213.039726][ T9609] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.129074][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 213.647162][ T9633] FAULT_INJECTION: forcing a failure. [ 213.647162][ T9633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.647200][ T9633] CPU: 0 UID: 0 PID: 9633 Comm: syz.1.914 Not tainted syzkaller #0 PREEMPT(full) [ 213.647226][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.647241][ T9633] Call Trace: [ 213.647250][ T9633] [ 213.647260][ T9633] dump_stack_lvl+0xe8/0x150 [ 213.647300][ T9633] should_fail_ex+0x410/0x560 [ 213.647332][ T9633] _copy_to_user+0x31/0xb0 [ 213.647364][ T9633] simple_read_from_buffer+0xe1/0x170 [ 213.647403][ T9633] proc_fail_nth_read+0x1bb/0x230 [ 213.647439][ T9633] ? common_file_perm+0x20e/0x2b0 [ 213.647469][ T9633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.647509][ T9633] ? rw_verify_area+0x24a/0x4c0 [ 213.647545][ T9633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.647582][ T9633] vfs_read+0x213/0xa80 [ 213.647622][ T9633] ? __pfx___mutex_lock+0x10/0x10 [ 213.647650][ T9633] ? __pfx_vfs_read+0x10/0x10 [ 213.647686][ T9633] ? __fget_files+0x2a/0x420 [ 213.647739][ T9633] ? __fget_files+0x3a2/0x420 [ 213.647774][ T9633] ? __fget_files+0x2a/0x420 [ 213.647816][ T9633] ksys_read+0x150/0x270 [ 213.647854][ T9633] ? __pfx_ksys_read+0x10/0x10 [ 213.647885][ T9633] ? fput+0xa0/0xd0 [ 213.647924][ T9633] do_syscall_64+0x166/0x520 [ 213.647949][ T9633] ? trace_irq_disable+0x3b/0x140 [ 213.647972][ T9633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.647997][ T9633] ? clear_bhb_loop+0x70/0xc0 [ 213.648033][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.648056][ T9633] RIP: 0033:0x7f27b655e98e [ 213.648077][ T9633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.648097][ T9633] RSP: 002b:00007f27b7478fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.648122][ T9633] RAX: ffffffffffffffda RBX: 00007f27b74796c0 RCX: 00007f27b655e98e [ 213.648139][ T9633] RDX: 000000000000000f RSI: 00007f27b74790a0 RDI: 0000000000000004 [ 213.648154][ T9633] RBP: 00007f27b7479090 R08: 0000000000000000 R09: 0000000000000000 [ 213.648169][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.648183][ T9633] R13: 00007f27b6826038 R14: 00007f27b6825fa0 R15: 00007ffc740620e8 [ 213.648220][ T9633] [ 214.003383][ T9639] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 214.003858][ T9639] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 214.072483][ T9645] Bluetooth: hci0: unsupported parameter 5135 [ 214.072500][ T9645] Bluetooth: hci0: unsupported parameter 5137 [ 214.072510][ T9645] Bluetooth: hci0: unsupported parameter 5135 [ 214.072519][ T9645] Bluetooth: hci0: unsupported parameter 5137 [ 214.471216][ T9668] netlink: 14 bytes leftover after parsing attributes in process `syz.3.922'. [ 216.031641][ T9614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.430505][ T9675] FAULT_INJECTION: forcing a failure. [ 216.430505][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.430542][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.4.925 Not tainted syzkaller #0 PREEMPT(full) [ 216.430566][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.430580][ T9675] Call Trace: [ 216.430589][ T9675] [ 216.430598][ T9675] dump_stack_lvl+0xe8/0x150 [ 216.430636][ T9675] should_fail_ex+0x410/0x560 [ 216.430667][ T9675] _copy_to_user+0x31/0xb0 [ 216.430700][ T9675] bpf_verifier_vlog+0x3a2/0x900 [ 216.430749][ T9675] bpf_verifier_log_write+0x11d/0x1a0 [ 216.430778][ T9675] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 216.430805][ T9675] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 216.430826][ T9675] ? __kvmalloc_node_noprof+0x52f/0x820 [ 216.430858][ T9675] verbose_arg_track+0x161/0x610 [ 216.430892][ T9675] analyze_subprog+0x2cec/0x9e00 [ 216.430917][ T9675] ? probe_event_enable+0x6df/0xae0 [ 216.430996][ T9675] ? __pfx_analyze_subprog+0x10/0x10 [ 216.431020][ T9675] ? __x64_sys_bpf+0xba/0xd0 [ 216.431040][ T9675] ? do_syscall_64+0x166/0x520 [ 216.431064][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.431126][ T9675] ? call_instance+0x263/0x560 [ 216.431151][ T9675] ? rcu_is_watching+0x16/0xb0 [ 216.431178][ T9675] ? call_instance+0x263/0x560 [ 216.431202][ T9675] ? trace_kmalloc+0x2a/0xf0 [ 216.431238][ T9675] ? call_instance+0x263/0x560 [ 216.431262][ T9675] ? __kvmalloc_node_noprof+0x52f/0x820 [ 216.431289][ T9675] ? __kvmalloc_node_noprof+0x345/0x820 [ 216.431313][ T9675] ? call_instance+0x263/0x560 [ 216.431336][ T9675] ? call_instance+0x263/0x560 [ 216.431384][ T9675] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 216.431421][ T9675] ? bpf_get_trace_printk_proto+0x48/0x60 [ 216.431452][ T9675] ? bpf_tracing_func_proto+0x72/0x180 [ 216.431508][ T9675] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 216.431542][ T9675] ? __kvmalloc_node_noprof+0x345/0x820 [ 216.431566][ T9675] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 216.431592][ T9675] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 216.431627][ T9675] bpf_compute_live_registers+0x8d3/0x1ff0 [ 216.431676][ T9675] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 216.431715][ T9675] bpf_check+0x25ed/0x2e10 [ 216.431753][ T9675] ? ktime_get_with_offset+0x93/0x2d0 [ 216.431782][ T9675] ? __pfx_bpf_check+0x10/0x10 [ 216.431810][ T9675] ? bpf_obj_name_cpy+0x194/0x1e0 [ 216.431852][ T9675] bpf_prog_load+0x14d6/0x1c20 [ 216.431893][ T9675] ? __pfx_bpf_prog_load+0x10/0x10 [ 216.431946][ T9675] __sys_bpf+0xd0d/0xd90 [ 216.431980][ T9675] ? __pfx___sys_bpf+0x10/0x10 [ 216.432021][ T9675] ? __fget_files+0x2a/0x420 [ 216.432070][ T9675] ? ksys_write+0x242/0x270 [ 216.432107][ T9675] ? __pfx_ksys_write+0x10/0x10 [ 216.432145][ T9675] __x64_sys_bpf+0xba/0xd0 [ 216.432171][ T9675] do_syscall_64+0x166/0x520 [ 216.432194][ T9675] ? trace_irq_disable+0x3b/0x140 [ 216.432216][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.432240][ T9675] ? clear_bhb_loop+0x70/0xc0 [ 216.432268][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.432292][ T9675] RIP: 0033:0x7fe14f99e159 [ 216.432313][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.432333][ T9675] RSP: 002b:00007fe1507f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.432358][ T9675] RAX: ffffffffffffffda RBX: 00007fe14fc25fa0 RCX: 00007fe14f99e159 [ 216.432375][ T9675] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 216.432390][ T9675] RBP: 00007fe1507f6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.432405][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.432428][ T9675] R13: 00007fe14fc26038 R14: 00007fe14fc25fa0 R15: 00007ffcd8d4e7b8 [ 216.432463][ T9675] [ 216.712706][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.928'. [ 217.144930][ T9690] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 217.145026][ T9690] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 217.145197][ T9690] veth0_virt_wifi: entered allmulticast mode [ 217.170725][ T9690] veth0_virt_wifi: entered promiscuous mode [ 217.171390][ T9690] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 217.171522][ T9690] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 217.449336][ T9723] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 217.505072][ T9725] nbd: must specify an index to disconnect [ 217.565747][ T9729] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 217.579024][ T9729] xt_hashlimit: max too large, truncated to 1048576 [ 217.584172][ T9729] Cannot find del_set index 3 as target [ 217.687879][ T9732] tunl0: entered promiscuous mode [ 217.703858][ T9732] netlink: 'syz.0.944': attribute type 4 has an invalid length. [ 217.718495][ T9732] netlink: 9 bytes leftover after parsing attributes in process `syz.0.944'. [ 218.075623][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 218.100186][ T9761] veth0_macvtap: left promiscuous mode [ 218.987786][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'. [ 219.225410][ T9795] syzkaller0: entered promiscuous mode [ 219.225438][ T9795] syzkaller0: entered allmulticast mode [ 219.338504][ T9806] FAULT_INJECTION: forcing a failure. [ 219.338504][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.338553][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.2.961 Not tainted syzkaller #0 PREEMPT(full) [ 219.338578][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.338592][ T9806] Call Trace: [ 219.338601][ T9806] [ 219.338611][ T9806] dump_stack_lvl+0xe8/0x150 [ 219.338653][ T9806] should_fail_ex+0x410/0x560 [ 219.338685][ T9806] _copy_to_user+0x31/0xb0 [ 219.338716][ T9806] bpf_verifier_vlog+0x3a2/0x900 [ 219.338762][ T9806] verbose+0x11d/0x1a0 [ 219.338789][ T9806] ? __pfx_verbose+0x10/0x10 [ 219.338807][ T9806] ? lock_acquire+0x115/0x350 [ 219.338833][ T9806] ? lock_acquire+0x115/0x350 [ 219.338862][ T9806] print_bpf_insn+0x191d/0x2930 [ 219.338894][ T9806] ? __pfx_verbose+0x10/0x10 [ 219.338917][ T9806] ? __pfx_print_bpf_insn+0x10/0x10 [ 219.338944][ T9806] ? _copy_to_user+0x8a/0xb0 [ 219.338972][ T9806] ? bpf_verifier_vlog+0x55a/0x900 [ 219.339017][ T9806] ? bpf_verifier_log_write+0x11d/0x1a0 [ 219.339044][ T9806] bpf_verbose_insn+0xcb/0x130 [ 219.339067][ T9806] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 219.339088][ T9806] ? __pfx_verbose+0x10/0x10 [ 219.339107][ T9806] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 219.339133][ T9806] ? arg_track_eq+0xd9/0x7a0 [ 219.339165][ T9806] analyze_subprog+0x2cb5/0x9e00 [ 219.339192][ T9806] ? probe_event_enable+0x6df/0xae0 [ 219.339271][ T9806] ? __pfx_analyze_subprog+0x10/0x10 [ 219.339294][ T9806] ? __x64_sys_bpf+0xba/0xd0 [ 219.339314][ T9806] ? do_syscall_64+0x166/0x520 [ 219.339338][ T9806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.339403][ T9806] ? call_instance+0x263/0x560 [ 219.339427][ T9806] ? rcu_is_watching+0x16/0xb0 [ 219.339455][ T9806] ? call_instance+0x263/0x560 [ 219.339478][ T9806] ? trace_kmalloc+0x2a/0xf0 [ 219.339525][ T9806] ? call_instance+0x263/0x560 [ 219.339554][ T9806] ? __kvmalloc_node_noprof+0x52f/0x820 [ 219.339585][ T9806] ? __kvmalloc_node_noprof+0x345/0x820 [ 219.339609][ T9806] ? call_instance+0x263/0x560 [ 219.339633][ T9806] ? call_instance+0x263/0x560 [ 219.339676][ T9806] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 219.339703][ T9806] ? bpf_get_trace_printk_proto+0x48/0x60 [ 219.339734][ T9806] ? bpf_tracing_func_proto+0x72/0x180 [ 219.339791][ T9806] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 219.339825][ T9806] ? __kvmalloc_node_noprof+0x345/0x820 [ 219.339849][ T9806] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 219.339875][ T9806] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 219.339916][ T9806] bpf_compute_live_registers+0x8d3/0x1ff0 [ 219.339964][ T9806] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 219.340004][ T9806] bpf_check+0x25ed/0x2e10 [ 219.340041][ T9806] ? ktime_get_with_offset+0x93/0x2d0 [ 219.340071][ T9806] ? __pfx_bpf_check+0x10/0x10 [ 219.340099][ T9806] ? bpf_obj_name_cpy+0x194/0x1e0 [ 219.340135][ T9806] bpf_prog_load+0x14d6/0x1c20 [ 219.340172][ T9806] ? __pfx_bpf_prog_load+0x10/0x10 [ 219.340221][ T9806] __sys_bpf+0xd0d/0xd90 [ 219.340253][ T9806] ? __pfx___sys_bpf+0x10/0x10 [ 219.340289][ T9806] ? __fget_files+0x2a/0x420 [ 219.340337][ T9806] ? ksys_write+0x242/0x270 [ 219.340374][ T9806] ? __pfx_ksys_write+0x10/0x10 [ 219.340413][ T9806] __x64_sys_bpf+0xba/0xd0 [ 219.340439][ T9806] do_syscall_64+0x166/0x520 [ 219.340464][ T9806] ? trace_irq_disable+0x3b/0x140 [ 219.340486][ T9806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.340516][ T9806] ? clear_bhb_loop+0x70/0xc0 [ 219.340546][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.340569][ T9806] RIP: 0033:0x7f463739e159 [ 219.340590][ T9806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.340610][ T9806] RSP: 002b:00007f46382ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.340636][ T9806] RAX: ffffffffffffffda RBX: 00007f4637625fa0 RCX: 00007f463739e159 [ 219.340654][ T9806] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 219.340669][ T9806] RBP: 00007f46382ba090 R08: 0000000000000000 R09: 0000000000000000 [ 219.340682][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.340696][ T9806] R13: 00007f4637626038 R14: 00007f4637625fa0 R15: 00007ffc3d3e9ee8 [ 219.340732][ T9806] [ 219.932991][ T5636] udevd[5636]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 219.957029][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 220.113236][ T9817] syzkaller1: entered promiscuous mode [ 220.113265][ T9817] syzkaller1: entered allmulticast mode [ 220.323156][ T9833] syzkaller0: entered promiscuous mode [ 220.323184][ T9833] syzkaller0: entered allmulticast mode [ 221.985980][ T9912] netlink: 'syz.4.980': attribute type 2 has an invalid length. [ 222.088901][ T9917] netlink: 'syz.2.979': attribute type 2 has an invalid length. [ 222.088927][ T9917] netlink: 'syz.2.979': attribute type 2 has an invalid length. [ 222.234637][ T9926] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 222.259110][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 222.280073][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 222.329090][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 222.365925][ T9932] x_tables: unsorted underflow at hook 3 [ 222.579672][ T9933] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 222.902433][ T9916] x_tables: duplicate underflow at hook 2 [ 223.140257][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 30 seconds [ 223.142828][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 30 seconds [ 223.142867][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 30 seconds [ 223.142897][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 30 seconds [ 223.845608][ T9981] syzkaller0: entered promiscuous mode [ 223.845634][ T9981] syzkaller0: entered allmulticast mode [ 223.863723][ T9983] IPv6: addrconf: prefix option has invalid lifetime [ 224.011551][ T9989] FAULT_INJECTION: forcing a failure. [ 224.011551][ T9989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.011589][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.0.997 Not tainted syzkaller #0 PREEMPT(full) [ 224.011615][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.011630][ T9989] Call Trace: [ 224.011639][ T9989] [ 224.011648][ T9989] dump_stack_lvl+0xe8/0x150 [ 224.011699][ T9989] should_fail_ex+0x410/0x560 [ 224.011730][ T9989] prepare_alloc_pages+0x223/0x600 [ 224.011763][ T9989] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 224.011794][ T9989] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.011824][ T9989] ? __pfx_policy_nodemask+0x10/0x10 [ 224.011852][ T9989] ? __get_vm_area_node+0x155/0x2f0 [ 224.011882][ T9989] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 224.011915][ T9989] ? __vmalloc_noprof+0xd2/0x120 [ 224.011947][ T9989] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 224.011973][ T9989] ? bpf_prog_alloc+0x3c/0x1a0 [ 224.011998][ T9989] ? __sys_bpf+0xd0d/0xd90 [ 224.012021][ T9989] ? __x64_sys_bpf+0xba/0xd0 [ 224.012062][ T9989] ? do_syscall_64+0x166/0x520 [ 224.012085][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.012114][ T9989] alloc_pages_mpol+0x21e/0x390 [ 224.012148][ T9989] alloc_pages_noprof+0xb1/0x2b0 [ 224.012179][ T9989] get_free_pages_noprof+0xf/0x80 [ 224.012204][ T9989] __kasan_populate_vmalloc+0x38/0x1c0 [ 224.012226][ T9989] ? do_raw_spin_unlock+0xf5/0x200 [ 224.012264][ T9989] alloc_vmap_area+0xd1a/0x1420 [ 224.012310][ T9989] ? __pfx_alloc_vmap_area+0x10/0x10 [ 224.012339][ T9989] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 224.012364][ T9989] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 224.012387][ T9989] ? __get_vm_area_node+0x155/0x2f0 [ 224.012424][ T9989] __get_vm_area_node+0x200/0x2f0 [ 224.012464][ T9989] __vmalloc_node_range_noprof+0x343/0x1540 [ 224.012499][ T9989] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 224.012525][ T9989] ? __lock_acquire+0x747/0x2de0 [ 224.012576][ T9989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.012620][ T9989] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 224.012645][ T9989] __vmalloc_noprof+0xd2/0x120 [ 224.012685][ T9989] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 224.012715][ T9989] bpf_prog_alloc_no_stats+0x47/0x560 [ 224.012740][ T9989] ? bpf_prog_alloc+0x2a/0x1a0 [ 224.012766][ T9989] bpf_prog_alloc+0x3c/0x1a0 [ 224.012795][ T9989] bpf_prog_load+0x7f8/0x1c20 [ 224.012835][ T9989] ? __pfx_bpf_prog_load+0x10/0x10 [ 224.012889][ T9989] __sys_bpf+0xd0d/0xd90 [ 224.012923][ T9989] ? __pfx___sys_bpf+0x10/0x10 [ 224.012968][ T9989] ? __fget_files+0x2a/0x420 [ 224.013017][ T9989] ? ksys_write+0x242/0x270 [ 224.013054][ T9989] ? __pfx_ksys_write+0x10/0x10 [ 224.013093][ T9989] __x64_sys_bpf+0xba/0xd0 [ 224.013119][ T9989] do_syscall_64+0x166/0x520 [ 224.013143][ T9989] ? trace_irq_disable+0x3b/0x140 [ 224.013166][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.013189][ T9989] ? clear_bhb_loop+0x70/0xc0 [ 224.013218][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.013241][ T9989] RIP: 0033:0x7f970cb9e159 [ 224.013263][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.013283][ T9989] RSP: 002b:00007f970db22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.013308][ T9989] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 224.013325][ T9989] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 224.013340][ T9989] RBP: 00007f970db22090 R08: 0000000000000000 R09: 0000000000000000 [ 224.013354][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.013367][ T9989] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007ffe552a0d28 [ 224.013403][ T9989] [ 224.013523][ T9989] warn_alloc: 2 callbacks suppressed [ 224.013537][ T9989] syz.0.997: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.013621][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.0.997 Not tainted syzkaller #0 PREEMPT(full) [ 224.013645][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.013667][ T9989] Call Trace: [ 224.013675][ T9989] [ 224.013684][ T9989] dump_stack_lvl+0xe8/0x150 [ 224.013720][ T9989] warn_alloc+0x24d/0x270 [ 224.013743][ T9989] ? lockdep_hardirqs_on+0x7b/0x110 [ 224.013770][ T9989] ? __pfx_warn_alloc+0x10/0x10 [ 224.013792][ T9989] ? kfree+0x1c5/0x650 [ 224.013830][ T9989] ? __get_vm_area_node+0x219/0x2f0 [ 224.013870][ T9989] __vmalloc_node_range_noprof+0x36b/0x1540 [ 224.013904][ T9989] ? __lock_acquire+0x747/0x2de0 [ 224.013964][ T9989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.014020][ T9989] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 224.014044][ T9989] __vmalloc_noprof+0xd2/0x120 [ 224.014077][ T9989] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 224.014107][ T9989] bpf_prog_alloc_no_stats+0x47/0x560 [ 224.014132][ T9989] ? bpf_prog_alloc+0x2a/0x1a0 [ 224.014160][ T9989] bpf_prog_alloc+0x3c/0x1a0 [ 224.014188][ T9989] bpf_prog_load+0x7f8/0x1c20 [ 224.014227][ T9989] ? __pfx_bpf_prog_load+0x10/0x10 [ 224.014279][ T9989] __sys_bpf+0xd0d/0xd90 [ 224.014313][ T9989] ? __pfx___sys_bpf+0x10/0x10 [ 224.014348][ T9989] ? __fget_files+0x2a/0x420 [ 224.014397][ T9989] ? ksys_write+0x242/0x270 [ 224.014433][ T9989] ? __pfx_ksys_write+0x10/0x10 [ 224.014471][ T9989] __x64_sys_bpf+0xba/0xd0 [ 224.014497][ T9989] do_syscall_64+0x166/0x520 [ 224.014518][ T9989] ? trace_irq_disable+0x3b/0x140 [ 224.014540][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.014562][ T9989] ? clear_bhb_loop+0x70/0xc0 [ 224.014590][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.014613][ T9989] RIP: 0033:0x7f970cb9e159 [ 224.014645][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.014671][ T9989] RSP: 002b:00007f970db22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.014693][ T9989] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 224.014710][ T9989] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 224.014725][ T9989] RBP: 00007f970db22090 R08: 0000000000000000 R09: 0000000000000000 [ 224.014739][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.014753][ T9989] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007ffe552a0d28 [ 224.014789][ T9989] [ 224.014797][ T9989] Mem-Info: [ 224.014806][ T9989] active_anon:7199 inactive_anon:0 isolated_anon:0 [ 224.014806][ T9989] active_file:0 inactive_file:43290 isolated_file:0 [ 224.014806][ T9989] unevictable:0 dirty:144 writeback:0 [ 224.014806][ T9989] slab_reclaimable:10712 slab_unreclaimable:98155 [ 224.014806][ T9989] mapped:29661 shmem:2097 pagetables:1181 [ 224.014806][ T9989] sec_pagetables:0 bounce:0 [ 224.014806][ T9989] kernel_misc_reclaimable:0 [ 224.014806][ T9989] free:1252072 free_pcp:11117 free_cma:0 [ 224.014863][ T9989] Node 0 active_anon:28796kB inactive_anon:0kB active_file:0kB inactive_file:172956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118644kB dirty:572kB writeback:0kB shmem:8388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14012kB pagetables:4596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 224.014922][ T9989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 224.014975][ T9989] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.015068][ T9989] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 224.015110][ T9989] Node 0 DMA32 free:1044308kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28796kB inactive_anon:0kB active_file:0kB inactive_file:172956kB unevictable:0kB writepending:572kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:44468kB local_pcp:15820kB free_cma:0kB [ 224.015177][ T9989] lowmem_reserve[]: 0 0 0 0 0 [ 224.015217][ T9989] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.015278][ T9989] lowmem_reserve[]: 0 0 0 0 0 [ 224.015317][ T9989] Node 1 Normal free:3948620kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.015380][ T9989] lowmem_reserve[]: 0 0 0 0 0 [ 224.015419][ T9989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.015621][ T9989] Node 0 DMA32: 1311*4kB (UME) 1007*8kB (UME) 466*16kB (UME) 260*32kB (UE) 91*64kB (UME) 56*128kB (M) 25*256kB (UME) 23*512kB (UM) 15*1024kB (UM) 13*2048kB (UM) 230*4096kB (UM) = 1044308kB [ 224.015811][ T9989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 224.015921][ T9989] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 11*16kB (UM) 13*32kB (UM) 9*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3948620kB [ 224.016115][ T9989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.016134][ T9989] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.016153][ T9989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.016171][ T9989] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.016190][ T9989] 45383 total pagecache pages [ 224.016199][ T9989] 0 pages in swap cache [ 224.016207][ T9989] Free swap = 124996kB [ 224.016216][ T9989] Total swap = 124996kB [ 224.016225][ T9989] 2097051 pages RAM [ 224.016233][ T9989] 0 pages HighMem/MovableOnly [ 224.016242][ T9989] 428782 pages reserved [ 224.016250][ T9989] 0 pages cma reserved [ 224.851731][ T9996] netlink: 'syz.4.993': attribute type 4 has an invalid length. [ 224.851793][ T9996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.993'. [ 225.191002][T10008] x_tables: duplicate entry at hook 2 [ 225.314971][ T9996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.362952][T10008] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 225.363461][T10008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.383159][T10008] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.511900][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1000'. [ 225.553774][T10026] Bluetooth: hci0: unsupported parameter 5135 [ 225.553799][T10026] Bluetooth: hci0: invalid length 11, exp 2 for type 17 [ 225.807313][T10039] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 225.874254][T10034] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 225.905698][T10034] Bluetooth: hci0: unsupported parameter 1280 [ 225.905733][T10034] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 226.510305][T10042] netlink: 632 bytes leftover after parsing attributes in process `syz.4.1003'. [ 226.737989][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1010'. [ 226.801854][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 226.803869][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'. [ 226.845042][ T7663] tipc: Subscription rejected, illegal request [ 226.864045][T10057] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 226.864074][T10057] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 226.949659][T10062] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1013'. [ 226.971178][T10062] netlink: 'syz.2.1013': attribute type 11 has an invalid length. [ 226.971205][T10062] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1013'. [ 227.149204][T10067] Bluetooth: hci0: unsupported parameter 5135 [ 227.149232][T10067] Bluetooth: hci0: invalid length 11, exp 2 for type 17 [ 227.164280][T10068] sctp: [Deprecated]: syz.3.1016 (pid 10068) Use of int in max_burst socket option deprecated. [ 227.164280][T10068] Use struct sctp_assoc_value instead [ 227.164540][T10069] sctp: [Deprecated]: syz.3.1016 (pid 10069) Use of int in max_burst socket option deprecated. [ 227.164540][T10069] Use struct sctp_assoc_value instead [ 227.764804][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 227.781908][T10094] FAULT_INJECTION: forcing a failure. [ 227.781908][T10094] name failslab, interval 1, probability 0, space 0, times 0 [ 227.781952][T10094] CPU: 0 UID: 0 PID: 10094 Comm: syz.0.1023 Not tainted syzkaller #0 PREEMPT(full) [ 227.782000][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.782026][T10094] Call Trace: [ 227.782036][T10094] [ 227.782047][T10094] dump_stack_lvl+0xe8/0x150 [ 227.782090][T10094] should_fail_ex+0x410/0x560 [ 227.782125][T10094] should_failslab+0xa8/0x100 [ 227.782157][T10094] ? alloc_empty_file+0x5b/0x1d0 [ 227.782189][T10094] kmem_cache_alloc_noprof+0xa1/0x600 [ 227.782232][T10094] ? alloc_empty_file+0x5b/0x1d0 [ 227.782271][T10094] alloc_empty_file+0x5b/0x1d0 [ 227.782304][T10094] alloc_file_pseudo+0x115/0x1e0 [ 227.782340][T10094] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 227.782376][T10094] ? security_inode_alloc+0xd5/0x310 [ 227.782413][T10094] ? inode_init_always_gfp+0x994/0xd30 [ 227.782453][T10094] sock_alloc_file+0xb8/0x2e0 [ 227.782496][T10094] do_accept+0x3a0/0x750 [ 227.782530][T10094] ? __pfx_do_accept+0x10/0x10 [ 227.782584][T10094] __sys_accept4+0x139/0x230 [ 227.782616][T10094] ? __pfx___sys_accept4+0x10/0x10 [ 227.782644][T10094] ? __pfx_ksys_write+0x10/0x10 [ 227.782695][T10094] __x64_sys_accept4+0x9a/0xb0 [ 227.782726][T10094] do_syscall_64+0x166/0x520 [ 227.782754][T10094] ? trace_irq_disable+0x3b/0x140 [ 227.782780][T10094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.782804][T10094] ? clear_bhb_loop+0x70/0xc0 [ 227.782836][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.782871][T10094] RIP: 0033:0x7f970cb9e159 [ 227.782899][T10094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.782921][T10094] RSP: 002b:00007f970dae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 227.782949][T10094] RAX: ffffffffffffffda RBX: 00007f970ce26180 RCX: 00007f970cb9e159 [ 227.782967][T10094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 227.782987][T10094] RBP: 00007f970dae0090 R08: 0000000000000000 R09: 0000000000000000 [ 227.783003][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.783019][T10094] R13: 00007f970ce26218 R14: 00007f970ce26180 R15: 00007ffe552a0d28 [ 227.783057][T10094] [ 228.060945][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 228.483332][T10125] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 228.509893][T10126] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 228.637192][T10125] bond9: entered promiscuous mode [ 228.638033][T10125] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.646737][T10126] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 228.654997][T10127] bond9: entered allmulticast mode [ 229.779627][T10182] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 229.999240][T10181] ipt_ECN: cannot use operation on non-tcp rule [ 230.166667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.370441][T10161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.370687][T10170] netlink: 'syz.3.1042': attribute type 11 has an invalid length. [ 232.370706][T10170] __nla_validate_parse: 8 callbacks suppressed [ 232.370719][T10170] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.1042'. [ 232.895048][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 232.895171][T10210] netlink: 'syz.1.1055': attribute type 9 has an invalid length. [ 232.977526][ T7660] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.977581][ T7660] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.977624][ T7660] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.977666][ T7660] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.065785][T10215] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1056'. [ 233.142277][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'. [ 233.145260][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 234.631385][T10247] FAULT_INJECTION: forcing a failure. [ 234.631385][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 234.631428][T10247] CPU: 1 UID: 0 PID: 10247 Comm: syz.4.1063 Not tainted syzkaller #0 PREEMPT(full) [ 234.631470][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.631491][T10247] Call Trace: [ 234.631506][T10247] [ 234.631521][T10247] dump_stack_lvl+0xe8/0x150 [ 234.631578][T10247] should_fail_ex+0x410/0x560 [ 234.631629][T10247] should_failslab+0xa8/0x100 [ 234.631679][T10247] __kmalloc_noprof+0xfe/0x720 [ 234.631713][T10247] ? sk_prot_alloc+0x57/0x210 [ 234.631741][T10247] ? security_sk_alloc+0x52/0x360 [ 234.631773][T10247] ? security_sk_alloc+0x52/0x360 [ 234.631806][T10247] ? kmem_cache_alloc_noprof+0x156/0x600 [ 234.631844][T10247] security_sk_alloc+0x52/0x360 [ 234.631881][T10247] sk_prot_alloc+0x101/0x210 [ 234.631912][T10247] sk_clone+0x7c/0x1080 [ 234.631942][T10247] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.631978][T10247] sctp_clone_sock+0x31/0x1680 [ 234.632012][T10247] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.632054][T10247] sctp_accept+0x564/0x720 [ 234.632073][T10247] ? file_init_path+0x3b/0x5a0 [ 234.632119][T10247] ? __pfx_sctp_accept+0x10/0x10 [ 234.632139][T10247] ? alloc_file_pseudo+0x156/0x1e0 [ 234.632167][T10247] ? __pfx_autoremove_wake_function+0x10/0x10 [ 234.632197][T10247] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 234.632224][T10247] ? security_inode_alloc+0xd5/0x310 [ 234.632255][T10247] ? inode_init_always_gfp+0x994/0xd30 [ 234.632294][T10247] inet_accept+0xb2/0x150 [ 234.632331][T10247] do_accept+0x521/0x750 [ 234.632362][T10247] ? __pfx_do_accept+0x10/0x10 [ 234.632410][T10247] __sys_accept4+0x139/0x230 [ 234.632439][T10247] ? __pfx___sys_accept4+0x10/0x10 [ 234.632463][T10247] ? __pfx_ksys_write+0x10/0x10 [ 234.632510][T10247] __x64_sys_accept4+0x9a/0xb0 [ 234.632537][T10247] do_syscall_64+0x166/0x520 [ 234.632560][T10247] ? trace_irq_disable+0x3b/0x140 [ 234.632583][T10247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.632608][T10247] ? clear_bhb_loop+0x70/0xc0 [ 234.632636][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.632660][T10247] RIP: 0033:0x7fe14f99e159 [ 234.632680][T10247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.632707][T10247] RSP: 002b:00007fe1507b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 234.632731][T10247] RAX: ffffffffffffffda RBX: 00007fe14fc26180 RCX: 00007fe14f99e159 [ 234.632748][T10247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 234.632762][T10247] RBP: 00007fe1507b4090 R08: 0000000000000000 R09: 0000000000000000 [ 234.632776][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.632791][T10247] R13: 00007fe14fc26218 R14: 00007fe14fc26180 R15: 00007ffcd8d4e7b8 [ 234.632827][T10247] [ 235.360012][T10264] Bluetooth: hci0: unsupported parameter 5135 [ 235.360038][T10264] Bluetooth: hci0: invalid length 11, exp 2 for type 17 [ 235.663228][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'. [ 235.932435][ T993] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.228521][T10301] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1078'. [ 236.311020][ T7099] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.459233][T10319] FAULT_INJECTION: forcing a failure. [ 236.459233][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 236.459269][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.3.1082 Not tainted syzkaller #0 PREEMPT(full) [ 236.459295][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.459321][T10319] Call Trace: [ 236.459330][T10319] [ 236.459340][T10319] dump_stack_lvl+0xe8/0x150 [ 236.459379][T10319] should_fail_ex+0x410/0x560 [ 236.459415][T10319] should_failslab+0xa8/0x100 [ 236.459446][T10319] __kmalloc_cache_noprof+0xa3/0x600 [ 236.459471][T10319] ? get_random_u16+0x472/0x910 [ 236.459498][T10319] ? sctp_endpoint_new+0xe1/0xa70 [ 236.459520][T10319] ? sctp_endpoint_new+0xe1/0xa70 [ 236.459544][T10319] ? get_random_u16+0x4a9/0x910 [ 236.459577][T10319] sctp_endpoint_new+0xe1/0xa70 [ 236.459608][T10319] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 236.459634][T10319] ? sctp_v4_copy_ip_options+0x23/0x2c0 [ 236.459662][T10319] ? __raw_spin_lock_init+0x45/0x100 [ 236.459698][T10319] sctp_clone_sock+0x533/0x1680 [ 236.459731][T10319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.459774][T10319] sctp_accept+0x564/0x720 [ 236.459794][T10319] ? file_init_path+0x3b/0x5a0 [ 236.459836][T10319] ? __pfx_sctp_accept+0x10/0x10 [ 236.459856][T10319] ? alloc_file_pseudo+0x156/0x1e0 [ 236.459884][T10319] ? __pfx_autoremove_wake_function+0x10/0x10 [ 236.459915][T10319] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 236.459942][T10319] ? security_inode_alloc+0xd5/0x310 [ 236.459975][T10319] ? inode_init_always_gfp+0x994/0xd30 [ 236.460010][T10319] inet_accept+0xb2/0x150 [ 236.460059][T10319] do_accept+0x521/0x750 [ 236.460091][T10319] ? __pfx_do_accept+0x10/0x10 [ 236.460145][T10319] __sys_accept4+0x139/0x230 [ 236.460173][T10319] ? __pfx___sys_accept4+0x10/0x10 [ 236.460198][T10319] ? __pfx_ksys_write+0x10/0x10 [ 236.460240][T10319] __x64_sys_accept4+0x9a/0xb0 [ 236.460268][T10319] do_syscall_64+0x166/0x520 [ 236.460293][T10319] ? trace_irq_disable+0x3b/0x140 [ 236.460315][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.460340][T10319] ? clear_bhb_loop+0x70/0xc0 [ 236.460368][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.460391][T10319] RIP: 0033:0x7f0633f9e159 [ 236.460411][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.460430][T10319] RSP: 002b:00007f0634e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 236.460454][T10319] RAX: ffffffffffffffda RBX: 00007f0634226180 RCX: 00007f0633f9e159 [ 236.460471][T10319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 236.460484][T10319] RBP: 00007f0634e6a090 R08: 0000000000000000 R09: 0000000000000000 [ 236.460498][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.460512][T10319] R13: 00007f0634226218 R14: 00007f0634226180 R15: 00007ffdb3009568 [ 236.460548][T10319] [ 236.489683][T10319] IPv4: Attempt to release TCP socket in state 10 ffff888054a9cec0 [ 236.863233][T10326] netlink: 4108 bytes leftover after parsing attributes in process `syz.1.1085'. [ 236.883188][T10315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.937508][T10327] lo: entered promiscuous mode [ 237.010028][ T7660] IPVS: starting estimator thread 0... [ 237.026138][T10328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1085'. [ 237.051597][T10326] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1085'. [ 237.073810][T10327] tunl0: entered promiscuous mode [ 237.100910][T10332] IPVS: using max 28 ests per chain, 67200 per kthread [ 237.136846][T10327] gre0: entered promiscuous mode [ 237.174234][T10327] gretap0: entered promiscuous mode [ 237.382721][T10327] erspan0: entered promiscuous mode [ 237.435153][T10327] ip_vti0: entered promiscuous mode [ 237.466475][T10327] ip6_vti0: entered promiscuous mode [ 237.505206][T10327] sit0: entered promiscuous mode [ 237.527188][T10327] ip6tnl0: entered promiscuous mode [ 237.591999][T10327] ip6gre0: entered promiscuous mode [ 237.635979][T10327] syz_tun: entered promiscuous mode [ 237.736724][T10327] ip6gretap0: entered promiscuous mode [ 237.748624][T10327] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 237.790203][T10327] bridge0: entered promiscuous mode [ 237.807161][T10327] vcan0: entered promiscuous mode [ 237.843841][T10327] bond0: entered promiscuous mode [ 237.843878][T10327] team0: entered promiscuous mode [ 237.843896][T10327] dummy0: entered promiscuous mode [ 237.895011][T10327] nlmon0: entered promiscuous mode [ 237.908286][T10327] batadv0: entered promiscuous mode [ 237.928469][T10327] vxcan0: entered promiscuous mode [ 237.932257][T10327] vxcan1: entered promiscuous mode [ 237.934972][T10327] veth0: entered promiscuous mode [ 237.954825][T10327] veth1: entered promiscuous mode [ 237.967482][T10327] wg0: entered promiscuous mode [ 237.975167][T10327] wg1: entered promiscuous mode [ 237.998486][T10327] wg2: entered promiscuous mode [ 238.059320][T10327] veth0_to_bridge: entered promiscuous mode [ 238.065027][T10327] bridge_slave_0: entered promiscuous mode [ 238.080092][T10327] veth1_to_bridge: entered promiscuous mode [ 238.094000][T10327] bridge_slave_1: entered promiscuous mode [ 238.103712][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 238.103742][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1090'. [ 238.105898][T10327] veth0_to_bond: entered promiscuous mode [ 238.131348][T10327] bond_slave_0: entered promiscuous mode [ 238.133059][T10327] veth1_to_bond: entered promiscuous mode [ 238.155409][T10327] bond_slave_1: entered promiscuous mode [ 238.155815][T10327] veth0_to_team: entered promiscuous mode [ 238.173648][T10327] team_slave_0: entered promiscuous mode [ 238.185370][T10327] veth1_to_team: entered promiscuous mode [ 238.205726][T10327] team_slave_1: entered promiscuous mode [ 238.206162][T10327] veth0_to_batadv: entered promiscuous mode [ 238.229527][T10327] batadv_slave_0: entered promiscuous mode [ 238.272645][T10327] veth1_to_batadv: entered promiscuous mode [ 238.275635][T10327] batadv_slave_1: entered promiscuous mode [ 238.291921][T10327] xfrm0: entered promiscuous mode [ 238.299197][T10327] veth0_to_hsr: entered promiscuous mode [ 238.302767][ T7660] IPVS: starting estimator thread 0... [ 238.396504][T10366] IPVS: using max 28 ests per chain, 67200 per kthread [ 238.441245][T10327] veth1_to_hsr: entered promiscuous mode [ 238.451953][T10327] hsr0: entered promiscuous mode [ 238.461337][T10327] veth1_virt_wifi: entered promiscuous mode [ 238.481949][T10327] virt_wifi0: entered promiscuous mode [ 238.510191][T10327] vlan0: entered promiscuous mode [ 238.513856][T10327] vlan1: entered promiscuous mode [ 238.530385][T10327] macvlan0: entered promiscuous mode [ 238.534945][T10327] macvlan1: entered promiscuous mode [ 238.553916][T10327] ipvlan0: entered promiscuous mode [ 238.562079][T10327] ipvlan1: entered promiscuous mode [ 238.571485][T10327] geneve0: entered promiscuous mode [ 238.575207][T10327] geneve1: entered promiscuous mode [ 238.589134][T10327] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 238.589335][T10327] ip6tnl1: entered promiscuous mode [ 238.660681][T10327] sit1: entered promiscuous mode [ 238.688668][T10327] gre1: entered promiscuous mode [ 238.724276][T10327] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 238.724460][T10327] netdevsim netdevsim4 eth0: entered promiscuous mode [ 238.724613][T10327] netdevsim netdevsim4 eth1: entered promiscuous mode [ 238.724745][T10327] netdevsim netdevsim4 eth2: entered promiscuous mode [ 238.724872][T10327] netdevsim netdevsim4 eth3: entered promiscuous mode [ 238.725016][T10327] mac80211_hwsim hwsim16 wlan2: entered promiscuous mode [ 238.725255][T10327] sit2: entered promiscuous mode [ 238.789184][T10327] ip6gretap1: entered promiscuous mode [ 238.789445][T10327] gtp0: entered promiscuous mode [ 238.790989][T10327] bridge1: entered promiscuous mode [ 238.791140][T10327] veth2: entered promiscuous mode [ 238.791445][T10327] veth3: entered promiscuous mode [ 238.874695][T10315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.952632][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 239.053553][T10375] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.053653][T10375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.053665][T10375] IPv6: NLM_F_CREATE should be set when creating new route [ 239.053707][T10375] IPv6: NLM_F_CREATE should be set when creating new route [ 239.053732][T10375] IPv6: NLM_F_CREATE should be set when creating new route [ 239.062104][T10375] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1093'. [ 239.153902][T10315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.202157][ T5903] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.202209][ T5903] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.202248][ T5903] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.202285][ T5903] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.323950][T10315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.394849][T10386] Bluetooth: hci0: unsupported parameter 5135 [ 239.394883][T10386] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 239.513749][T10389] Bluetooth: hci0: unsupported parameter 5135 [ 239.513779][T10389] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 239.515704][T10387] syzkaller1: entered promiscuous mode [ 239.515730][T10387] syzkaller1: entered allmulticast mode [ 239.639542][T10391] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 239.876469][ T7662] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.929640][ T7662] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.934712][ T7660] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.944126][ T7662] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.069907][T10401] syzkaller1: entered promiscuous mode [ 240.069932][T10401] syzkaller1: entered allmulticast mode [ 240.263836][T10411] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 240.708752][T10434] syzkaller1: entered promiscuous mode [ 240.708780][T10434] syzkaller1: entered allmulticast mode [ 240.958527][T10447] netlink: 'syz.3.1117': attribute type 16 has an invalid length. [ 240.958553][T10447] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1117'. [ 241.302685][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 241.441009][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 241.441053][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 241.670438][T10469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'. [ 241.740031][T10476] netlink: 'syz.2.1125': attribute type 2 has an invalid length. [ 241.740057][T10476] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1125'. [ 241.918267][T10481] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 241.998052][T10488] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 241.998052][T10488] Please contact the netfilter-devel mailing list or update your nftables rules. [ 242.195798][T10503] Bluetooth: hci0: unsupported parameter 5135 [ 242.195820][T10503] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 242.685812][T10532] syzkaller0: left promiscuous mode [ 242.685831][T10532] syzkaller0: left allmulticast mode [ 243.056026][T10496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.161425][T10559] Bluetooth: hci0: unsupported parameter 5135 [ 243.161446][T10559] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 243.161466][T10559] FAULT_INJECTION: forcing a failure. [ 243.161466][T10559] name failslab, interval 1, probability 0, space 0, times 0 [ 243.161492][T10559] CPU: 0 UID: 0 PID: 10559 Comm: syz.0.1145 Not tainted syzkaller #0 PREEMPT(full) [ 243.161515][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.161528][T10559] Call Trace: [ 243.161536][T10559] [ 243.161545][T10559] dump_stack_lvl+0xe8/0x150 [ 243.161581][T10559] should_fail_ex+0x410/0x560 [ 243.161609][T10559] ? __alloc_skb+0x1db/0x7a0 [ 243.161633][T10559] should_failslab+0xa8/0x100 [ 243.161666][T10559] ? __alloc_skb+0x1db/0x7a0 [ 243.161687][T10559] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 243.161723][T10559] ? __alloc_skb+0x18d/0x7a0 [ 243.161746][T10559] ? __alloc_skb+0x1db/0x7a0 [ 243.161776][T10559] __alloc_skb+0x1db/0x7a0 [ 243.161803][T10559] mgmt_cmd_status+0x42/0x570 [ 243.161838][T10559] hci_mgmt_cmd+0xa2c/0xfc0 [ 243.161879][T10559] hci_sock_sendmsg+0x6e1/0xf50 [ 243.161908][T10559] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.161936][T10559] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 243.161970][T10559] ? apparmor_socket_sendmsg+0x98/0x360 [ 243.161990][T10559] ? lock_acquire+0x115/0x350 [ 243.162013][T10559] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 243.162041][T10559] sock_sendmsg_nosec+0x13a/0x180 [ 243.162086][T10559] sock_write_iter+0x2de/0x3e0 [ 243.162120][T10559] ? __pfx_sock_write_iter+0x10/0x10 [ 243.162158][T10559] ? bpf_lsm_file_permission+0x9/0x20 [ 243.162186][T10559] ? security_file_permission+0x75/0x260 [ 243.162229][T10559] vfs_write+0x612/0xba0 [ 243.162269][T10559] ? __pfx_vfs_write+0x10/0x10 [ 243.162312][T10559] ? __fget_files+0x2a/0x420 [ 243.162350][T10559] ksys_write+0x150/0x270 [ 243.162384][T10559] ? __pfx_ksys_write+0x10/0x10 [ 243.162428][T10559] do_syscall_64+0x166/0x520 [ 243.162450][T10559] ? trace_irq_disable+0x3b/0x140 [ 243.162471][T10559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.162493][T10559] ? clear_bhb_loop+0x70/0xc0 [ 243.162520][T10559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.162541][T10559] RIP: 0033:0x7f970cb9e159 [ 243.162561][T10559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.162579][T10559] RSP: 002b:00007f970db22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.162602][T10559] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 243.162618][T10559] RDX: 0000000000000017 RSI: 0000200000000040 RDI: 0000000000000004 [ 243.162631][T10559] RBP: 00007f970db22090 R08: 0000000000000000 R09: 0000000000000000 [ 243.162644][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.162657][T10559] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007ffe552a0d28 [ 243.162691][T10559] [ 243.843683][T10572] syzkaller1: entered promiscuous mode [ 243.843712][T10572] syzkaller1: entered allmulticast mode [ 244.105045][T10587] veth0_to_bond: entered allmulticast mode [ 244.179348][T10587] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 244.184550][T10587] __nla_validate_parse: 7 callbacks suppressed [ 244.184572][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1153'. [ 244.184601][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1153'. [ 244.488093][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 244.526083][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 244.665763][T10588] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.719086][T10587] tipc: Enabling of bearer rejected, already enabled [ 244.860131][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 245.042793][T10619] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1161'. [ 245.088341][ T31] audit: type=1800 audit(1789655118.342:7): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1163" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1306 res=0 errno=0 [ 245.183807][T10615] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20002 [ 247.435556][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1168'. [ 247.442541][T10650] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1168'. [ 247.442700][T10650] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1168'. [ 247.607626][T10655] FAULT_INJECTION: forcing a failure. [ 247.607626][T10655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.607675][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.4.1171 Not tainted syzkaller #0 PREEMPT(full) [ 247.607704][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.607720][T10655] Call Trace: [ 247.607730][T10655] [ 247.607742][T10655] dump_stack_lvl+0xe8/0x150 [ 247.607785][T10655] should_fail_ex+0x410/0x560 [ 247.607825][T10655] _copy_to_user+0x31/0xb0 [ 247.607860][T10655] bpf_verifier_vlog+0x3a2/0x900 [ 247.607921][T10655] verbose+0x11d/0x1a0 [ 247.607944][T10655] ? __pfx_snprintf+0x10/0x10 [ 247.607992][T10655] ? __pfx_verbose+0x10/0x10 [ 247.608017][T10655] ? lock_acquire+0x115/0x350 [ 247.608049][T10655] ? __func_imm_name+0xab/0xc0 [ 247.608082][T10655] print_bpf_insn+0x1a01/0x2930 [ 247.608115][T10655] ? __pfx_verbose+0x10/0x10 [ 247.608141][T10655] ? __pfx_print_bpf_insn+0x10/0x10 [ 247.608179][T10655] ? bpf_verifier_vlog+0x55a/0x900 [ 247.608232][T10655] ? bpf_verifier_log_write+0x11d/0x1a0 [ 247.608262][T10655] bpf_verbose_insn+0xcb/0x130 [ 247.608287][T10655] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 247.608311][T10655] ? __pfx_verbose+0x10/0x10 [ 247.608332][T10655] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 247.608358][T10655] ? record_arg_access+0x148/0x970 [ 247.608397][T10655] analyze_subprog+0x5d89/0x9e00 [ 247.608425][T10655] ? probe_event_enable+0x6df/0xae0 [ 247.608516][T10655] ? __pfx_analyze_subprog+0x10/0x10 [ 247.608543][T10655] ? __x64_sys_bpf+0xba/0xd0 [ 247.608566][T10655] ? rsc_free+0x12/0x80 [ 247.608594][T10655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.608678][T10655] ? call_instance+0x263/0x560 [ 247.608706][T10655] ? rcu_is_watching+0x16/0xb0 [ 247.608736][T10655] ? call_instance+0x263/0x560 [ 247.608762][T10655] ? trace_kmalloc+0x2a/0xf0 [ 247.608804][T10655] ? call_instance+0x263/0x560 [ 247.608831][T10655] ? __kvmalloc_node_noprof+0x52f/0x820 [ 247.608858][T10655] ? __kvmalloc_node_noprof+0x345/0x820 [ 247.608885][T10655] ? call_instance+0x263/0x560 [ 247.608911][T10655] ? call_instance+0x263/0x560 [ 247.608956][T10655] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 247.608986][T10655] ? bpf_get_trace_printk_proto+0x48/0x60 [ 247.609020][T10655] ? bpf_tracing_func_proto+0x72/0x180 [ 247.609082][T10655] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 247.609119][T10655] ? __kvmalloc_node_noprof+0x345/0x820 [ 247.609147][T10655] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 247.609175][T10655] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 247.609213][T10655] bpf_compute_live_registers+0x8d3/0x1ff0 [ 247.609264][T10655] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 247.609305][T10655] bpf_check+0x25ed/0x2e10 [ 247.609350][T10655] ? ktime_get_with_offset+0x93/0x2d0 [ 247.609384][T10655] ? __pfx_bpf_check+0x10/0x10 [ 247.609415][T10655] ? bpf_obj_name_cpy+0x194/0x1e0 [ 247.609454][T10655] bpf_prog_load+0x14d6/0x1c20 [ 247.609498][T10655] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.609557][T10655] __sys_bpf+0xd0d/0xd90 [ 247.609595][T10655] ? __pfx___sys_bpf+0x10/0x10 [ 247.609638][T10655] ? __fget_files+0x2a/0x420 [ 247.609703][T10655] ? ksys_write+0x242/0x270 [ 247.609745][T10655] ? __pfx_ksys_write+0x10/0x10 [ 247.609789][T10655] __x64_sys_bpf+0xba/0xd0 [ 247.609813][T10655] do_syscall_64+0x166/0x520 [ 247.609834][T10655] ? trace_irq_disable+0x3b/0x140 [ 247.609854][T10655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.609875][T10655] ? clear_bhb_loop+0x70/0xc0 [ 247.609900][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.609920][T10655] RIP: 0033:0x7fe14f99e159 [ 247.609939][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.609957][T10655] RSP: 002b:00007fe1507f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.609980][T10655] RAX: ffffffffffffffda RBX: 00007fe14fc25fa0 RCX: 00007fe14f99e159 [ 247.610002][T10655] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 247.610016][T10655] RBP: 00007fe1507f6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.610028][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.610041][T10655] R13: 00007fe14fc26038 R14: 00007fe14fc25fa0 R15: 00007ffcd8d4e7b8 [ 247.610071][T10655] [ 248.271231][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1174'. [ 248.768568][T10680] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 248.801587][T10685] netlink: 'syz.1.1182': attribute type 11 has an invalid length. [ 249.020162][T10696] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 249.020214][T10696] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 249.020261][T10696] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 249.095010][T10696] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 249.192158][T10710] __nla_validate_parse: 6 callbacks suppressed [ 249.192188][T10710] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1190'. [ 250.028808][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 250.137427][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1197'. [ 250.178669][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 250.196430][T10747] Bluetooth: hci0: unsupported parameter 5135 [ 250.196453][T10747] Bluetooth: hci0: invalid length 11, exp 2 for type 9 [ 250.225118][T10741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'. [ 250.233081][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 250.233621][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 250.233675][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 250.247944][T10744] netlink: 'syz.4.1197': attribute type 11 has an invalid length. [ 250.247969][T10744] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.1197'. [ 250.899107][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1208'. [ 250.917795][T10779] syzkaller0: entered promiscuous mode [ 250.917831][T10779] syzkaller0: entered allmulticast mode [ 251.213075][T10789] Bluetooth: hci0: unsupported parameter 5135 [ 251.213102][T10789] Bluetooth: hci0: invalid length 11, exp 2 for type 9 [ 253.219792][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 60 seconds [ 253.219839][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 60 seconds [ 253.219868][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 60 seconds [ 253.219896][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 60 seconds [ 254.163101][ T4982] udevd[4982]: worker [5619] /devices/virtual/block/nbd0 is taking a long time [ 254.445232][T10839] __nla_validate_parse: 3 callbacks suppressed [ 254.445254][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1215'. [ 254.479208][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 254.561157][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1218'. [ 254.561193][T10845] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 254.767559][T10847] netlink: 'syz.0.1219': attribute type 12 has an invalid length. [ 254.804886][T10856] Bluetooth: hci0: unsupported parameter 5135 [ 254.804910][T10856] Bluetooth: hci0: invalid length 11, exp 2 for type 30 [ 254.861798][T10849] can: request_module (can-proto-0) failed. [ 255.053325][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 255.073783][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 255.098901][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 255.099711][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 255.482734][T10893] xt_policy: output policy not valid in PREROUTING and INPUT [ 255.752455][T10907] Bluetooth: hci0: unsupported parameter 5135 [ 255.752479][T10907] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 255.771917][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966009][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1233'. [ 256.244115][T10924] nlmon0: left promiscuous mode [ 256.244578][T10924] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1236'. [ 256.244603][T10924] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 256.698089][T10944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1242'. [ 256.718772][T10944] netlink: 'syz.2.1242': attribute type 2 has an invalid length. [ 256.718790][T10944] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 256.824042][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.922318][T10948] Bluetooth: hci0: unsupported parameter 5135 [ 256.922348][T10948] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 257.551338][T10972] veth1_to_bond: entered allmulticast mode [ 257.615674][T10981] veth1_to_bond: entered promiscuous mode [ 257.624300][T10980] set match dimension is over the limit! [ 257.883966][T10981] veth1_to_bond (unregistering): left allmulticast mode [ 257.884013][T10981] veth1_to_bond (unregistering): left promiscuous mode [ 258.834525][T11021] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 258.943566][T11021] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.008377][ T5721] s`z1: Port: 1 Link DOWN [ 259.576246][T11055] __nla_validate_parse: 74 callbacks suppressed [ 259.576356][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 259.661681][T11060] Bluetooth: hci0: unsupported parameter 5135 [ 259.661704][T11060] Bluetooth: hci0: invalid length 11, exp 2 for type 30 [ 259.661753][T11060] FAULT_INJECTION: forcing a failure. [ 259.661753][T11060] name failslab, interval 1, probability 0, space 0, times 0 [ 259.661781][T11060] CPU: 0 UID: 0 PID: 11060 Comm: syz.4.1275 Not tainted syzkaller #0 PREEMPT(full) [ 259.661807][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.661820][T11060] Call Trace: [ 259.661829][T11060] [ 259.661839][T11060] dump_stack_lvl+0xe8/0x150 [ 259.661878][T11060] should_fail_ex+0x410/0x560 [ 259.661908][T11060] ? __alloc_skb+0x1db/0x7a0 [ 259.661934][T11060] should_failslab+0xa8/0x100 [ 259.661963][T11060] ? __alloc_skb+0x1db/0x7a0 [ 259.661985][T11060] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 259.662019][T11060] ? __alloc_skb+0x18d/0x7a0 [ 259.662049][T11060] ? __alloc_skb+0x1db/0x7a0 [ 259.662075][T11060] __alloc_skb+0x1db/0x7a0 [ 259.662098][T11060] create_monitor_ctrl_event+0x38/0x470 [ 259.662135][T11060] mgmt_cmd_status+0x1cd/0x570 [ 259.662164][T11060] hci_mgmt_cmd+0xa2c/0xfc0 [ 259.662200][T11060] hci_sock_sendmsg+0x6e1/0xf50 [ 259.662226][T11060] ? __pfx_aa_sk_perm+0x10/0x10 [ 259.662250][T11060] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 259.662312][T11060] ? apparmor_socket_sendmsg+0x98/0x360 [ 259.662331][T11060] ? lock_acquire+0x115/0x350 [ 259.662351][T11060] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 259.662376][T11060] sock_sendmsg_nosec+0x13a/0x180 [ 259.662407][T11060] sock_write_iter+0x2de/0x3e0 [ 259.662436][T11060] ? __pfx_sock_write_iter+0x10/0x10 [ 259.662470][T11060] ? bpf_lsm_file_permission+0x9/0x20 [ 259.662495][T11060] ? security_file_permission+0x75/0x260 [ 259.662532][T11060] vfs_write+0x612/0xba0 [ 259.662572][T11060] ? __pfx_vfs_write+0x10/0x10 [ 259.662609][T11060] ? __fget_files+0x2a/0x420 [ 259.662643][T11060] ksys_write+0x150/0x270 [ 259.662673][T11060] ? __pfx_ksys_write+0x10/0x10 [ 259.662717][T11060] do_syscall_64+0x166/0x520 [ 259.662736][T11060] ? trace_irq_disable+0x3b/0x140 [ 259.662755][T11060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.662782][T11060] ? clear_bhb_loop+0x70/0xc0 [ 259.662805][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.662823][T11060] RIP: 0033:0x7fe14f99e159 [ 259.662841][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.662869][T11060] RSP: 002b:00007fe1507f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.662889][T11060] RAX: ffffffffffffffda RBX: 00007fe14fc25fa0 RCX: 00007fe14f99e159 [ 259.662903][T11060] RDX: 0000000000000017 RSI: 0000200000000040 RDI: 0000000000000004 [ 259.662915][T11060] RBP: 00007fe1507f6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.662927][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.662938][T11060] R13: 00007fe14fc26038 R14: 00007fe14fc25fa0 R15: 00007ffcd8d4e7b8 [ 259.662967][T11060] [ 260.057912][T11067] ip6gre2: entered allmulticast mode [ 260.064318][ T7669] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 260.440298][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 260.460798][T11085] FAULT_INJECTION: forcing a failure. [ 260.460798][T11085] name failslab, interval 1, probability 0, space 0, times 0 [ 260.460835][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.2.1283 Not tainted syzkaller #0 PREEMPT(full) [ 260.460862][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.460876][T11085] Call Trace: [ 260.460885][T11085] [ 260.460896][T11085] dump_stack_lvl+0xe8/0x150 [ 260.460933][T11085] should_fail_ex+0x410/0x560 [ 260.460965][T11085] should_failslab+0xa8/0x100 [ 260.460996][T11085] __kmalloc_node_noprof+0x100/0x720 [ 260.461017][T11085] ? __get_vm_area_node+0x200/0x2f0 [ 260.461049][T11085] ? __get_vm_area_node+0x283/0x2f0 [ 260.461078][T11085] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 260.461111][T11085] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 260.461153][T11085] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 260.461216][T11085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.461247][T11085] ? __kasan_kmalloc+0x93/0xb0 [ 260.461274][T11085] ? __kmalloc_cache_noprof+0x321/0x600 [ 260.461297][T11085] ? __kmalloc_cache_noprof+0x14d/0x600 [ 260.461318][T11085] ? bpf_diag_init+0x87/0x140 [ 260.461343][T11085] ? bpf_diag_init+0x87/0x140 [ 260.461373][T11085] ? bpf_check+0x10ee/0x2e10 [ 260.461395][T11085] __vmalloc_noprof+0xd2/0x120 [ 260.461429][T11085] ? bpf_check+0x10ee/0x2e10 [ 260.461456][T11085] bpf_check+0x10ee/0x2e10 [ 260.461500][T11085] ? ktime_get_with_offset+0x93/0x2d0 [ 260.461529][T11085] ? __pfx_bpf_check+0x10/0x10 [ 260.461555][T11085] ? bpf_obj_name_cpy+0x194/0x1e0 [ 260.461592][T11085] bpf_prog_load+0x14d6/0x1c20 [ 260.461632][T11085] ? __pfx_bpf_prog_load+0x10/0x10 [ 260.461683][T11085] __sys_bpf+0xd0d/0xd90 [ 260.461717][T11085] ? __pfx___sys_bpf+0x10/0x10 [ 260.461754][T11085] ? __fget_files+0x2a/0x420 [ 260.461807][T11085] ? ksys_write+0x242/0x270 [ 260.461845][T11085] ? __pfx_ksys_write+0x10/0x10 [ 260.461884][T11085] __x64_sys_bpf+0xba/0xd0 [ 260.461911][T11085] do_syscall_64+0x166/0x520 [ 260.461936][T11085] ? trace_irq_disable+0x3b/0x140 [ 260.461958][T11085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.461983][T11085] ? clear_bhb_loop+0x70/0xc0 [ 260.462011][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.462035][T11085] RIP: 0033:0x7f463739e159 [ 260.462057][T11085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.462077][T11085] RSP: 002b:00007f46382ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.462102][T11085] RAX: ffffffffffffffda RBX: 00007f4637625fa0 RCX: 00007f463739e159 [ 260.462119][T11085] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 260.462135][T11085] RBP: 00007f46382ba090 R08: 0000000000000000 R09: 0000000000000000 [ 260.462149][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.462163][T11085] R13: 00007f4637626038 R14: 00007f4637625fa0 R15: 00007ffc3d3e9ee8 [ 260.462200][T11085] [ 260.466157][T11085] syz.2.1283: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.466234][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.2.1283 Not tainted syzkaller #0 PREEMPT(full) [ 260.466262][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.466280][T11085] Call Trace: [ 260.466290][T11085] [ 260.466299][T11085] dump_stack_lvl+0xe8/0x150 [ 260.466337][T11085] warn_alloc+0x24d/0x270 [ 260.466365][T11085] ? __pfx_warn_alloc+0x10/0x10 [ 260.466393][T11085] ? __kmalloc_node_noprof+0x4d7/0x720 [ 260.466414][T11085] ? __get_vm_area_node+0x200/0x2f0 [ 260.466444][T11085] ? __get_vm_area_node+0x283/0x2f0 [ 260.466483][T11085] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 260.466515][T11085] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 260.466557][T11085] __vmalloc_node_range_noprof+0x969/0x1540 [ 260.466621][T11085] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.466655][T11085] ? __kasan_kmalloc+0x93/0xb0 [ 260.466683][T11085] ? __kmalloc_cache_noprof+0x321/0x600 [ 260.466705][T11085] ? __kmalloc_cache_noprof+0x14d/0x600 [ 260.466727][T11085] ? bpf_diag_init+0x87/0x140 [ 260.466754][T11085] ? bpf_diag_init+0x87/0x140 [ 260.466783][T11085] ? bpf_check+0x10ee/0x2e10 [ 260.466805][T11085] __vmalloc_noprof+0xd2/0x120 [ 260.466839][T11085] ? bpf_check+0x10ee/0x2e10 [ 260.466865][T11085] bpf_check+0x10ee/0x2e10 [ 260.466902][T11085] ? ktime_get_with_offset+0x93/0x2d0 [ 260.466931][T11085] ? __pfx_bpf_check+0x10/0x10 [ 260.466959][T11085] ? bpf_obj_name_cpy+0x194/0x1e0 [ 260.466997][T11085] bpf_prog_load+0x14d6/0x1c20 [ 260.467037][T11085] ? __pfx_bpf_prog_load+0x10/0x10 [ 260.467091][T11085] __sys_bpf+0xd0d/0xd90 [ 260.467126][T11085] ? __pfx___sys_bpf+0x10/0x10 [ 260.467163][T11085] ? __fget_files+0x2a/0x420 [ 260.467214][T11085] ? ksys_write+0x242/0x270 [ 260.467250][T11085] ? __pfx_ksys_write+0x10/0x10 [ 260.467291][T11085] __x64_sys_bpf+0xba/0xd0 [ 260.467317][T11085] do_syscall_64+0x166/0x520 [ 260.467342][T11085] ? trace_irq_disable+0x3b/0x140 [ 260.467365][T11085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.467389][T11085] ? clear_bhb_loop+0x70/0xc0 [ 260.467417][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.467440][T11085] RIP: 0033:0x7f463739e159 [ 260.467461][T11085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.467491][T11085] RSP: 002b:00007f46382ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.467516][T11085] RAX: ffffffffffffffda RBX: 00007f4637625fa0 RCX: 00007f463739e159 [ 260.467533][T11085] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 260.467548][T11085] RBP: 00007f46382ba090 R08: 0000000000000000 R09: 0000000000000000 [ 260.467563][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.467577][T11085] R13: 00007f4637626038 R14: 00007f4637625fa0 R15: 00007ffc3d3e9ee8 [ 260.467612][T11085] [ 260.481315][T11085] Mem-Info: [ 260.481331][T11085] active_anon:5795 inactive_anon:0 isolated_anon:0 [ 260.481331][T11085] active_file:0 inactive_file:43374 isolated_file:0 [ 260.481331][T11085] unevictable:0 dirty:133 writeback:0 [ 260.481331][T11085] slab_reclaimable:10954 slab_unreclaimable:99246 [ 260.481331][T11085] mapped:29655 shmem:522 pagetables:1258 [ 260.481331][T11085] sec_pagetables:0 bounce:0 [ 260.481331][T11085] kernel_misc_reclaimable:0 [ 260.481331][T11085] free:1252962 free_pcp:8967 free_cma:0 [ 260.481388][T11085] Node 0 active_anon:23180kB inactive_anon:0kB active_file:0kB inactive_file:173292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118620kB dirty:528kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14524kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.481596][T11085] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.481747][T11085] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.488647][T11085] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 260.488819][T11085] Node 0 DMA32 free:1047868kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23180kB inactive_anon:0kB active_file:0kB inactive_file:173292kB unevictable:0kB writepending:528kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:35860kB local_pcp:20288kB free_cma:0kB [ 260.488981][T11085] lowmem_reserve[]: 0 0 0 0 0 [ 260.489086][T11085] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.489243][T11085] lowmem_reserve[]: 0 0 0 0 0 [ 260.489353][T11085] Node 1 Normal free:3948620kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.491564][T11085] lowmem_reserve[]: 0 0 0 0 0 [ 260.491682][T11085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.496108][T11085] Node 0 DMA32: 1293*4kB (UME) 491*8kB (UME) 355*16kB (UME) 472*32kB (UME) 139*64kB (UME) 48*128kB (UME) 34*256kB (UME) 20*512kB (UM) 15*1024kB (UME) 15*2048kB (UME) 229*4096kB (UM) = 1047932kB [ 260.501027][T11085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.501277][T11085] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 11*16kB (UM) 13*32kB (UM) 9*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3948620kB [ 260.508856][T11085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.508907][T11085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.508980][T11085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.509064][T11085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.509115][T11085] 43892 total pagecache pages [ 260.509136][T11085] 0 pages in swap cache [ 260.509157][T11085] Free swap = 124996kB [ 260.509178][T11085] Total swap = 124996kB [ 260.509201][T11085] 2097051 pages RAM [ 260.509222][T11085] 0 pages HighMem/MovableOnly [ 260.509243][T11085] 428782 pages reserved [ 260.509264][T11085] 0 pages cma reserved [ 261.572152][T11096] Bluetooth: hci0: unsupported parameter 5135 [ 261.572175][T11096] Bluetooth: hci0: invalid length 11, exp 2 for type 30 [ 261.573177][T11098] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 261.639956][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 261.915094][T11112] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 261.915119][T11112] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1288'. [ 261.915136][T11112] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 261.944857][T11112] Bluetooth: hci0: unsupported parameter 5135 [ 261.944882][T11112] Bluetooth: hci0: invalid length 11, exp 2 for type 30 [ 262.146696][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 262.325952][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1294'. [ 262.697369][T11153] Bluetooth: hci0: unsupported parameter 5135 [ 262.697393][T11153] Bluetooth: hci0: invalid length 11, exp 2 for type 30 [ 262.878641][T11163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1301'. [ 263.841911][T11174] Bluetooth: hci0: unsupported parameter 5135 [ 263.841929][T11174] Bluetooth: hci0: invalid length 11, exp 2 for type 30 [ 263.846553][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.048896][T11177] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1306'. [ 264.116154][T11182] sctp: [Deprecated]: syz.0.1307 (pid 11182) Use of int in maxseg socket option. [ 264.116154][T11182] Use struct sctp_assoc_value instead [ 271.766552][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.203604][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.214582][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.223682][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.239270][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.240009][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.322441][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.334913][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.337483][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.351504][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.352181][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.388369][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.394055][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 278.405791][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.419668][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 278.448507][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 278.451825][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 278.453068][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 278.456206][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.473779][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.482326][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.577312][ T5625] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 279.581821][ T5625] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 279.582634][ T5625] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 279.583769][ T5625] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 279.585427][ T5625] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 280.098967][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.099081][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.099537][T11195] bridge_slave_0: entered allmulticast mode [ 280.101519][T11195] bridge_slave_0: entered promiscuous mode [ 280.149597][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.151294][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.151420][T11195] bridge_slave_1: entered allmulticast mode [ 280.152798][T11195] bridge_slave_1: entered promiscuous mode [ 280.326544][ T5622] Bluetooth: hci5: command tx timeout [ 280.352413][T11195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.399903][T11195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.415696][ T5622] Bluetooth: hci6: command tx timeout [ 280.470602][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.470790][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.470950][T11198] bridge_slave_0: entered allmulticast mode [ 280.472638][T11198] bridge_slave_0: entered promiscuous mode [ 280.532980][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.533116][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.533276][T11198] bridge_slave_1: entered allmulticast mode [ 280.535028][T11198] bridge_slave_1: entered promiscuous mode [ 280.554180][T11195] team0: Port device team_slave_0 added [ 280.568470][ T5622] Bluetooth: hci8: command tx timeout [ 280.568490][ T5625] Bluetooth: hci7: command tx timeout [ 280.602048][T11195] team0: Port device team_slave_1 added [ 280.604025][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.604147][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.604435][T11201] bridge_slave_0: entered allmulticast mode [ 280.605823][T11201] bridge_slave_0: entered promiscuous mode [ 280.674716][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.674875][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.674986][T11201] bridge_slave_1: entered allmulticast mode [ 280.676697][T11201] bridge_slave_1: entered promiscuous mode [ 280.714627][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.762188][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.762927][T11195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.762938][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.762959][T11195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.833813][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.833993][T11199] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.834344][T11199] bridge_slave_0: entered allmulticast mode [ 280.835719][T11199] bridge_slave_0: entered promiscuous mode [ 280.872352][T11195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.872373][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.872401][T11195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.876052][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.934559][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.934661][T11199] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.935085][T11199] bridge_slave_1: entered allmulticast mode [ 280.940200][T11199] bridge_slave_1: entered promiscuous mode [ 280.991160][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.029891][T11198] team0: Port device team_slave_0 added [ 281.057483][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.060383][T11198] team0: Port device team_slave_1 added [ 281.064327][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.096900][T11201] team0: Port device team_slave_0 added [ 281.100450][T11201] team0: Port device team_slave_1 added [ 281.187838][T11199] team0: Port device team_slave_0 added [ 281.193747][T11195] hsr_slave_0: entered promiscuous mode [ 281.194525][T11195] hsr_slave_1: entered promiscuous mode [ 281.195058][T11195] debugfs: 'hsr0' already exists in 'hsr' [ 281.195079][T11195] Cannot create hsr debugfs directory [ 281.229509][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.229527][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.229557][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.230853][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.230869][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.230896][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.233996][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.234012][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.234043][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.236754][T11199] team0: Port device team_slave_1 added [ 281.282288][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.282307][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.282336][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.430529][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.430546][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.430571][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.492642][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.492659][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.492685][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.620898][T11201] hsr_slave_0: entered promiscuous mode [ 281.621759][T11201] hsr_slave_1: entered promiscuous mode [ 281.622801][T11201] debugfs: 'hsr0' already exists in 'hsr' [ 281.622823][T11201] Cannot create hsr debugfs directory [ 281.686516][ T5625] Bluetooth: hci9: command tx timeout [ 281.702814][T11198] hsr_slave_0: entered promiscuous mode [ 281.704076][T11198] hsr_slave_1: entered promiscuous mode [ 281.705486][T11198] debugfs: 'hsr0' already exists in 'hsr' [ 281.705508][T11198] Cannot create hsr debugfs directory [ 281.803979][T11199] hsr_slave_0: entered promiscuous mode [ 281.805521][T11199] hsr_slave_1: entered promiscuous mode [ 281.809430][T11199] debugfs: 'hsr0' already exists in 'hsr' [ 281.809505][T11199] Cannot create hsr debugfs directory [ 282.171383][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.171577][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.171986][T11240] bridge_slave_0: entered allmulticast mode [ 282.174781][T11240] bridge_slave_0: entered promiscuous mode [ 282.228563][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.228740][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.228891][T11240] bridge_slave_1: entered allmulticast mode [ 282.230543][T11240] bridge_slave_1: entered promiscuous mode [ 282.321945][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.364167][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.406565][ T5625] Bluetooth: hci5: command tx timeout [ 282.462338][T11240] team0: Port device team_slave_0 added [ 282.473755][T11240] team0: Port device team_slave_1 added [ 282.496980][ T5625] Bluetooth: hci6: command tx timeout [ 282.529492][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.529510][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.529534][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.532220][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.532237][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.532267][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.646561][ T5625] Bluetooth: hci8: command tx timeout [ 282.656701][ T5622] Bluetooth: hci7: command tx timeout [ 282.691411][T11240] hsr_slave_0: entered promiscuous mode [ 282.692490][T11240] hsr_slave_1: entered promiscuous mode [ 282.693265][T11240] debugfs: 'hsr0' already exists in 'hsr' [ 282.693285][T11240] Cannot create hsr debugfs directory [ 283.287702][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 90 seconds [ 283.287756][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 90 seconds [ 283.287790][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 90 seconds [ 283.287823][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 90 seconds [ 283.766482][ T5622] Bluetooth: hci9: command tx timeout [ 284.486488][ T5622] Bluetooth: hci5: command tx timeout [ 284.566731][ T5622] Bluetooth: hci6: command tx timeout [ 284.726597][ T5625] Bluetooth: hci7: command tx timeout [ 284.726713][ T5622] Bluetooth: hci8: command tx timeout [ 285.846873][ T5622] Bluetooth: hci9: command tx timeout [ 286.486571][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.566526][ T5622] Bluetooth: hci5: command tx timeout [ 286.646747][ T5622] Bluetooth: hci6: command tx timeout [ 286.806494][ T5625] Bluetooth: hci7: command tx timeout [ 286.806552][ T5622] Bluetooth: hci8: command tx timeout [ 287.926698][ T5622] Bluetooth: hci9: command tx timeout [ 313.368239][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 120 seconds [ 313.368291][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 120 seconds [ 313.368349][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 120 seconds [ 313.368371][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 120 seconds [ 317.207396][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.208398][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.715283][ T5625] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 338.722872][ T5625] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 338.732729][ T5625] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 338.733738][ T5625] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 338.734424][ T5625] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 338.829608][ T5625] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 338.834276][ T5625] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 338.835247][ T5625] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 338.837273][ T5625] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 338.838025][ T5625] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 339.010864][ T5625] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 339.024561][ T5625] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 339.025736][ T5625] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 339.042485][ T5625] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 339.044653][ T5625] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 339.107762][ T5622] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 339.112924][ T5622] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 339.113806][ T5622] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 339.142484][ T5622] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 339.153898][ T5622] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 340.008880][ T5622] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 340.011334][ T5622] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 340.046555][ T5622] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 340.047605][ T5622] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 340.048297][ T5622] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 340.638031][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.638154][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.638316][T11292] bridge_slave_0: entered allmulticast mode [ 340.641919][T11292] bridge_slave_0: entered promiscuous mode [ 340.697417][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.697530][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.700580][T11292] bridge_slave_1: entered allmulticast mode [ 340.702564][T11292] bridge_slave_1: entered promiscuous mode [ 340.806439][ T5625] Bluetooth: hci10: command tx timeout [ 340.817062][T11292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.901050][T11292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.966436][ T5625] Bluetooth: hci11: command tx timeout [ 341.021146][T11292] team0: Port device team_slave_0 added [ 341.059957][T11292] team0: Port device team_slave_1 added [ 341.079018][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.079218][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.079332][T11289] bridge_slave_0: entered allmulticast mode [ 341.080896][T11289] bridge_slave_0: entered promiscuous mode [ 341.126530][ T5625] Bluetooth: hci12: command tx timeout [ 341.145277][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.145377][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.145519][T11289] bridge_slave_1: entered allmulticast mode [ 341.150737][T11289] bridge_slave_1: entered promiscuous mode [ 341.206577][ T5625] Bluetooth: hci13: command tx timeout [ 341.252747][T11292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.252765][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.252789][T11292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.319453][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.320604][T11292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.320616][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.320636][T11292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.322450][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.322607][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.322727][T11300] bridge_slave_0: entered allmulticast mode [ 341.324102][T11300] bridge_slave_0: entered promiscuous mode [ 341.366676][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.423696][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.423805][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.423959][T11300] bridge_slave_1: entered allmulticast mode [ 341.425634][T11300] bridge_slave_1: entered promiscuous mode [ 341.497826][T11289] team0: Port device team_slave_0 added [ 341.501017][T11289] team0: Port device team_slave_1 added [ 341.524364][T11300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.525373][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.525521][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.525825][T11296] bridge_slave_0: entered allmulticast mode [ 341.543334][T11296] bridge_slave_0: entered promiscuous mode [ 341.599922][T11300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.600261][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.600429][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.600759][T11296] bridge_slave_1: entered allmulticast mode [ 341.602172][T11296] bridge_slave_1: entered promiscuous mode [ 341.646568][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.646588][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.646618][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.648563][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.648578][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.648605][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.750921][T11292] hsr_slave_0: entered promiscuous mode [ 341.751749][T11292] hsr_slave_1: entered promiscuous mode [ 341.752302][T11292] debugfs: 'hsr0' already exists in 'hsr' [ 341.752324][T11292] Cannot create hsr debugfs directory [ 341.822996][T11300] team0: Port device team_slave_0 added [ 341.825805][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.866382][T11300] team0: Port device team_slave_1 added [ 341.868831][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.980442][T11300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.980463][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.980491][T11300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.987378][T11289] hsr_slave_0: entered promiscuous mode [ 341.988709][T11289] hsr_slave_1: entered promiscuous mode [ 341.990866][T11289] debugfs: 'hsr0' already exists in 'hsr' [ 341.990920][T11289] Cannot create hsr debugfs directory [ 342.074914][T11300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.074935][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.074966][T11300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.097318][T11296] team0: Port device team_slave_0 added [ 342.154362][T11296] team0: Port device team_slave_1 added [ 342.166696][ T5625] Bluetooth: hci14: command tx timeout [ 342.257530][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.257549][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.257574][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.342060][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.342079][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.342103][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.383150][T11300] hsr_slave_0: entered promiscuous mode [ 342.389172][T11300] hsr_slave_1: entered promiscuous mode [ 342.391588][T11300] debugfs: 'hsr0' already exists in 'hsr' [ 342.391642][T11300] Cannot create hsr debugfs directory [ 342.594952][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.595136][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.595296][T11331] bridge_slave_0: entered allmulticast mode [ 342.600229][T11331] bridge_slave_0: entered promiscuous mode [ 342.638163][T11296] hsr_slave_0: entered promiscuous mode [ 342.638988][T11296] hsr_slave_1: entered promiscuous mode [ 342.639659][T11296] debugfs: 'hsr0' already exists in 'hsr' [ 342.639681][T11296] Cannot create hsr debugfs directory [ 342.690398][T11331] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.690713][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.690827][T11331] bridge_slave_1: entered allmulticast mode [ 342.692328][T11331] bridge_slave_1: entered promiscuous mode [ 342.773483][T11331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.780785][T11331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.886470][ T5625] Bluetooth: hci10: command tx timeout [ 342.888512][T11331] team0: Port device team_slave_0 added [ 342.919056][T11331] team0: Port device team_slave_1 added [ 342.983951][T11331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.983971][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.983996][T11331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.043987][T11331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.044004][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.044030][T11331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.053661][ T5625] Bluetooth: hci11: command tx timeout [ 343.189299][T11331] hsr_slave_0: entered promiscuous mode [ 343.190104][T11331] hsr_slave_1: entered promiscuous mode [ 343.190652][T11331] debugfs: 'hsr0' already exists in 'hsr' [ 343.190671][T11331] Cannot create hsr debugfs directory [ 343.220373][ T5625] Bluetooth: hci12: command tx timeout [ 343.286577][ T5625] Bluetooth: hci13: command tx timeout [ 343.450882][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 150 seconds [ 343.450929][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 150 seconds [ 343.450959][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 150 seconds [ 343.450987][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 150 seconds [ 344.246505][ T5625] Bluetooth: hci14: command tx timeout [ 344.966757][ T5625] Bluetooth: hci10: command tx timeout [ 345.126544][ T5625] Bluetooth: hci11: command tx timeout [ 345.286454][ T5625] Bluetooth: hci12: command tx timeout [ 345.366885][ T5625] Bluetooth: hci13: command tx timeout [ 346.329422][ T5625] Bluetooth: hci14: command tx timeout [ 347.046550][ T5625] Bluetooth: hci10: command tx timeout [ 347.206518][ T5625] Bluetooth: hci11: command tx timeout [ 347.366552][ T5625] Bluetooth: hci12: command tx timeout [ 347.446623][ T5625] Bluetooth: hci13: command tx timeout [ 348.416461][ T5625] Bluetooth: hci14: command tx timeout [ 363.287049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.533091][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 180 seconds [ 373.533126][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 180 seconds [ 373.533147][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 180 seconds [ 373.533166][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 180 seconds [ 374.466847][ T4982] udevd[4982]: worker [5619] /devices/virtual/block/nbd0 timeout; kill it [ 374.466959][ T4982] udevd[4982]: seq 13773 '/devices/virtual/block/nbd0' killed [ 378.646501][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.650806][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.710718][ T5622] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 398.713080][ T5622] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 398.725568][ T5622] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 398.740239][ T5622] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 398.740905][ T5622] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 398.785770][ T4932] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 398.796755][ T5627] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 398.799373][ T5627] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 398.800657][ T5627] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 398.801345][ T5627] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 399.656616][T11381] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.656732][T11381] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.657223][T11381] bridge_slave_0: entered allmulticast mode [ 399.659347][T11381] bridge_slave_0: entered promiscuous mode [ 399.694042][T11381] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.694442][T11381] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.694596][T11381] bridge_slave_1: entered allmulticast mode [ 399.699059][T11381] bridge_slave_1: entered promiscuous mode [ 399.831072][T11381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.834967][T11381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.877866][T11419] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 399.883296][T11419] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 399.884364][T11419] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 399.885879][T11419] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 399.916916][T11419] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 399.948082][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.948271][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.948449][T11383] bridge_slave_0: entered allmulticast mode [ 399.950978][T11383] bridge_slave_0: entered promiscuous mode [ 399.999139][T11419] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 400.002641][T11419] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 400.003433][T11419] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 400.004974][T11419] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 400.022271][T11419] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 400.057903][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.057997][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.058133][T11383] bridge_slave_1: entered allmulticast mode [ 400.060160][T11383] bridge_slave_1: entered promiscuous mode [ 400.175955][T11381] team0: Port device team_slave_0 added [ 400.194182][T11383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.216142][T11383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.225436][T11381] team0: Port device team_slave_1 added [ 400.319541][T11383] team0: Port device team_slave_0 added [ 400.321344][T11381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.321360][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.321398][T11381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.326062][T11383] team0: Port device team_slave_1 added [ 400.333532][T11381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.333549][T11381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.333580][T11381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.483277][T11383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.483315][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.483856][T11383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.485836][T11383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.485850][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.485875][T11383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.738907][T11381] hsr_slave_0: entered promiscuous mode [ 400.742355][T11381] hsr_slave_1: entered promiscuous mode [ 400.743017][T11381] debugfs: 'hsr0' already exists in 'hsr' [ 400.743034][T11381] Cannot create hsr debugfs directory [ 400.806471][T11400] Bluetooth: hci15: command tx timeout [ 400.872124][T11383] hsr_slave_0: entered promiscuous mode [ 400.876074][T11383] hsr_slave_1: entered promiscuous mode [ 400.882493][T11383] debugfs: 'hsr0' already exists in 'hsr' [ 400.882556][T11383] Cannot create hsr debugfs directory [ 400.887778][T11400] Bluetooth: hci16: command tx timeout [ 400.929758][T11419] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 400.934366][T11419] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 400.953525][T11419] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 400.954558][T11419] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 400.955233][T11419] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 401.207712][T11400] Bluetooth: hci6: command 0x0406 tx timeout [ 401.207798][T11400] Bluetooth: hci8: command 0x0406 tx timeout [ 401.207845][T11400] Bluetooth: hci5: command 0x0406 tx timeout [ 401.207898][T11400] Bluetooth: hci7: command 0x0406 tx timeout [ 402.000614][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.000780][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.000888][T11422] bridge_slave_0: entered allmulticast mode [ 402.002165][T11422] bridge_slave_0: entered promiscuous mode [ 402.010433][ T5622] Bluetooth: hci17: command tx timeout [ 402.056388][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.056487][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.056894][T11422] bridge_slave_1: entered allmulticast mode [ 402.058549][T11422] bridge_slave_1: entered promiscuous mode [ 402.163164][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.176122][ T5622] Bluetooth: hci18: command tx timeout [ 402.200103][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.261566][T11422] team0: Port device team_slave_0 added [ 402.264829][T11418] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.264969][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.265413][T11418] bridge_slave_0: entered allmulticast mode [ 402.272097][T11418] bridge_slave_0: entered promiscuous mode [ 402.321100][T11422] team0: Port device team_slave_1 added [ 402.321761][T11418] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.321866][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.322037][T11418] bridge_slave_1: entered allmulticast mode [ 402.354045][T11418] bridge_slave_1: entered promiscuous mode [ 402.435822][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.454131][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.454149][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.454176][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.469616][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.519736][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.519750][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.519775][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.585017][T11418] team0: Port device team_slave_0 added [ 402.625896][T11418] team0: Port device team_slave_1 added [ 402.722356][T11418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.722375][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.722406][T11418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.723020][T11439] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.723175][T11439] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.723508][T11439] bridge_slave_0: entered allmulticast mode [ 402.725161][T11439] bridge_slave_0: entered promiscuous mode [ 402.806132][T11422] hsr_slave_0: entered promiscuous mode [ 402.811998][T11422] hsr_slave_1: entered promiscuous mode [ 402.814250][T11422] debugfs: 'hsr0' already exists in 'hsr' [ 402.814309][T11422] Cannot create hsr debugfs directory [ 402.818309][T11418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.818352][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.818419][T11418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.822275][T11439] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.822581][T11439] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.822948][T11439] bridge_slave_1: entered allmulticast mode [ 402.835361][T11439] bridge_slave_1: entered promiscuous mode [ 402.893222][ T5622] Bluetooth: hci15: command tx timeout [ 402.960058][T11439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.966679][ T5622] Bluetooth: hci16: command tx timeout [ 403.010561][T11439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.039617][T11418] hsr_slave_0: entered promiscuous mode [ 403.040812][T11418] hsr_slave_1: entered promiscuous mode [ 403.041338][T11418] debugfs: 'hsr0' already exists in 'hsr' [ 403.041356][T11418] Cannot create hsr debugfs directory [ 403.046547][ T5622] Bluetooth: hci19: command tx timeout [ 403.104259][T11439] team0: Port device team_slave_0 added [ 403.137524][T11439] team0: Port device team_slave_1 added [ 403.242954][T11439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.242971][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.242995][T11439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.302645][T11439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.302664][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.302690][T11439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.440042][T11439] hsr_slave_0: entered promiscuous mode [ 403.440853][T11439] hsr_slave_1: entered promiscuous mode [ 403.441486][T11439] debugfs: 'hsr0' already exists in 'hsr' [ 403.441507][T11439] Cannot create hsr debugfs directory [ 403.610089][ T11] block nbd0: Possible stuck request ffff8880271f5080: control (read@0,1024B). Runtime 210 seconds [ 403.610136][ T11] block nbd0: Possible stuck request ffff8880271f5240: control (read@1024,1024B). Runtime 210 seconds [ 403.610166][ T11] block nbd0: Possible stuck request ffff8880271f5400: control (read@2048,1024B). Runtime 210 seconds [ 403.610202][ T11] block nbd0: Possible stuck request ffff8880271f55c0: control (read@3072,1024B). Runtime 210 seconds [ 404.097485][ T5622] Bluetooth: hci17: command tx timeout [ 404.257739][ T4932] Bluetooth: hci18: command tx timeout [ 404.966496][ T4932] Bluetooth: hci15: command tx timeout [ 405.046611][ T4932] Bluetooth: hci16: command tx timeout [ 405.126580][ T4932] Bluetooth: hci19: command tx timeout [ 406.166608][ T4932] Bluetooth: hci17: command tx timeout [ 406.330087][ T4932] Bluetooth: hci9: command 0x0406 tx timeout [ 406.330113][ T5627] Bluetooth: hci18: command tx timeout [ 407.046653][ T5622] Bluetooth: hci15: command tx timeout [ 407.126525][ T5622] Bluetooth: hci16: command tx timeout [ 407.206498][ T5622] Bluetooth: hci19: command tx timeout [ 408.246880][ T5622] Bluetooth: hci17: command tx timeout [ 408.416473][ T5622] Bluetooth: hci18: command tx timeout [ 409.286626][ T5622] Bluetooth: hci19: command tx timeout [ 411.927333][ T32] INFO: task syz.3.1294:11139 blocked for more than 143 seconds. [ 411.927361][ T32] Not tainted syzkaller #0 [ 411.927373][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.927382][ T32] task:syz.3.1294 state:D stack:26536 pid:11139 tgid:11124 ppid:5618 task_flags:0x480140 flags:0x00080002 [ 411.927463][ T32] Call Trace: [ 411.927474][ T32] [ 411.927486][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.927512][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.927573][ T32] ? __pfx___schedule+0x10/0x10 [ 411.927589][ T32] ? lock_acquire+0x115/0x350 [ 411.927615][ T32] ? schedule+0x90/0x2b0 [ 411.927635][ T32] schedule+0x164/0x2b0 [ 411.927655][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 411.927684][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 411.927711][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 411.927748][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 411.927773][ T32] nbd_set_size+0x4c5/0x7d0 [ 411.927797][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 411.927833][ T32] ? nla_memcpy+0x5b/0xc0 [ 411.927864][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 411.927895][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 411.927929][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 411.927950][ T32] ? __nla_parse+0x40/0x60 [ 411.927977][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 411.928007][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 411.928035][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.928086][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.928113][ T32] genl_rcv_msg+0x614/0x7a0 [ 411.928140][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.928160][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 411.928204][ T32] netlink_rcv_skb+0x226/0x4a0 [ 411.928239][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.928261][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.928302][ T32] ? down_read+0x2be/0x330 [ 411.928329][ T32] genl_rcv+0x28/0x40 [ 411.928348][ T32] netlink_unicast+0x7bd/0x940 [ 411.928382][ T32] netlink_sendmsg+0x813/0xb40 [ 411.928418][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.928453][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 411.928477][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.928504][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 411.928539][ T32] ____sys_sendmsg+0x54e/0x850 [ 411.929271][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.929318][ T32] ? import_iovec+0x73/0xa0 [ 411.929350][ T32] ___sys_sendmsg+0x2a5/0x360 [ 411.929377][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.929406][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.929439][ T32] ? futex_wait+0x2a2/0x390 [ 411.929503][ T32] ? __fget_files+0x2a/0x420 [ 411.929534][ T32] ? __fget_files+0x3a2/0x420 [ 411.929585][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 411.929619][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.929671][ T32] do_syscall_64+0x166/0x520 [ 411.929696][ T32] ? trace_irq_disable+0x3b/0x140 [ 411.929717][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.929738][ T32] ? clear_bhb_loop+0x70/0xc0 [ 411.929765][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.929789][ T32] RIP: 0033:0x7f0633f9e159 [ 411.929808][ T32] RSP: 002b:00007f0634e6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.929832][ T32] RAX: ffffffffffffffda RBX: 00007f0634226180 RCX: 00007f0633f9e159 [ 411.929848][ T32] RDX: 702b396c7b056326 RSI: 0000200000001d80 RDI: 0000000000000004 [ 411.929863][ T32] RBP: 00007f063403506b R08: 0000000000000000 R09: 0000000000000000 [ 411.929878][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.929892][ T32] R13: 00007f0634226218 R14: 00007f0634226180 R15: 00007ffdb3009568 [ 411.929927][ T32] [ 411.929938][ T32] INFO: task syz.2.1297:11148 blocked for more than 143 seconds. [ 411.930657][ T32] Not tainted syzkaller #0 [ 411.930674][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.930685][ ** replaying previous printk message ** [ 411.930685][ T32] task:syz.2.1297 state:D stack:27488 pid:11148 tgid:11147 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 411.930755][ T32] Call Trace: [ 411.930769][ T32] [ 411.930784][ T32] __schedule+0x17db/0x58f0 [ 411.930840][ T32] ? __pfx___schedule+0x10/0x10 [ 411.930873][ T32] ? schedule+0x90/0x2b0 [ 411.930899][ T32] schedule+0x164/0x2b0 [ 411.930923][ T32] schedule_preempt_disabled+0x13/0x30 [ 411.930946][ T32] __mutex_lock+0x7c1/0x1550 [ 411.930977][ T32] ? __mutex_lock+0x5d4/0x1550 [ 411.931006][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 411.931035][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 411.931067][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 411.931105][ T32] ? radix_tree_lookup+0x240/0x290 [ 411.931144][ T32] genl_rcv_msg+0x10b/0x7a0 [ 411.931177][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.931220][ T32] netlink_rcv_skb+0x226/0x4a0 [ 411.931255][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.931282][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.931332][ T32] ? down_read+0x2be/0x330 [ 411.931364][ T32] genl_rcv+0x28/0x40 [ 411.931387][ T32] netlink_unicast+0x7bd/0x940 [ 411.931429][ T32] netlink_sendmsg+0x813/0xb40 [ 411.931473][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.931515][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 411.931552][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.931584][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 411.931623][ T32] __sys_sendto+0x408/0x5a0 [ 411.931656][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 411.931715][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 411.931743][ T32] __x64_sys_sendto+0xde/0x100 [ 411.931774][ T32] do_syscall_64+0x166/0x520 [ 411.931799][ T32] ? trace_irq_disable+0x3b/0x140 [ 411.931821][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.931845][ T32] ? clear_bhb_loop+0x70/0xc0 [ 411.931873][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.931897][ T32] RIP: 0033:0x7f463735e98e [ 411.931916][ T32] RSP: 002b:00007f46382b8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.931939][ T32] RAX: ffffffffffffffda RBX: 00007f46382ba6c0 RCX: 00007f463735e98e [ 411.931955][ T32] RDX: 0000000000000020 RSI: 00007f46382b9000 RDI: 0000000000000004 [ 411.931970][ T32] RBP: 0000000000000000 R08: 00007f46382b8f04 R09: 000000000000000c [ 411.931984][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 411.931998][ T32] R13: 00007f46382b8f58 R14: 00007f46382b9000 R15: 0000000000000000 [ 411.932033][ T32] [ 411.932043][ T32] INFO: task syz.2.1297:11151 blocked for more than 143 seconds. [ 411.932061][ T32] Not tainted syzkaller #0 [ 411.932072][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.932082][ T32] task:syz.2.1297 state:D stack:26376 pid:11151 tgid:11147 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 411.932148][ T32] Call Trace: [ 411.932155][ T32] [ 411.932169][ T32] __schedule+0x17db/0x58f0 [ 411.932223][ T32] ? __pfx___schedule+0x10/0x10 [ 411.932255][ T32] ? schedule+0x90/0x2b0 [ 411.932281][ T32] schedule+0x164/0x2b0 [ 411.932306][ T32] schedule_preempt_disabled+0x13/0x30 [ 411.932328][ T32] __mutex_lock+0x7c1/0x1550 [ 411.932358][ T32] ? __mutex_lock+0x5d4/0x1550 [ 411.932388][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 411.932415][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 411.932448][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 411.932485][ T32] ? radix_tree_lookup+0x240/0x290 [ 411.932523][ T32] genl_rcv_msg+0x10b/0x7a0 [ 411.932562][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.932607][ T32] netlink_rcv_skb+0x226/0x4a0 [ 411.932641][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.932668][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.932726][ T32] ? down_read+0x2be/0x330 [ 411.932758][ T32] genl_rcv+0x28/0x40 [ 411.932782][ T32] netlink_unicast+0x7bd/0x940 [ 411.932824][ T32] netlink_sendmsg+0x813/0xb40 [ 411.932867][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.932910][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 411.932937][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.932970][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 411.933008][ T32] ____sys_sendmsg+0x54e/0x850 [ 411.933044][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.933095][ T32] ? import_iovec+0x73/0xa0 [ 411.933127][ T32] ___sys_sendmsg+0x2a5/0x360 [ 411.933156][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.933185][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.933219][ T32] ? futex_wait+0x2a2/0x390 [ 411.933285][ T32] ? __fget_files+0x2a/0x420 [ 411.933317][ T32] ? __fget_files+0x3a2/0x420 [ 411.933360][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 411.933399][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.933453][ T32] do_syscall_64+0x166/0x520 [ 411.933477][ T32] ? trace_irq_disable+0x3b/0x140 [ 411.933499][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.933523][ T32] ? clear_bhb_loop+0x70/0xc0 [ 411.933557][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.933581][ T32] RIP: 0033:0x7f463739e159 [ 411.933600][ T32] RSP: 002b:00007f4638299028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.933623][ T32] RAX: ffffffffffffffda RBX: 00007f4637626090 RCX: 00007f463739e159 [ 411.933640][ T32] RDX: 000000002000c000 RSI: 0000200000000000 RDI: 0000000000000007 [ 411.933656][ T32] RBP: 00007f463743506b R08: 0000000000000000 R09: 0000000000000000 [ 411.933671][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.933685][ T32] R13: 00007f4637626128 R14: 00007f4637626090 R15: 00007ffc3d3e9ee8 [ 411.933726][ T32] [ 411.933736][ T32] INFO: task syz.4.1301:11158 blocked for more than 143 seconds. [ 411.933753][ T32] Not tainted syzkaller #0 [ 411.933764][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.933774][ T32] task:syz.4.1301 state:D stack:28344 pid:11158 tgid:11157 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 411.933841][ T32] Call Trace: [ 411.933848][ T32] [ 411.933862][ T32] __schedule+0x17db/0x58f0 [ 411.933916][ T32] ? __pfx___schedule+0x10/0x10 [ 411.933948][ T32] ? schedule+0x90/0x2b0 [ 411.933974][ T32] schedule+0x164/0x2b0 [ 411.933998][ T32] schedule_preempt_disabled+0x13/0x30 [ 411.934021][ T32] __mutex_lock+0x7c1/0x1550 [ 411.934052][ T32] ? __mutex_lock+0x5d4/0x1550 [ 411.934082][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 411.934110][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 411.934137][ T32] ? stack_trace_save+0xa9/0x100 [ 411.934177][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.934205][ T32] ? radix_tree_lookup+0x240/0x290 [ 411.934244][ T32] genl_rcv_msg+0x10b/0x7a0 [ 411.934277][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.934321][ T32] netlink_rcv_skb+0x226/0x4a0 [ 411.934385][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.934413][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.934463][ T32] ? down_read+0x2be/0x330 [ 411.934495][ T32] genl_rcv+0x28/0x40 [ 411.934518][ T32] netlink_unicast+0x7bd/0x940 [ 411.934567][ T32] netlink_sendmsg+0x813/0xb40 [ 411.934599][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 411.934642][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.934686][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 411.934712][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.934749][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 411.934777][ T32] ____sys_sendmsg+0x54e/0x850 [ 411.934802][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.934831][ T32] ? import_iovec+0x73/0xa0 [ 411.934853][ T32] ___sys_sendmsg+0x2a5/0x360 [ 411.934873][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.934892][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.934916][ T32] ? futex_wake+0x51b/0x5f0 [ 411.934961][ T32] ? __fget_files+0x2a/0x420 [ 411.934983][ T32] ? __fget_files+0x3a2/0x420 [ 411.935013][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 411.935036][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.935075][ T32] do_syscall_64+0x166/0x520 [ 411.935092][ T32] ? trace_irq_disable+0x3b/0x140 [ 411.935108][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.935124][ T32] ? clear_bhb_loop+0x70/0xc0 [ 411.935144][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.935160][ T32] RIP: 0033:0x7fe14f99e159 [ 411.935173][ T32] RSP: 002b:00007fe1507f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.935189][ T32] RAX: ffffffffffffffda RBX: 00007fe14fc25fa0 RCX: 00007fe14f99e159 [ 411.935201][ T32] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000046 [ 411.935211][ T32] RBP: 00007fe14fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 411.935222][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.935231][ T32] R13: 00007fe14fc26038 R14: 00007fe14fc25fa0 R15: 00007ffcd8d4e7b8 [ 411.935256][ T32] [ 411.935263][ T32] INFO: task syz.1.1302:11161 blocked for more than 143 seconds. [ 411.935275][ T32] Not tainted syzkaller #0 [ 411.935283][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.935289][ T32] task:syz.1.1302 state:D stack:26608 pid:11161 tgid:11159 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 411.935335][ T32] Call Trace: [ 411.935341][ T32] [ 411.935350][ T32] __schedule+0x17db/0x58f0 [ 411.935385][ T32] ? __pfx___schedule+0x10/0x10 [ 411.935408][ T32] ? schedule+0x90/0x2b0 [ 411.935425][ T32] schedule+0x164/0x2b0 [ 411.935442][ T32] schedule_preempt_disabled+0x13/0x30 [ 411.935458][ T32] __mutex_lock+0x7c1/0x1550 [ 411.935485][ T32] ? __mutex_lock+0x5d4/0x1550 [ 411.935505][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 411.935524][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 411.935548][ T32] ? stack_trace_save+0xa9/0x100 [ 411.935575][ T32] ? __lock_acquire+0x747/0x2de0 [ 411.935595][ T32] ? radix_tree_lookup+0x240/0x290 [ 411.935623][ T32] genl_rcv_msg+0x10b/0x7a0 [ 411.935645][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.935675][ T32] netlink_rcv_skb+0x226/0x4a0 [ 411.935699][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.935718][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.935753][ T32] ? down_read+0x2be/0x330 [ 411.935775][ T32] genl_rcv+0x28/0x40 [ 411.935791][ T32] netlink_unicast+0x7bd/0x940 [ 411.935820][ T32] netlink_sendmsg+0x813/0xb40 [ 411.935851][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.935882][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 411.935901][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.935924][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 411.935951][ T32] __sys_sendto+0x408/0x5a0 [ 411.935974][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 411.936014][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 411.936034][ T32] __x64_sys_sendto+0xde/0x100 [ 411.936058][ T32] do_syscall_64+0x166/0x520 [ 411.936075][ T32] ? trace_irq_disable+0x3b/0x140 [ 411.936090][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.936107][ T32] ? clear_bhb_loop+0x70/0xc0 [ 411.936127][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.936143][ T32] RIP: 0033:0x7f27b655e98e [ 411.936156][ T32] RSP: 002b:00007f27b7477e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.936171][ T32] RAX: ffffffffffffffda RBX: 00007f27b74796c0 RCX: 00007f27b655e98e [ 411.944135][ T32] RDX: 0000000000000024 RSI: 00007f27b7478000 RDI: 0000000000000006 [ 411.944157][ T32] RBP: 0000000000000000 R08: 00007f27b7477f04 R09: 000000000000000c [ 411.944172][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 411.944186][ T32] R13: 00007f27b7477f58 R14: 00007f27b7478000 R15: 0000000000000000 [ 411.944223][ T32] [ 411.944235][ T32] INFO: task syz.0.1307:11182 blocked for more than 143 seconds. [ 411.944253][ T32] Not tainted syzkaller #0 [ 411.944264][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.944275][ T32] task:syz.0.1307 state:D stack:27256 pid:11182 tgid:11181 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 411.944344][ T32] Call Trace: [ 411.944352][ T32] [ 411.944366][ T32] __schedule+0x17db/0x58f0 [ 411.944425][ T32] ? __pfx___schedule+0x10/0x10 [ 411.944460][ T32] ? schedule+0x90/0x2b0 [ 411.944486][ T32] schedule+0x164/0x2b0 [ 411.944510][ T32] schedule_preempt_disabled+0x13/0x30 [ 411.944532][ T32] __mutex_lock+0x7c1/0x1550 [ 411.944572][ T32] ? __mutex_lock+0x5d4/0x1550 [ 411.944602][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 411.944631][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 411.944664][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 411.944702][ T32] ? radix_tree_lookup+0x240/0x290 [ 411.944742][ T32] genl_rcv_msg+0x10b/0x7a0 [ 411.944775][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.944820][ T32] netlink_rcv_skb+0x226/0x4a0 [ 411.944855][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.944883][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.944934][ T32] ? down_read+0x2be/0x330 [ 411.944966][ T32] genl_rcv+0x28/0x40 [ 411.944990][ T32] netlink_unicast+0x7bd/0x940 [ 411.945033][ T32] netlink_sendmsg+0x813/0xb40 [ 411.945078][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.945122][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 411.945151][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.945184][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 411.945224][ T32] __sys_sendto+0x408/0x5a0 [ 411.945258][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 411.945318][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 411.945346][ T32] __x64_sys_sendto+0xde/0x100 [ 411.945378][ T32] do_syscall_64+0x166/0x520 [ 411.945404][ T32] ? trace_irq_disable+0x3b/0x140 [ 411.945427][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.945451][ T32] ? clear_bhb_loop+0x70/0xc0 [ 411.945480][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.945504][ T32] RIP: 0033:0x7f970cb5e98e [ 411.945525][ T32] RSP: 002b:00007f970db20e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.079981][ T32] RAX: ffffffffffffffda RBX: 00007f970db226c0 RCX: 00007f970cb5e98e [ 412.080001][ T32] RDX: 0000000000000020 RSI: 00007f970db21000 RDI: 0000000000000005 [ 412.080016][ T32] RBP: 0000000000000000 R08: 00007f970db20f04 R09: 000000000000000c [ 412.080030][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 412.080046][ T32] R13: 00007f970db20f58 R14: 00007f970db21000 R15: 0000000000000000 [ 412.080081][ T32] [ 412.080120][ T32] INFO: task syz.0.1307:11183 blocked for more than 143 seconds. [ 412.080138][ T32] Not tainted syzkaller #0 [ 412.080150][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.080160][ T32] task:syz.0.1307 state:D stack:27200 pid:11183 tgid:11181 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 412.080229][ T32] Call Trace: [ 412.080237][ T32] [ 412.080251][ T32] __schedule+0x17db/0x58f0 [ 412.080309][ T32] ? __pfx___schedule+0x10/0x10 [ 412.080342][ T32] ? schedule+0x90/0x2b0 [ 412.080368][ T32] schedule+0x164/0x2b0 [ 412.080394][ T32] schedule_preempt_disabled+0x13/0x30 [ 412.080432][ T32] __mutex_lock+0x7c1/0x1550 [ 412.080464][ T32] ? __mutex_lock+0x5d4/0x1550 [ 412.080494][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 412.080522][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 412.080554][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 412.080593][ T32] ? radix_tree_lookup+0x240/0x290 [ 412.080632][ T32] genl_rcv_msg+0x10b/0x7a0 [ 412.080664][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.080709][ T32] netlink_rcv_skb+0x226/0x4a0 [ 412.080744][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.080771][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.080822][ T32] ? down_read+0x2be/0x330 [ 412.080854][ T32] genl_rcv+0x28/0x40 [ 412.080877][ T32] netlink_unicast+0x7bd/0x940 [ 412.080920][ T32] netlink_sendmsg+0x813/0xb40 [ 412.080964][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.081009][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 412.081049][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.081081][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 412.081119][ T32] __sys_sendto+0x408/0x5a0 [ 412.081151][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 412.081175][ T32] ? errseq_sample+0x40/0x70 [ 412.081228][ T32] ? fd_install+0x94/0x3d0 [ 412.081256][ T32] ? fd_install+0x309/0x3d0 [ 412.081293][ T32] __x64_sys_sendto+0xde/0x100 [ 412.081343][ T32] do_syscall_64+0x166/0x520 [ 412.081368][ T32] ? trace_irq_disable+0x3b/0x140 [ 412.081391][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.100473][ T32] ? clear_bhb_loop+0x70/0xc0 [ 412.100578][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.100649][ T32] RIP: 0033:0x7f970cb5e98e [ 412.100701][ T32] RSP: 002b:00007f970daffe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.100774][ T32] RAX: ffffffffffffffda RBX: 00007f970db016c0 RCX: 00007f970cb5e98e [ 412.100818][ T32] RDX: 000000000000001c RSI: 00007f970db00000 RDI: 0000000000000007 [ 412.100860][ T32] RBP: 0000000000000000 R08: 00007f970dafff04 R09: 000000000000000c [ 412.100901][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 412.100943][ T32] R13: 00007f970dafff58 R14: 00007f970db00000 R15: 0000000000000000 [ 412.101029][ T32] [ 412.101060][ T32] INFO: task syz.0.1307:11187 blocked for more than 143 seconds. [ 412.101138][ T32] Not tainted syzkaller #0 [ 412.101163][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.101193][ T32] task:syz.0.1307 state:D stack:27872 pid:11187 tgid:11181 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 412.101380][ T32] Call Trace: [ 412.101402][ T32] [ 412.101422][ T32] __schedule+0x17db/0x58f0 [ 412.101565][ T32] ? __pfx___schedule+0x10/0x10 [ 412.101649][ T32] ? schedule+0x90/0x2b0 [ 412.101730][ T32] schedule+0x164/0x2b0 [ 412.101800][ T32] schedule_preempt_disabled+0x13/0x30 [ 412.101863][ T32] __mutex_lock+0x7c1/0x1550 [ 412.101958][ T32] ? __mutex_lock+0x5d4/0x1550 [ 412.107996][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 412.108090][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 412.108183][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 412.108303][ T32] ? radix_tree_lookup+0x240/0x290 [ 412.108408][ T32] genl_rcv_msg+0x10b/0x7a0 [ 412.108494][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.108610][ T32] netlink_rcv_skb+0x226/0x4a0 [ 412.108712][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.108786][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.108928][ T32] ? down_read+0x2be/0x330 [ 412.109013][ T32] genl_rcv+0x28/0x40 [ 412.109082][ T32] netlink_unicast+0x7bd/0x940 [ 412.109203][ T32] netlink_sendmsg+0x813/0xb40 [ 412.109318][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.109420][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 412.114282][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.114385][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 412.114495][ T32] __sys_sendto+0x408/0x5a0 [ 412.114583][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 412.114639][ T32] ? errseq_sample+0x40/0x70 [ 412.114809][ T32] ? fd_install+0x94/0x3d0 [ 412.114884][ T32] ? fd_install+0x309/0x3d0 [ 412.115019][ T32] __x64_sys_sendto+0xde/0x100 [ 412.115105][ T32] do_syscall_64+0x166/0x520 [ 412.115168][ T32] ? trace_irq_disable+0x3b/0x140 [ 412.115231][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.115294][ T32] ? clear_bhb_loop+0x70/0xc0 [ 412.115367][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.115432][ T32] RIP: 0033:0x7f970cb5e98e [ 412.115490][ T32] RSP: 002b:00007f970dadee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.115557][ T32] RAX: ffffffffffffffda RBX: 00007f970dae06c0 RCX: 00007f970cb5e98e [ 412.115606][ T32] RDX: 0000000000000020 RSI: 00007f970dadf000 RDI: 0000000000000006 [ 412.115647][ T32] RBP: 0000000000000000 R08: 00007f970dadef04 R09: 000000000000000c [ 412.115688][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 412.115722][ T32] R13: 00007f970dadef58 R14: 00007f970dadf000 R15: 0000000000000000 [ 412.119571][ T32] [ 412.119617][ T32] INFO: task syz.0.1307:11190 blocked for more than 143 seconds. [ 412.119636][ T32] Not tainted syzkaller #0 [ 412.119647][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.119657][ T32] task:syz.0.1307 state:D stack:27872 pid:11190 tgid:11181 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 412.119725][ T32] Call Trace: [ 412.119733][ T32] [ 412.119755][ T32] __schedule+0x17db/0x58f0 [ 412.119932][ T32] ? __pfx___schedule+0x10/0x10 [ 412.120032][ T32] ? schedule+0x90/0x2b0 [ 412.120097][ T32] schedule+0x164/0x2b0 [ 412.120163][ T32] schedule_preempt_disabled+0x13/0x30 [ 412.120225][ T32] __mutex_lock+0x7c1/0x1550 [ 412.120308][ T32] ? __mutex_lock+0x5d4/0x1550 [ 412.120382][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 412.120451][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 412.120536][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 412.120631][ T32] ? radix_tree_lookup+0x240/0x290 [ 412.120733][ T32] genl_rcv_msg+0x10b/0x7a0 [ 412.120820][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.120940][ T32] netlink_rcv_skb+0x226/0x4a0 [ 412.125931][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.126020][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.126156][ T32] ? down_read+0x2be/0x330 [ 412.129096][ T32] genl_rcv+0x28/0x40 [ 412.129170][ T32] netlink_unicast+0x7bd/0x940 [ 412.129292][ T32] netlink_sendmsg+0x813/0xb40 [ 412.129411][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.129478][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 412.129507][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.129539][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 412.129630][ T32] __sys_sendto+0x408/0x5a0 [ 412.129733][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 412.129836][ T32] ? errseq_sample+0x40/0x70 [ 412.129983][ T32] ? fd_install+0x94/0x3d0 [ 412.134486][ T32] ? fd_install+0x309/0x3d0 [ 412.134605][ T32] __x64_sys_sendto+0xde/0x100 [ 412.134689][ T32] do_syscall_64+0x166/0x520 [ 412.134755][ T32] ? trace_irq_disable+0x3b/0x140 [ 412.134826][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.134891][ T32] ? clear_bhb_loop+0x70/0xc0 [ 412.134973][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.135044][ T32] RIP: 0033:0x7f970cb5e98e [ 412.135111][ T32] RSP: 002b:00007f970dabde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.135182][ T32] RAX: ffffffffffffffda RBX: 00007f970dabf6c0 RCX: 00007f970cb5e98e [ 412.135223][ T32] RDX: 0000000000000028 RSI: 00007f970dabe000 RDI: 0000000000000008 [ 412.135265][ T32] RBP: 0000000000000000 R08: 00007f970dabdf04 R09: 000000000000000c [ 412.135304][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 412.135345][ T32] R13: 00007f970dabdf58 R14: 00007f970dabe000 R15: 0000000000000000 [ 412.135432][ T32] [ 412.143098][ T32] [ 412.143098][ T32] Showing all locks held in the system: [ 412.143138][ T32] locks held by kworker/u8:1/13: 5, last CPU#1: [ 412.143166][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.149419][ T32] #1: ffffc90000127c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.149617][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 412.149795][ T32] #3: ffffffff8ee388a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 412.149966][ T32] #4: ffffffff8ebff6a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 412.150172][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 412.150221][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 412.150377][ T32] #1: ffffffff9ad3a098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 412.150555][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 412.150597][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 412.150841][ T32] locks held by getty/5372: 2, on CPU#0: [ 412.150884][ T32] #0: ffff888032b850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 412.160374][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 412.160557][ T32] locks held by udevd/5619: 1, on CPU#0: [ 412.160598][ T32] #0: ffff88802709c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 412.160778][ T32] locks held by kworker/0:8/7082: 2, last CPU#0: [ 412.160821][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.161010][ T32] #1: ffffc9000540fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 412.161219][ T32] locks held by syz.3.1294/11139: 6, on CPU#0: [ 412.161262][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.161424][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.161574][ T32] #2: ffff88802717b260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 412.161751][ T32] #3: ffff8880271847c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 412.161943][ T32] #4: ffff888027184190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 412.181903][ T32] #5: ffff8880271841c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 412.182088][ T32] locks held by syz.2.1297/11148: 2, on CPU#0: [ 412.182132][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.182294][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.182476][ T32] locks held by syz.2.1297/11151: 2, on CPU#0: [ 412.182517][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.182663][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.182811][ T32] locks held by syz.4.1301/11158: 2, on CPU#0: [ 412.182853][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.182999][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.183146][ T32] locks held by syz.1.1302/11161: 2, on CPU#0: [ 412.183188][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.183336][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.195120][ T32] locks held by syz.0.1307/11182: 2, on CPU#1: [ 412.195171][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.195304][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.195445][ T32] locks held by syz.0.1307/11183: 2, on CPU#0: [ 412.195487][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.195632][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.195780][ T32] locks held by syz.0.1307/11187: 2, on CPU#0: [ 412.195828][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.195969][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.196125][ T32] locks held by syz.0.1307/11190: 2, on CPU#0: [ 412.196167][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.207815][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.207990][ T32] locks held by syz-executor/11195: 2, on CPU#1: [ 412.208031][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.208179][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.208335][ T32] locks held by syz-executor/11198: 2, on CPU#1: [ 412.208376][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.208506][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.208621][ T32] locks held by syz-executor/11199: 2, on CPU#1: [ 412.208637][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.208701][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.208905][ T32] locks held by syz-executor/11201: 2, on CPU#0: [ 412.208946][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.209152][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.222207][ T32] locks held by syz-executor/11240: 2, on CPU#1: [ 412.222260][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.222415][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.222590][ T32] locks held by syz-executor/11289: 2, on CPU#0: [ 412.222631][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.222778][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.222945][ T32] locks held by syz-executor/11292: 2, on CPU#0: [ 412.222987][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.223125][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.223269][ T32] locks held by syz-executor/11296: 2, on CPU#1: [ 412.223308][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.223464][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.223611][ T32] locks held by syz-executor/11300: 2, on CPU#1: [ 412.223652][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.237455][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.237621][ T32] locks held by syz-executor/11331: 2, on CPU#1: [ 412.237663][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.237812][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.237979][ T32] locks held by syz-executor/11379: 2, last CPU#1: [ 412.238019][ T32] #0: ffff888076fb5cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 412.238210][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 412.238371][ T32] locks held by syz-executor/11380: 2, last CPU#1: [ 412.238405][ T32] #0: ffff888076fb1078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 412.238558][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 412.238745][ T32] locks held by syz-executor/11381: 2, on CPU#1: [ 412.238786][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.254438][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.254608][ T32] locks held by syz-executor/11383: 2, on CPU#1: [ 412.254657][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.254797][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.254963][ T32] locks held by syz-executor/11413: 2, last CPU#1: [ 412.255005][ T32] #0: ffff888076e4f678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 412.255181][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 412.255377][ T32] locks held by syz-executor/11414: 2, last CPU#1: [ 412.255421][ T32] #0: ffff88801b09d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 412.255583][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 412.255730][ T32] locks held by syz-executor/11418: 2, on CPU#0: [ 412.255771][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.276710][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.276877][ T32] locks held by syz-executor/11422: 2, on CPU#1: [ 412.276910][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.276989][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.277173][ T32] locks held by syz-executor/11433: 2, last CPU#1: [ 412.277216][ T32] #0: ffff88801b09a9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 412.277398][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 412.277559][ T32] locks held by syz-executor/11439: 2, on CPU#1: [ 412.277608][ T32] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.277791][ T32] #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 412.279713][ T32] [ 412.299911][ T32] ============================================= [ 412.299911][ T32] [ 412.299971][ T32] NMI backtrace for cpu 1 [ 412.300014][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.300085][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.300125][ T32] Call Trace: [ 412.300155][ T32] [ 412.300184][ T32] dump_stack_lvl+0xe8/0x150 [ 412.300288][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 412.300376][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.300466][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 412.300560][ T32] sys_info+0x135/0x170 [ 412.300634][ T32] watchdog+0xfd7/0x1030 [ 412.300716][ T32] ? watchdog+0x1c7/0x1030 [ 412.300792][ T32] kthread+0x38b/0x480 [ 412.300855][ T32] ? __pfx_watchdog+0x10/0x10 [ 412.300916][ T32] ? __pfx_kthread+0x10/0x10 [ 412.300980][ T32] ret_from_fork+0x514/0xb70 [ 412.301042][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 412.301078][ T32] ? __switch_to+0xc89/0x1420 [ 412.301112][ T32] ? __pfx_kthread+0x10/0x10 [ 412.301135][ T32] ret_from_fork_asm+0x1a/0x30 [ 412.301268][ T32] [ 412.301282][ T32] Sending NMI from CPU 1 to CPUs 0: [ 412.301351][ C0] NMI backtrace for cpu 0 [ 412.301365][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 412.301392][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.301406][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 412.301433][ C0] Code: 24 55 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1c 24 c5 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 412.301451][ C0] RSP: 0018:ffffc90000157900 EFLAGS: 00000002 [ 412.301468][ C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 412.301480][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 412.301492][ C0] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 412.301504][ C0] R10: dffffc0000000000 R11: ffffffff8572a630 R12: dffffc0000000000 [ 412.301519][ C0] R13: 0000000000000020 R14: ffffffff9ad3a0c0 R15: 0000000000000000 [ 412.301532][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 412.301548][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.301562][ C0] CR2: 00007fffe1124c10 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 412.301579][ C0] Call Trace: [ 412.301586][ C0] [ 412.301595][ C0] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 412.301627][ C0] serial8250_console_write+0xaa1/0x1200 [ 412.301653][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 412.301672][ C0] ? __schedule+0x17f1/0x58f0 [ 412.301699][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 412.301728][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 412.301752][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 412.301780][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 412.301811][ C0] nbcon_kthread_func+0x679/0x880 [ 412.301834][ C0] ? nbcon_kthread_func+0x163/0x880 [ 412.301853][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 412.301876][ C0] ? __kthread_parkme+0x71/0x1f0 [ 412.301905][ C0] ? __kthread_parkme+0x199/0x1f0 [ 412.301934][ C0] kthread+0x38b/0x480 [ 412.301952][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 412.301969][ C0] ? __pfx_kthread+0x10/0x10 [ 412.301988][ C0] ret_from_fork+0x514/0xb70 [ 412.302006][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.302035][ C0] ? __switch_to+0xc89/0x1420 [ 412.302062][ C0] ? __pfx_kthread+0x10/0x10 [ 412.302080][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.302117][ C0] [ 412.326740][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 415.747765][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.756891][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.766966][ T32] Call Trace: [ 415.770269][ T32] [ 415.773225][ T32] vpanic+0x56d/0xa60 [ 415.777239][ T32] ? __pfx___schedule+0x10/0x10 [ 415.782111][ T32] ? __pfx_vpanic+0x10/0x10 [ 415.786651][ T32] panic+0xc5/0xd0 [ 415.790402][ T32] ? __pfx_panic+0x10/0x10 [ 415.794841][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 415.800326][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 415.805723][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 415.811912][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 415.818100][ T32] watchdog+0x1030/0x1030 [ 415.822456][ T32] ? watchdog+0x1c7/0x1030 [ 415.826895][ T32] kthread+0x38b/0x480 [ 415.830988][ T32] ? __pfx_watchdog+0x10/0x10 [ 415.835686][ T32] ? __pfx_kthread+0x10/0x10 [ 415.840299][ T32] ret_from_fork+0x514/0xb70 [ 415.844906][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 415.850050][ T32] ? __switch_to+0xc89/0x1420 [ 415.854762][ T32] ? __pfx_kthread+0x10/0x10 [ 415.859374][ T32] ret_from_fork_asm+0x1a/0x30 [ 415.864179][ T32] [ 415.867850][ T32] Kernel Offset: disabled [ 415.872188][ T32] Rebooting in 86400 seconds..