last executing test programs: 1m23.354082112s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00040008000300", @ANYRES32=r6, @ANYBLOB="9e020e0080000000ffffffffffffffffffffffff08021100000000000000000000000000a80101000301ae040603097f00fc00058c00bb0d170b28ee8445636e5bfa958041f15a66a8563a4c305939789d276435ca29d80a5e9d7cb58e8ee5143f6107c64065912fed0e726325d938fbd89481f16d6b24d5dbb36da4e752a3c6c25b7de5874f97ad82d6c707bef134739f4f83ea75313e6c80c9abe06eb2e6d7053f8c7c0afba242d671d3f8d3b002a277c66ee1481d043aeead372c201898d2692503002404720603030303030371070000ffffff2d4076060bff1b000104dd1e9fdb98b747bf37367c3e9ba6913dfb85657470478282a45c32e6c15973b1ddb413497066c1cdb9e6985f4bcab92da71b35aafa76272fb09c9484351ad6d5156a898e04e109e438359a920ecd348e01545f96ca5adda2c9c9204ffe748b10727842286c55d4c6b9999b55d95d14b83460fb9382ec393676b47199631a444006053627ac261fc7cce7a7c1f2e903e53302b14a9aaaad58c6b336ab7655a19a1a7460e915784a280340bd045fb237c1b64e5c633cb37109f6745f7b25d7420ae0145ee4422ef7866a39a1c806363422a1cf1bcc8087dd8efc5b31c1e1d9c3cdd4b74458d508028800af8e91450a4cefab075f1cad1371064435203f1dc74a8f54922458e48147a5c44014b3e58d5d5b3ec0f6f0d40528490c1651008effdf37c138a7cc94eb8d806071ec868edc9245308bfafc56be7595e702c366c58d79fdae1d216118d3a058c7061f4d30fd33d569ea300636aacbdf69945c703ca6bba3288be730cd05dd573f491c795bf687b7b6d41dfdc4b44cc39e29129d87382c5fdd10010fa3eb97bd2a9ec6e5e2dc0e3302f299dd4d8ecfa014cd2a16b99fbba476b58ea569b3dd42565280b1df66112af99415d528c88ecdab0a41299c158f0000080026006414000008000c006400000008000d00"], 0x2d8}}, 0x4040870) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18, 0x4c00}, 0xd0) 1m21.978870237s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001400000429bd703ef4dbdf250a1008ff", @ANYRES32=r4, @ANYBLOB="08000a000400000014000600040000000400000003000000d10000001400010020010000000000000000000000000000140001002001000000000000000000000000000108000a000300000008000900eb00000008000a00040000000800090002000000080008004000000008000a0004000000"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4bd}}, 0x3822, 0x7, 0x0, 0xdef, 0x82, 0x1000, 0x38}, 0x9c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000100)="e26cdea877e57bbd301c3118b2f57855497fede94089755fdcb28a05d986b317fbf136", &(0x7f0000000140)=""/145}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYRES64=r8], 0x2c}}, 0x0) 1m17.86259947s ago: executing program 3 (id=1081): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000bc8020"], &(0x7f0000000300)='GPL\x00', 0xb}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x169}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) r4 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r9, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001900000325bd7000fedbdf250a1414010000fe060030000008000300", @ANYRES32=r6, @ANYBLOB="080019000d1d7c9943dc4581f3f0079305156a6fdc45d70cff789b1cf61bd79f3343121f93be7ffb97db32877aba4cafa793912b8594b646fa5afc9989c88438512b6230146096f58482c5696e0724e1cff9ade3bad1bc8b1f3216d6e03cc01ce3f8077aeb687d69b90afc356bd24ee5e161af7351261c16e5ba9146f887c78fd59e58db5bb80d1ed4c9a07d78d8e3ecfacfea95c33da035af98617b7a2ea643d2fb84341edf7c2c57e66c89ae8fac", @ANYRES32=r7, @ANYBLOB="080017000500000008000300", @ANYRES32=r9, @ANYBLOB="080006000800000008000300", @ANYRES32=r12, @ANYBLOB="08001900", @ANYRES32=r14, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1m17.324317428s ago: executing program 3 (id=1085): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0x9, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r1, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x8, @local, 0x9}}, 0x1000, 0xc, 0xfb3, 0x125, 0x20, 0xfffffff8, 0xe}, 0x9c) socketpair(0x2c, 0x800, 0x9, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000380)=0xfffffffe, 0x4) connect$caif(r4, &(0x7f00000003c0)=@rfm={0x25, 0x99a, "1cac75129837b952227c9bae7fefe3de"}, 0x18) r6 = socket(0x27, 0x4, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r3, 0x18, "45468c7f509943dc3e8d1dd6464c420470b8abbee18b833b"}, &(0x7f0000000480)=0x20) connect$rds(r6, &(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000500)={0x2, 'veth0_to_hsr\x00'}, 0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000540)={0x0, 'dvmrp0\x00', {0x2}, 0xe}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20048000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000006c0)={r3, 0x2}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r9, 0x0, 0x4, [0x1, 0x8, 0x4, 0x7fff]}, &(0x7f0000000780)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000007c0)={r2, @in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80}}, 0x6, 0x800, 0xfffffffc, 0x0, 0x8a, 0x10001, 0x10}, 0x9c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000880)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f00000008c0)=""/243, &(0x7f00000009c0)=0xf3) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000ac0)={'macsec0\x00', &(0x7f0000000a40)=@ethtool_coalesce={0xf, 0x2205, 0x1, 0x80000001, 0xfffffff9, 0x5, 0x8, 0x8, 0x400, 0x6, 0xc52d, 0xa, 0x6, 0x0, 0x3, 0x1, 0xfffff001, 0x5, 0x4, 0x2, 0x1, 0x7fffffff, 0x3}}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000b00)) socket$key(0xf, 0x3, 0x2) 1m17.090715823s ago: executing program 3 (id=1087): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", '\x00\x00\x00\x00\a\x00'}, 0x38) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) shutdown(r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1m16.869275674s ago: executing program 3 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079104f0000000000c30000000000000095000000000000005f28915975974c9a146f45d1e506b532a635cc34ca7fdf6590722013dfe2bccf41bdb189b413016ba188a4ee95ad313f63a320864846b51ec0541a7d889da1c3caee65ebb681b4eee400d91a7d8aae93ed47883fe6f8eac1c878e62af215d6eaccd90a9928c70205ff89f111e646db51c57502e235c6307e5521cd1a8102e235889409a6ed96e2adf63cb650d110d757ec97b1472e19ad842be031e6471a003cd351c8f596f2d102eda63cdc57de1b3db42a530d65cd198aab470b3c013505cfe0d8888d15023baefd81da141d592b949d78a591ac4db02e22a03ec1b7c8a670a09ca7df31ccd5396e488b2772d9bec3257e34f555a8dcb89e9cb9558d998634610ccde96614e971b8af"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x6, 0x7ff, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8000, 0x8, 0x6, 0x7fffffff}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x21, 0x6, 0xffff, 0x6, 0x400, r6, 0x8, '\x00', r7, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m15.611559799s ago: executing program 3 (id=1093): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "566c2a9dbf0df218", "2afbc77d7760df9ad0cc974049a4296a83ce6cfd608e2d1d1873c0aa2629372d", "1852c56e", "94d03f6540dc3cee"}, 0x38) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x7}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x11, &(0x7f0000000140)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x1, 0x0, 0x0, 0x3, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @ldst={0x0, 0x2, 0x1, 0xb, 0xa, 0x100, 0xfffffffffffffffc}, @map_fd={0x18, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000200)='syzkaller\x00', 0x90b, 0xef, &(0x7f0000000240)=""/239, 0x41000, 0x6c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x3, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000100)='ext4_mballoc_alloc\x00', r3, 0x0, 0x200000000000000}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r4, 0x29, 0xcc, &(0x7f0000000500)=""/38, &(0x7f0000000540)=0x26) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000005c0)=0x4) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000600)='FREEZING\x00', 0x9) r6 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80800) writev(r6, &(0x7f0000000740)=[{&(0x7f0000000680)="d1076f17e1137d7a75add2c34f5ef73637e9360de6c61881b9eda9b1e3ba7c0274f01e800c02010fdd5050087db741248a526848bbc3127051711676e1528e15f256ae440e92c6a4c579a1242fc42ceba298874174594459ca44052f3fc577a8fe624fbb597715814bf1549234f8916597834fa6049db6981de0d8ca432e2e2df86eaff1a583c7a5a09088bbb21501a79e8309f1", 0x94}], 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) recvmmsg(r1, &(0x7f0000001c80)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/174, 0xae}, {&(0x7f0000000940)=""/153, 0x99}, {&(0x7f0000000a00)=""/118, 0x76}, {&(0x7f0000000a80)=""/120, 0x78}, {&(0x7f0000000b00)=""/151, 0x97}], 0x5, &(0x7f0000000c40)=""/140, 0x8c}, 0x10001}, {{&(0x7f0000000d00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/211, 0xd3}], 0x2, &(0x7f0000000fc0)=""/217, 0xd9}, 0x4}, {{&(0x7f00000010c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001140)=""/204, 0xcc}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000001300)=""/51, 0x33}], 0x3, &(0x7f0000001380)=""/145, 0x91}, 0x80}, {{&(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)=""/152, 0x98}, {&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000001680)=""/79, 0x4f}, {&(0x7f0000001700)=""/155, 0x9b}, {&(0x7f00000017c0)}], 0x5, &(0x7f0000001880)=""/66, 0x42}, 0x3}, {{&(0x7f0000001900)=@nl=@unspec, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001980)=""/58, 0x3a}], 0x1}, 0x2}, {{&(0x7f0000001a00)=@qipcrtr, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/144, 0x90}], 0x1, &(0x7f0000001b80)=""/226, 0xe2}, 0xe0a}], 0x6, 0x10000, &(0x7f0000001e00)={0x77359400}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f40)={@cgroup=r5, 0x14, 0x1, 0xb0, &(0x7f0000001e40)=[0x0], 0x1, 0x0, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000001f80)={0x7}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000001fc0)={0xfe}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002000)) bind$netlink(r7, &(0x7f0000002040)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000002140)={r8, r7, 0xfffe, 0x88, &(0x7f0000002080)="64b5845f2d96d800cf41d504543abc96a1eeaaa9972871c4c5255d2be243e29cd549b80aa6f4f77fecfa6d861eb5433ecc4cdb00696c7a46e727b72b8b1c3836524d25f9066b49256ee501ba2f6f851934beb2a6fed6b7bad14eee7e06398390966dcf9a91673efee45f04f49274194470eded12038a97b38a1b6e4577c662aec885e533bc390ef1", 0x7f, 0x3, 0x6, 0x0, 0x4, 0x0, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000002200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f0000002240)={0xa, 0x4e23, 0x7fff, @private1, 0x1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000002280)=@assoc_value={0x0, 0x140}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000023c0)={&(0x7f00000022c0), 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80400) 1m15.478752811s ago: executing program 3 (id=1096): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) (async) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x3, {0x1, 0xff, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r6, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002500)=ANY=[@ANYBLOB="441200001f0001000000000000000000311200803c11268020006e8014002500fe88000000000000000000000000010108000200000000001601ba800800ae00", @ANYRES32, @ANYBLOB="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"], 0x1244}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000045}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7004000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="4800330080ace9ff070211000001ffffff0802110000000002120041410e010000000000006400400093716e7697ab1fa2631cb32291c2489f03012c040600050200e80006020d00050300d4022503010c0d2a0106000000"], 0x74}, 0x1, 0x0, 0x0, 0x6a845ecb6f203e71}, 0x24008080) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7004000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="4800330080ace9ff070211000001ffffff0802110000000002120041410e010000000000006400400093716e7697ab1fa2631cb32291c2489f03012c040600050200e80006020d00050300d4022503010c0d2a0106000000"], 0x74}, 0x1, 0x0, 0x0, 0x6a845ecb6f203e71}, 0x24008080) recvmmsg$unix(r7, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m5.807038644s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00040008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x2d8}}, 0x4040870) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18, 0x4c00}, 0xd0) 1m5.156476257s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001400000429bd703ef4dbdf250a1008ff", @ANYRES32=r4, @ANYBLOB="08000a000400000014000600040000000400000003000000d10000001400010020010000000000000000000000000000140001002001000000000000000000000000000108000a000300000008000900eb00000008000a00040000000800090002000000080008004000000008000a0004000000"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4bd}}, 0x3822, 0x7, 0x0, 0xdef, 0x82, 0x1000, 0x38}, 0x9c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000100)="e26cdea877e57bbd301c3118b2f57855497fede94089755fdcb28a05d986b317fbf136", &(0x7f0000000140)=""/145}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYRES64=r8], 0x2c}}, 0x0) 1m0.425851s ago: executing program 32 (id=1096): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) (async) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x3, {0x1, 0xff, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r6, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002500)=ANY=[@ANYBLOB="441200001f0001000000000000000000311200803c11268020006e8014002500fe88000000000000000000000000010108000200000000001601ba800800ae00", @ANYRES32, @ANYBLOB="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"], 0x1244}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24000045}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7004000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="4800330080ace9ff070211000001ffffff0802110000000002120041410e010000000000006400400093716e7697ab1fa2631cb32291c2489f03012c040600050200e80006020d00050300d4022503010c0d2a0106000000"], 0x74}, 0x1, 0x0, 0x0, 0x6a845ecb6f203e71}, 0x24008080) (async) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7004000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="4800330080ace9ff070211000001ffffff0802110000000002120041410e010000000000006400400093716e7697ab1fa2631cb32291c2489f03012c040600050200e80006020d00050300d4022503010c0d2a0106000000"], 0x74}, 0x1, 0x0, 0x0, 0x6a845ecb6f203e71}, 0x24008080) recvmmsg$unix(r7, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 52.620675798s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00040008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x2d8}}, 0x4040870) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18, 0x4c00}, 0xd0) 51.824868127s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001400000429bd703ef4dbdf250a1008ff", @ANYRES32=r4, @ANYBLOB="08000a000400000014000600040000000400000003000000d10000001400010020010000000000000000000000000000140001002001000000000000000000000000000108000a000300000008000900eb00000008000a00040000000800090002000000080008004000000008000a0004000000"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4bd}}, 0x3822, 0x7, 0x0, 0xdef, 0x82, 0x1000, 0x38}, 0x9c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000100)="e26cdea877e57bbd301c3118b2f57855497fede94089755fdcb28a05d986b317fbf136", &(0x7f0000000140)=""/145}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYRES64=r8], 0x2c}}, 0x0) 37.855851931s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00040008000300", @ANYRES32=r6, @ANYBLOB="9e020e0080000000ffffffffffffffffffffffff08021100000000000000000000000000a80101000301ae040603097f00fc00058c00bb0d170b28ee8445636e5bfa958041f15a66a8563a4c305939789d276435ca29d80a5e9d7cb58e8ee5143f6107c64065912fed0e726325d938fbd89481f16d6b24d5dbb36da4e752a3c6c25b7de5874f97ad82d6c707bef134739f4f83ea75313e6c80c9abe06eb2e6d7053f8c7c0afba242d671d3f8d3b002a277c66ee1481d043aeead372c201898d2692503002404720603030303030371070000ffffff2d4076060bff1b000104dd1e9fdb98b747bf37367c3e9ba6913dfb85657470478282a45c32e6c15973b1ddb413497066c1cdb9e6985f4bcab92da71b35aafa76272fb09c9484351ad6d5156a898e04e109e438359a920ecd348e01545f96ca5adda2c9c9204ffe748b10727842286c55d4c6b9999b55d95d14b83460fb9382ec393676b47199631a444006053627ac261fc7cce7a7c1f2e903e53302b14a9aaaad58c6b336ab7655a19a1a7460e915784a280340bd045fb237c1b64e5c633cb37109f6745f7b25d7420ae0145ee4422ef7866a39a1c806363422a1cf1bcc8087dd8efc5b31c1e1d9c3cdd4b74458d508028800af8e91450a4cefab075f1cad1371064435203f1dc74a8f54922458e48147a5c44014b3e58d5d5b3ec0f6f0d40528490c1651008effdf37c138a7cc94eb8d806071ec868edc9245308bfafc56be7595e702c366c58d79fdae1d216118d3a058c7061f4d30fd33d569ea300636aacbdf69945c703ca6bba3288be730cd05dd573f491c795bf687b7b6d41dfdc4b44cc39e29129d87382c5fdd10010fa3eb97bd2a9ec6e5e2dc0e3302f299dd4d8ecfa014cd2a16b99fbba476b58ea569b3dd42565280b1df66112af99415d528c88ecdab0a41299c158f0000080026006414000008000c006400000008000d00"], 0x2d8}}, 0x4040870) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18, 0x4c00}, 0xd0) 37.150113035s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001400000429bd703ef4dbdf250a1008ff", @ANYRES32=r4, @ANYBLOB="08000a000400000014000600040000000400000003000000d10000001400010020010000000000000000000000000000140001002001000000000000000000000000000108000a000300000008000900eb00000008000a00040000000800090002000000080008004000000008000a0004000000"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4bd}}, 0x3822, 0x7, 0x0, 0xdef, 0x82, 0x1000, 0x38}, 0x9c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000100)="e26cdea877e57bbd301c3118b2f57855497fede94089755fdcb28a05d986b317fbf136", &(0x7f0000000140)=""/145}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYRES64=r8], 0x2c}}, 0x0) 19.643126481s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001400000429bd703ef4dbdf250a1008ff", @ANYRES32=r4, @ANYBLOB="08000a000400000014000600040000000400000003000000d10000001400010020010000000000000000000000000000140001002001000000000000000000000000000108000a000300000008000900eb00000008000a00040000000800090002000000080008004000000008000a0004000000"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4bd}}, 0x3822, 0x7, 0x0, 0xdef, 0x82, 0x1000, 0x38}, 0x9c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000100)="e26cdea877e57bbd301c3118b2f57855497fede94089755fdcb28a05d986b317fbf136", &(0x7f0000000140)=""/145}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYRES64=r8], 0x2c}}, 0x0) 17.34331941s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00040008000300", @ANYRES32=r6, @ANYBLOB="9e020e0080000000ffffffffffffffffffffffff08021100000000000000000000000000a80101000301ae040603097f00fc00058c00bb0d170b28ee8445636e5bfa958041f15a66a8563a4c305939789d276435ca29d80a5e9d7cb58e8ee5143f6107c64065912fed0e726325d938fbd89481f16d6b24d5dbb36da4e752a3c6c25b7de5874f97ad82d6c707bef134739f4f83ea75313e6c80c9abe06eb2e6d7053f8c7c0afba242d671d3f8d3b002a277c66ee1481d043aeead372c201898d2692503002404720603030303030371070000ffffff2d4076060bff1b000104dd1e9fdb98b747bf37367c3e9ba6913dfb85657470478282a45c32e6c15973b1ddb413497066c1cdb9e6985f4bcab92da71b35aafa76272fb09c9484351ad6d5156a898e04e109e438359a920ecd348e01545f96ca5adda2c9c9204ffe748b10727842286c55d4c6b9999b55d95d14b83460fb9382ec393676b47199631a444006053627ac261fc7cce7a7c1f2e903e53302b14a9aaaad58c6b336ab7655a19a1a7460e915784a280340bd045fb237c1b64e5c633cb37109f6745f7b25d7420ae0145ee4422ef7866a39a1c806363422a1cf1bcc8087dd8efc5b31c1e1d9c3cdd4b74458d508028800af8e91450a4cefab075f1cad1371064435203f1dc74a8f54922458e48147a5c44014b3e58d5d5b3ec0f6f0d40528490c1651008effdf37c138a7cc94eb8d806071ec868edc9245308bfafc56be7595e702c366c58d79fdae1d216118d3a058c7061f4d30fd33d569ea300636aacbdf69945c703ca6bba3288be730cd05dd573f491c795bf687b7b6d41dfdc4b44cc39e29129d87382c5fdd10010fa3eb97bd2a9ec6e5e2dc0e3302f299dd4d8ecfa014cd2a16b99fbba476b58ea569b3dd42565280b1df66112af99415d528c88ecdab0a41299c158f0000080026006414000008000c006400000008000d00"], 0x2d8}}, 0x4040870) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18, 0x4c00}, 0xd0) 4.636328424s ago: executing program 1 (id=336): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c0000001400000429bd703ef4dbdf250a1008ff", @ANYRES32=r4, @ANYBLOB="08000a000400000014000600040000000400000003000000d10000001400010020010000000000000000000000000000140001002001000000000000000000000000000108000a000300000008000900eb00000008000a00040000000800090002000000080008004000000008000a0004000000"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x4, 0x2, 0x3}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4bd}}, 0x3822, 0x7, 0x0, 0xdef, 0x82, 0x1000, 0x38}, 0x9c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r10, 0x1, 0x9, &(0x7f0000000040), 0x29) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000100)="e26cdea877e57bbd301c3118b2f57855497fede94089755fdcb28a05d986b317fbf136", &(0x7f0000000140)=""/145}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r7, @ANYRES16=r12, @ANYRES64=r8], 0x2c}}, 0x0) 3.702838291s ago: executing program 5 (id=1511): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000100003040000000008000000edf0000016e5326785d5d601ecee3ed588b9bc16c5ca80308cff54a249b2228dded3bbc09f619683a76af2acdbf86a66f6e8f2eb254d68f93acbd91921f920b790ae9e4236a72a74e2508e62110c6ae2c1cc68ce854b34789a5076e1cf5983bfe9337b043e2a49ef00000000000000000000000000000000191aa871b2a8013a91a325beecb9fbe30d238ca7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500070007000000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}}, 0x24}}, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 3.702510935s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r5, @ANYBLOB="050000000000030000000f00040008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x2d8}}, 0x4040870) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18, 0x4c00}, 0xd0) 2.990148503s ago: executing program 5 (id=1514): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x0, 0x7, 0x30, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x5, 0x6, 0x4}, {0x2, 0x5}, {0x3, 0x5, 0x0, 0x7}, {0x2, 0x5, 0xa, 0xa}, {0x0, 0x4, 0x3, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_update_sb\x00', r2, 0x0, 0x4000000000002}, 0x18) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x102, 0x102, 0x7, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @struct={0x7, 0x4, 0x0, 0x4, 0x1, 0x4, [{0x2, 0x3, 0x1}, {0xa, 0x0, 0xf91}, {0xb, 0x5, 0x7}, {0xb, 0x0, 0x7}]}, @enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x77}, {0x10, 0x200}, {0x9, 0x8}, {0xd, 0xe}, {0x6, 0x1}, {0x3, 0x10001}, {0x10, 0x7}, {0xe, 0x4}]}, @datasec={0x2, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x6, 0xb09}, {0x2, 0x9, 0x4}, {0x5, 0x2b6, 0xb9ea}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x3, 0x13}], "20a6"}, @fwd={0x10}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x30]}}, &(0x7f0000000340)=""/60, 0x123, 0x3c, 0x1}, 0x28) (async, rerun: 64) unshare(0x68050000) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2.807490167s ago: executing program 5 (id=1516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r2, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffda6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x5555555555550001}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ffb7ac17d799d76cdbe90d8824fe6501e09b071a16197c4a19a6e8f2e084d08b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "737b538a4928ab34fae311d80692794b6bf6356bf2f861d23fb7c34707be0068"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x40, r2, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffda6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc040) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x5555555555550001}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ffb7ac17d799d76cdbe90d8824fe6501e09b071a16197c4a19a6e8f2e084d08b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "737b538a4928ab34fae311d80692794b6bf6356bf2f861d23fb7c34707be0068"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x8800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) 2.475257495s ago: executing program 0 (id=1517): select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) 2.387737559s ago: executing program 5 (id=1519): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fa", 0x95}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=ANY=[], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.256727944s ago: executing program 0 (id=1520): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0xa, 0x801, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000200000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 2.075532447s ago: executing program 5 (id=1522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6, 0x2}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x4044004) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000600)={&(0x7f0000000240), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r9, 0x100, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) tee(r1, r3, 0x6a9, 0xe) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r13, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 1.967545461s ago: executing program 2 (id=1523): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0362e22d", @ANYRES16=r4, @ANYBLOB="010000000000000000001000000014000180080003000000000008000300030000000800070000000000"], 0x30}}, 0x0) 1.88063965s ago: executing program 0 (id=1524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x6b130, r0, 0xfa7a000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f0000000140)="eb15ede2b1e095db5f9ad3c1a1d8c0152de92fc0ccfa34117b739fd719e782ed604a59f2d7e819ea68e63ccc1a69b68a187e93d5e8e7ca61b2d5e15da2f71372e4474a9cfb514ddfcb4d16e1c8053a2d2b4e1c9f52c7efc493f1d7b294f0e513a7540354e89f08f59e94263e13678a137270de47d7f9697eb95cf5eb7e31848ca085060f1cb6114ef418343b4666ffc2130c72748e2fa8dde8d438372c32e9c8538f4d8b26f61970b37275fe79abe116eff7d42896ec03000000fc074c08fff4c2e94e9317de7615a9bc886a81e34cde5e8e38c5ae68b62ea84131307102f2a700000000000000d5a1c5dcd9e78336520265a568b3353c8876e1b56b6ca6", 0x1, r0}, 0x38) 1.795919804s ago: executing program 2 (id=1525): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) accept(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r1}, 0x10) 1.627775926s ago: executing program 2 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000040000000200000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800c3c500"/18], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)=""/85}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000002100000829bd7000fcdbdf25e00012016635454b0421000002000000000000000000deacbffb8e000000000000000000014e2200084e2000dc0000a0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b46b6e0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000080002000900000008000d0006000000470e1285bd7e76afa8715962013f7c76bad13a6fc9370eee1bc874c4d9fcf654e92247065e0c9ff74a688ecc767e1dc9c79427703154631bcb630f57dfdb80a7c883ee4f909d2f88e00e83b86a219ae94af5ad4780745d4bec68e95289cd103bda1e64f5caa4a8065a0fbc5380f76d59f0b8eb5f4f15cf9b4fe77054e8fc03fb165a2275a377444f8ed85f469cb25ed9922b"], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x15c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x148, 0x1, [@m_mpls={0xd8, 0x19, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7fff, 0x7ff, 0x4, 0x3}, 0x2}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe2f, 0x6c, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x5, 0x5, 0x4}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a8}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x2f, 0x6, "9ee57ecc4275afc2516432432e2c90b928f39b27ae2538c49e615aa700f21f68aa82e87e1441c866755d71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x4}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x15c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x83, &(0x7f0000000500)={0x0, 0xa7a}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r8, 0x0) sendmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa0000000006cd8add849b276aa000007010000f8ffffffb702000008000000b703000000000000850000008d000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf25880000e609000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8004) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf257c00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900a0ffffff410000000a00060008021100000100000a00060008021100000000000a00060008021100000100a3221b1828d7bd6904000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x802}, 0x4) 1.393306142s ago: executing program 0 (id=1527): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newnexthop={0x38, 0x68, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x14}, [@NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}, @NHA_BLACKHOLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/53, 0x35}], 0x6}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1a}], 0x4, 0x2000, 0x0) 321.693463ms ago: executing program 0 (id=1528): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x2b, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006b00000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$sock(r5, &(0x7f0000002640)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @empty}, 0x4, 0x2, 0x0, 0x2}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000400)="59b94c55a20beb3c7842c3ae298ec6d623f205452cc84d99336972c66924bab5b1799002f30621482077ccd354d1cd1906fc86fa1dae33f069027f8cc3fa1872e9665aca138a1e71773c1fc1751831dde51b75655934224f5befbd1d433f43cf9913a20b0c815d1b191067dbb899247c578e39a7455b9c655fc45a4d", 0x7c}, {&(0x7f0000000480)="a0ab20d11deaffa583c3437d0ce25a23ea8b0882ec9e82625fa0c5758323ce69fb199af64c210d923c4175ad92afffcb643a78f85a6518a8126d15a52f0e99f985cdd7737754f160d6c684b0cb", 0x4d}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="105dc6313745059d3aee341abfbf2ee3b0b12b912da480ffd352182bb8fae9cd2c4adaf421cfaf13477845f2f608e9bfa49bfc4da9bed74a580a61e9c1c6e5b19bccffeb5083511eec334b269b652f1b34b84d6d694ac07642ee8ec88762bcc15107890655a9bad5a8f8c61bfc1b8332e7cc3623ddc3f4e567edd426a5c139dc90c174022eda359d936fc7ce5267ebdaa4e6333c6607e1c0a572cc6f373c", 0x9e}, {&(0x7f00000002c0)="61939ed171efb842fa43ca", 0xb}], 0x6}, 0x40) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000026c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x84208080}, 0xc, &(0x7f0000002740)={&(0x7f0000002a00)=ANY=[@ANYBLOB="300000006a00000428bd7000ffdbdf25020000000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB="02088bd28e481df79842833f95ae99"], 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x804) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="1400000001000000010001000300000000010000d90fec9c2422565ca9765275a38a6a7ea843e15d7d1a078deee5e1b094939930185060de6a3c4daee7961cec81d71cbf47042f80b703e1fd9d6812f3dabb55ff0ceef7921c8f5b400b86060533951ff5150e761725115a0d6b00fd1b08bd9d3505f4dc1adc46130d36790707d61f6f3f15d07a2c12a26990f283e20e1f5b798581e34edf39c495ab5fd1b236a7855d82023dd223f1a76bcae742bf3c95103c84cf4d0a0a0d4f512292d110255065cfb05db8877c11318c43950d854da6dacd61c2be8a820303d1785f1eecbff71fcf707affa37ed4f0b4df10242c5ff0a31c4e17cc8f115e0590872fd99176412f231c3e1fcccbb481023cf81f34228f8ad90949ec3ce58a5301f18c9f2a14562cdd4da32ca3f6f64a88a5e407763ce30155db1b6587ceead932d400b6d63416c9210ddda8e89fd9000fc64130d6d486fe7c0eeff339bbf263b8344f5f22195b8e653dd3967c7c94680d9fc5351244a53306652d363c75eba36e3e9c911e35a1d6bddcc3c82826f83d6a793502bb9a30abef9e65410627b0a95ea742c4a1b269d10492eb123847d185301707c18517b3983aaaaa1739f66fc13554ebcab3c21d91c90d736d5bc6624e2e2a7635532ccf0ec7a0f61245194b6d1fc9a4a8848ac7ab64e00a", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="04000000030000000200"/28], 0x50) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @local, 0x1}, 0x1c) 267.66865ms ago: executing program 2 (id=1529): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200ac0100000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000080010380200000800800034000000002"], 0x240}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0xfffffffb, @loopback, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="83", 0x1}], 0x1}, 0x4000840) 252.485013ms ago: executing program 5 (id=1530): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f00000007c0), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r3, &(0x7f0000000240)=@rc, &(0x7f0000000340)=0x80) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) 140.990318ms ago: executing program 2 (id=1531): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 27.847732ms ago: executing program 2 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 0s ago: executing program 0 (id=1533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) kernel console output (not intermixed with test programs): ing later): interface not active [ 193.554509][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.561577][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.591658][ T9394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.642065][ T9394] hsr_slave_0: entered promiscuous mode [ 193.648853][ T9394] hsr_slave_1: entered promiscuous mode [ 193.654983][ T9394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.663359][ T9394] Cannot create hsr debugfs directory [ 193.854085][ T9412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.968'. [ 194.085359][ T9394] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.162076][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 194.243435][ T1339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.287829][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.351190][ T9423] bridge_slave_1 (unregistering): left allmulticast mode [ 194.366049][ T9423] bridge_slave_1 (unregistering): left promiscuous mode [ 194.375463][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.420693][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.431017][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.439591][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.450463][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.464132][ T9394] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.474234][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.606461][ T9437] netlink: 'syz.2.977': attribute type 33 has an invalid length. [ 194.654942][ T1339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.679180][ T9394] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.717604][ T9437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.747387][ T9394] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.787325][ T9437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.928026][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 194.977846][ T5854] Bluetooth: hci1: command tx timeout [ 194.985794][ T9447] geneve2: entered promiscuous mode [ 195.088017][ T1339] bridge_slave_1: left allmulticast mode [ 195.093896][ T1339] bridge_slave_1: left promiscuous mode [ 195.101296][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.113403][ T1339] bridge_slave_0: left allmulticast mode [ 195.123088][ T1339] bridge_slave_0: left promiscuous mode [ 195.129115][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.695193][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.707092][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.717634][ T1339] bond0 (unregistering): Released all slaves [ 195.803614][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 195.850350][ T9470] ip6gre1: entered allmulticast mode [ 196.023307][ T9475] tipc: Enabled bearer , priority 10 [ 196.070309][ T9394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.110225][ T9394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.190632][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 196.214317][ T9394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.230260][ T5954] hid-generic 0005:15C2:000B.0001: item fetching failed at offset 0/1 [ 196.234906][ T9394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.252616][ T5954] hid-generic 0005:15C2:000B.0001: probe with driver hid-generic failed with error -22 [ 196.328670][ T5915] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec [ 196.416430][ T1339] hsr_slave_0: left promiscuous mode [ 196.423066][ T1339] hsr_slave_1: left promiscuous mode [ 196.429619][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.437275][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.449516][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.458292][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.487008][ T1339] veth1_macvtap: left promiscuous mode [ 196.494883][ T1339] veth0_macvtap: left promiscuous mode [ 196.501290][ T1339] veth1_vlan: left promiscuous mode [ 196.507101][ T9510] netlink: 5 bytes leftover after parsing attributes in process `syz.0.993'. [ 196.507128][ T1339] veth0_vlan: left promiscuous mode [ 196.519093][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 196.567779][ T5854] Bluetooth: hci4: command tx timeout [ 196.853381][ T9516] tipc: Can't bind to reserved service type 0 [ 197.050927][ T5854] Bluetooth: hci1: command tx timeout [ 197.090999][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 197.133443][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 197.770804][ T9523] netlink: 152 bytes leftover after parsing attributes in process `syz.2.996'. [ 197.875803][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.897702][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.905122][ T9432] bridge_slave_0: entered allmulticast mode [ 197.919594][ T9432] bridge_slave_0: entered promiscuous mode [ 197.985535][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.000813][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.009038][ T9432] bridge_slave_1: entered allmulticast mode [ 198.030402][ T9432] bridge_slave_1: entered promiscuous mode [ 198.047299][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 198.067599][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 198.094337][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 198.148934][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 198.163721][ T9542] netlink: 'syz.3.1001': attribute type 62 has an invalid length. [ 198.183513][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.283988][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.345009][ T9546] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 198.374940][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.434894][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.459073][ T9432] team0: Port device team_slave_0 added [ 198.474898][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.482147][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.513239][ T9432] team0: Port device team_slave_1 added [ 198.597137][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.604403][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.648345][ T5854] Bluetooth: hci4: command tx timeout [ 198.681090][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.702807][ T9565] netlink: 'syz.2.1009': attribute type 21 has an invalid length. [ 198.703620][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.727514][ T9565] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.738522][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.787712][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.795015][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.809061][ T9565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1009'. [ 198.897554][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.927776][ T9570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1009'. [ 198.985385][ T9568] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 199.033814][ T9432] hsr_slave_0: entered promiscuous mode [ 199.078688][ T9432] hsr_slave_1: entered promiscuous mode [ 199.085542][ T9432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.097526][ T9432] Cannot create hsr debugfs directory [ 199.127675][ T5854] Bluetooth: hci1: command tx timeout [ 199.303895][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'. [ 199.479586][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 199.496003][ T9590] pim6reg: left allmulticast mode [ 200.204331][ T9627] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1025'. [ 200.230407][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.297064][ T9432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.324493][ T9432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.353391][ T9432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.388259][ T9432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.682355][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.728289][ T5854] Bluetooth: hci4: command tx timeout [ 200.745709][ T9432] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.763245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.770471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.796626][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.803931][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.898600][ T9660] netlink: 'syz.3.1030': attribute type 5 has an invalid length. [ 201.073877][ T9394] veth0_vlan: entered promiscuous mode [ 201.134871][ T9394] veth1_vlan: entered promiscuous mode [ 201.209201][ T5847] Bluetooth: hci1: command tx timeout [ 201.287025][ T9394] veth0_macvtap: entered promiscuous mode [ 201.339757][ T9394] veth1_macvtap: entered promiscuous mode [ 201.340612][ T9676] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 201.387295][ T9676] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 201.446062][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.484538][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.517338][ T9394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.552095][ T9394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.577559][ T9394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.586335][ T9394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.683130][ T9692] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 201.717199][ T9692] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 201.736238][ T9432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.756670][ T9694] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 201.795932][ T9694] netlink: 'syz.3.1041': attribute type 29 has an invalid length. [ 201.827163][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.854044][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.972686][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.983494][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.009109][ T9706] netlink: 'syz.0.1043': attribute type 18 has an invalid length. [ 202.062046][ T9432] veth0_vlan: entered promiscuous mode [ 202.086136][ T9432] veth1_vlan: entered promiscuous mode [ 202.170624][ T9432] veth0_macvtap: entered promiscuous mode [ 202.208858][ T9432] veth1_macvtap: entered promiscuous mode [ 202.324351][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.351429][ T9432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.364357][ T9432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.373733][ T9432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.382869][ T9432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.393517][ T9432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.554815][ T9720] Cannot find del_set index 17 as target [ 202.564449][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.795114][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.810826][ T5847] Bluetooth: hci4: command tx timeout [ 202.857841][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.865734][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.979606][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.026641][ T9729] __nla_validate_parse: 5 callbacks suppressed [ 203.026661][ T9729] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1049'. [ 203.038807][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.066722][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.111216][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.161185][ T9727] netlink: 'syz.3.1050': attribute type 4 has an invalid length. [ 203.180443][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 203.729294][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1057'. [ 203.738941][ T9754] bridge2: entered promiscuous mode [ 203.749164][ T9754] bridge2: entered allmulticast mode [ 203.765968][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.780084][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.789527][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.799312][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.810524][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.959974][ T70] bridge_slave_1: left allmulticast mode [ 203.965822][ T70] bridge_slave_1: left promiscuous mode [ 203.993853][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.023495][ T70] bridge_slave_0: left allmulticast mode [ 204.035689][ T70] bridge_slave_0: left promiscuous mode [ 204.046413][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.426440][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.438055][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.449723][ T70] bond0 (unregistering): Released all slaves [ 204.723396][ T70] hsr_slave_0: left promiscuous mode [ 204.731627][ T70] hsr_slave_1: left promiscuous mode [ 204.739553][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.751096][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.760853][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.770752][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.793652][ T70] veth1_macvtap: left promiscuous mode [ 204.799605][ T70] veth0_macvtap: left promiscuous mode [ 204.805210][ T70] veth1_vlan: left promiscuous mode [ 204.811774][ T70] veth0_vlan: left promiscuous mode [ 205.171939][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 205.195102][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 205.493148][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.503326][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.522640][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.535108][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.554159][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.615264][ T70] team0 (unregistering): Port device team_slave_1 removed [ 205.664203][ T70] team0 (unregistering): Port device team_slave_0 removed [ 205.927725][ T5847] Bluetooth: hci1: command tx timeout [ 206.189826][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 206.379468][ T9799] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 206.400504][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 206.433660][ T9799] netlink: 'syz.0.1065': attribute type 29 has an invalid length. [ 206.443642][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 206.514248][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 206.608278][ T9808] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1067'. [ 206.731068][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 206.871671][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.907617][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.947611][ T9759] bridge_slave_0: entered allmulticast mode [ 206.988386][ T9759] bridge_slave_0: entered promiscuous mode [ 207.007116][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.018979][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.032894][ T9759] bridge_slave_1: entered allmulticast mode [ 207.041736][ T9759] bridge_slave_1: entered promiscuous mode [ 207.122427][ T9827] : renamed from veth0_vlan (while UP) [ 207.239585][ T9835] ipt_rpfilter: unknown options [ 207.258372][ T9832] netlink: 'syz.2.1070': attribute type 4 has an invalid length. [ 207.304551][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.355178][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.492271][ T9759] team0: Port device team_slave_0 added [ 207.557059][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.608269][ T5847] Bluetooth: hci4: command tx timeout [ 207.614748][ T9759] team0: Port device team_slave_1 added [ 207.690191][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.705594][ T9854] tipc: Disabling bearer [ 207.731003][ T9857] netlink: 'syz.0.1078': attribute type 39 has an invalid length. [ 207.902925][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.925780][ T9862] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 207.941376][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.952378][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.997150][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.000811][ T9864] netlink: 'syz.3.1081': attribute type 21 has an invalid length. [ 208.015953][ T5847] Bluetooth: hci1: command tx timeout [ 208.026646][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.092054][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.137251][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.172237][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.220887][ T9877] __nla_validate_parse: 4 callbacks suppressed [ 208.220907][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 208.243225][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.270001][ T9864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1081'. [ 208.470637][ T9787] chnl_net:caif_netlink_parms(): no params data found [ 208.583705][ T9759] hsr_slave_0: entered promiscuous mode [ 208.605242][ T9759] hsr_slave_1: entered promiscuous mode [ 208.617339][ T9759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.633898][ T9759] Cannot create hsr debugfs directory [ 208.645358][ T9891] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 209.086296][ T70] bridge_slave_1: left allmulticast mode [ 209.092225][ T70] bridge_slave_1: left promiscuous mode [ 209.101962][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.112455][ T70] bridge_slave_0: left allmulticast mode [ 209.118695][ T70] bridge_slave_0: left promiscuous mode [ 209.124616][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.557624][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.571691][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.584669][ T70] bond0 (unregistering): Released all slaves [ 209.604271][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.622603][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.643328][ T9787] bridge_slave_0: entered allmulticast mode [ 209.654967][ T9787] bridge_slave_0: entered promiscuous mode [ 209.693939][ T5847] Bluetooth: hci4: command tx timeout [ 209.983414][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.027620][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.041295][ T9787] bridge_slave_1: entered allmulticast mode [ 210.081968][ T9787] bridge_slave_1: entered promiscuous mode [ 210.094622][ T5156] Bluetooth: hci1: command tx timeout [ 210.419698][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 210.429442][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 210.458084][ T9938] netlink: 'syz.2.1095': attribute type 9 has an invalid length. [ 210.682348][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.736500][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.876265][ T70] hsr_slave_0: left promiscuous mode [ 210.883697][ T70] hsr_slave_1: left promiscuous mode [ 210.896714][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.906162][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.921027][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.932548][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.981171][ T70] veth1_macvtap: left promiscuous mode [ 210.994185][ T70] veth0_macvtap: left promiscuous mode [ 211.000101][ T70] veth1_vlan: left promiscuous mode [ 211.005471][ T70] veth0_vlan: left promiscuous mode [ 211.656692][ T70] team0 (unregistering): Port device team_slave_1 removed [ 211.735257][ T70] team0 (unregistering): Port device team_slave_0 removed [ 211.770212][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.777860][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 211.785089][ T5156] Bluetooth: hci4: command tx timeout [ 212.175714][ T5854] Bluetooth: hci1: command tx timeout [ 213.726676][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 213.735920][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 213.745677][ T9953] netlink: 'syz.0.1099': attribute type 20 has an invalid length. [ 213.848482][ T5854] Bluetooth: hci4: command tx timeout [ 214.860926][ T9787] team0: Port device team_slave_0 added [ 214.870922][ T9787] team0: Port device team_slave_1 added [ 214.946477][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.975157][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.045861][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.072103][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.081528][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.091257][ T9958] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 215.124290][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.217863][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.225608][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.255952][ T9963] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1102'. [ 215.415027][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 215.464033][ T9966] netlink: 'syz.0.1103': attribute type 24 has an invalid length. [ 215.466371][ T9787] hsr_slave_0: entered promiscuous mode [ 215.483543][ T9787] hsr_slave_1: entered promiscuous mode [ 215.491579][ T9787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.500851][ T9787] Cannot create hsr debugfs directory [ 215.754010][ T9759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.773054][ T9759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.861454][ T9759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.903215][ T9759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.147251][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.189641][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.213665][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.220909][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.270578][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.277774][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.435782][ T9787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.465299][ T9787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.497978][ T9787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.525425][ T9787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.751907][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.832404][ T9787] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.003212][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.010490][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.098226][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.105434][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.885372][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.965774][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.090147][ T9787] veth0_vlan: entered promiscuous mode [ 218.141552][ T9787] veth1_vlan: entered promiscuous mode [ 218.233226][ T9787] veth0_macvtap: entered promiscuous mode [ 218.262237][ T9787] veth1_macvtap: entered promiscuous mode [ 218.304582][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.325982][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.353015][ T9787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.364785][ T9787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.378706][ T9787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.391011][T10019] set match dimension is over the limit! [ 218.399771][ T9787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.604729][T10023] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 218.668529][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.685649][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.762839][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.788212][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.850171][ T9759] veth0_vlan: entered promiscuous mode [ 218.895446][ T9759] veth1_vlan: entered promiscuous mode [ 218.945891][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 219.005533][T10028] can: request_module (can-proto-0) failed. [ 219.109391][ T9759] veth0_macvtap: entered promiscuous mode [ 219.130720][ T9759] veth1_macvtap: entered promiscuous mode [ 219.171118][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.223177][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.263019][ T9759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.277164][ T9759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.295240][ T9759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.304479][ T9759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.316441][T10038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1117'. [ 219.491025][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.526252][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.627682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.635566][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.742711][T10049] netlink: 'syz.2.1122': attribute type 12 has an invalid length. [ 219.758433][T10049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1122'. [ 220.108018][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 220.127695][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 220.136727][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 220.255941][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.419542][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.541061][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.576623][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'. [ 220.628312][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.661436][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 220.698017][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 220.719009][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 221.002643][ T1094] bridge_slave_1: left allmulticast mode [ 221.019928][ T1094] bridge_slave_1: left promiscuous mode [ 221.025861][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.069660][ T1094] bridge_slave_0: left allmulticast mode [ 221.075417][ T1094] bridge_slave_0: left promiscuous mode [ 221.099096][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.260175][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.283400][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.295193][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.309954][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.320012][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.673015][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.686531][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.697283][ T1094] bond0 (unregistering): Released all slaves [ 221.975108][T10076] chnl_net:caif_netlink_parms(): no params data found [ 222.026402][ T1094] hsr_slave_0: left promiscuous mode [ 222.033705][ T1094] hsr_slave_1: left promiscuous mode [ 222.040767][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.048350][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.057325][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.065238][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.086308][ T1094] veth1_macvtap: left promiscuous mode [ 222.092626][ T1094] veth0_macvtap: left promiscuous mode [ 222.099488][ T1094] veth1_vlan: left promiscuous mode [ 222.104880][ T1094] veth0_vlan: left promiscuous mode [ 222.522545][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.532317][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.542354][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.569011][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.577786][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.845801][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 222.899845][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 223.447609][ T5156] Bluetooth: hci1: command tx timeout [ 223.571849][T10076] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.583750][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.595658][T10076] bridge_slave_0: entered allmulticast mode [ 223.604373][T10076] bridge_slave_0: entered promiscuous mode [ 223.622576][T10076] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.638112][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.652510][T10076] bridge_slave_1: entered allmulticast mode [ 223.661443][T10076] bridge_slave_1: entered promiscuous mode [ 223.761917][T10076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.777007][T10076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.874099][T10076] team0: Port device team_slave_0 added [ 223.886884][T10076] team0: Port device team_slave_1 added [ 223.978668][T10076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.985780][T10076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.019803][T10076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.035405][T10076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.042903][T10076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.069399][T10076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.147269][T10076] hsr_slave_0: entered promiscuous mode [ 224.154692][T10076] hsr_slave_1: entered promiscuous mode [ 224.162108][T10076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.170968][T10076] Cannot create hsr debugfs directory [ 224.367863][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.409836][T10088] chnl_net:caif_netlink_parms(): no params data found [ 224.452053][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.629747][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.648032][ T5156] Bluetooth: hci4: command tx timeout [ 224.725575][ T1094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.851286][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.859382][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.866703][T10088] bridge_slave_0: entered allmulticast mode [ 224.874785][T10088] bridge_slave_0: entered promiscuous mode [ 224.890370][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.902778][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.910418][T10088] bridge_slave_1: entered allmulticast mode [ 224.918622][T10088] bridge_slave_1: entered promiscuous mode [ 224.950729][T10131] set match dimension is over the limit! [ 225.023253][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.084848][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.138448][ T1094] bridge_slave_1: left allmulticast mode [ 225.144197][ T1094] bridge_slave_1: left promiscuous mode [ 225.153335][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.163034][ T1094] bridge_slave_0: left allmulticast mode [ 225.169238][ T1094] bridge_slave_0: left promiscuous mode [ 225.175074][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.527810][ T5156] Bluetooth: hci1: command tx timeout [ 225.571824][T10146] __nla_validate_parse: 1 callbacks suppressed [ 225.571846][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 225.822846][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.834914][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.847773][ T1094] bond0 (unregistering): Released all slaves [ 225.871594][T10088] team0: Port device team_slave_0 added [ 225.909982][T10088] team0: Port device team_slave_1 added [ 225.978578][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.995160][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.009546][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.020337][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.044861][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.122634][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.132173][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.163009][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.176750][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.184509][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.210963][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.216286][T10156] x_tables: unsorted underflow at hook 2 [ 226.265828][T10155] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 226.283982][T10155] team0: Device macvtap1 is already an upper device of the team interface [ 226.431983][T10088] hsr_slave_0: entered promiscuous mode [ 226.442086][T10088] hsr_slave_1: entered promiscuous mode [ 226.451702][T10088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.465307][T10088] Cannot create hsr debugfs directory [ 226.556001][ T1094] hsr_slave_0: left promiscuous mode [ 226.567145][ T1094] hsr_slave_1: left promiscuous mode [ 226.579415][T10163] netlink: 'syz.0.1154': attribute type 9 has an invalid length. [ 226.581518][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.595594][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.604535][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.612184][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.637051][ T1094] veth1_macvtap: left promiscuous mode [ 226.645599][ T1094] veth0_macvtap: left promiscuous mode [ 226.652082][ T1094] veth1_vlan: left promiscuous mode [ 226.657726][ T1094] veth0_vlan: left promiscuous mode [ 226.727731][ T5156] Bluetooth: hci4: command tx timeout [ 227.243154][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 227.292399][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 227.611283][ T5156] Bluetooth: hci1: command tx timeout [ 227.916003][T10076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.945657][T10076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.988718][T10076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.033410][T10076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.069944][T10179] SET target dimension over the limit! [ 228.088125][ T5156] Bluetooth: hci5: command tx timeout [ 228.222352][T10186] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 228.378125][T10148] chnl_net:caif_netlink_parms(): no params data found [ 228.582216][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 228.699488][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.706852][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.718086][T10148] bridge_slave_0: entered allmulticast mode [ 228.725863][T10148] bridge_slave_0: entered promiscuous mode [ 228.742223][T10148] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.750629][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.758178][T10148] bridge_slave_1: entered allmulticast mode [ 228.766424][T10148] bridge_slave_1: entered promiscuous mode [ 228.805688][T10076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.822615][ T5156] Bluetooth: hci4: command tx timeout [ 228.980556][T10148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.056120][T10148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.083565][T10076] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.164010][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.171229][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.184319][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.191573][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.253089][T10088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.289856][T10148] team0: Port device team_slave_0 added [ 229.302698][T10088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.324712][T10148] team0: Port device team_slave_1 added [ 229.344636][T10088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.361106][T10088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.450639][T10148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.468876][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.498552][T10148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.538596][T10148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.552302][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.580373][T10148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.687596][ T5156] Bluetooth: hci1: command tx timeout [ 229.725291][T10148] hsr_slave_0: entered promiscuous mode [ 229.735823][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 229.759966][T10148] hsr_slave_1: entered promiscuous mode [ 229.786529][T10148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.806634][T10148] Cannot create hsr debugfs directory [ 230.177201][ T5156] Bluetooth: hci5: command tx timeout [ 230.211419][T10076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.246467][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.314332][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 230.343102][T10254] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1173'. [ 230.363840][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 230.391487][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.473000][T10088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.491749][T10088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.520275][T10148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.562555][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.569833][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.581757][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.589022][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.614842][T10148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.666992][T10148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.693785][T10148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.889741][ T5156] Bluetooth: hci4: command tx timeout [ 231.014302][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 231.033274][T10148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.059035][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 231.233617][T10148] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.295990][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.303283][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.352535][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.378509][T10285] netlink: 'syz.0.1179': attribute type 15 has an invalid length. [ 231.395019][T10285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1179'. [ 231.404236][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.404386][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.443923][T10287] netlink: 'syz.2.1180': attribute type 5 has an invalid length. [ 231.600569][T10076] veth0_vlan: entered promiscuous mode [ 231.684230][T10076] veth1_vlan: entered promiscuous mode [ 231.726173][T10088] veth0_vlan: entered promiscuous mode [ 231.764806][T10088] veth1_vlan: entered promiscuous mode [ 231.870582][T10076] veth0_macvtap: entered promiscuous mode [ 231.902983][T10076] veth1_macvtap: entered promiscuous mode [ 231.967375][T10088] veth0_macvtap: entered promiscuous mode [ 232.005641][T10088] veth1_macvtap: entered promiscuous mode [ 232.056846][T10076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.080407][T10076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.141428][T10076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.152458][T10076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.162184][T10076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.171710][T10076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.192236][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.243188][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.244530][T10313] netlink: 'syz.0.1188': attribute type 23 has an invalid length. [ 232.259090][ T5156] Bluetooth: hci5: command tx timeout [ 232.318761][T10148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.454099][T10088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.475379][T10088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.517287][T10088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.542558][T10088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.657201][T10326] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 232.685972][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.705130][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.852731][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.879143][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.903786][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.931187][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.023137][T10335] netlink: 'syz.2.1193': attribute type 2 has an invalid length. [ 233.046313][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.073787][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.353224][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.579279][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.631603][T10148] veth0_vlan: entered promiscuous mode [ 233.671154][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.710303][T10148] veth1_vlan: entered promiscuous mode [ 233.786354][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.847085][T10148] veth0_macvtap: entered promiscuous mode [ 233.871598][T10148] veth1_macvtap: entered promiscuous mode [ 233.891984][T10148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.914756][T10148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.926731][T10148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.944091][T10148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.953585][T10148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.963329][T10148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.123944][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.141501][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.203632][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.222866][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.286045][ T12] bridge_slave_1: left allmulticast mode [ 234.303193][ T12] bridge_slave_1: left promiscuous mode [ 234.315398][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.326884][ T12] bridge_slave_0: left allmulticast mode [ 234.333392][ T5156] Bluetooth: hci5: command tx timeout [ 234.343005][ T12] bridge_slave_0: left promiscuous mode [ 234.348924][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.493873][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.512325][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.520935][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.533064][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.541504][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.788844][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.801950][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.814795][ T12] bond0 (unregistering): Released all slaves [ 235.226653][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1149'. [ 235.436263][ T12] hsr_slave_0: left promiscuous mode [ 235.443250][ T12] hsr_slave_1: left promiscuous mode [ 235.464183][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.527614][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.545318][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.587583][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.590658][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.607991][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.616983][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.626683][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.637044][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.674992][ T12] veth1_macvtap: left promiscuous mode [ 235.680930][ T12] veth0_macvtap: left promiscuous mode [ 235.686569][ T12] veth1_vlan: left promiscuous mode [ 235.693874][ T12] veth0_vlan: left promiscuous mode [ 236.292318][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.337253][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.568786][ T5156] Bluetooth: hci1: command tx timeout [ 236.982086][T10349] chnl_net:caif_netlink_parms(): no params data found [ 237.274372][T10411] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1208'. [ 237.478062][T10418] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1210'. [ 237.487178][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.504891][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.517255][T10349] bridge_slave_0: entered allmulticast mode [ 237.531132][T10349] bridge_slave_0: entered promiscuous mode [ 237.545012][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.552852][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.561328][T10349] bridge_slave_1: entered allmulticast mode [ 237.590423][T10349] bridge_slave_1: entered promiscuous mode [ 237.639245][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1214'. [ 237.654591][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1214'. [ 237.694580][ T5156] Bluetooth: hci4: command tx timeout [ 237.863261][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.913502][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 237.919993][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.029158][T10438] batman_adv: batadv0: Adding interface: ipvlan2 [ 238.035578][T10438] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.062601][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.074014][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.086362][T10438] batman_adv: batadv0: Interface activated: ipvlan2 [ 238.143225][T10349] team0: Port device team_slave_0 added [ 238.166772][T10349] team0: Port device team_slave_1 added [ 238.255543][T10446] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 238.276307][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 238.457296][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.512862][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.523630][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.552201][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.601065][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.613786][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.650288][ T5156] Bluetooth: hci1: command tx timeout [ 238.677745][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.728478][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.872128][T10471] openvswitch: netlink: IPv4 tun info is not correct [ 238.894400][T10379] chnl_net:caif_netlink_parms(): no params data found [ 238.954888][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.977845][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.006154][T10349] hsr_slave_0: entered promiscuous mode [ 239.013450][T10349] hsr_slave_1: entered promiscuous mode [ 239.020240][T10349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.034151][T10349] Cannot create hsr debugfs directory [ 239.106117][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.149396][T10480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1228'. [ 239.213763][T10471] syzkaller0: entered promiscuous mode [ 239.220516][T10471] syzkaller0: entered allmulticast mode [ 239.449807][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 239.489166][T10495] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1232'. [ 239.569916][T10502] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001 [ 239.719816][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'. [ 239.730224][T10511] netlink: 'syz.0.1235': attribute type 7 has an invalid length. [ 239.741293][T10511] netlink: 'syz.0.1235': attribute type 8 has an invalid length. [ 239.760594][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.775623][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.784162][T10379] bridge_slave_0: entered allmulticast mode [ 239.790944][ T5156] Bluetooth: hci4: command tx timeout [ 239.792715][T10379] bridge_slave_0: entered promiscuous mode [ 239.828883][T10511] erspan0: entered promiscuous mode [ 239.836914][T10511] 0ªX¹¦D: entered promiscuous mode [ 239.850932][T10515] netlink: 'syz.5.1237': attribute type 1 has an invalid length. [ 239.903192][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.916715][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.934028][T10379] bridge_slave_1: entered allmulticast mode [ 239.945522][T10379] bridge_slave_1: entered promiscuous mode [ 240.084209][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.096494][ T5156] block nbd38: Receive control failed (result -107) [ 240.115984][ T12] bridge_slave_1: left allmulticast mode [ 240.122927][ T12] bridge_slave_1: left promiscuous mode [ 240.135652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.137597][T10522] nbd38: detected capacity change from 0 to 256 [ 240.154036][ T12] bridge_slave_0: left allmulticast mode [ 240.168416][ T12] bridge_slave_0: left promiscuous mode [ 240.181052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.727529][ T5156] Bluetooth: hci1: command tx timeout [ 241.050486][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.063136][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.089911][ T12] bond0 (unregistering): Released all slaves [ 241.150759][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.358275][T10555] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 241.449948][T10379] team0: Port device team_slave_0 added [ 241.485749][T10379] team0: Port device team_slave_1 added [ 241.741511][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.766858][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.807081][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.826873][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.834279][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.849241][ T5156] Bluetooth: hci4: command tx timeout [ 241.861221][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.902738][ T12] hsr_slave_0: left promiscuous mode [ 241.912090][ T12] hsr_slave_1: left promiscuous mode [ 241.920647][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.931059][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.940749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.948417][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.973907][ T12] veth1_macvtap: left promiscuous mode [ 241.979658][ T12] veth0_macvtap: left promiscuous mode [ 241.985276][ T12] veth1_vlan: left promiscuous mode [ 241.990770][ T12] veth0_vlan: left promiscuous mode [ 242.564366][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.610230][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.808054][ T5156] Bluetooth: hci1: command tx timeout [ 243.101146][T10582] __nla_validate_parse: 41 callbacks suppressed [ 243.101170][T10582] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1250'. [ 243.324322][T10379] hsr_slave_0: entered promiscuous mode [ 243.345040][T10379] hsr_slave_1: entered promiscuous mode [ 243.378964][T10379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.386720][T10379] Cannot create hsr debugfs directory [ 243.548496][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 243.659938][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 243.680954][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1255'. [ 243.721936][ T5156] block nbd39: Receive control failed (result -107) [ 243.757783][T10601] nbd39: detected capacity change from 0 to 256 [ 243.833036][T10349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.911668][T10349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.932061][ T5156] Bluetooth: hci4: command tx timeout [ 244.006945][T10349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.054109][T10349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.159758][T10623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.244664][T10632] veth0: entered promiscuous mode [ 244.255518][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 244.612249][T10651] netlink: 'syz.0.1265': attribute type 21 has an invalid length. [ 244.625314][T10651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1265'. [ 244.645932][T10651] netlink: 'syz.0.1265': attribute type 5 has an invalid length. [ 244.656200][T10651] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1265'. [ 244.693189][T10349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.739789][T10349] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.764120][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.771442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.811216][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.818540][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.895489][T10379] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.907091][T10379] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.923649][T10379] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.941594][T10379] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.972960][T10349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.163314][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.207296][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.235462][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.242714][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.266859][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.274110][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.356951][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1270'. [ 245.429023][T10379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.438353][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1270'. [ 245.456619][T10668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1270'. [ 245.456647][T10379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.491429][ T5156] block nbd40: Receive control failed (result -107) [ 245.522276][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.529210][T10668] nbd40: detected capacity change from 0 to 256 [ 245.537749][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.867982][ T5833] IPVS: starting estimator thread 0... [ 245.873980][T10678] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.971121][T10684] IPVS: using max 28 ests per chain, 67200 per kthread [ 246.089391][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.271950][T10349] veth0_vlan: entered promiscuous mode [ 246.289791][T10379] veth0_vlan: entered promiscuous mode [ 246.307165][T10349] veth1_vlan: entered promiscuous mode [ 246.346354][T10379] veth1_vlan: entered promiscuous mode [ 246.399224][T10349] veth0_macvtap: entered promiscuous mode [ 246.447363][T10349] veth1_macvtap: entered promiscuous mode [ 246.486607][T10379] veth0_macvtap: entered promiscuous mode [ 246.523032][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.562153][T10379] veth1_macvtap: entered promiscuous mode [ 246.574542][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.620284][T10349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.647868][T10349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.672883][T10349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.683849][T10349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.702550][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.724599][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.756256][T10379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.765982][T10379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.784244][T10379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.794261][T10379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.812085][T10710] blkio.reset_stats is deprecated [ 246.950088][T10710] vlan1: entered promiscuous mode [ 246.958019][T10710] bridge0: entered promiscuous mode [ 247.053543][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.075424][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.246404][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.256337][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.294616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.306262][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.371874][T10723] x_tables: unsorted underflow at hook 4 [ 247.415410][T10727] syzkaller1: entered promiscuous mode [ 247.436196][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.486754][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.713813][T10736] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.975831][T10747] netlink: 'syz.2.1290': attribute type 6 has an invalid length. [ 248.041059][ T1339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.180950][ T1339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.310382][ T1339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.490710][ T1339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.688115][ T1339] bridge_slave_1: left allmulticast mode [ 248.693812][ T1339] bridge_slave_1: left promiscuous mode [ 248.702161][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.713638][ T1339] bridge_slave_0: left allmulticast mode [ 248.730497][ T1339] bridge_slave_0: left promiscuous mode [ 248.748584][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.032948][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.045099][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.054404][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.063939][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.072782][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.399165][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.410808][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.422720][ T1339] bond0 (unregistering): Released all slaves [ 249.715516][T10755] chnl_net:caif_netlink_parms(): no params data found [ 249.814495][ T1339] hsr_slave_0: left promiscuous mode [ 249.829874][T10764] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 249.846122][T10764] __nla_validate_parse: 6 callbacks suppressed [ 249.846141][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 249.851277][ T1339] hsr_slave_1: left promiscuous mode [ 249.881920][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.917897][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.956492][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.980223][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.063273][ T1339] veth1_macvtap: left promiscuous mode [ 250.093978][ T1339] veth0_macvtap: left promiscuous mode [ 250.111909][ T1339] veth1_vlan: left promiscuous mode [ 250.128037][ T1339] veth0_vlan: left promiscuous mode [ 250.481473][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.498846][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.508022][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.524940][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.535704][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.010549][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 251.061111][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 251.221934][ T5156] Bluetooth: hci1: command tx timeout [ 251.593171][T10764] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 251.816265][T10755] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.832115][T10755] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.840232][T10755] bridge_slave_0: entered allmulticast mode [ 251.849431][T10755] bridge_slave_0: entered promiscuous mode [ 251.906363][T10755] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.946787][T10755] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.974415][T10755] bridge_slave_1: entered allmulticast mode [ 251.996499][T10755] bridge_slave_1: entered promiscuous mode [ 252.299088][T10755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.325230][T10755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.432261][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 252.486517][T10755] team0: Port device team_slave_0 added [ 252.499456][T10827] net veth1_virt_wifi .: renamed from virt_wifi0 [ 252.521357][T10755] team0: Port device team_slave_1 added [ 252.538668][T10824] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 252.667593][ T5854] Bluetooth: hci4: command tx timeout [ 252.803091][T10832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1305'. [ 252.952120][T10755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.960573][T10835] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 252.968644][T10755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.997057][T10835] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1306'. [ 253.007940][T10755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.032755][T10755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.048042][T10755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.140568][T10837] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1308'. [ 253.170946][T10755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.287882][ T5854] Bluetooth: hci1: command tx timeout [ 253.446633][T10755] hsr_slave_0: entered promiscuous mode [ 253.452111][T10849] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 253.476155][T10755] hsr_slave_1: entered promiscuous mode [ 253.501545][T10755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.530114][T10755] Cannot create hsr debugfs directory [ 253.649178][T10849] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.686764][T10848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.708161][T10848] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.730659][T10848] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 253.794322][T10850] veth7: entered promiscuous mode [ 253.809758][T10850] bond5: (slave veth7): Enslaving as an active interface with a down link [ 254.095436][ T1339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.163574][T10878] tipc: Enabled bearer , priority 0 [ 254.184442][T10776] chnl_net:caif_netlink_parms(): no params data found [ 254.285521][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1319'. [ 254.317230][T10878] syzkaller0: entered promiscuous mode [ 254.324468][T10878] syzkaller0: entered allmulticast mode [ 254.330922][T10878] tipc: Resetting bearer [ 254.345023][T10888] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 254.353969][T10877] tipc: Resetting bearer [ 254.728838][ T5854] Bluetooth: hci4: command tx timeout [ 255.377705][ T5854] Bluetooth: hci1: command tx timeout [ 256.043237][T10877] tipc: Disabling bearer [ 256.066716][T10885] kthread_run failed with err -4 [ 256.174898][ T1339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.304237][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 256.320249][ T1339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.478478][ T1339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.504863][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 256.535670][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1327'. [ 256.607979][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1327'. [ 256.805331][T10927] tls_set_device_offload_rx: netdev not found [ 256.817887][ T5854] Bluetooth: hci4: command tx timeout [ 256.878001][T10776] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.885212][T10776] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.923097][T10776] bridge_slave_0: entered allmulticast mode [ 256.931379][T10776] bridge_slave_0: entered promiscuous mode [ 257.024397][T10776] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.039613][T10776] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.047020][T10776] bridge_slave_1: entered allmulticast mode [ 257.091434][T10776] bridge_slave_1: entered promiscuous mode [ 257.171079][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 257.199033][T10776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.235336][T10776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.286849][T10941] delete_channel: no stack [ 257.325690][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 257.359467][T10949] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 257.398125][ T1339] bridge_slave_1: left allmulticast mode [ 257.403972][ T1339] bridge_slave_1: left promiscuous mode [ 257.406403][T10951] netlink: 'syz.5.1339': attribute type 4 has an invalid length. [ 257.418939][ T1339] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.426493][T10953] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 257.443273][ T1339] bridge_slave_0: left allmulticast mode [ 257.449352][ T1339] bridge_slave_0: left promiscuous mode [ 257.455156][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.457695][ T5854] Bluetooth: hci1: command tx timeout [ 257.867169][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.881637][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.895780][ T1339] bond0 (unregistering): Released all slaves [ 257.913791][T10949] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 257.928525][T10949] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 258.012044][T10776] team0: Port device team_slave_0 added [ 258.076598][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 258.082807][T10776] team0: Port device team_slave_1 added [ 258.103229][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'. [ 258.342971][T10776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.355956][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.387655][T10776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.421547][T10776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.428901][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.465093][T10776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.471166][T10974] netlink: 'syz.0.1344': attribute type 2 has an invalid length. [ 258.490893][T10974] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1344'. [ 258.512322][T10970] netlink: 'syz.5.1343': attribute type 10 has an invalid length. [ 258.520444][T10970] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1343'. [ 258.568275][T10970] batadv0: entered promiscuous mode [ 258.573667][T10970] batadv0: entered allmulticast mode [ 258.580728][T10970] bridge0: port 3(batadv0) entered blocking state [ 258.589571][T10970] bridge0: port 3(batadv0) entered disabled state [ 258.600023][T10970] bridge0: port 3(batadv0) entered blocking state [ 258.606608][T10970] bridge0: port 3(batadv0) entered forwarding state [ 258.631781][ T1339] hsr_slave_0: left promiscuous mode [ 258.646345][ T1339] hsr_slave_1: left promiscuous mode [ 258.654007][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.667917][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.676687][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.690538][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.744487][ T1339] veth1_macvtap: left promiscuous mode [ 258.754302][ T1339] veth0_macvtap: left promiscuous mode [ 258.760455][ T1339] veth1_vlan: left promiscuous mode [ 258.766111][ T1339] veth0_vlan: left promiscuous mode [ 258.898070][ T5854] Bluetooth: hci4: command tx timeout [ 258.913519][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 258.924182][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 259.339937][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 259.383598][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 259.962791][T10776] hsr_slave_0: entered promiscuous mode [ 259.975759][T10776] hsr_slave_1: entered promiscuous mode [ 259.989012][T10776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.996818][T10776] Cannot create hsr debugfs directory [ 260.067882][T10991] team0: entered promiscuous mode [ 260.074264][T10991] team_slave_0: entered promiscuous mode [ 260.080575][T10991] team_slave_1: entered promiscuous mode [ 260.132070][T10997] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 260.174716][T10997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.202407][T10990] team0: left promiscuous mode [ 260.211709][T10990] team_slave_0: left promiscuous mode [ 260.224051][T10990] team_slave_1: left promiscuous mode [ 260.391828][T10755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.400469][T11004] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 260.432043][T10755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.496970][T11004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.521861][T10755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.542533][T10755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.573937][T11009] gretap0: entered promiscuous mode [ 260.626534][T11009] bond2: (slave gretap0): making interface the new active one [ 260.642756][T11009] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 260.705469][T11004] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 261.285014][ T3083] IPVS: starting estimator thread 0... [ 261.388707][T11035] IPVS: using max 27 ests per chain, 64800 per kthread [ 261.592326][T10755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.602062][T11043] netlink: 'syz.2.1363': attribute type 10 has an invalid length. [ 261.647127][T10755] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.686515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.693798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.780572][T11047] __nla_validate_parse: 1 callbacks suppressed [ 261.780597][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1365'. [ 261.823278][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.830541][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.966336][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 262.069731][T11061] FAULT_INJECTION: forcing a failure. [ 262.069731][T11061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 262.087224][T11061] CPU: 0 UID: 0 PID: 11061 Comm: syz.5.1368 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 262.087255][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.087275][T11061] Call Trace: [ 262.087287][T11061] [ 262.087296][T11061] dump_stack_lvl+0x189/0x250 [ 262.087342][T11061] ? __pfx____ratelimit+0x10/0x10 [ 262.087376][T11061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.087406][T11061] ? __pfx__printk+0x10/0x10 [ 262.087426][T11061] ? __might_fault+0xb0/0x130 [ 262.087455][T11061] should_fail_ex+0x414/0x560 [ 262.087488][T11061] _copy_from_user+0x2d/0xb0 [ 262.087508][T11061] ___sys_sendmsg+0x158/0x2a0 [ 262.087538][T11061] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.087601][T11061] ? __fget_files+0x2a/0x420 [ 262.087621][T11061] ? __fget_files+0x3a0/0x420 [ 262.087651][T11061] __x64_sys_sendmsg+0x19b/0x260 [ 262.087679][T11061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.087714][T11061] ? __pfx_ksys_write+0x10/0x10 [ 262.087729][T11061] ? rcu_is_watching+0x15/0xb0 [ 262.087766][T11061] ? do_syscall_64+0xbe/0x3b0 [ 262.087789][T11061] do_syscall_64+0xfa/0x3b0 [ 262.087808][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.087826][T11061] ? asm_sysvec_call_function_single+0x1a/0x20 [ 262.087846][T11061] ? clear_bhb_loop+0x60/0xb0 [ 262.087870][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.087889][T11061] RIP: 0033:0x7fbbcaf8e929 [ 262.087911][T11061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.087928][T11061] RSP: 002b:00007fbbcbecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.087951][T11061] RAX: ffffffffffffffda RBX: 00007fbbcb1b5fa0 RCX: 00007fbbcaf8e929 [ 262.087966][T11061] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 262.087977][T11061] RBP: 00007fbbcbecb090 R08: 0000000000000000 R09: 0000000000000000 [ 262.087989][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.087999][T11061] R13: 0000000000000000 R14: 00007fbbcb1b5fa0 R15: 00007ffcef61e7c8 [ 262.088029][T11061] [ 262.370519][T10776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.389566][T10776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.414141][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 262.432062][T10776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.454314][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1370'. [ 262.458738][T10776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.635687][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1373'. [ 262.655579][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 262.854021][T10776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.908634][T10776] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.969826][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.977041][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.033142][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.040420][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.212499][T10755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.354005][T11104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1379'. [ 263.391249][T11110] FAULT_INJECTION: forcing a failure. [ 263.391249][T11110] name failslab, interval 1, probability 0, space 0, times 1 [ 263.407655][T11104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1379'. [ 263.436693][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.5.1380 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 263.436726][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.436739][T11110] Call Trace: [ 263.436747][T11110] [ 263.436755][T11110] dump_stack_lvl+0x189/0x250 [ 263.436791][T11110] ? __pfx____ratelimit+0x10/0x10 [ 263.436823][T11110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.436857][T11110] ? __pfx__printk+0x10/0x10 [ 263.436884][T11110] ? __pfx___might_resched+0x10/0x10 [ 263.436918][T11110] should_fail_ex+0x414/0x560 [ 263.436949][T11110] should_failslab+0xa8/0x100 [ 263.436972][T11110] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 263.436993][T11110] ? __alloc_skb+0x112/0x2d0 [ 263.437020][T11110] __alloc_skb+0x112/0x2d0 [ 263.437048][T11110] netlink_sendmsg+0x5c6/0xb30 [ 263.437082][T11110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.437108][T11110] ? aa_sock_msg_perm+0x94/0x160 [ 263.437136][T11110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.437161][T11110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.437186][T11110] __sock_sendmsg+0x219/0x270 [ 263.437220][T11110] ____sys_sendmsg+0x505/0x830 [ 263.437251][T11110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.437286][T11110] ? import_iovec+0x74/0xa0 [ 263.437307][T11110] ___sys_sendmsg+0x21f/0x2a0 [ 263.437340][T11110] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.437398][T11110] ? __fget_files+0x2a/0x420 [ 263.437419][T11110] ? __fget_files+0x3a0/0x420 [ 263.437450][T11110] __x64_sys_sendmsg+0x19b/0x260 [ 263.437478][T11110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.437514][T11110] ? __pfx_ksys_write+0x10/0x10 [ 263.437530][T11110] ? rcu_is_watching+0x15/0xb0 [ 263.437566][T11110] ? do_syscall_64+0xbe/0x3b0 [ 263.437588][T11110] do_syscall_64+0xfa/0x3b0 [ 263.437604][T11110] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.437631][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.437651][T11110] ? clear_bhb_loop+0x60/0xb0 [ 263.437675][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.437693][T11110] RIP: 0033:0x7fbbcaf8e929 [ 263.437712][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.437728][T11110] RSP: 002b:00007fbbcbecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.437750][T11110] RAX: ffffffffffffffda RBX: 00007fbbcb1b5fa0 RCX: 00007fbbcaf8e929 [ 263.437764][T11110] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 263.437777][T11110] RBP: 00007fbbcbecb090 R08: 0000000000000000 R09: 0000000000000000 [ 263.437789][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.437801][T11110] R13: 0000000000000000 R14: 00007fbbcb1b5fa0 R15: 00007ffcef61e7c8 [ 263.437832][T11110] [ 263.895626][T10776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.102920][T10776] veth0_vlan: entered promiscuous mode [ 264.136468][T10776] veth1_vlan: entered promiscuous mode [ 264.247035][T10776] veth0_macvtap: entered promiscuous mode [ 264.310741][T10776] veth1_macvtap: entered promiscuous mode [ 264.404741][T10776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.475585][T10776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.515158][T10755] veth0_vlan: entered promiscuous mode [ 264.530128][T10776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.557475][T10776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.576658][T10776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.599347][T10776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.664996][T10755] veth1_vlan: entered promiscuous mode [ 264.910181][T10755] veth0_macvtap: entered promiscuous mode [ 264.977605][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.985484][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.029356][T10755] veth1_macvtap: entered promiscuous mode [ 265.104499][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.124067][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.189925][T10755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.322668][T10755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.358941][T10755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.394747][T10755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.437344][T10755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.446473][T10755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.637904][T11180] 8021q: VLANs not supported on ip6_vti0 [ 265.768324][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.793755][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.876216][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.907729][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.062185][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 266.103986][T11196] bond0: option mode: unable to set because the bond device has slaves [ 266.204150][T11198] bond0: option mode: unable to set because the bond device has slaves [ 266.260898][T11200] FAULT_INJECTION: forcing a failure. [ 266.260898][T11200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.345677][T11200] CPU: 0 UID: 0 PID: 11200 Comm: syz.0.1404 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 266.345710][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.345723][T11200] Call Trace: [ 266.345731][T11200] [ 266.345753][T11200] dump_stack_lvl+0x189/0x250 [ 266.345799][T11200] ? __pfx____ratelimit+0x10/0x10 [ 266.345830][T11200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.345861][T11200] ? __pfx__printk+0x10/0x10 [ 266.345882][T11200] ? __might_fault+0xb0/0x130 [ 266.345914][T11200] should_fail_ex+0x414/0x560 [ 266.345945][T11200] _copy_from_iter+0x1db/0x16f0 [ 266.345979][T11200] ? rcu_is_watching+0x15/0xb0 [ 266.346011][T11200] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 266.346032][T11200] ? __pfx__copy_from_iter+0x10/0x10 [ 266.346064][T11200] ? __build_skb_around+0x257/0x3e0 [ 266.346091][T11200] ? netlink_sendmsg+0x642/0xb30 [ 266.346113][T11200] ? skb_put+0x11b/0x210 [ 266.346158][T11200] netlink_sendmsg+0x6b2/0xb30 [ 266.346193][T11200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.346222][T11200] ? aa_sock_msg_perm+0x94/0x160 [ 266.346251][T11200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.346277][T11200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.346304][T11200] __sock_sendmsg+0x219/0x270 [ 266.346339][T11200] ____sys_sendmsg+0x505/0x830 [ 266.346372][T11200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.346409][T11200] ? import_iovec+0x74/0xa0 [ 266.346433][T11200] ___sys_sendmsg+0x21f/0x2a0 [ 266.346463][T11200] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.346539][T11200] ? __fget_files+0x2a/0x420 [ 266.346560][T11200] ? __fget_files+0x3a0/0x420 [ 266.346593][T11200] __x64_sys_sendmsg+0x19b/0x260 [ 266.346621][T11200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.346657][T11200] ? __pfx_ksys_write+0x10/0x10 [ 266.346682][T11200] ? do_syscall_64+0xbe/0x3b0 [ 266.346705][T11200] do_syscall_64+0xfa/0x3b0 [ 266.346722][T11200] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.346751][T11200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.346778][T11200] ? clear_bhb_loop+0x60/0xb0 [ 266.346803][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.346823][T11200] RIP: 0033:0x7ff34258e929 [ 266.346840][T11200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.346857][T11200] RSP: 002b:00007ff343342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.346878][T11200] RAX: ffffffffffffffda RBX: 00007ff3427b5fa0 RCX: 00007ff34258e929 [ 266.346893][T11200] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 266.346905][T11200] RBP: 00007ff343342090 R08: 0000000000000000 R09: 0000000000000000 [ 266.346917][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.346928][T11200] R13: 0000000000000000 R14: 00007ff3427b5fa0 R15: 00007ffc060ed388 [ 266.346958][T11200] [ 266.650914][ T3504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.059907][ T3504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.324204][ T3504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.386043][ T3504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.482785][ T3504] bridge_slave_1: left allmulticast mode [ 267.488662][ T3504] bridge_slave_1: left promiscuous mode [ 267.494438][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.505192][ T3504] bridge_slave_0: left allmulticast mode [ 267.511246][ T3504] bridge_slave_0: left promiscuous mode [ 267.517014][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.891813][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.906190][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.917163][ T3504] bond0 (unregistering): Released all slaves [ 268.213690][ T3504] hsr_slave_0: left promiscuous mode [ 268.220803][ T3504] hsr_slave_1: left promiscuous mode [ 268.226741][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.240353][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.251337][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.259318][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.281572][ T3504] veth1_macvtap: left promiscuous mode [ 268.287158][ T3504] veth0_macvtap: left promiscuous mode [ 268.292865][ T3504] veth1_vlan: left promiscuous mode [ 268.298271][ T3504] veth0_vlan: left promiscuous mode [ 268.934999][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.953571][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.961973][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.003968][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.027840][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.404944][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 269.448371][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.458481][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.472406][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.481751][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.491822][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.502648][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 269.965536][T11213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1405'. [ 269.978023][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 270.411585][T11249] FAULT_INJECTION: forcing a failure. [ 270.411585][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 270.424685][T11249] CPU: 0 UID: 0 PID: 11249 Comm: syz.5.1415 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 270.424716][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.424728][T11249] Call Trace: [ 270.424736][T11249] [ 270.424745][T11249] dump_stack_lvl+0x189/0x250 [ 270.424781][T11249] ? __pfx____ratelimit+0x10/0x10 [ 270.424810][T11249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.424841][T11249] ? __pfx__printk+0x10/0x10 [ 270.424870][T11249] ? ref_tracker_alloc+0x318/0x460 [ 270.424900][T11249] should_fail_ex+0x414/0x560 [ 270.424932][T11249] should_failslab+0xa8/0x100 [ 270.424955][T11249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 270.424987][T11249] ? skb_clone+0x212/0x3a0 [ 270.425019][T11249] skb_clone+0x212/0x3a0 [ 270.425049][T11249] __netlink_deliver_tap+0x404/0x850 [ 270.425087][T11249] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.425112][T11249] netlink_deliver_tap+0x19c/0x1b0 [ 270.425137][T11249] netlink_unicast+0x72f/0x8d0 [ 270.425170][T11249] netlink_sendmsg+0x805/0xb30 [ 270.425205][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.425233][T11249] ? aa_sock_msg_perm+0x94/0x160 [ 270.425261][T11249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.425286][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.425312][T11249] __sock_sendmsg+0x219/0x270 [ 270.425346][T11249] ____sys_sendmsg+0x505/0x830 [ 270.425378][T11249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.425414][T11249] ? import_iovec+0x74/0xa0 [ 270.425450][T11249] ___sys_sendmsg+0x21f/0x2a0 [ 270.425477][T11249] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.425539][T11249] ? __fget_files+0x2a/0x420 [ 270.425559][T11249] ? __fget_files+0x3a0/0x420 [ 270.425593][T11249] __x64_sys_sendmsg+0x19b/0x260 [ 270.425620][T11249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.425655][T11249] ? __pfx_ksys_write+0x10/0x10 [ 270.425671][T11249] ? rcu_is_watching+0x15/0xb0 [ 270.425706][T11249] ? do_syscall_64+0xbe/0x3b0 [ 270.425728][T11249] do_syscall_64+0xfa/0x3b0 [ 270.425744][T11249] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.425772][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.425791][T11249] ? clear_bhb_loop+0x60/0xb0 [ 270.425815][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.425834][T11249] RIP: 0033:0x7fbbcaf8e929 [ 270.425852][T11249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.425867][T11249] RSP: 002b:00007fbbcbecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.425888][T11249] RAX: ffffffffffffffda RBX: 00007fbbcb1b5fa0 RCX: 00007fbbcaf8e929 [ 270.425902][T11249] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 270.425914][T11249] RBP: 00007fbbcbecb090 R08: 0000000000000000 R09: 0000000000000000 [ 270.425927][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.425938][T11249] R13: 0000000000000000 R14: 00007fbbcb1b5fa0 R15: 00007ffcef61e7c8 [ 270.425971][T11249] [ 270.995588][T11263] xt_bpf: check failed: parse error [ 271.137534][ T5854] Bluetooth: hci1: command tx timeout [ 271.156404][T11219] chnl_net:caif_netlink_parms(): no params data found [ 271.448917][T11281] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1425'. [ 271.527936][ T5854] Bluetooth: hci4: command tx timeout [ 271.621450][ T3504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.638342][T11290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1427'. [ 271.691095][T11290] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 271.805943][ T3504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.888331][T11228] chnl_net:caif_netlink_parms(): no params data found [ 271.940794][T11296] FAULT_INJECTION: forcing a failure. [ 271.940794][T11296] name failslab, interval 1, probability 0, space 0, times 0 [ 271.979084][T11296] CPU: 1 UID: 0 PID: 11296 Comm: syz.5.1430 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 271.979115][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.979127][T11296] Call Trace: [ 271.979135][T11296] [ 271.979144][T11296] dump_stack_lvl+0x189/0x250 [ 271.979180][T11296] ? __pfx____ratelimit+0x10/0x10 [ 271.979211][T11296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.979242][T11296] ? __pfx__printk+0x10/0x10 [ 271.979269][T11296] ? __pfx___might_resched+0x10/0x10 [ 271.979299][T11296] ? fs_reclaim_acquire+0x7d/0x100 [ 271.979328][T11296] should_fail_ex+0x414/0x560 [ 271.979358][T11296] should_failslab+0xa8/0x100 [ 271.979381][T11296] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 271.979402][T11296] ? __alloc_skb+0x112/0x2d0 [ 271.979428][T11296] __alloc_skb+0x112/0x2d0 [ 271.979455][T11296] netlink_ack+0x146/0xa50 [ 271.979474][T11296] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.979499][T11296] ? ref_tracker_free+0x63a/0x7d0 [ 271.979521][T11296] ? __copy_skb_header+0xa7/0x550 [ 271.979543][T11296] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.979573][T11296] netlink_rcv_skb+0x28c/0x470 [ 271.979593][T11296] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.979611][T11296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.979640][T11296] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.979657][T11296] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.979680][T11296] netlink_unicast+0x758/0x8d0 [ 271.979705][T11296] netlink_sendmsg+0x805/0xb30 [ 271.979732][T11296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.979754][T11296] ? aa_sock_msg_perm+0x94/0x160 [ 271.979776][T11296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.979796][T11296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.979815][T11296] __sock_sendmsg+0x219/0x270 [ 271.979843][T11296] ____sys_sendmsg+0x505/0x830 [ 271.979868][T11296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.979896][T11296] ? import_iovec+0x74/0xa0 [ 271.979914][T11296] ___sys_sendmsg+0x21f/0x2a0 [ 271.979936][T11296] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.979985][T11296] ? __fget_files+0x2a/0x420 [ 271.980002][T11296] ? __fget_files+0x3a0/0x420 [ 271.980028][T11296] __x64_sys_sendmsg+0x19b/0x260 [ 271.980051][T11296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.980079][T11296] ? __pfx_ksys_write+0x10/0x10 [ 271.980092][T11296] ? rcu_is_watching+0x15/0xb0 [ 271.980120][T11296] ? do_syscall_64+0xbe/0x3b0 [ 271.980138][T11296] do_syscall_64+0xfa/0x3b0 [ 271.980151][T11296] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.980175][T11296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.980190][T11296] ? clear_bhb_loop+0x60/0xb0 [ 271.980209][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.980225][T11296] RIP: 0033:0x7fbbcaf8e929 [ 271.980240][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.980254][T11296] RSP: 002b:00007fbbcbecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.980271][T11296] RAX: ffffffffffffffda RBX: 00007fbbcb1b5fa0 RCX: 00007fbbcaf8e929 [ 271.980283][T11296] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 271.980293][T11296] RBP: 00007fbbcbecb090 R08: 0000000000000000 R09: 0000000000000000 [ 271.980302][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.980312][T11296] R13: 0000000000000000 R14: 00007fbbcb1b5fa0 R15: 00007ffcef61e7c8 [ 271.980336][T11296] [ 272.350120][T11219] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.360076][T11219] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.379724][T11219] bridge_slave_0: entered allmulticast mode [ 272.398174][T11219] bridge_slave_0: entered promiscuous mode [ 272.466284][ T3504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.585012][T11219] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.596138][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.604394][T11219] bridge_slave_1: entered allmulticast mode [ 272.615243][T11219] bridge_slave_1: entered promiscuous mode [ 272.705922][ T3504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.756374][T11219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.782111][T11219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.993149][T11219] team0: Port device team_slave_0 added [ 273.060457][T11219] team0: Port device team_slave_1 added [ 273.073447][T11333] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1439'. [ 273.087812][T11333] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1439'. [ 273.196194][T11228] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.205494][T11228] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.208288][ T5854] Bluetooth: hci1: command tx timeout [ 273.225016][T11228] bridge_slave_0: entered allmulticast mode [ 273.238606][T11228] bridge_slave_0: entered promiscuous mode [ 273.300812][T11219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.308191][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.335248][T11219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.360906][T11228] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.379742][T11228] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.387250][T11228] bridge_slave_1: entered allmulticast mode [ 273.395284][T11228] bridge_slave_1: entered promiscuous mode [ 273.403287][T11219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.410895][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.438876][T11219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.450256][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1443'. [ 273.480741][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1443'. [ 273.568346][T11228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.599948][ T3504] bridge_slave_1: left allmulticast mode [ 273.605653][ T3504] bridge_slave_1: left promiscuous mode [ 273.607949][ T5854] Bluetooth: hci4: command tx timeout [ 273.619215][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.630460][ T3504] bridge_slave_0: left allmulticast mode [ 273.636316][ T3504] bridge_slave_0: left promiscuous mode [ 273.642820][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.688382][T11350] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 274.052633][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.064954][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.076376][ T3504] bond0 (unregistering): Released all slaves [ 274.094670][T11228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.114330][T11219] hsr_slave_0: entered promiscuous mode [ 274.129121][T11219] hsr_slave_1: entered promiscuous mode [ 274.155994][T11219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.172629][T11219] Cannot create hsr debugfs directory [ 274.214886][T11346] netlink: 'syz.5.1443': attribute type 1 has an invalid length. [ 274.298606][T11354] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 274.381188][T11228] team0: Port device team_slave_0 added [ 274.421925][T11228] team0: Port device team_slave_1 added [ 274.599090][ T3504] hsr_slave_0: left promiscuous mode [ 274.607344][ T3504] hsr_slave_1: left promiscuous mode [ 274.624358][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.635027][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.649388][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.656896][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.682437][ T3504] veth1_macvtap: left promiscuous mode [ 274.689488][ T3504] veth0_macvtap: left promiscuous mode [ 274.695161][ T3504] veth1_vlan: left promiscuous mode [ 274.700769][ T3504] veth0_vlan: left promiscuous mode [ 275.229535][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 275.275089][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 275.294497][ T5854] Bluetooth: hci1: command tx timeout [ 275.688703][ T5854] Bluetooth: hci4: command tx timeout [ 275.771769][T11228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.782470][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.808968][T11228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.864794][T11228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.881870][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.915583][T11228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.044574][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 276.121083][T11371] macvtap1: entered promiscuous mode [ 276.132869][T11371] vlan0: entered promiscuous mode [ 276.140153][T11371] macvtap1: entered allmulticast mode [ 276.146605][T11371] vlan0: entered allmulticast mode [ 276.156307][T11371] veth0_vlan: entered allmulticast mode [ 276.175860][T11228] hsr_slave_0: entered promiscuous mode [ 276.194076][T11228] hsr_slave_1: entered promiscuous mode [ 276.201223][T11228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.209751][T11228] Cannot create hsr debugfs directory [ 277.105658][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1464'. [ 277.367918][ T5854] Bluetooth: hci1: command tx timeout [ 277.437214][T11219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.462390][T11219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.483907][T11219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.537083][T11219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.744515][T11228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.767859][ T5854] Bluetooth: hci4: command tx timeout [ 277.798165][T11228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.821847][T11228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.857865][T11228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.016908][T11219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.100246][T11219] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.143360][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 278.145020][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.159511][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.192336][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 278.219374][T11462] xt_policy: too many policy elements [ 278.228927][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.236174][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.244800][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1477'. [ 278.292145][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.314459][ T5854] block nbd41: Receive control failed (result -107) [ 278.348799][T11458] nbd41: detected capacity change from 0 to 256 [ 278.363800][T11228] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.482621][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.489871][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.559734][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.566983][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.643457][T11476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1480'. [ 279.091624][T11219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.192890][T11492] netlink: 'syz.0.1485': attribute type 15 has an invalid length. [ 279.201469][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 279.218113][T11492] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1485'. [ 279.221211][T11219] veth0_vlan: entered promiscuous mode [ 279.275465][T11219] veth1_vlan: entered promiscuous mode [ 279.364292][T11219] veth0_macvtap: entered promiscuous mode [ 279.420235][T11219] veth1_macvtap: entered promiscuous mode [ 279.448374][T11502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1488'. [ 279.487215][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 279.494844][T11228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.545655][T11219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.591693][T11219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.657155][T11219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.681980][T11219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.717623][T11219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.737564][T11219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.753226][ T5854] block nbd42: Receive control failed (result -107) [ 279.778351][T11510] nbd42: detected capacity change from 0 to 256 [ 280.006071][T11523] syzkaller1: entered promiscuous mode [ 280.027884][T11523] syzkaller1: entered allmulticast mode [ 280.067870][T11523] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 280.114707][T11523] sctp: [Deprecated]: syz.0.1493 (pid 11523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.114707][T11523] Use struct sctp_sack_info instead [ 280.153393][T11523] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 280.161343][T11523] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 280.177754][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.187697][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.339988][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.358470][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.398972][T11228] veth0_vlan: entered promiscuous mode [ 280.450499][T11228] veth1_vlan: entered promiscuous mode [ 280.537175][T11539] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 280.666110][T11228] veth0_macvtap: entered promiscuous mode [ 280.819562][T11228] veth1_macvtap: entered promiscuous mode [ 280.862964][T11228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.894667][T11228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.914851][T11228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.948225][T11228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.957993][T11228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.977357][T11228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.102340][T11560] __nla_validate_parse: 7 callbacks suppressed [ 281.102364][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 281.183170][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 281.258268][T11560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1505'. [ 281.300138][ T3504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.377078][ T5854] block nbd43: Receive control failed (result -107) [ 281.427830][T11560] nbd43: detected capacity change from 0 to 256 [ 281.465432][T11566] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 281.475215][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.487412][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.531974][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.540392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.672979][ T3504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.973087][ T3504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.169964][ T3504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.266578][T11579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'. [ 282.315460][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1511'. [ 282.456216][ T3504] bridge_slave_1: left allmulticast mode [ 282.464202][ T3504] bridge_slave_1: left promiscuous mode [ 282.475327][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.485833][ T3504] bridge_slave_0: left allmulticast mode [ 282.495606][ T3504] bridge_slave_0: left promiscuous mode [ 282.501586][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.617870][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.634923][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.661048][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.684386][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.699017][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.195429][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.208591][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.222235][ T3504] bond0 (unregistering): Released all slaves [ 283.294694][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.305081][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.318286][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.333378][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.342108][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.604636][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 283.674396][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 283.683857][T11614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1520'. [ 283.755537][ T5156] block nbd44: Receive control failed (result -107) [ 283.801143][T11614] nbd44: detected capacity change from 0 to 256 [ 283.873082][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'. [ 283.882202][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1523'. [ 283.985482][ T3504] hsr_slave_0: left promiscuous mode [ 284.005195][ T3504] hsr_slave_1: left promiscuous mode [ 284.019113][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.036868][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.049893][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.064563][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.126783][ T3504] veth1_macvtap: left promiscuous mode [ 284.137544][ T3504] veth0_macvtap: left promiscuous mode [ 284.143306][ T3504] veth1_vlan: left promiscuous mode [ 284.166903][ T3504] veth0_vlan: left promiscuous mode [ 284.734352][ T5156] Bluetooth: hci1: command tx timeout [ 284.845133][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 284.899231][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 285.405711][ T30] audit: type=1800 audit(1750799099.350:5): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1522" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 285.428855][T11620] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 285.447821][T11620] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 285.457906][T11620] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.459283][T11582] chnl_net:caif_netlink_parms(): no params data found [ 285.487658][ T5156] Bluetooth: hci4: command tx timeout [ 285.579895][T11638] netlink: 'syz.0.1528': attribute type 10 has an invalid length. [ 285.641842][T11638] bridge0: port 3(team0) entered blocking state [ 285.688170][T11638] bridge0: port 3(team0) entered disabled state [ 285.697830][T11638] team0: entered allmulticast mode [ 285.703059][T11638] team_slave_0: entered allmulticast mode [ 285.719964][T11638] team_slave_1: entered allmulticast mode [ 285.727916][T11638] team0: entered promiscuous mode [ 285.733027][T11638] team_slave_0: entered promiscuous mode [ 285.752940][T11638] team_slave_1: entered promiscuous mode [ 285.857599][ T31] INFO: task udevd:5891 blocked for more than 143 seconds. [ 285.864881][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 285.887940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.904043][ T31] task:udevd state:D stack:22952 pid:5891 tgid:5891 ppid:1 task_flags:0x400140 flags:0x00004002 [ 285.943450][ T31] Call Trace: [ 285.946817][ T31] [ 285.966853][ T31] __schedule+0x16f5/0x4d00 [ 286.001763][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 286.064930][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 286.133947][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 286.168844][ T31] ? schedule+0x165/0x360 [ 286.180991][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.185948][ T31] ? __pfx___schedule+0x10/0x10 [ 286.211219][ T31] ? schedule+0x91/0x360 [ 286.215572][ T31] schedule+0x165/0x360 [ 286.220156][ T31] schedule_timeout+0x12b/0x270 [ 286.225075][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.230918][ T31] ? __pfx_process_timeout+0x10/0x10 [ 286.236272][ T31] ? prepare_to_wait_event+0x437/0x480 [ 286.241851][ T31] nbd_queue_rq+0x662/0xf10 [ 286.246413][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 286.251687][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 286.259353][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 286.264980][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 286.272535][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 286.278642][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 286.284510][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 286.296278][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 286.306026][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 286.315947][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 286.326445][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 286.336610][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 286.345251][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 286.355574][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 286.366894][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 286.380079][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 286.385456][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 286.395144][ T31] ? trace_block_plug+0x7a/0x1f0 [ 286.405570][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 286.415669][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 286.434001][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 286.440580][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 286.445500][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 286.456991][ T31] __submit_bio+0x2d3/0x5a0 [ 286.463018][ T31] ? ktime_get+0x3e/0x1f0 [ 286.477145][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 286.483962][ T31] ? __pfx___submit_bio+0x10/0x10 [ 286.496643][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 286.503387][ T31] ? bio_associate_blkg+0x6d/0x230 [ 286.518290][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 286.524014][ T31] ? bio_associate_blkg+0x6d/0x230 [ 286.536147][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 286.543570][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 286.556007][ T31] block_read_full_folio+0x7b7/0x830 [ 286.561775][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 286.568468][ T31] filemap_read_folio+0x117/0x380 [ 286.573569][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 286.579302][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 286.584905][ T31] do_read_cache_folio+0x350/0x590 [ 286.590510][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 286.596017][ T31] read_part_sector+0xb6/0x2b0 [ 286.601109][ T31] adfspart_check_ICS+0xa4/0xa50 [ 286.606095][ T31] ? snprintf+0xda/0x120 [ 286.610525][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 286.616119][ T31] bdev_disk_changed+0x75c/0x14b0 [ 286.621751][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 286.627253][ T31] ? wait_on_inode+0xc0/0x230 [ 286.632056][ T31] blkdev_get_whole+0x380/0x510 [ 286.636943][ T31] bdev_open+0x31e/0xd30 [ 286.641354][ T31] blkdev_open+0x3a8/0x510 [ 286.645796][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 286.651630][ T31] do_dentry_open+0xdf3/0x1970 [ 286.656454][ T31] vfs_open+0x3b/0x340 [ 286.660787][ T31] ? path_openat+0x2ecd/0x3830 [ 286.665596][ T31] path_openat+0x2ee5/0x3830 [ 286.671314][ T31] ? arch_stack_walk+0xfc/0x150 [ 286.676237][ T31] ? __pfx_path_openat+0x10/0x10 [ 286.682005][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.688257][ T31] do_filp_open+0x1fa/0x410 [ 286.692796][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.697975][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 286.703060][ T31] ? _raw_spin_unlock+0x28/0x50 [ 286.708233][ T31] ? alloc_fd+0x64c/0x6c0 [ 286.712584][ T31] do_sys_openat2+0x121/0x1c0 [ 286.717268][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 286.722772][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.728704][ T31] ? rcu_is_watching+0x15/0xb0 [ 286.733523][ T31] __x64_sys_openat+0x138/0x170 [ 286.738860][ T31] do_syscall_64+0xfa/0x3b0 [ 286.743421][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.749612][ T31] ? asm_common_interrupt+0x26/0x40 [ 286.754818][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.759554][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.765468][ T31] RIP: 0033:0x7fc3fc0a7407 [ 286.771441][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 286.780084][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 286.788217][ T31] RDX: 00000000000a0800 RSI: 000055d10473e2f0 RDI: ffffffffffffff9c [ 286.796231][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 286.804617][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104746df0 [ 286.812761][ T5156] Bluetooth: hci1: command tx timeout [ 286.820426][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104746df0 [ 286.828725][ T31] [ 286.831827][ T31] INFO: task udevd:5894 blocked for more than 144 seconds. [ 286.839839][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 286.847548][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.856247][ T31] task:udevd state:D stack:23272 pid:5894 tgid:5894 ppid:1 task_flags:0x400140 flags:0x00004002 [ 286.868638][ T31] Call Trace: [ 286.872945][ T31] [ 286.875937][ T31] __schedule+0x16f5/0x4d00 [ 286.880595][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 286.886186][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 286.896280][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 286.902551][ T31] ? schedule+0x165/0x360 [ 286.906914][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.911947][ T31] ? __pfx___schedule+0x10/0x10 [ 286.916854][ T31] ? schedule+0x91/0x360 [ 286.921209][ T31] schedule+0x165/0x360 [ 286.925397][ T31] schedule_timeout+0x12b/0x270 [ 286.930821][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.936233][ T31] ? __pfx_process_timeout+0x10/0x10 [ 286.942937][ T31] ? prepare_to_wait_event+0x437/0x480 [ 286.948516][ T31] nbd_queue_rq+0x662/0xf10 [ 286.953063][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 286.960861][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 286.966986][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 286.972889][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 286.979877][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 286.985921][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 286.991859][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 286.998392][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 287.005198][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.010624][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 287.016636][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.022167][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 287.027314][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 287.032581][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 287.038098][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 287.043874][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 287.049826][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 287.055237][ T31] ? trace_block_plug+0x7a/0x1f0 [ 287.060413][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 287.065644][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.071819][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 287.083234][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 287.088395][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 287.093837][ T31] __submit_bio+0x2d3/0x5a0 [ 287.100393][ T31] ? ktime_get+0x3e/0x1f0 [ 287.104780][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 287.111223][ T31] ? __pfx___submit_bio+0x10/0x10 [ 287.116284][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 287.121789][ T31] ? bio_associate_blkg+0x6d/0x230 [ 287.126943][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 287.132844][ T31] ? bio_associate_blkg+0x6d/0x230 [ 287.138143][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 287.144369][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 287.149866][ T31] block_read_full_folio+0x7b7/0x830 [ 287.155205][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 287.160668][ T31] filemap_read_folio+0x117/0x380 [ 287.165732][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 287.171269][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 287.176853][ T31] do_read_cache_folio+0x350/0x590 [ 287.183761][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 287.189380][ T31] read_part_sector+0xb6/0x2b0 [ 287.194189][ T31] adfspart_check_ICS+0xa4/0xa50 [ 287.199200][ T31] ? snprintf+0xda/0x120 [ 287.203482][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 287.209200][ T31] bdev_disk_changed+0x75c/0x14b0 [ 287.214404][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 287.220029][ T31] ? wait_on_inode+0xc0/0x230 [ 287.224749][ T31] blkdev_get_whole+0x380/0x510 [ 287.229701][ T31] bdev_open+0x31e/0xd30 [ 287.233990][ T31] blkdev_open+0x3a8/0x510 [ 287.238841][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 287.243861][ T31] do_dentry_open+0xdf3/0x1970 [ 287.248747][ T31] vfs_open+0x3b/0x340 [ 287.252846][ T31] ? path_openat+0x2ecd/0x3830 [ 287.257715][ T31] path_openat+0x2ee5/0x3830 [ 287.262339][ T31] ? arch_stack_walk+0xfc/0x150 [ 287.267222][ T31] ? __pfx_path_openat+0x10/0x10 [ 287.272217][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.278384][ T31] do_filp_open+0x1fa/0x410 [ 287.284829][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.289943][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 287.295040][ T31] ? _raw_spin_unlock+0x28/0x50 [ 287.300009][ T31] ? alloc_fd+0x64c/0x6c0 [ 287.304373][ T31] do_sys_openat2+0x121/0x1c0 [ 287.309289][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 287.314796][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.320102][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.324918][ T31] __x64_sys_openat+0x138/0x170 [ 287.329888][ T31] do_syscall_64+0xfa/0x3b0 [ 287.334412][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.340573][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.346750][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.351503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.357468][ T31] RIP: 0033:0x7fc3fc0a7407 [ 287.361910][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 287.370752][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 287.378871][ T31] RDX: 00000000000a0800 RSI: 000055d104744a20 RDI: ffffffffffffff9c [ 287.388294][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 287.396320][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104748800 [ 287.404505][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104748800 [ 287.412589][ T31] [ 287.465722][ T31] INFO: task udevd:5976 blocked for more than 144 seconds. [ 287.507492][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 287.515237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.527614][ T5156] Bluetooth: hci4: command tx timeout [ 287.547461][ T31] task:udevd state:D stack:21976 pid:5976 tgid:5976 ppid:1 task_flags:0x400140 flags:0x00004002 [ 287.559646][ T31] Call Trace: [ 287.562958][ T31] [ 287.565924][ T31] __schedule+0x16f5/0x4d00 [ 287.570522][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 287.576130][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 287.581502][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.587477][ T31] ? schedule+0x165/0x360 [ 287.593732][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.598694][ T31] ? __pfx___schedule+0x10/0x10 [ 287.603633][ T31] ? schedule+0x91/0x360 [ 287.608563][ T31] schedule+0x165/0x360 [ 287.612799][ T31] schedule_timeout+0x12b/0x270 [ 287.617842][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 287.623267][ T31] ? __pfx_process_timeout+0x10/0x10 [ 287.628763][ T31] ? prepare_to_wait_event+0x437/0x480 [ 287.634287][ T31] nbd_queue_rq+0x662/0xf10 [ 287.647441][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 287.652661][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.667508][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 287.673233][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 287.687635][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 287.695444][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 287.717516][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 287.723966][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 287.777530][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.782955][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 287.807508][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.812888][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 287.847613][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 287.852919][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 287.877543][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 287.883447][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 287.917464][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 287.922933][ T31] ? trace_block_plug+0x7a/0x1f0 [ 287.937501][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 287.942878][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.956827][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 287.967432][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 287.972468][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 287.978142][ T31] __submit_bio+0x2d3/0x5a0 [ 287.984543][ T31] ? ktime_get+0x3e/0x1f0 [ 287.989025][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 287.995318][ T31] ? __pfx___submit_bio+0x10/0x10 [ 288.002133][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 288.014623][ T31] ? bio_associate_blkg+0x6d/0x230 [ 288.019976][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 288.025665][ T31] ? bio_associate_blkg+0x6d/0x230 [ 288.037438][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 288.043763][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 288.055249][ T31] block_read_full_folio+0x7b7/0x830 [ 288.060700][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 288.066116][ T31] filemap_read_folio+0x117/0x380 [ 288.077445][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.082972][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 288.099184][ T31] do_read_cache_folio+0x350/0x590 [ 288.106700][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.112924][ T31] read_part_sector+0xb6/0x2b0 [ 288.117833][ T31] adfspart_check_ICS+0xa4/0xa50 [ 288.122843][ T31] ? snprintf+0xda/0x120 [ 288.127133][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 288.133020][ T31] bdev_disk_changed+0x75c/0x14b0 [ 288.138243][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 288.143752][ T31] ? wait_on_inode+0xc0/0x230 [ 288.148599][ T31] blkdev_get_whole+0x380/0x510 [ 288.153507][ T31] bdev_open+0x31e/0xd30 [ 288.157863][ T31] blkdev_open+0x3a8/0x510 [ 288.162308][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 288.167247][ T31] do_dentry_open+0xdf3/0x1970 [ 288.172676][ T31] vfs_open+0x3b/0x340 [ 288.176798][ T31] ? path_openat+0x2ecd/0x3830 [ 288.181780][ T31] path_openat+0x2ee5/0x3830 [ 288.186422][ T31] ? arch_stack_walk+0xfc/0x150 [ 288.191923][ T31] ? __pfx_path_openat+0x10/0x10 [ 288.196918][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.204770][ T31] do_filp_open+0x1fa/0x410 [ 288.209565][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.214472][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 288.220055][ T31] ? _raw_spin_unlock+0x28/0x50 [ 288.224957][ T31] ? alloc_fd+0x64c/0x6c0 [ 288.229421][ T31] do_sys_openat2+0x121/0x1c0 [ 288.234109][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 288.239617][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.244828][ T31] ? rcu_is_watching+0x15/0xb0 [ 288.250281][ T31] __x64_sys_openat+0x138/0x170 [ 288.255174][ T31] do_syscall_64+0xfa/0x3b0 [ 288.259883][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.265998][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 288.271775][ T31] ? clear_bhb_loop+0x60/0xb0 [ 288.276465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.282813][ T31] RIP: 0033:0x7fc3fc0a7407 [ 288.287259][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 288.295874][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 288.304008][ T31] RDX: 00000000000a0800 RSI: 000055d1047345a0 RDI: ffffffffffffff9c [ 288.314524][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 288.322670][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104747b70 [ 288.332765][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104747b70 [ 288.341460][ T31] [ 288.344938][ T31] INFO: task udevd:6064 blocked for more than 145 seconds. [ 288.354678][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 288.362715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.377504][ T31] task:udevd state:D stack:23272 pid:6064 tgid:6064 ppid:1 task_flags:0x400140 flags:0x00004002 [ 288.389751][ T31] Call Trace: [ 288.393070][ T31] [ 288.396033][ T31] __schedule+0x16f5/0x4d00 [ 288.400839][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 288.406400][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 288.412593][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 288.419640][ T31] ? schedule+0x165/0x360 [ 288.424050][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.429377][ T31] ? __pfx___schedule+0x10/0x10 [ 288.434302][ T31] ? schedule+0x91/0x360 [ 288.438733][ T31] schedule+0x165/0x360 [ 288.442941][ T31] schedule_timeout+0x12b/0x270 [ 288.447897][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 288.453323][ T31] ? __pfx_process_timeout+0x10/0x10 [ 288.458831][ T31] ? prepare_to_wait_event+0x437/0x480 [ 288.464328][ T31] nbd_queue_rq+0x662/0xf10 [ 288.468963][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 288.474030][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 288.480263][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 288.485842][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 288.491182][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 288.497207][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 288.503245][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 288.511221][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 288.518162][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 288.523534][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 288.529625][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 288.534940][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 288.540308][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 288.545564][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 288.551057][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 288.556818][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 288.562266][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 288.567805][ T31] ? trace_block_plug+0x7a/0x1f0 [ 288.572776][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 288.578202][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 288.584176][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 288.592857][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 288.597853][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 288.603284][ T31] __submit_bio+0x2d3/0x5a0 [ 288.607885][ T31] ? ktime_get+0x3e/0x1f0 [ 288.613887][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 288.620433][ T31] ? __pfx___submit_bio+0x10/0x10 [ 288.625502][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 288.630943][ T31] ? bio_associate_blkg+0x6d/0x230 [ 288.636080][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 288.641842][ T31] ? bio_associate_blkg+0x6d/0x230 [ 288.646989][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 288.653380][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 288.658859][ T31] block_read_full_folio+0x7b7/0x830 [ 288.664206][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 288.669695][ T31] filemap_read_folio+0x117/0x380 [ 288.674755][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.680331][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 288.685916][ T31] do_read_cache_folio+0x350/0x590 [ 288.691088][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.696560][ T31] read_part_sector+0xb6/0x2b0 [ 288.701520][ T31] adfspart_check_ICS+0xa4/0xa50 [ 288.706491][ T31] ? snprintf+0xda/0x120 [ 288.710782][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 288.717798][ T31] bdev_disk_changed+0x75c/0x14b0 [ 288.722935][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 288.728574][ T31] ? wait_on_inode+0xc0/0x230 [ 288.733295][ T31] blkdev_get_whole+0x380/0x510 [ 288.738355][ T31] bdev_open+0x31e/0xd30 [ 288.742643][ T31] blkdev_open+0x3a8/0x510 [ 288.747071][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 288.752063][ T31] do_dentry_open+0xdf3/0x1970 [ 288.756854][ T31] vfs_open+0x3b/0x340 [ 288.761072][ T31] ? path_openat+0x2ecd/0x3830 [ 288.765874][ T31] path_openat+0x2ee5/0x3830 [ 288.770527][ T31] ? arch_stack_walk+0xfc/0x150 [ 288.775456][ T31] ? __pfx_path_openat+0x10/0x10 [ 288.780629][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.786732][ T31] do_filp_open+0x1fa/0x410 [ 288.791290][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.796155][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 288.801332][ T31] ? _raw_spin_unlock+0x28/0x50 [ 288.806214][ T31] ? alloc_fd+0x64c/0x6c0 [ 288.810608][ T31] do_sys_openat2+0x121/0x1c0 [ 288.815292][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 288.822501][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.827813][ T31] ? rcu_is_watching+0x15/0xb0 [ 288.832632][ T31] __x64_sys_openat+0x138/0x170 [ 288.837685][ T31] do_syscall_64+0xfa/0x3b0 [ 288.842224][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.847677][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.853776][ T31] ? clear_bhb_loop+0x60/0xb0 [ 288.858662][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.864577][ T31] RIP: 0033:0x7fc3fc0a7407 [ 288.869080][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 288.877655][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 288.885673][ T31] RDX: 00000000000a0800 RSI: 000055d10473f470 RDI: ffffffffffffff9c [ 288.893904][ T5156] Bluetooth: hci1: command tx timeout [ 288.893961][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 288.907474][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d10475d480 [ 288.915476][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d10475d480 [ 288.925198][ T31] [ 288.928351][ T31] INFO: task udevd:7069 blocked for more than 146 seconds. [ 288.936087][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 288.943820][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.952707][ T31] task:udevd state:D stack:23272 pid:7069 tgid:7069 ppid:1 task_flags:0x400140 flags:0x00004002 [ 288.964784][ T31] Call Trace: [ 288.977433][ T31] [ 288.980459][ T31] __schedule+0x16f5/0x4d00 [ 288.985013][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 289.001023][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 289.006301][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 289.012559][ T31] ? schedule+0x165/0x360 [ 289.016926][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.023736][ T31] ? __pfx___schedule+0x10/0x10 [ 289.028716][ T31] ? schedule+0x91/0x360 [ 289.033003][ T31] schedule+0x165/0x360 [ 289.037191][ T31] schedule_timeout+0x12b/0x270 [ 289.042362][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 289.048020][ T31] ? __pfx_process_timeout+0x10/0x10 [ 289.053537][ T31] ? prepare_to_wait_event+0x437/0x480 [ 289.059323][ T31] nbd_queue_rq+0x662/0xf10 [ 289.063885][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 289.069187][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 289.075273][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 289.081011][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 289.086104][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 289.092239][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 289.098527][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 289.104935][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 289.114777][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 289.120493][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 289.127874][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 289.133231][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 289.138554][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 289.143789][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 289.149242][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 289.154984][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 289.160390][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 289.165795][ T31] ? trace_block_plug+0x7a/0x1f0 [ 289.170842][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 289.176057][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 289.182109][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 289.187352][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 289.192304][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 289.197828][ T31] __submit_bio+0x2d3/0x5a0 [ 289.202381][ T31] ? ktime_get+0x3e/0x1f0 [ 289.206767][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 289.213069][ T31] ? __pfx___submit_bio+0x10/0x10 [ 289.218524][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 289.223971][ T31] ? bio_associate_blkg+0x6d/0x230 [ 289.230880][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 289.236593][ T31] ? bio_associate_blkg+0x6d/0x230 [ 289.241848][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 289.248085][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 289.253346][ T31] block_read_full_folio+0x7b7/0x830 [ 289.258785][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 289.264188][ T31] filemap_read_folio+0x117/0x380 [ 289.269291][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 289.274769][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 289.280446][ T31] do_read_cache_folio+0x350/0x590 [ 289.285568][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 289.291367][ T31] read_part_sector+0xb6/0x2b0 [ 289.296180][ T31] adfspart_check_ICS+0xa4/0xa50 [ 289.301218][ T31] ? snprintf+0xda/0x120 [ 289.305490][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 289.311150][ T31] bdev_disk_changed+0x75c/0x14b0 [ 289.316237][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 289.321780][ T31] ? wait_on_inode+0xc0/0x230 [ 289.326495][ T31] blkdev_get_whole+0x380/0x510 [ 289.333086][ T31] bdev_open+0x31e/0xd30 [ 289.337452][ T31] blkdev_open+0x3a8/0x510 [ 289.341921][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 289.346896][ T31] do_dentry_open+0xdf3/0x1970 [ 289.351821][ T31] vfs_open+0x3b/0x340 [ 289.355918][ T31] ? path_openat+0x2ecd/0x3830 [ 289.360773][ T31] path_openat+0x2ee5/0x3830 [ 289.365395][ T31] ? arch_stack_walk+0xfc/0x150 [ 289.370364][ T31] ? __pfx_path_openat+0x10/0x10 [ 289.375339][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.381489][ T31] do_filp_open+0x1fa/0x410 [ 289.386008][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.391049][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 289.396123][ T31] ? _raw_spin_unlock+0x28/0x50 [ 289.401018][ T31] ? alloc_fd+0x64c/0x6c0 [ 289.405359][ T31] do_sys_openat2+0x121/0x1c0 [ 289.410135][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 289.415622][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.420878][ T31] ? rcu_is_watching+0x15/0xb0 [ 289.425665][ T31] __x64_sys_openat+0x138/0x170 [ 289.430595][ T31] do_syscall_64+0xfa/0x3b0 [ 289.436796][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.443017][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 289.449095][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.453839][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.459809][ T31] RIP: 0033:0x7fc3fc0a7407 [ 289.464232][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.472759][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 289.480855][ T31] RDX: 00000000000a0800 RSI: 000055d1047344b0 RDI: ffffffffffffff9c [ 289.488904][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 289.496922][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104746aa0 [ 289.505038][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104746aa0 [ 289.513087][ T31] [ 289.516138][ T31] INFO: task udevd:7456 blocked for more than 147 seconds. [ 289.526455][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 289.536914][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.545995][ T31] task:udevd state:D stack:23272 pid:7456 tgid:7456 ppid:1 task_flags:0x400140 flags:0x00004002 [ 289.558041][ T31] Call Trace: [ 289.561366][ T31] [ 289.564317][ T31] __schedule+0x16f5/0x4d00 [ 289.568905][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 289.574488][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 289.579773][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 289.585717][ T31] ? schedule+0x165/0x360 [ 289.590102][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.594985][ T31] ? __pfx___schedule+0x10/0x10 [ 289.599975][ T31] ? schedule+0x91/0x360 [ 289.604265][ T31] schedule+0x165/0x360 [ 289.608529][ T5156] Bluetooth: hci4: command tx timeout [ 289.614165][ T31] schedule_timeout+0x12b/0x270 [ 289.619129][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 289.624536][ T31] ? __pfx_process_timeout+0x10/0x10 [ 289.629887][ T31] ? prepare_to_wait_event+0x437/0x480 [ 289.635385][ T31] nbd_queue_rq+0x662/0xf10 [ 289.641574][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 289.646655][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 289.652789][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 289.658478][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 289.663593][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 289.669658][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 289.675515][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 289.681949][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 289.690048][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 289.695400][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 289.701539][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 289.706840][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 289.711991][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 289.717212][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 289.722772][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 289.728592][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 289.733912][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 289.741025][ T31] ? trace_block_plug+0x7a/0x1f0 [ 289.746016][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 289.751323][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 289.757250][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 289.762625][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 289.767573][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 289.773010][ T31] __submit_bio+0x2d3/0x5a0 [ 289.777639][ T31] ? ktime_get+0x3e/0x1f0 [ 289.782009][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 289.788313][ T31] ? __pfx___submit_bio+0x10/0x10 [ 289.793355][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 289.798824][ T31] ? bio_associate_blkg+0x6d/0x230 [ 289.803983][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 289.809676][ T31] ? bio_associate_blkg+0x6d/0x230 [ 289.814800][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 289.821041][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 289.826279][ T31] block_read_full_folio+0x7b7/0x830 [ 289.831680][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 289.837059][ T31] filemap_read_folio+0x117/0x380 [ 289.843928][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 289.849491][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 289.855080][ T31] do_read_cache_folio+0x350/0x590 [ 289.860277][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 289.865779][ T31] read_part_sector+0xb6/0x2b0 [ 289.870628][ T31] adfspart_check_ICS+0xa4/0xa50 [ 289.875600][ T31] ? snprintf+0xda/0x120 [ 289.879958][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 289.885567][ T31] bdev_disk_changed+0x75c/0x14b0 [ 289.890709][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 289.896195][ T31] ? wait_on_inode+0xc0/0x230 [ 289.900961][ T31] blkdev_get_whole+0x380/0x510 [ 289.905833][ T31] bdev_open+0x31e/0xd30 [ 289.910140][ T31] blkdev_open+0x3a8/0x510 [ 289.914586][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 289.919593][ T31] do_dentry_open+0xdf3/0x1970 [ 289.924397][ T31] vfs_open+0x3b/0x340 [ 289.928691][ T31] ? path_openat+0x2ecd/0x3830 [ 289.933501][ T31] path_openat+0x2ee5/0x3830 [ 289.938275][ T31] ? arch_stack_walk+0xfc/0x150 [ 289.944793][ T31] ? __pfx_path_openat+0x10/0x10 [ 289.949830][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.955941][ T31] do_filp_open+0x1fa/0x410 [ 289.960500][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.965365][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 289.970482][ T31] ? _raw_spin_unlock+0x28/0x50 [ 289.975360][ T31] ? alloc_fd+0x64c/0x6c0 [ 289.979810][ T31] do_sys_openat2+0x121/0x1c0 [ 289.984526][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 289.990072][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.995353][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.000225][ T31] __x64_sys_openat+0x138/0x170 [ 290.005123][ T31] do_syscall_64+0xfa/0x3b0 [ 290.010612][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.016748][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.023178][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.027935][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.034120][ T31] RIP: 0033:0x7fc3fc0a7407 [ 290.038698][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 290.048852][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 290.057054][ T31] RDX: 00000000000a0800 RSI: 000055d1047513f0 RDI: ffffffffffffff9c [ 290.065317][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 290.073518][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104733f60 [ 290.081783][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104733f60 [ 290.090397][ T31] [ 290.104631][ T31] INFO: task udevd:7608 blocked for more than 147 seconds. [ 290.113831][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 290.121790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.130572][ T31] task:udevd state:D stack:23272 pid:7608 tgid:7608 ppid:1 task_flags:0x400140 flags:0x00004002 [ 290.142777][ T31] Call Trace: [ 290.146096][ T31] [ 290.150736][ T31] __schedule+0x16f5/0x4d00 [ 290.155306][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 290.161017][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 290.166274][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 290.172394][ T31] ? schedule+0x165/0x360 [ 290.176816][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.181888][ T31] ? __pfx___schedule+0x10/0x10 [ 290.186803][ T31] ? schedule+0x91/0x360 [ 290.191150][ T31] schedule+0x165/0x360 [ 290.195352][ T31] schedule_timeout+0x12b/0x270 [ 290.204604][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 290.212550][ T31] ? __pfx_process_timeout+0x10/0x10 [ 290.227080][ T31] ? prepare_to_wait_event+0x437/0x480 [ 290.235752][ T31] nbd_queue_rq+0x662/0xf10 [ 290.249511][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 290.256049][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 290.262524][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 290.268772][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 290.273895][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 290.279971][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 290.285838][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 290.292399][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 290.299651][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 290.304995][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 290.311220][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 290.316548][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 290.321932][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 290.327201][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 290.334196][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 290.343675][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 290.350582][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 290.358447][ T31] ? trace_block_plug+0x7a/0x1f0 [ 290.363463][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 290.368848][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 290.374805][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 290.380223][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 290.385123][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 290.390664][ T31] __submit_bio+0x2d3/0x5a0 [ 290.395206][ T31] ? ktime_get+0x3e/0x1f0 [ 290.399743][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 290.406031][ T31] ? __pfx___submit_bio+0x10/0x10 [ 290.411141][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 290.416569][ T31] ? bio_associate_blkg+0x6d/0x230 [ 290.421885][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 290.427802][ T31] ? bio_associate_blkg+0x6d/0x230 [ 290.432964][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 290.442826][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 290.448148][ T31] block_read_full_folio+0x7b7/0x830 [ 290.453482][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 290.470357][ T31] filemap_read_folio+0x117/0x380 [ 290.475565][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 290.484844][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 290.493030][ T31] do_read_cache_folio+0x350/0x590 [ 290.498402][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 290.503896][ T31] read_part_sector+0xb6/0x2b0 [ 290.509110][ T31] adfspart_check_ICS+0xa4/0xa50 [ 290.514095][ T31] ? snprintf+0xda/0x120 [ 290.518409][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 290.523978][ T31] bdev_disk_changed+0x75c/0x14b0 [ 290.529167][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 290.534686][ T31] ? wait_on_inode+0xc0/0x230 [ 290.539543][ T31] blkdev_get_whole+0x380/0x510 [ 290.544439][ T31] bdev_open+0x31e/0xd30 [ 290.549167][ T31] blkdev_open+0x3a8/0x510 [ 290.553633][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 290.559870][ T31] do_dentry_open+0xdf3/0x1970 [ 290.564698][ T31] vfs_open+0x3b/0x340 [ 290.569507][ T31] ? path_openat+0x2ecd/0x3830 [ 290.574316][ T31] path_openat+0x2ee5/0x3830 [ 290.579087][ T31] ? arch_stack_walk+0xfc/0x150 [ 290.584011][ T31] ? __pfx_path_openat+0x10/0x10 [ 290.589132][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.595242][ T31] do_filp_open+0x1fa/0x410 [ 290.600192][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.605060][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 290.610255][ T31] ? _raw_spin_unlock+0x28/0x50 [ 290.615138][ T31] ? alloc_fd+0x64c/0x6c0 [ 290.619601][ T31] do_sys_openat2+0x121/0x1c0 [ 290.624298][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 290.630129][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.635349][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.640276][ T31] __x64_sys_openat+0x138/0x170 [ 290.645162][ T31] do_syscall_64+0xfa/0x3b0 [ 290.649824][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.655898][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.663669][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.668530][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.674454][ T31] RIP: 0033:0x7fc3fc0a7407 [ 290.679108][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 290.687983][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 290.695984][ T31] RDX: 00000000000a0800 RSI: 000055d104734260 RDI: ffffffffffffff9c [ 290.704040][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 290.712163][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104733f60 [ 290.720577][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104733f60 [ 290.728878][ T31] [ 290.732187][ T31] INFO: task udevd:7611 blocked for more than 148 seconds. [ 290.739565][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 290.747234][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.756429][ T31] task:udevd state:D stack:23272 pid:7611 tgid:7611 ppid:1 task_flags:0x400140 flags:0x00004002 [ 290.769480][ T31] Call Trace: [ 290.772798][ T31] [ 290.775740][ T31] __schedule+0x16f5/0x4d00 [ 290.781328][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 290.786939][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 290.792341][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 290.798426][ T31] ? schedule+0x165/0x360 [ 290.802838][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.807811][ T31] ? __pfx___schedule+0x10/0x10 [ 290.812754][ T31] ? schedule+0x91/0x360 [ 290.817018][ T31] schedule+0x165/0x360 [ 290.821422][ T31] schedule_timeout+0x12b/0x270 [ 290.826343][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 290.831765][ T31] ? __pfx_process_timeout+0x10/0x10 [ 290.837061][ T31] ? prepare_to_wait_event+0x437/0x480 [ 290.842691][ T31] nbd_queue_rq+0x662/0xf10 [ 290.847247][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 290.852377][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 290.858702][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 290.864280][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 290.870758][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 290.876786][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 290.882724][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 290.889362][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 290.896190][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 290.901766][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 290.907826][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 290.913156][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 290.918408][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 290.923660][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 290.929142][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 290.934888][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 290.940394][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 290.945796][ T31] ? trace_block_plug+0x7a/0x1f0 [ 290.950777][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 290.955988][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 290.962069][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 290.968503][ T5156] Bluetooth: hci1: command tx timeout [ 290.969917][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 290.979032][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 290.984459][ T31] __submit_bio+0x2d3/0x5a0 [ 290.989025][ T31] ? ktime_get+0x3e/0x1f0 [ 290.993356][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 290.999745][ T31] ? __pfx___submit_bio+0x10/0x10 [ 291.004839][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 291.010311][ T31] ? bio_associate_blkg+0x6d/0x230 [ 291.015462][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 291.021330][ T31] ? bio_associate_blkg+0x6d/0x230 [ 291.026480][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 291.032762][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 291.038106][ T31] block_read_full_folio+0x7b7/0x830 [ 291.043439][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 291.049340][ T31] filemap_read_folio+0x117/0x380 [ 291.054416][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 291.060116][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 291.065715][ T31] do_read_cache_folio+0x350/0x590 [ 291.072305][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 291.077949][ T31] read_part_sector+0xb6/0x2b0 [ 291.082766][ T31] adfspart_check_ICS+0xa4/0xa50 [ 291.087766][ T31] ? snprintf+0xda/0x120 [ 291.092028][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 291.097798][ T31] bdev_disk_changed+0x75c/0x14b0 [ 291.102895][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 291.108464][ T31] ? wait_on_inode+0xc0/0x230 [ 291.113204][ T31] blkdev_get_whole+0x380/0x510 [ 291.118208][ T31] bdev_open+0x31e/0xd30 [ 291.122547][ T31] blkdev_open+0x3a8/0x510 [ 291.127001][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 291.132234][ T31] do_dentry_open+0xdf3/0x1970 [ 291.137070][ T31] vfs_open+0x3b/0x340 [ 291.141348][ T31] ? path_openat+0x2ecd/0x3830 [ 291.146159][ T31] path_openat+0x2ee5/0x3830 [ 291.150794][ T31] ? arch_stack_walk+0xfc/0x150 [ 291.155681][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.160775][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.166890][ T31] do_filp_open+0x1fa/0x410 [ 291.173459][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.178595][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.183679][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.188615][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.192979][ T31] do_sys_openat2+0x121/0x1c0 [ 291.197811][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 291.203340][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.208644][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.213444][ T31] __x64_sys_openat+0x138/0x170 [ 291.218511][ T31] do_syscall_64+0xfa/0x3b0 [ 291.223057][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.229222][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.235429][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.240229][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.246149][ T31] RIP: 0033:0x7fc3fc0a7407 [ 291.250596][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 291.259194][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 291.267193][ T31] RDX: 00000000000a0800 RSI: 000055d10474b0c0 RDI: ffffffffffffff9c [ 291.276942][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 291.285122][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d10473b5e0 [ 291.293474][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d10473b5e0 [ 291.301664][ T31] [ 291.304774][ T31] INFO: task udevd:7668 blocked for more than 148 seconds. [ 291.312731][ T31] Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 [ 291.321210][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.330393][ T31] task:udevd state:D stack:23272 pid:7668 tgid:7668 ppid:1 task_flags:0x400140 flags:0x00004002 [ 291.342689][ T31] Call Trace: [ 291.346006][ T31] [ 291.349460][ T31] __schedule+0x16f5/0x4d00 [ 291.354010][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 291.359698][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 291.364914][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 291.370915][ T31] ? schedule+0x165/0x360 [ 291.375421][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.381888][ T31] ? __pfx___schedule+0x10/0x10 [ 291.386878][ T31] ? schedule+0x91/0x360 [ 291.391222][ T31] schedule+0x165/0x360 [ 291.395413][ T31] schedule_timeout+0x12b/0x270 [ 291.400353][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 291.405740][ T31] ? __pfx_process_timeout+0x10/0x10 [ 291.411495][ T31] ? prepare_to_wait_event+0x437/0x480 [ 291.417010][ T31] nbd_queue_rq+0x662/0xf10 [ 291.421701][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 291.426752][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 291.433031][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 291.439041][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 291.444132][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 291.450295][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 291.456176][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 291.462795][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 291.469968][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 291.475292][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 291.482549][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 291.487965][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 291.493116][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 291.498776][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 291.504187][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 291.509973][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 291.515275][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 291.520785][ T31] ? trace_block_plug+0x7a/0x1f0 [ 291.525735][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 291.531331][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 291.537257][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 291.542678][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 291.547730][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 291.553175][ T31] __submit_bio+0x2d3/0x5a0 [ 291.558145][ T31] ? ktime_get+0x3e/0x1f0 [ 291.562522][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 291.570095][ T31] ? __pfx___submit_bio+0x10/0x10 [ 291.575183][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 291.581035][ T31] ? bio_associate_blkg+0x6d/0x230 [ 291.587975][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 291.593669][ T31] ? bio_associate_blkg+0x6d/0x230 [ 291.598862][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 291.605052][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 291.613256][ T31] block_read_full_folio+0x7b7/0x830 [ 291.618888][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 291.624305][ T31] filemap_read_folio+0x117/0x380 [ 291.629417][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 291.634907][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 291.640592][ T31] do_read_cache_folio+0x350/0x590 [ 291.645737][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 291.651267][ T31] read_part_sector+0xb6/0x2b0 [ 291.656069][ T31] adfspart_check_ICS+0xa4/0xa50 [ 291.661292][ T31] ? snprintf+0xda/0x120 [ 291.665577][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 291.671263][ T31] bdev_disk_changed+0x75c/0x14b0 [ 291.676361][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 291.682102][ T31] ? wait_on_inode+0xc0/0x230 [ 291.688392][ T31] blkdev_get_whole+0x380/0x510 [ 291.693331][ T31] bdev_open+0x31e/0xd30 [ 291.697873][ T31] blkdev_open+0x3a8/0x510 [ 291.702323][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 291.707268][ T31] do_dentry_open+0xdf3/0x1970 [ 291.712107][ T31] vfs_open+0x3b/0x340 [ 291.716190][ T31] ? path_openat+0x2ecd/0x3830 [ 291.721023][ T31] path_openat+0x2ee5/0x3830 [ 291.725625][ T31] ? arch_stack_walk+0xfc/0x150 [ 291.730655][ T31] ? __pfx_path_openat+0x10/0x10 [ 291.735797][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.742034][ T31] do_filp_open+0x1fa/0x410 [ 291.746572][ T31] ? __lock_acquire+0xab9/0xd20 [ 291.751681][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 291.756767][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.761859][ T31] ? alloc_fd+0x64c/0x6c0 [ 291.766226][ T31] do_sys_openat2+0x121/0x1c0 [ 291.771408][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 291.776910][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.782712][ T31] ? rcu_is_watching+0x15/0xb0 [ 291.790179][ T31] __x64_sys_openat+0x138/0x170 [ 291.795112][ T31] do_syscall_64+0xfa/0x3b0 [ 291.799709][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.805848][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.812171][ T31] ? clear_bhb_loop+0x60/0xb0 [ 291.816882][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.822867][ T31] RIP: 0033:0x7fc3fc0a7407 [ 291.827306][ T31] RSP: 002b:00007ffd534aaba0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 291.835802][ T31] RAX: ffffffffffffffda RBX: 00007fc3fc79a880 RCX: 00007fc3fc0a7407 [ 291.843902][ T31] RDX: 00000000000a0800 RSI: 000055d10474e1c0 RDI: ffffffffffffff9c [ 291.851967][ T31] RBP: 000055d104733910 R08: 0000000000000000 R09: 0000000000000000 [ 291.860004][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d104754750 [ 291.868038][ T31] R13: 000055d10474b3e0 R14: 0000000000000000 R15: 000055d104754750 [ 291.876068][ T31] [ 291.879295][ T31] [ 291.879295][ T31] Showing all locks held in the system: [ 291.887082][ T31] 1 lock held by khungtaskd/31: [ 291.893585][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 291.904756][ T31] 4 locks held by kworker/u8:10/3504: [ 291.912873][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 291.923901][ T31] #1: ffffc9000c4f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 291.934639][ T31] #2: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 291.944337][ T31] #3: ffff88807e5354e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 291.954545][ T31] 2 locks held by getty/5596: [ 291.959308][ T31] #0: ffff888034f000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 291.969164][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 291.979476][ T31] 3 locks held by udevd/5891: [ 291.984170][ T31] #0: ffff888025673358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 291.995170][ T31] #1: ffff8881433f5a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.004819][ T31] #2: ffff88802570e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.013831][ T31] 3 locks held by udevd/5894: [ 292.018691][ T31] #0: ffff888025677358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.028067][ T31] #1: ffff8881433f5f10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.037712][ T31] #2: ffff888025730178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.046672][ T31] 3 locks held by udevd/5976: [ 292.051445][ T31] #0: ffff888143770358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.060928][ T31] #1: ffff8881433f5610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.070529][ T31] #2: ffff8880256d4078 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.079526][ T31] 3 locks held by udevd/6064: [ 292.084207][ T31] #0: ffff888025693358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.095593][ T31] #1: ffff88802559c310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.105259][ T31] #2: ffff8880257a7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.114254][ T31] 3 locks held by udevd/7069: [ 292.118990][ T31] #0: ffff888025697358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.128359][ T31] #1: ffff88802559c790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.138044][ T31] #2: ffff888025c40178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.147041][ T31] 3 locks held by udevd/7456: [ 292.151786][ T31] #0: ffff8880257d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.161103][ T31] #1: ffff88802559cd10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.170973][ T31] #2: ffff888025c77178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.180096][ T31] 3 locks held by udevd/7498: [ 292.184806][ T31] #0: ffff888025ccb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.194146][ T31] #1: ffff88814370d110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.205210][ T31] #2: ffff888025e10178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.214256][ T31] 3 locks held by udevd/7557: [ 292.219023][ T31] #0: ffff888025ccf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.228369][ T31] #1: ffff88814370d510 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.237974][ T31] #2: ffff888025e87178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.246920][ T31] 3 locks held by udevd/7608: [ 292.256015][ T31] #0: ffff8880257d7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.265424][ T31] #1: ffff8880255c1110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.275015][ T31] #2: ffff888025cee178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.284165][ T31] 3 locks held by udevd/7611: [ 292.289289][ T31] #0: ffff888025d13358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.299933][ T31] #1: ffff888025c1c310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.309829][ T31] #2: ffff888025d851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.318871][ T31] 3 locks held by udevd/7668: [ 292.323564][ T31] #0: ffff888025ca3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.333278][ T31] #1: ffff8880255c1510 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.343210][ T31] #2: ffff888025d551f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.352521][ T31] 3 locks held by udevd/7744: [ 292.357232][ T31] #0: ffff888025ca7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 292.366590][ T31] #1: ffff8880255c1c10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 292.376169][ T31] #2: ffff888025de7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 292.385203][ T31] 2 locks held by kbnepd bnep0/9053: [ 292.390671][ T31] #0: ffffffff8f69ff70 (bnep_session_sem){++++}-{4:4}, at: bnep_session+0x2940/0x2b40 [ 292.402039][ T31] #1: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 292.412563][ T31] 1 lock held by syz.3.1096/9935: [ 292.417683][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 292.427850][ T31] 3 locks held by syz-executor/11582: [ 292.433243][ T31] #0: ffff8880514c8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 292.443230][ T31] #1: ffff8880514c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 292.453006][ T31] #2: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 292.463996][ T31] 4 locks held by syz-executor/11603: [ 292.469606][ T31] #0: ffff88805ff6cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 292.479684][ T31] #1: ffff88805ff6c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 292.489510][ T31] #2: ffffffff8f6783a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 292.499671][ T31] #3: ffff88802739b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 292.510780][ T31] 3 locks held by syz.5.1530/11647: [ 292.516016][ T31] #0: ffff8880301f0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 292.525984][ T31] #1: ffff8880301f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 292.535715][ T31] #2: ffffffff8f6783a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 292.545990][ T31] [ 292.548426][ T31] ============================================= [ 292.548426][ T31] [ 292.556905][ T31] NMI backtrace for cpu 1 [ 292.556922][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 292.556946][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.556958][ T31] Call Trace: [ 292.556965][ T31] [ 292.556974][ T31] dump_stack_lvl+0x189/0x250 [ 292.557007][ T31] ? __wake_up_klogd+0xd9/0x110 [ 292.557033][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.557061][ T31] ? __pfx__printk+0x10/0x10 [ 292.557101][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 292.557132][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 292.557154][ T31] ? _printk+0xcf/0x120 [ 292.557180][ T31] ? __pfx__printk+0x10/0x10 [ 292.557203][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.557232][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 292.557261][ T31] watchdog+0xfee/0x1030 [ 292.557289][ T31] ? watchdog+0x1de/0x1030 [ 292.557323][ T31] kthread+0x70e/0x8a0 [ 292.557348][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.557377][ T31] ? __pfx_kthread+0x10/0x10 [ 292.557401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.557437][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.557464][ T31] ? __pfx_kthread+0x10/0x10 [ 292.557487][ T31] ret_from_fork+0x3f9/0x770 [ 292.557519][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 292.557552][ T31] ? __switch_to_asm+0x39/0x70 [ 292.557570][ T31] ? __switch_to_asm+0x33/0x70 [ 292.557588][ T31] ? __pfx_kthread+0x10/0x10 [ 292.557611][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.557646][ T31] [ 292.710081][ T31] Sending NMI from CPU 1 to CPUs 0: [ 292.715344][ C0] NMI backtrace for cpu 0 [ 292.715361][ C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 292.715382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.715393][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 292.715421][ C0] RIP: 0010:kasan_check_range+0x47/0x2c0 [ 292.715441][ C0] Code: 49 39 f8 0f 82 82 02 00 00 49 b9 00 00 00 00 00 80 ff ff eb 11 cc cc cc f3 0f 1e fa 49 b9 00 00 00 00 00 00 00 ff f3 0f 1e fa <4c> 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 [ 292.715456][ C0] RSP: 0018:ffffc90000b976f0 EFLAGS: 00000002 [ 292.715469][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81c7e928 [ 292.715480][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa110f0 [ 292.715491][ C0] RBP: ffffc90000b97830 R08: ffffffff8fa110f8 R09: ffff800000000000 [ 292.715503][ C0] R10: ffffc90000b978c0 R11: fffff52000172f20 R12: dffffc0000000000 [ 292.715516][ C0] R13: 0000000000000002 R14: ffff888052336022 R15: dffffc0000000000 [ 292.715528][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 292.715541][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.715552][ C0] CR2: 0000200000a4e000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 292.715567][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.715576][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.715587][ C0] Call Trace: [ 292.715592][ C0] [ 292.715603][ C0] trace_irq_disable+0x28/0x110 [ 292.715625][ C0] crng_make_state+0xe6/0x700 [ 292.715647][ C0] ? crng_make_state+0x13a/0x700 [ 292.715673][ C0] ? __pfx_crng_make_state+0x10/0x10 [ 292.715700][ C0] _get_random_bytes+0xd5/0x210 [ 292.715719][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 292.715752][ C0] nsim_dev_trap_report_work+0x69e/0xb80 [ 292.715781][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 292.715806][ C0] process_scheduled_works+0xae1/0x17b0 [ 292.715845][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.715879][ C0] worker_thread+0x8a0/0xda0 [ 292.715907][ C0] kthread+0x70e/0x8a0 [ 292.715927][ C0] ? __pfx_worker_thread+0x10/0x10 [ 292.715952][ C0] ? __pfx_kthread+0x10/0x10 [ 292.715971][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.715993][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.716017][ C0] ? __pfx_kthread+0x10/0x10 [ 292.716034][ C0] ret_from_fork+0x3f9/0x770 [ 292.716058][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 292.716084][ C0] ? __switch_to_asm+0x39/0x70 [ 292.716100][ C0] ? __switch_to_asm+0x33/0x70 [ 292.716116][ C0] ? __pfx_kthread+0x10/0x10 [ 292.716134][ C0] ret_from_fork_asm+0x1a/0x30 [ 292.716159][ C0] [ 292.731551][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 292.731580][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 292.731608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.731622][ T31] Call Trace: [ 292.731632][ T31] [ 292.731644][ T31] dump_stack_lvl+0x99/0x250 [ 292.731688][ T31] ? __asan_memcpy+0x40/0x70 [ 292.731719][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.731753][ T31] ? __pfx__printk+0x10/0x10 [ 292.731790][ T31] panic+0x2db/0x790 [ 292.731828][ T31] ? __pfx_panic+0x10/0x10 [ 292.731860][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 292.731898][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 292.731927][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 292.731964][ T31] watchdog+0x102d/0x1030 [ 292.731996][ T31] ? watchdog+0x1de/0x1030 [ 292.732033][ T31] kthread+0x70e/0x8a0 [ 292.732062][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.732089][ T31] ? __pfx_kthread+0x10/0x10 [ 292.732115][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.732145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.732174][ T31] ? __pfx_kthread+0x10/0x10 [ 292.732199][ T31] ret_from_fork+0x3f9/0x770 [ 292.732233][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 292.732270][ T31] ? __switch_to_asm+0x39/0x70 [ 292.732290][ T31] ? __switch_to_asm+0x33/0x70 [ 292.732311][ T31] ? __pfx_kthread+0x10/0x10 [ 292.732337][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.732375][ T31] [ 293.132558][ T31] Kernel Offset: disabled [ 293.136895][ T31] Rebooting in 86400 seconds..