last executing test programs: 33.179763022s ago: executing program 3 (id=4398): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x240008c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000008010200000000000000000000000106000240060e00000900010073797a3100000000060002404305000005000300880000000600024000f80000050003003a000000040004c0"], 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x4004) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 32.937056177s ago: executing program 3 (id=4400): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x5, 0x0, 'wrr\x00', 0x0, 0x0, 0x2f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x5, 0x0, 'wrr\x00', 0x0, 0x0, 0x2f}, 0x2c) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="42d85f8f9cdd8de41f4ace2741a61d218ac5fa3b63b318601e76cb0d14090b9082df23af92009625837dc6c0f1b7dc215d3ab17dccdd0a8099abe2945f762eefb5843758d77035366b297aae5f36b09ee572c827a64f232ee575c5a18c6f590e30cea026a062cc5da8dfe75f2464b507dec986047d4f42eab5620e2d35ca7977730ff939c72b4ea9615491dbb4dd81", 0x8f}], 0x1, 0x7, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) 32.895417248s ago: executing program 3 (id=4401): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xb8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x89, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "fabf457a2783e01adba453eb6b12547e74ed3538e418b01eb76a9da3a965a965bd660b895bcde4e323c457657669f884ceb2303e38c045eabfb99180b31db5a5cedd27c3d1afe4f747fc7360d5f6b1392c380721711fe9ed4a9ad5ebc44f3515520c50cc1c0a8e07ec59e52c8a083d49257ed21038"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00'/20], 0x14}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 32.704870613s ago: executing program 3 (id=4403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) 32.296843817s ago: executing program 3 (id=4406): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="4c0200007025644d4c2b436e71e442f88b67b3797749b30aa6b90a45b0313b9b754d7305887e9aa5d357d29f2f3c3f1f2a5d415f2dba958ce88d9bc21e91a09d56abae123a9c9c8f7deadc4835f7bf10e15ef7e72b6df4c0cbd8817a587e8907f9ec6f5244e4144f2d256c81b29f77ef82c3a0ec9599a00322e9764c633c8bcffce3a5b29a2708a83a0d199dda24aa42b159f32b35d2fc839e07f2f1fec0a408", @ANYRES16=r1, @ANYBLOB="00032cbd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x3c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000001c0)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000280)) sendmmsg$inet6(r8, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xb8, 0x0, 0x1, 0x304, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xa}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x440a0}, 0x24000401) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r10 = accept4$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000500)=0x1c, 0x80000) connect$inet6(r10, &(0x7f0000000580)={0xa, 0x4e22, 0x8, @loopback, 0x3ff}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 31.987280071s ago: executing program 3 (id=4416): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a0014"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="05831d77f431335f16611acd2a1993f0", 0x10) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r1, r2, r0]}}], 0xb8}}], 0x2, 0x0) (async) r3 = gettid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001b00)=0x0) r5 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b40)={0x0}, &(0x7f0000001b80)=0xc) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001cc0)=0xe8) (rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)="5f575a04c0a3ae08c029a9771bdbb1c81e1eacc8cd99675a5e7c765c1b57b305ed4fd58cf2c6b63e08df06c8135b8534dcfc8d5b8431905dbcacf18732e979427204d9441627d34c0dae9f544e40618c23208f01741bfbaa62a124e77ad3a51bc2d6851451f8f4b26b08d3441fcc9b7e5e3c40cef269cedfd6f8c08caf4186015b680d388947dddb76f3971ef9217913d4b4f39790d63cc5ceb9a8955d2fc290", 0xa0}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000500)="75834e6ae1719eaabc40917b77941762bbe86e9ffa3bdafd99cde209a064475233b8fdc875c18fce231963b9e5967c1b2900469c55f831eb729980848bacc0a9f0fa3621869231d32ea6ee4eb1fdbbbf99f3bdb8b5787086bb1dfafadcc5d9", 0x5f}, {&(0x7f0000000240)="c8d97a72c2ecaa7335551a00309eb93b2bee87b71a6102ad84ab0f3de5c454eb3a2578949b", 0x25}], 0x4, &(0x7f0000001d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x34, 0x1, 0x1, [r2, r1, r2, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}], 0xf8, 0x8004}, 0x20040002) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r10 = socket(0x23, 0x2, 0x0) (rerun: 32) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x4121) (rerun: 32) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r11, &(0x7f0000000380)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 31.516420497s ago: executing program 32 (id=4416): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a0014"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="05831d77f431335f16611acd2a1993f0", 0x10) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r1, r2, r0]}}], 0xb8}}], 0x2, 0x0) (async) r3 = gettid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001b00)=0x0) r5 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b40)={0x0}, &(0x7f0000001b80)=0xc) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001cc0)=0xe8) (rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)="5f575a04c0a3ae08c029a9771bdbb1c81e1eacc8cd99675a5e7c765c1b57b305ed4fd58cf2c6b63e08df06c8135b8534dcfc8d5b8431905dbcacf18732e979427204d9441627d34c0dae9f544e40618c23208f01741bfbaa62a124e77ad3a51bc2d6851451f8f4b26b08d3441fcc9b7e5e3c40cef269cedfd6f8c08caf4186015b680d388947dddb76f3971ef9217913d4b4f39790d63cc5ceb9a8955d2fc290", 0xa0}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000500)="75834e6ae1719eaabc40917b77941762bbe86e9ffa3bdafd99cde209a064475233b8fdc875c18fce231963b9e5967c1b2900469c55f831eb729980848bacc0a9f0fa3621869231d32ea6ee4eb1fdbbbf99f3bdb8b5787086bb1dfafadcc5d9", 0x5f}, {&(0x7f0000000240)="c8d97a72c2ecaa7335551a00309eb93b2bee87b71a6102ad84ab0f3de5c454eb3a2578949b", 0x25}], 0x4, &(0x7f0000001d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x34, 0x1, 0x1, [r2, r1, r2, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}], 0xf8, 0x8004}, 0x20040002) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r10 = socket(0x23, 0x2, 0x0) (rerun: 32) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x4121) (rerun: 32) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r11, &(0x7f0000000380)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 18.349234133s ago: executing program 1 (id=4586): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, @private0={0xfc, 0x0, '\x00', 0x1}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x2) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x7ff) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0)=0x7, 0x4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xb3b, 0x10000, 0x3, 0x8, r0, 0x4, '\x00', r2, r0, 0x0, 0x1, 0x0, 0xc}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000300)=0x20) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000340)={'macvtap0\x00', {0x2, 0x0, @dev}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000380)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000003c0)) syz_emit_ethernet(0xc7, &(0x7f0000000400)={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x20, 0x4, 0x3, 0x1a, 0xb5, 0x66, 0x0, 0x5, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x10}, {[@ssrr={0x89, 0xf, 0xcd, [@loopback, @private=0xa010102, @private=0xa010102]}, @noop, @generic={0x83, 0xa, "a2ffddd9cf033a71"}, @end, @rr={0x7, 0x7, 0xbf, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x39, 0x3, [{0x6, 0xf, "29589cc6aaf375dacd12eff541"}, {0x0, 0xa, "87b3d69776078b0f"}, {0x7, 0x3, '-'}, {0x1, 0x5, "d84580"}, {0x7, 0xd, "a1666a79a00114702261ca"}, {0x1, 0x5, "d4f6d9"}]}, @lsrr={0x83, 0xb, 0x15, [@rand_addr=0x64010102, @loopback]}]}}, @payload_mcast={{{{{{0x35, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x2, 0x9, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x5, 0x1, 0x4e22, 0x4e22}, 0x2, 0x3}, 0x1, 0x3}, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f0000000500)={0x0, 0x1, [0x613, 0xb44, 0xf75, 0xd41]}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000540)={{0x5, 0x2}, 0x100, './file0\x00'}) sendto$inet(r0, &(0x7f0000000680)="328f41", 0x3, 0x4, &(0x7f00000006c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x61, 0x1e, 0x0, 0x5f, 0x0, 0x5f, 0xee69cd4d5c4d73dc, 0x0]}}, &(0x7f0000000740)=""/4096, 0x22, 0x1000}, 0x28) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000001780), 0x2, 0x0) read(r4, &(0x7f00000017c0)=""/119, 0x77) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001840)={r0}) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000001880)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x8, 0x4, "05fea937d82cb20a75ac11d06e30820fcdab54b58c85c3718debf8937a6ee293d161ff18a3f90d2afcbaf0baddf0829bc026024490db8e4bb0e479ae5e310d", 0x2e}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)="2867cab539856eb7aa6976db150197b3cf88fab249d26e2a4064b92d7a9f517418c791579706a56b3ea67baf7262d2b3bcf14b0143eea683364aecdad7b6d2c1ca05f7", 0x43}], 0x1}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) close(r1) recvmsg$can_j1939(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/206, 0xce}], 0x1, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x10003) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002c40)=@generic={&(0x7f0000002c00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002cc0)={r0, r2, 0x25, 0x0, @val=@iter={&(0x7f0000002c80)=@map_fd=r3, 0x10}}, 0x20) r7 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000002d40)={{r5}, 0x5, &(0x7f0000002d00)=[0x100000000, 0x5a299ef4, 0x6, 0x9, 0x2], 0x8000000000000001, 0x8, 0x1}) 18.169358919s ago: executing program 0 (id=4591): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18.07306267s ago: executing program 0 (id=4593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 18.028245312s ago: executing program 1 (id=4594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x6f4}, 0x1, 0x0, 0x0, 0x20048011}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x88) 17.924780249s ago: executing program 0 (id=4597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) 17.827947506s ago: executing program 1 (id=4598): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x880, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x7fffffff, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x1ff, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x101, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x4, 0x1, 0xc, 0x6, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x101, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x2, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x6, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0x3, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543f, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x0, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0xfffffff7, 0x0, 0xc7f5, {0xe, 0x0, 0xdfb, 0x7, 0xc, 0x7aefe6b8}, {0x1, 0x0, 0x3, 0xd, 0x1, 0x9}, 0x9, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x9, 0x2, 0x40, 0x308, 0x1, 0x1000000, 0xffffff74, 0x1, 0x80, 0xe, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x5, 0x380, 0x7, 0x9, 0xc, 0xa70, 0x3, 0x5c05, 0x1, 0x3, 0x0, 0x4, 0x1, 0x57, 0x39800000, 0x8, 0x0, 0x9, 0xff, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xa94, 0x8, 0x5, 0x80, 0x0, 0x100, 0xebf, 0x69, 0x1ff, 0xcda2, 0x401, 0xfffffffc, 0x5ed755fb, 0x318d, 0x101, 0x8, 0x6, 0x3d75, 0xe48e, 0x1, 0x80000001, 0x9b, 0xffffff07, 0xfffffffe, 0x5, 0x0, 0x7, 0x7, 0x8, 0x3, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x1f, 0x9, 0x8000, 0x6, 0x1, 0xaef, 0x9, 0x7f, 0x3, 0x6, 0x5, 0x0, 0x0, 0xccdd, 0xe0b, 0x6, 0x3, 0x8, 0x2, 0x4, 0x3f7, 0x4, 0x101, 0x3, 0x2, 0x3, 0x6, 0x8, 0x0, 0x2dbb9dea, 0x6, 0x80000001, 0x0, 0x3ff, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1, 0x4, 0xad71, 0x39, 0x8, 0x4, 0xb, 0xd, 0x9, 0x1, 0x10000, 0xf0, 0xfffffffb, 0x5, 0x2fc3, 0x5, 0xb, 0xc4, 0x1ff, 0x80000001, 0x0, 0x5, 0x70000, 0xd85, 0x1603, 0xfffffffc, 0x40, 0x3ff, 0x8000, 0xbae, 0x1, 0x2, 0x1ff, 0x7ac7, 0x8, 0xc8, 0x53, 0xfffffe00, 0x7fffffff, 0x1000, 0x0, 0x3, 0x3, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0x23, 0x7, 0x7ff, 0x0, 0x0, 0x2, 0x5, 0x101, 0x2, 0x3, 0x5, 0x9e, 0x9, 0x0, 0x7, 0xc1, 0x5, 0x9, 0x4, 0x7, 0xfffffff2, 0x81, 0x3, 0x1, 0x2, 0x0, 0x1, 0x9, 0x2, 0x13e3, 0x180000, 0x9, 0x0, 0xfff, 0x1fb0, 0x4ae, 0x80, 0xc, 0xb1, 0x2, 0x3, 0x8, 0x2, 0x6, 0x1, 0x200, 0x98e0, 0x3, 0x2, 0x0, 0xfffffffe, 0x8de0, 0x5, 0xfffffffe, 0x1, 0x4, 0x4, 0xec, 0x9, 0x6, 0x6, 0x0, 0x19, 0x9, 0x7e, 0x7, 0x5, 0x1, 0x9, 0xc, 0x1, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x1, 0x5, 0x4, 0x58, 0x7f, 0x223, 0x7, 0x8000, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8]}]}]}}]}, 0x880}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040"], 0xfc}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.768000504s ago: executing program 4 (id=4599): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000b80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 17.507103872s ago: executing program 4 (id=4602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) (fail_nth: 5) 17.432321849s ago: executing program 5 (id=4603): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf251600000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8094) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) 17.431427388s ago: executing program 1 (id=4604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe6, {[@nop]}}}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="00fd85dd0500560008005400000060ec81f608983a00fc000018c6ba35000000000000000700ff73a4a3c40000000000000000000001"], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000005140)={'ip6tnl0\x00', &(0x7f00000050c0)={'ip6gre0\x00', 0x0, 0xedd5eabcf079736f, 0x4, 0xe, 0x5, 0x20, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8, 0x1, 0x5}}) sendmsg$nl_route_sched(r0, &(0x7f0000005200)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)=@getchain={0x2c, 0x66, 0x0, 0x70bd28, 0x10000, {0x0, 0x0, 0x0, r8, {0xfff3, 0x5}, {0xfff1, 0x8}, {0x8, 0xb}}, [{0x8, 0xb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8094) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xfff) r9 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000001c0)=@int=0x5470, 0x4) sendmmsg(r9, &(0x7f0000004fc0)=[{{&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="c8c7806dec77373fb1071509886d62da3283683a53e16077846501398a6dd6bde752e9d46bd3caa0405a60459b27956ba889bc687bac50139f3985d055f32a488c1d9f2b543a7e240326e417eff8f2d2f3015771ad07a69138e1fcab49e0bfe8e1b9f0958c39ac9007cb0f3ca25949ced42898e1177ce9e6a3d1c17c6cfb55be8d5029fd90fdfce502492ec8add50eb745768399", 0x94}, {&(0x7f00000003c0)="6b11d7a4c471ac6e30f8fd65fda4337d982a7182b5d2895cbc1261939e2d5ed9ebbd757461ccffcab8260227cc5cf1e28cc74722de7f98364dbdbf2f0c3c59ade2a142427bb919b712a17b4ceed125721447ba0397f3d9e0be6c9ba77a9bab71af44a603d435442bb4d2aacd966bc11d0840c8a1efedcf6a0ace", 0x7a}, {&(0x7f0000000480)="6d48d5de9fae057d1357a7e4ee15957deaef0c8c56eea04d06a060f4a1b699fd88eb300b7c9a824dd739918b9871b429cc7aea2990b20039c93cfa9a5152249d453260017967cce760e2be0ab73c18d7ed7cadb7f34c09d32e44c8bfb40e001f1aa6266ee66ab145a07064797436c7d8acf1777fe9ffa7d7125579729e09988ce71854babc62b77ec4d7036cf66600ecf7fd2e2548db419baf5f63149efe38010b687ae409530299c2a603f2615ba85311325260b4b8e92721222533aaa6a6a9cb2ea059d45a4e2187f628249ed69655534ea8f3858ad18c8b15b2fcbafb01efb17b6b77f512e303", 0xe8}, {&(0x7f00000005c0)="cccd2e6113ea910abf6dd550c1cbfe26d09961a6a1065b575137be2b720b86db0b9d84838b5c3a479f0c35c7138464bca5097a5f856340d66572ee792e84aa057948ec24c22ac67941eb1b125790a5f66f8f53d9d0b1788a3d77", 0x5a}], 0x4, &(0x7f0000000680)=[{0x28, 0x113, 0x10001, "088f715555c3bcf18e1f766bb94ef4311d"}, {0x10, 0x1, 0x7}], 0x38}}, {{&(0x7f00000006c0)=@l2={0x1f, 0x80f5, @any, 0x6, 0x2}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000740)="06903e34edc7663d57e1a17aa776b6aaf66d4dd8aef39e8f660745868a7c6e4745ce8f93c53bb8f981af188fa5f20c74d71afa3dc0d0fa18f5327534562377e1b384d4a437a7c713a3a20223fbf695ae6d9a226f86f8cebab9ca2a4e4338f946aafa20f9a6222e1496e978c8b68c41176d2e61cc8e71c37cc735e2371cc195b74dd3c02e0392e9e71f995a9daa0b42d398cbcc91bfe5091ce8e24fb080", 0x9d}, {&(0x7f0000000800)="5e20556931abd5551d1f75856d0865687214ef67c06e9b76bde8efef479cbb59c8195cea4591cf80cb05196a37682a679f4be4b92d59ea5b11c00e0d85acfca7ab06239d615bc5db4b20bd418b33a1f8a366ac9b6c5823efc3014b958686ffc0747db7596cbc6f2595c8baa89839c5d7ef59b5dc7a2028", 0x77}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="7966b3942ea64fcec5fdcda0d53395b05d5875f8d1da9300cee213917449337f8e2f716c", 0x24}], 0x4, &(0x7f0000001900)=[{0x68, 0x88, 0xc5, "e48e043be3c790c044d6aedd0cb2bbaaa3a996f07cef9111f9760d563e78648f6c08a5fbbb82b456c0ab0135a95b91d9a1dfcd527ebf2677b7122cbb4e135691c55936a4e3535d2e4bb4069c688504132a51d8abe3acaf5e"}, {0xd8, 0x10c, 0x46e, "a164b1e6916800c93b91c1ef5869d65bfdb5c8f4532772a9bdd51d0991e4eec0b988277acaf4ab2396902428b4ab5e86a8e1c027609f20356c01a01a41e53eceb7962369516eecf85dee629d93ca98b9bf2b0c51e65a8880c6c35ddccbfa2c4a8f7b68ae3b97e8504cd710a842adedfc88eba83d2ea52dc260e3b044cabb098cd1749e7ac5365a8b142302c5a0fd67efd438af2922051abd2e92d0e4e9b8063d68744d644e6be8d0c0f5a93e6f5e2a463378c734302f7e58c3071783bc9b39ec18eaabf04aba"}, {0xe8, 0x3a, 0x9, "1d2a2f1fee518b5a1578e31daee785753027063ac963a961233d5e924e8e73425925c364eaa732f1648b3070b8df72c4e88f2429ac20126ab011a7d48f709080e783fd743f39b0fa7f0d3cde0d003084c68f9af63479f4ccca4a12c1c8882d0dd96c9093acd976e697535f5920cc20e540e109d704eae3ce2e361a99f7b08f17d65090bbaa9501bc9359160ad765cf7b93ce4b0ef03c116bbd9eb85284f061b2e9d252b6bb643b7c9801b557073ff1f7f70aaf73f2f12b1c390ed9b9dd6b14374e7a9454c8de1ce57ddde30eb0aae4c4f0c3"}, {0x1010, 0x108, 0x1d, "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"}, {0xb8, 0x397, 0x2, "0d248f9ea8b5d7b130ac4ae6579ca756a6d6deb94c47d62143fda40a26fed598b50c2368f76f477187e7b746fdf2262c8882d64fd0913e51f97e2d30cac4a48feca0fd1b6c5fbef480f217e881629fd26a394fe95f18c9ef5ef544dab1557717281f08dbea749b9d87209c1529b556c761b3704f9d06bcf73e7302b3b78fb35e55e810a994d34e839cf8806f5cc0acadacaf1e8ef35b9b6c2b59979115f7e355de1e95e9"}, {0x68, 0x6, 0x40, "c7a3f24da448bb893a349d7ff7515a8c44055ff091dd743d7ccae4d43130e736e6c6ecc15ff67e6f03961ff02e4773901db6c2e01b3755416865182f370993ac17ec4a1dd1529b760a285d265b464eae93"}, {0x80, 0x114, 0x41f, "0717ed94b3a51b0e05f38be0f7a2d5970a06791b4318981cefd0c131ef15a4605526af48293efa586682799e2f8d93c81b76c235263bc086cff8ec27372d9af2757f76ebfc76942292a9e415263e74f68115c53858007c914c764cce0d4736552673e1821a5854db5d"}], 0x13d8}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002d80)="f4a774fc00d57c04977a7318bd9b6786", 0x10}], 0x1, &(0x7f0000005240)=ANY=[@ANYBLOB="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"], 0x2238}}], 0x3, 0x20040800) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xffffff01}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r13, 0x0, 0x32, &(0x7f00000000c0), 0x4) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 17.33359526s ago: executing program 4 (id=4606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff12, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vxcan={{}, {0x0, 0x2, 0x0, 0x1, @val={0x0, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x80}}}}}}]}, 0x3c}}, 0x40800) 17.164399086s ago: executing program 2 (id=4607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 17.163134124s ago: executing program 4 (id=4608): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000e00000000001c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r6 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) r7 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = gettid() setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000680)={0xb1, {{0xa, 0x4e23, 0xa605, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}}}, 0x88) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x754, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x418, 0x48, 0x0, 0x1, [@nested={0x3ab, 0xbd, 0x0, 0x1, [@typed={0x6, 0x3f, 0x0, 0x0, @str='%\x00'}, @typed={0x7, 0xc9, 0x0, 0x0, @str='{\x19\x00'}, @generic="ee4038fe8f5af2337d8124d5fbb76db49886ef141d563734974f77a2611478e98fefdbd976333686d7edd3df27c5dc3e3ab75689a92e8e1f804152c553fff6f8fdf3480469db5a2425066f78eba2e7223bc801e2386f839f6be9771ae67f9347f17e0129fc9e157da6436825aaf333", @generic="4f8daf7f59d56295b79bc9975ab225d4ae0437bcbf95787a4717f8f193efde9dd7488bb0455b4e38b7e94f870a7f5b63b1f91f29595fb5567aa3168bc251b9d64587ee2ccea61a880d79cd822c0515a3274c406527dbea7a9f5405ea4c8818f39e6a622a25655ae46e0c731321ba916d34afb9bb568b01ba71e2016b1ea199dbf08817a28775", @nested={0x10b, 0x11a, 0x0, 0x1, [@generic="f2cbf000b8286ac370bbe5c4f7e515342226acfd0c9e98e98d4550a565", @typed={0x8, 0x13c, 0x0, 0x0, @u32=0xfff}, @generic="2c86ca51b8b86e3ba4764aa7e809675a9068df627326755b6381bc4b52eec9f4ef7f2c4479b705beb726d7be1a18ef48ae1de14daa60da0791c2debd3e0fda567056452bbf1820f9b98c2b99b4fc5b8d1082eda9cd3c97dbd2f4bd5ff6489d1d93ab4532ad3c3d21abcfe8f025419b374c96b93db0ec6003306f8b6f070cf937c12e54107cafddb5d4e3ac60392c6dc66e35042902739986680f86caf98f1ca4721f1b2444378bb2a4c286b02fd984b115f6e7e63e616b3759201d4b11707032680e8b1ffd704a9a51d980ed33c89b46a59338d593ced9fad2576c27c30a6f06f4f7"]}, @nested={0xba, 0x47, 0x0, 0x1, [@generic="a86e5a7376024649bf62bb29526950e786c68801954547fb05f0934075c01f389ea9b89757075baeec00cbd5c075590b6750244facbae6d478c47f4a99c06f655b87d17e41ab96778fdcbcf48675dd82c0ea9136f05dd1436c344762762443ce04200fa1471cb36a7887e82acad8091cec339e07fc5dfb87ad2f5256993a360729feb303ab8484e02bee6c3300"/162, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x121, 0x0, 0x0, @pid=r11}]}, @generic="b22d9fce3194c2ce97136d20216c34cdc9d8cb80ce21b7f7b28248b89dc641fc754d34973a253dadb25c0cf83a15a84ad1370b98c96c1b1a6f178f1309099fa9892b9b5db88feeeebb67804772bc01d0a6f8adb80d30babc036ecb9789b56fec16d755d6d367409c7b4a87750ce7214aed80d6f56c31a09e0fa1b25cd819ce193f281ca3e91bee5ba3ab0f6bdff402c82811feb49da1e64a233818f01d66bbaa630f0e83574f4217964b93841e84d25c234cf0c397d3ef6d97ba3aba1dcca3ac4d84ae461590ff5558986991ab406986de5754ab1909941c559c"]}, @typed={0x60, 0xad, 0x0, 0x0, @binary="83fb8c02e11234bd236e84b8bd727a85db0100e7fd432c658fc0387b7226f609f493aeeadb3aad69759254a0747594a0877897871505b48be38390d64674a9e39e210f2312af1783b90f687cf236c45647eec5da2fc8419d423fbd7d"}, @typed={0x8, 0xb, 0x0, 0x0, @pid=r11}]}, @nested={0x31e, 0x12d, 0x0, 0x1, [@generic="e9b5c2", @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x1e3, 0x9f, 0x0, 0x1, [@typed={0xc, 0x89, 0x0, 0x0, @u64=0x8000}, @generic="9047a3ac9a7d9e28783f240c59c276923935545bcdc02f8f909ac815df633d54b0f521413df33c73b63a3f157e0e", @generic="5871d91e6a19c3e93315a9de3637853a6299aeed62ccdcd585d821d0e37cd7c8db79d4b6c9601f5685961f1faeebf4818a15f2874c5138d4fcc123bb49ea46646a5bae9ac28abaed93f535d08d2ba78cb966837e5500324bcdde31678bcf6bc44dde3106b435e2a6ea5b02bcd3509dbd08c1581b156d3692b253d3602a0af4c85a8ec60e5b12420253347822e2a60befa5addd6e959cc158fb107e5e326de233d72ccdee81ececfe4b76f15065bf", @typed={0x2e, 0x4b, 0x0, 0x0, @binary="3e73c3cb934cc19ba4fe10794664cdfc5cad371c1b34f2a685ae6d240469c65cf89a5bc6a10ce89c4fc6"}, @generic="99195190ec830ad9bff16d08d7eb13965517c1757211d463a6fafb66b6f8923b40fd7b51437c3e18aa5490900fccddc7c494ba71e4eeb0f5ee4f61d8617d5cfe6fa8e6e93062ab5f0aabfd3d0a02f5a7a542325d03783b9a7d6f7983168f1cea86fdea112ce3a7aa182ba993e50e82844aaf7c1560a06c74348d8c92729d4b7c55797189d21a183586da2e59382f0c6c43acb4df8c7e1855e86da6370debbd3487165cbe3d44de2be534add98fa8241ab70420e634d7156b73f0b225021f42efdf4df950c214ac"]}, @nested={0xc, 0x137, 0x0, 0x1, [@nested={0x4, 0x7f}, @nested={0x4, 0xf2}]}, @typed={0x72, 0x5f, 0x0, 0x0, @binary="772033142274067c459a63b4658bcf25397c56677f26197e49c69d020652eaeab9ffeb729d866ea568d54f4eeaea1df33ca02fd3c879779a21a6b96c61bf3abad6f6cf04a1be0233cde221aee9022c925d8f6ced8a51a1a26858321f792265b7062ccadb8ccea5cb0b86087f870e"}, @generic="ec3951ce3169951401c0845580c883456d7d19242c6380e60150c33a1b61975a6867f8766c4d39f64951ad93edec4f3b4eafbec52c8bf298a96017930adc35bedf0c09ade1efd000a223a7a08cc5a7be67c7239e59eb452fc772ed3e98e9c8f0e470cffd74576a1c65140ff3ddd6657ef7ca52d76c3b68229fc9f8c1f334cf84d62089b7f97e9832116700dae4721f2ae4077efcf83ba7dbaad73e5a4ce5b6d0d57b6f16fba3cdd1979862"]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r10}]}, 0x754}, 0x1, 0x0, 0x0, 0x400c041}, 0x4008094) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="00b2000007500565060000000000000001a002000000000081a6b33b8a538c7a01c7880d3aac645f001e00"/55], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r12, &(0x7f0000000240)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000140)=""/37, 0x25}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}, 0x40010123) 17.163040945s ago: executing program 5 (id=4609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x74bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 17.059517247s ago: executing program 5 (id=4610): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64000102}, 0x10) 17.057585897s ago: executing program 2 (id=4611): r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @multicast}) 16.967879934s ago: executing program 2 (id=4612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f0000002380)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e1d, @multicast2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="6764da284f44b11eaca9dcb3055f3bd8dafdb56d0f22799c9ce225a8c14c8e48b526a709a59fa919e73278a6c189d48a19bb7fb00c4140194220d517a0dd40fce2294c6c67e73e4a3fcdb02fa29d0ec6a4d430515880abca280261326e0f09cd314897525bbcdb5d1a1908b46e95a07bee03", 0x72}, {&(0x7f00000003c0)="55c5daefacef337fabad1d7c9936ed19359fb69f25c3305765694fab736b349dfa8e822e1e4bc5db9237f05007db838c821ef54e0fa427ae787be6f6628524dc54b9b38bb3ff5e51cf48b38d7a4d7e338471fcdf520bb9fb98e1dba09c3db9f2ca71b64d9f0346ab1f2d3e2855c5d641d668312153fc7a055e78", 0x7a}, {&(0x7f0000000440)="6f5853d409440215f59a3dd1b0f2ba3997c54276105ba6d2b180152e628764484064e6e07e567650322bd431cc8b47e83ee16b8a8913edf2919a9fb6c8438c44f226bf306d1d311f116c63ec30f04ff551ab1fe1de2c46d8c267c53088f0bc417a3ef3737df2129fe40282c0d93b1534a02027fc752132d30e950f9e4515cd611ba3100cb2e918c133b717bba517b54131e8872729a67892c2c68dbd2ee2", 0x9e}], 0x3}}, {{&(0x7f0000000500)=@nl=@kern={0x10, 0x0, 0x0, 0x1000}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x100}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="a7b1e960698c3c2d6b772011c50d2e07281490f5340fbc8a75073895fc50a901fb0879ce19281b2f4ae19c77ac0d3acbb3870494f21b86aae173402e9b2af0b0d757b82dfecbe272dd96b423e0111f09", 0x50}, {&(0x7f0000000800)="89b56f932cbd755286a5bfa61bfd59bad03a6aab10f88ebb9fa664cca0733717aa227d2b3de4b3379349093c729ea90bd1fcae12df15f02f1ccbc6b32bfd55b08b569ba8", 0x44}, {&(0x7f0000000880)="7119c1caf4c5a18335d38c58b675b786025b82e23854d849f63caa887031a94502cefdfcef386179cd1b88113f03d5a85fb22cbdf34ab1f23785ba0e65ea3bd9d398ea85dba8e7dee1", 0x49}, {&(0x7f0000000900)="37a406e2e587cc718c4ed5dbde88ad483bd10f60826e63d08b5c5e9f52b10867074dfa67ae17aff3922db7d1deeae5a9de716c549c8157d5c0b6f70275", 0x3d}, {&(0x7f00000024c0)="aafa15c70f388d62fe3c6eaac9c374082ad417601c9e60803be05833013a8f362d2b0f5933e0b7e28da084412606987a459e5956967edbd7de8ec6393a3d17dd5e361d120cbd4f2864384499470dba9c2845c4315a5d4fe80566b27790927a051b13392128a2538dc3630bba3b73c73e9a589ee825215af58ef396c3a359eefa68627c20b03d4c5fd43bdf8dbb1dbec41430fcb50c3f2aad343d9773d764c9a257560821ebfcfebdb18082ffbe6371c21079f1bf8a9e3f2e14d0687a82456ff74194fc88e3d290d507d72674d18bf0a5cb67bbeabb208505b0aa08f29da1e03ac1722d0a59a52b", 0xe7}, {&(0x7f0000000a40)="47918405310c56bb389be6da07cb87e489d0fb693d3b32e333268a40172256701d39e78f42d07d1fd93d55d02a5039631d7a5ed1b939256cb6563c2ee11fbc9ba738aff576e9f29bd212404cd4143334526ea19093d5a7b01579685b8b0ade07a3562e6e4dd367d33d55a8090df8296041be686135d5cb732761a9066a8ab4b9edb70c82ae01affc867950c3cc443e9abac3e8393ea9b077ee530c053279fe847adb4c59c9812726d7cea655fdf37bd195995df58769d50cbfb854b3a4f64da874ae1efae1f5e03c09", 0xc9}], 0x6, &(0x7f0000000bc0)=[{0x98, 0x107, 0x0, "a2266a20db5665f35a11261805d8e0186255de6da2a59d859aa85b5c475de4a61a82eebe463d02bd5988f4ff2e4829516c6bb730d857a11ba50e4215ac0d1770102b63974e1398fa1538d7c055b678a2256dbc07bf74c6f2ca3e4ffe26facd79748302bec52242b79f0e3efb030c1af50b34cc38c59fff6c7c1b3afae9b75d7e37ec03"}, {0x68, 0x109, 0x1, "873a71461405b2fbc0314cc0d5091842c556f7ce7c9b4d8e356b0c35970a0a81dc6a60aae3d344000987a56a0ceceef29cb9dc2cbe55ba5907a55ae5c2dce1ca81b3834809ce84d2e8dd1007c5bdb418633627b74438e48b"}], 0x100}}, {{&(0x7f0000000cc0)=@ll={0x11, 0x5, r11, 0x1, 0x5, 0x6, @broadcast}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)}], 0x1, &(0x7f0000000dc0)}}, {{&(0x7f0000001fc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)="09b18d77ed1522e4d862ef706ce275621373728f577b337a94ca18a6ae7f192b9d66918e53e470103d76d69d9b473eed2f6761a92a8b4febe2f5ca26a095917f35a16f6720057ef0874362445c8c4413de41de55c5f1b376eb566f03c5e320c53bf4fed5cf9f10265c7def34a98d2a38a9d68b02f6700e888f4f0b507ed19366ca9b1b228f82b3138d5b4acef32ed22c2b6d9ebc844e336b9263222ed1a526bf91bf7d0b02684483dcdffb9224ab92c730c56716352aec1f560a1aa3a376981b234002ef58ff046181d8eb8d7e5046e681291b0e70f8532e9dd4681a2a197050c4", 0xe1}, {&(0x7f0000002140)="dfd67bd2492bc6700c1ff766a59a3ffb5b83207670a8da2799403aaef040461e8fa2614767d8b8fe8cc6f266a35aaf6cdc062e96d6b752eecaa879176f47376b2d726a278044720b6d8e93684b3b6ef55977a0a77271ce50edf1b8b08bd9181e0ea2fa84e10e0de6ae85a621ef21e15d743cd03cb30591d1f7b0352c832b3913d6258976", 0x84}, {&(0x7f0000002200)="b7d54a30d1e53a0498619d27892f27fc1220a21d0bf46583fe8cb11663ded26914fc50caba0f7628112c675f2fc0478e1a3144e9e55fb999fb7f35fc3d8541d0b392e91e2eeae60952be366b821e78f730dde0cd522e1b54d5c670e304678784", 0x60}, {&(0x7f0000002280)="0df0667ed2c30b1b2470e7baa641ae7ac5bf2f9de4a3c641d0f2d7dc64ec038f69129de46a8f2106f61fe26492f9e63e0afe6d01ed9ec564dfcc207d7ecde23849a65c36eb27e5e315be697af83ecc7e2139882aaf2690cc6f4dea6609d8e24b494908e63e88d706a696da1b5d8bf6eebd6294173a73769a4f3327854c3570c8876a7d6795a47649888c94b3541b24e066b0d27c99ce729720a89ea375feb46c1248a0f5bb908e0a9f1e41bf3a0e37ef76ce3877", 0xb4}], 0x4}}], 0x5, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x4}, 0x38) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r13, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) 16.794860667s ago: executing program 0 (id=4613): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x15, 0x9, 0x0, 0x1, [@generic="f8e6d8ffed6c1097d7a2e1b20a0bf42fdf"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x7, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94) 16.728317625s ago: executing program 5 (id=4614): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c005a8008008903"], 0x28}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 16.676299819s ago: executing program 2 (id=4615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a0009409000008002600940900"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 16.589914242s ago: executing program 0 (id=4616): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x43}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 16.444267119s ago: executing program 2 (id=4617): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x323}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xf4fcef1a15e39991) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x401, 0x8000, 0x7ff, 0x7, 0xcdac, 0x6]}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) 16.442810632s ago: executing program 5 (id=4618): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="000000000e00"}) 16.322909672s ago: executing program 0 (id=4619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000380)='vlan0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000a4f6383a08fdffffff0000000000000000e2f8528857f0d3ec25175a013d9f5b50ac65a637b4273f31290665aa380fd5f570e352a4a5b22248f33048459928b4ad3e5ac91f9841f90e8a96139692f027bc7f299e", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d800500080001000000"], 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@gettaction={0xbc, 0x32, 0x73010c28be4bb980, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x72d8bb12}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8e7c}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c}}]}]}, 0xbc}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="0020000035baf90ea0298f866175169d5d501718650a9c90fddae7cf5e88e7412cf5a77659ac869382a218c00906e71d33537d144d9b69541d83351aaff8a007a0fbd86f6ef49253ddd59cf47e1712923cd41e99511a8c3f0a014f62f1d326b7c796859bf2ee3e6d819c486b2fc2496e2eeeb89bf95e7eac74bd49309d1d699e9753bc3353c73b01cbd4784626cedeb135e4e7cec97750b1d96f36fda3d926c799bb8537025a84aacb13d33f", @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf252500000008000200", @ANYRES32=0x0, @ANYBLOB="0c000500000300000000000006000600000000000a0001007770616e31000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044844}, 0x1080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000006380)="d76eae96dfb8713db001484c60f94ab84267fb73", 0x14}], 0x1}}], 0x1, 0x4880) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) 16.29752421s ago: executing program 1 (id=4620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x74bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 16.291002346s ago: executing program 5 (id=4621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 16.216408216s ago: executing program 4 (id=4622): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @multicast}) 16.158131389s ago: executing program 1 (id=4623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20, 0x20000000}], 0x1, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cabd54000065ffdbdf25180000000cf90500de26dd4b9fc6010000000100"], 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 16.122345822s ago: executing program 4 (id=4624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xfff}, &(0x7f0000000100)=0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r4 = accept4$ax25(r3, &(0x7f0000000240)={{0x3, @netrom}, [@null, @remote, @default, @rose, @bcast, @null, @default, @null]}, &(0x7f00000001c0)=0x48, 0x80800) accept4$ax25(r4, 0x0, &(0x7f00000002c0), 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x89f9, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @default, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0xff}, &(0x7f0000000180)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7f) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="81000000", @ANYRES16=r13, @ANYBLOB="000828bd7000fedbdf251f0000000c00060003000000000000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000"], 0x40}, 0x1, 0x0, 0x0, 0x400}, 0x20008804) sendmsg$IEEE802154_LLSEC_ADD_DEV(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4d7e2bbd7000fbdbdf252a0000000c00050000000000000000000a0001007770616e3000000008002f0004000000050037004200000005003600"], 0x44}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00'}) 15.720661722s ago: executing program 2 (id=4625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5bd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x700, 0x7fffffff, 0x9, {{0x3f, 0x4, 0x3, 0x6, 0xfc, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x1c, 0x96, 0x0, 0x6, [0xfffffffa, 0x6, 0x3, 0x2, 0x2, 0x401]}, @lsrr={0x83, 0x2b, 0x55, [@dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @local, @private=0xa010102, @empty, @local]}, @generic={0x89, 0x11, "d89eef3732a526ae9d20b05938e1dc"}, @rr={0x7, 0x13, 0xcd, [@empty, @rand_addr=0x64010101, @multicast1, @multicast1]}, @timestamp={0x44, 0xc, 0xcd, 0x0, 0x7, [0x6, 0xa3]}, @timestamp_prespec={0x44, 0x14, 0x1d, 0x3, 0xa, [{@multicast1, 0x2}, {@empty, 0x10}]}, @lsrr={0x83, 0x13, 0x6f, [@remote, @empty, @empty, @remote]}, @rr={0x7, 0x1b, 0xa5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @loopback, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x2c, 0x5b, 0x1, 0x0, [{@local, 0x7}, {@remote, 0xfffffffb}, {@local, 0x6}, {@empty, 0x2}, {@multicast2, 0xe}]}]}}}}}) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000000) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x4c}}, 0x20004040) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xc, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x38000000}, 0x94) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.258805747s ago: executing program 33 (id=4619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000380)='vlan0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000a4f6383a08fdffffff0000000000000000e2f8528857f0d3ec25175a013d9f5b50ac65a637b4273f31290665aa380fd5f570e352a4a5b22248f33048459928b4ad3e5ac91f9841f90e8a96139692f027bc7f299e", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d800500080001000000"], 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@gettaction={0xbc, 0x32, 0x73010c28be4bb980, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x72d8bb12}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8e7c}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c}}]}]}, 0xbc}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="0020000035baf90ea0298f866175169d5d501718650a9c90fddae7cf5e88e7412cf5a77659ac869382a218c00906e71d33537d144d9b69541d83351aaff8a007a0fbd86f6ef49253ddd59cf47e1712923cd41e99511a8c3f0a014f62f1d326b7c796859bf2ee3e6d819c486b2fc2496e2eeeb89bf95e7eac74bd49309d1d699e9753bc3353c73b01cbd4784626cedeb135e4e7cec97750b1d96f36fda3d926c799bb8537025a84aacb13d33f", @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf252500000008000200", @ANYRES32=0x0, @ANYBLOB="0c000500000300000000000006000600000000000a0001007770616e31000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044844}, 0x1080) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000006380)="d76eae96dfb8713db001484c60f94ab84267fb73", 0x14}], 0x1}}], 0x1, 0x4880) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) 1.213294695s ago: executing program 34 (id=4621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 171.332796ms ago: executing program 35 (id=4623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20, 0x20000000}], 0x1, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cabd54000065ffdbdf25180000000cf90500de26dd4b9fc6010000000100"], 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 80.103ms ago: executing program 36 (id=4625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5bd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x700, 0x7fffffff, 0x9, {{0x3f, 0x4, 0x3, 0x6, 0xfc, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x1c, 0x96, 0x0, 0x6, [0xfffffffa, 0x6, 0x3, 0x2, 0x2, 0x401]}, @lsrr={0x83, 0x2b, 0x55, [@dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast, @local, @private=0xa010102, @empty, @local]}, @generic={0x89, 0x11, "d89eef3732a526ae9d20b05938e1dc"}, @rr={0x7, 0x13, 0xcd, [@empty, @rand_addr=0x64010101, @multicast1, @multicast1]}, @timestamp={0x44, 0xc, 0xcd, 0x0, 0x7, [0x6, 0xa3]}, @timestamp_prespec={0x44, 0x14, 0x1d, 0x3, 0xa, [{@multicast1, 0x2}, {@empty, 0x10}]}, @lsrr={0x83, 0x13, 0x6f, [@remote, @empty, @empty, @remote]}, @rr={0x7, 0x1b, 0xa5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @loopback, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x2c, 0x5b, 0x1, 0x0, [{@local, 0x7}, {@remote, 0xfffffffb}, {@local, 0x6}, {@empty, 0x2}, {@multicast2, 0xe}]}]}}}}}) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000000) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x4c}}, 0x20004040) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xc, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xb, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x38000000}, 0x94) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) 0s ago: executing program 37 (id=4624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xfff}, &(0x7f0000000100)=0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r4 = accept4$ax25(r3, &(0x7f0000000240)={{0x3, @netrom}, [@null, @remote, @default, @rose, @bcast, @null, @default, @null]}, &(0x7f00000001c0)=0x48, 0x80800) accept4$ax25(r4, 0x0, &(0x7f00000002c0), 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x89f9, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @default, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0xff}, &(0x7f0000000180)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7f) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="81000000", @ANYRES16=r13, @ANYBLOB="000828bd7000fedbdf251f0000000c00060003000000000000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000"], 0x40}, 0x1, 0x0, 0x0, 0x400}, 0x20008804) sendmsg$IEEE802154_LLSEC_ADD_DEV(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4d7e2bbd7000fbdbdf252a0000000c00050000000000000000000a0001007770616e3000000008002f0004000000050037004200000005003600"], 0x44}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00'}) kernel console output (not intermixed with test programs): +0x10/0x10 [ 376.797135][T17736] ? __alloc_skb+0x2f1/0x430 [ 376.797165][T17736] ? __pfx___alloc_skb+0x10/0x10 [ 376.797194][T17736] ? netlink_sendmsg+0x642/0xb30 [ 376.797213][T17736] ? skb_put+0x11b/0x210 [ 376.797246][T17736] netlink_sendmsg+0x6b2/0xb30 [ 376.797277][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.797301][T17736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.797324][T17736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.797352][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.797374][T17736] __sock_sendmsg+0x21c/0x270 [ 376.797400][T17736] ____sys_sendmsg+0x505/0x820 [ 376.797447][T17736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.797487][T17736] ? import_iovec+0x74/0xa0 [ 376.797518][T17736] ___sys_sendmsg+0x21f/0x2a0 [ 376.797551][T17736] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.797590][T17736] ? rcu_read_lock_any_held+0xb3/0x120 [ 376.797640][T17736] ? __fget_files+0x2a/0x420 [ 376.797657][T17736] ? __fget_files+0x3a0/0x420 [ 376.797684][T17736] __x64_sys_sendmsg+0x19b/0x260 [ 376.797717][T17736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.797756][T17736] ? __pfx_ksys_write+0x10/0x10 [ 376.797787][T17736] ? do_syscall_64+0xbe/0xf80 [ 376.797817][T17736] do_syscall_64+0xfa/0xf80 [ 376.797844][T17736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.797864][T17736] ? clear_bhb_loop+0x60/0xb0 [ 376.797888][T17736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.797907][T17736] RIP: 0033:0x7f183218f749 [ 376.797926][T17736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.797944][T17736] RSP: 002b:00007f18330a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.797966][T17736] RAX: ffffffffffffffda RBX: 00007f18323e5fa0 RCX: 00007f183218f749 [ 376.797981][T17736] RDX: 00000000000000c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 376.797994][T17736] RBP: 00007f18330a1090 R08: 0000000000000000 R09: 0000000000000000 [ 376.798007][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.798019][T17736] R13: 00007f18323e6038 R14: 00007f18323e5fa0 R15: 00007ffd324e31d8 [ 376.798053][T17736] [ 377.196170][T17744] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 377.339395][T17756] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 377.562011][T17766] xt_SECMARK: invalid mode: 9 [ 377.592219][T17769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3853'. [ 377.622983][T17770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3852'. [ 378.043201][T15237] udevd[15237]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 378.111674][T17795] veth0_to_bond: entered allmulticast mode [ 378.162378][T17803] xt_SECMARK: invalid mode: 9 [ 378.192531][T17800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3863'. [ 378.286709][T17807] veth0: entered promiscuous mode [ 378.292534][T17810] FAULT_INJECTION: forcing a failure. [ 378.292534][T17810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.304658][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3864'. [ 378.317586][T17810] CPU: 1 UID: 0 PID: 17810 Comm: syz.2.3867 Not tainted syzkaller #0 PREEMPT(full) [ 378.317614][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.317627][T17810] Call Trace: [ 378.317636][T17810] [ 378.317648][T17810] dump_stack_lvl+0x189/0x250 [ 378.317676][T17810] ? __pfx____ratelimit+0x10/0x10 [ 378.317702][T17810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.317724][T17810] ? __pfx__printk+0x10/0x10 [ 378.317752][T17810] ? __might_fault+0xb0/0x130 [ 378.317791][T17810] should_fail_ex+0x414/0x560 [ 378.317821][T17810] _copy_from_user+0x2d/0xb0 [ 378.317851][T17810] ___sys_recvmsg+0x12e/0x510 [ 378.317877][T17810] ? __pfx____sys_recvmsg+0x10/0x10 [ 378.317932][T17810] ? __might_fault+0xb0/0x130 [ 378.317961][T17810] do_recvmmsg+0x307/0x770 [ 378.317990][T17810] ? __pfx_do_recvmmsg+0x10/0x10 [ 378.318031][T17810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 378.318078][T17810] __x64_sys_recvmmsg+0x190/0x240 [ 378.318102][T17810] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 378.318126][T17810] ? do_syscall_64+0xbe/0xf80 [ 378.318157][T17810] do_syscall_64+0xfa/0xf80 [ 378.318184][T17810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.318204][T17810] ? clear_bhb_loop+0x60/0xb0 [ 378.318229][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.318248][T17810] RIP: 0033:0x7f183218f749 [ 378.318266][T17810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.318285][T17810] RSP: 002b:00007f18330a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 378.318307][T17810] RAX: ffffffffffffffda RBX: 00007f18323e5fa0 RCX: 00007f183218f749 [ 378.318322][T17810] RDX: 040000000000002e RSI: 0000200000000000 RDI: 0000000000000004 [ 378.318335][T17810] RBP: 00007f18330a1090 R08: 0000000000000000 R09: 0000000000000000 [ 378.318348][T17810] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 378.318360][T17810] R13: 00007f18323e6038 R14: 00007f18323e5fa0 R15: 00007ffd324e31d8 [ 378.318394][T17810] [ 378.550493][T17807] veth0 (unregistering): left promiscuous mode [ 378.561896][T17816] x_tables: duplicate underflow at hook 1 [ 379.039831][T17843] xt_SECMARK: invalid mode: 9 [ 379.143084][T17847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.429443][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 30 seconds [ 379.442384][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 30 seconds [ 379.453444][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 30 seconds [ 379.464529][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 30 seconds [ 379.955956][T17879] __nla_validate_parse: 2 callbacks suppressed [ 379.955977][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3887'. [ 379.984523][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 380.379932][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 380.427659][T17887] xfrm1: entered promiscuous mode [ 380.433474][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 380.442693][T17887] xfrm1: entered allmulticast mode [ 380.786687][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 381.305171][T17917] netlink: 'syz.2.3901': attribute type 10 has an invalid length. [ 381.316055][T17917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3901'. [ 381.416075][T17917] team0: Port device geneve0 added [ 381.433838][T17926] netlink: 'syz.1.3904': attribute type 12 has an invalid length. [ 381.469671][T17927] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3905'. [ 381.763226][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3911'. [ 381.805980][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3911'. [ 381.866493][T17959] FAULT_INJECTION: forcing a failure. [ 381.866493][T17959] name failslab, interval 1, probability 0, space 0, times 0 [ 381.904773][T17959] CPU: 0 UID: 0 PID: 17959 Comm: syz.2.3915 Not tainted syzkaller #0 PREEMPT(full) [ 381.904805][T17959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.904818][T17959] Call Trace: [ 381.904827][T17959] [ 381.904836][T17959] dump_stack_lvl+0x189/0x250 [ 381.904864][T17959] ? __pfx____ratelimit+0x10/0x10 [ 381.904891][T17959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.904914][T17959] ? __pfx__printk+0x10/0x10 [ 381.904949][T17959] ? __pfx___might_resched+0x10/0x10 [ 381.904977][T17959] should_fail_ex+0x414/0x560 [ 381.905006][T17959] should_failslab+0xa8/0x100 [ 381.905039][T17959] __kmalloc_noprof+0xcb/0x800 [ 381.905064][T17959] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 381.905095][T17959] tomoyo_realpath_from_path+0xe3/0x5d0 [ 381.905119][T17959] ? tomoyo_domain+0xd8/0x130 [ 381.905147][T17959] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 381.905177][T17959] tomoyo_path_number_perm+0x1e8/0x5a0 [ 381.905209][T17959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.905258][T17959] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 381.905308][T17959] ? __fget_files+0x2a/0x420 [ 381.905332][T17959] ? __fget_files+0x3a0/0x420 [ 381.905349][T17959] ? __fget_files+0x2a/0x420 [ 381.905373][T17959] security_file_ioctl+0xcb/0x2d0 [ 381.905403][T17959] __se_sys_ioctl+0x47/0x170 [ 381.905432][T17959] do_syscall_64+0xfa/0xf80 [ 381.905460][T17959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.905480][T17959] ? clear_bhb_loop+0x60/0xb0 [ 381.905505][T17959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.905525][T17959] RIP: 0033:0x7f183218f749 [ 381.905543][T17959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.905562][T17959] RSP: 002b:00007f18330a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.905584][T17959] RAX: ffffffffffffffda RBX: 00007f18323e5fa0 RCX: 00007f183218f749 [ 381.905599][T17959] RDX: 0000200000000240 RSI: 00000000400448dd RDI: 0000000000000004 [ 381.905613][T17959] RBP: 00007f18330a1090 R08: 0000000000000000 R09: 0000000000000000 [ 381.905634][T17959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.905646][T17959] R13: 00007f18323e6038 R14: 00007f18323e5fa0 R15: 00007ffd324e31d8 [ 381.905681][T17959] [ 381.905690][T17959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.228279][T17963] openvswitch: netlink: IP tunnel dst address not specified [ 382.252859][T17963] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3916'. [ 382.416912][T17972] netlink: 'syz.0.3920': attribute type 1 has an invalid length. [ 382.454177][T17966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.532344][T17972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.557222][T17973] bond2: (slave veth5): Enslaving as an active interface with a down link [ 382.620179][T17966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.630602][T17951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 382.697903][T17959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 382.763017][T17966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.866910][T17990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 382.875651][T17990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 382.923057][T17986] syzkaller0: entered promiscuous mode [ 382.928761][T17986] syzkaller0: entered allmulticast mode [ 382.951033][T17992] netlink: 'syz.2.3926': attribute type 26 has an invalid length. [ 382.981372][T17966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.135742][T17998] FAULT_INJECTION: forcing a failure. [ 383.135742][T17998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.151045][T17998] CPU: 0 UID: 0 PID: 17998 Comm: syz.2.3929 Not tainted syzkaller #0 PREEMPT(full) [ 383.151074][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.151086][T17998] Call Trace: [ 383.151095][T17998] [ 383.151103][T17998] dump_stack_lvl+0x189/0x250 [ 383.151132][T17998] ? __pfx____ratelimit+0x10/0x10 [ 383.151158][T17998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.151181][T17998] ? __pfx__printk+0x10/0x10 [ 383.151209][T17998] ? __might_fault+0xb0/0x130 [ 383.151246][T17998] should_fail_ex+0x414/0x560 [ 383.151274][T17998] _copy_from_user+0x2d/0xb0 [ 383.151304][T17998] ___sys_recvmsg+0x12e/0x510 [ 383.151331][T17998] ? __pfx____sys_recvmsg+0x10/0x10 [ 383.151383][T17998] ? __might_fault+0xb0/0x130 [ 383.151413][T17998] do_recvmmsg+0x307/0x770 [ 383.151441][T17998] ? __pfx_do_recvmmsg+0x10/0x10 [ 383.151475][T17998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 383.151521][T17998] __x64_sys_recvmmsg+0x190/0x240 [ 383.151545][T17998] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 383.151569][T17998] ? do_syscall_64+0xbe/0xf80 [ 383.151599][T17998] do_syscall_64+0xfa/0xf80 [ 383.151627][T17998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.151646][T17998] ? clear_bhb_loop+0x60/0xb0 [ 383.151671][T17998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.151691][T17998] RIP: 0033:0x7f183218f749 [ 383.151709][T17998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.151727][T17998] RSP: 002b:00007f18330a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 383.151757][T17998] RAX: ffffffffffffffda RBX: 00007f18323e5fa0 RCX: 00007f183218f749 [ 383.151773][T17998] RDX: 040000000000002e RSI: 0000200000000000 RDI: 0000000000000004 [ 383.151786][T17998] RBP: 00007f18330a1090 R08: 0000000000000000 R09: 0000000000000000 [ 383.151799][T17998] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 383.151811][T17998] R13: 00007f18323e6038 R14: 00007f18323e5fa0 R15: 00007ffd324e31d8 [ 383.151845][T17998] [ 383.802296][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.810713][T18006] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 384.943469][ T1337] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.996290][ T1337] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.058945][ T1337] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.114249][ T1337] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.467674][T18053] netlink: 'syz.1.3947': attribute type 2 has an invalid length. [ 385.528431][T18053] __nla_validate_parse: 4 callbacks suppressed [ 385.528455][T18053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3947'. [ 385.628203][T18062] xt_SECMARK: invalid mode: 9 [ 385.711165][T18064] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3951'. [ 385.850302][T18080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3953'. [ 385.869601][T18079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3953'. [ 385.882035][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 385.894193][T18082] FAULT_INJECTION: forcing a failure. [ 385.894193][T18082] name failslab, interval 1, probability 0, space 0, times 0 [ 385.939677][T18082] CPU: 1 UID: 0 PID: 18082 Comm: syz.4.3956 Not tainted syzkaller #0 PREEMPT(full) [ 385.939706][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.939719][T18082] Call Trace: [ 385.939727][T18082] [ 385.939736][T18082] dump_stack_lvl+0x189/0x250 [ 385.939762][T18082] ? __pfx____ratelimit+0x10/0x10 [ 385.939788][T18082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.939809][T18082] ? __pfx__printk+0x10/0x10 [ 385.939851][T18082] should_fail_ex+0x414/0x560 [ 385.939881][T18082] should_failslab+0xa8/0x100 [ 385.939912][T18082] kmem_cache_alloc_noprof+0x74/0x6f0 [ 385.939939][T18082] ? skb_clone+0x212/0x3a0 [ 385.939966][T18082] skb_clone+0x212/0x3a0 [ 385.939991][T18082] __netlink_deliver_tap+0x404/0x850 [ 385.940026][T18082] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.940048][T18082] netlink_deliver_tap+0x19c/0x1b0 [ 385.940070][T18082] __netlink_sendskb+0x47/0x90 [ 385.940101][T18082] netlink_dump+0xa84/0xe90 [ 385.940134][T18082] ? __pfx_netlink_dump+0x10/0x10 [ 385.940184][T18082] netlink_recvmsg+0x676/0xa30 [ 385.940215][T18082] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.940241][T18082] ? __lock_acquire+0x6b6/0x2cf0 [ 385.940273][T18082] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 385.940303][T18082] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.940325][T18082] sock_recvmsg_nosec+0x186/0x1c0 [ 385.940355][T18082] ____sys_recvmsg+0x3aa/0x460 [ 385.940386][T18082] ? __pfx_____sys_recvmsg+0x10/0x10 [ 385.940424][T18082] ? import_iovec+0x74/0xa0 [ 385.940457][T18082] ___sys_recvmsg+0x1b5/0x510 [ 385.940484][T18082] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.940539][T18082] ? __might_fault+0xb0/0x130 [ 385.940569][T18082] do_recvmmsg+0x307/0x770 [ 385.940599][T18082] ? __pfx_do_recvmmsg+0x10/0x10 [ 385.940633][T18082] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.940682][T18082] __x64_sys_recvmmsg+0x190/0x240 [ 385.940707][T18082] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 385.940732][T18082] ? do_syscall_64+0xbe/0xf80 [ 385.940763][T18082] do_syscall_64+0xfa/0xf80 [ 385.940791][T18082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.940811][T18082] ? clear_bhb_loop+0x60/0xb0 [ 385.940836][T18082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.940856][T18082] RIP: 0033:0x7f9e7ef8f749 [ 385.940875][T18082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.940893][T18082] RSP: 002b:00007f9e7ff0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.940914][T18082] RAX: ffffffffffffffda RBX: 00007f9e7f1e5fa0 RCX: 00007f9e7ef8f749 [ 385.940929][T18082] RDX: 040000000000002e RSI: 0000200000000000 RDI: 0000000000000004 [ 385.940943][T18082] RBP: 00007f9e7ff0e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.940956][T18082] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 385.940968][T18082] R13: 00007f9e7f1e6038 R14: 00007f9e7f1e5fa0 R15: 00007ffc1c6fb758 [ 385.941003][T18082] [ 386.418258][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3960'. [ 386.418582][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'. [ 386.443022][T18094] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3960'. [ 386.524910][T18088] veth0_macvtap: left promiscuous mode [ 386.553324][T18104] xt_SECMARK: invalid mode: 9 [ 386.683253][T18101] IPVS: length: 4096 != 24 [ 386.782588][T18117] Bluetooth: MGMT ver 1.23 [ 386.869692][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3968'. [ 386.929572][T18131] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3968'. [ 387.064136][T18133] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001 [ 387.084741][T18135] netlink: 'syz.0.3971': attribute type 1 has an invalid length. [ 387.174757][T18135] bond3: entered promiscuous mode [ 387.185250][T18135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.258836][T18147] Cannot find add_set index 2 as target [ 387.267151][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 387.408863][T18153] xt_SECMARK: invalid mode: 9 [ 387.429198][T18155] FAULT_INJECTION: forcing a failure. [ 387.429198][T18155] name failslab, interval 1, probability 0, space 0, times 0 [ 387.456391][T18155] CPU: 1 UID: 0 PID: 18155 Comm: syz.1.3977 Not tainted syzkaller #0 PREEMPT(full) [ 387.456422][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.456435][T18155] Call Trace: [ 387.456444][T18155] [ 387.456454][T18155] dump_stack_lvl+0x189/0x250 [ 387.456481][T18155] ? __pfx____ratelimit+0x10/0x10 [ 387.456508][T18155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.456530][T18155] ? __pfx__printk+0x10/0x10 [ 387.456565][T18155] ? __pfx___might_resched+0x10/0x10 [ 387.456584][T18155] ? fs_reclaim_acquire+0x7d/0x100 [ 387.456619][T18155] should_fail_ex+0x414/0x560 [ 387.456648][T18155] should_failslab+0xa8/0x100 [ 387.456681][T18155] __kmalloc_noprof+0xcb/0x800 [ 387.456706][T18155] ? tomoyo_encode+0x28b/0x550 [ 387.456734][T18155] tomoyo_encode+0x28b/0x550 [ 387.456761][T18155] tomoyo_realpath_from_path+0x58d/0x5d0 [ 387.456785][T18155] ? tomoyo_domain+0xd8/0x130 [ 387.456814][T18155] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 387.456843][T18155] tomoyo_path_number_perm+0x1e8/0x5a0 [ 387.456875][T18155] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.456923][T18155] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 387.456973][T18155] ? __fget_files+0x2a/0x420 [ 387.456996][T18155] ? __fget_files+0x3a0/0x420 [ 387.457013][T18155] ? __fget_files+0x2a/0x420 [ 387.457036][T18155] security_file_ioctl+0xcb/0x2d0 [ 387.457067][T18155] __se_sys_ioctl+0x47/0x170 [ 387.457095][T18155] do_syscall_64+0xfa/0xf80 [ 387.457123][T18155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.457143][T18155] ? clear_bhb_loop+0x60/0xb0 [ 387.457168][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.457187][T18155] RIP: 0033:0x7ffa8598f749 [ 387.457205][T18155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.457223][T18155] RSP: 002b:00007ffa868c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.457244][T18155] RAX: ffffffffffffffda RBX: 00007ffa85be5fa0 RCX: 00007ffa8598f749 [ 387.457259][T18155] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 387.457272][T18155] RBP: 00007ffa868c7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.457285][T18155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.457297][T18155] R13: 00007ffa85be6038 R14: 00007ffa85be5fa0 R15: 00007ffebe2fc158 [ 387.457345][T18155] [ 387.457365][T18155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.729699][T18157] netlink: 'syz.2.3978': attribute type 11 has an invalid length. [ 387.778711][T18160] SET target dimension over the limit! [ 387.961296][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.967586][T18143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 388.005062][T18177] vlan1: entered allmulticast mode [ 388.030723][T18177] veth0_vlan: entered allmulticast mode [ 388.202229][T18187] gtp0: entered promiscuous mode [ 388.207392][T18187] gtp0: entered allmulticast mode [ 388.226931][T18189] delete_channel: no stack [ 388.265142][T18193] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.316589][T18194] netlink: 'syz.3.3991': attribute type 4 has an invalid length. [ 388.345612][T18196] FAULT_INJECTION: forcing a failure. [ 388.345612][T18196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.368991][T18196] CPU: 0 UID: 0 PID: 18196 Comm: syz.4.3992 Not tainted syzkaller #0 PREEMPT(full) [ 388.369020][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.369033][T18196] Call Trace: [ 388.369041][T18196] [ 388.369049][T18196] dump_stack_lvl+0x189/0x250 [ 388.369076][T18196] ? __pfx____ratelimit+0x10/0x10 [ 388.369102][T18196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.369123][T18196] ? __pfx__printk+0x10/0x10 [ 388.369149][T18196] ? __might_fault+0xb0/0x130 [ 388.369186][T18196] should_fail_ex+0x414/0x560 [ 388.369215][T18196] _copy_from_user+0x2d/0xb0 [ 388.369246][T18196] wext_handle_ioctl+0xba/0x1c0 [ 388.369287][T18196] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 388.369331][T18196] sock_ioctl+0x15f/0x790 [ 388.369357][T18196] ? __pfx_sock_ioctl+0x10/0x10 [ 388.369383][T18196] ? __fget_files+0x3a0/0x420 [ 388.369401][T18196] ? __fget_files+0x2a/0x420 [ 388.369423][T18196] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.369443][T18196] ? __pfx_sock_ioctl+0x10/0x10 [ 388.369464][T18196] __se_sys_ioctl+0xfc/0x170 [ 388.369492][T18196] do_syscall_64+0xfa/0xf80 [ 388.369520][T18196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.369540][T18196] ? clear_bhb_loop+0x60/0xb0 [ 388.369566][T18196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.369585][T18196] RIP: 0033:0x7f9e7ef8f749 [ 388.369604][T18196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.369623][T18196] RSP: 002b:00007f9e7ff0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.369645][T18196] RAX: ffffffffffffffda RBX: 00007f9e7f1e5fa0 RCX: 00007f9e7ef8f749 [ 388.369660][T18196] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 388.369674][T18196] RBP: 00007f9e7ff0e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.369687][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.369699][T18196] R13: 00007f9e7f1e6038 R14: 00007f9e7f1e5fa0 R15: 00007ffc1c6fb758 [ 388.369734][T18196] [ 388.435505][T18203] netlink: 'syz.2.3994': attribute type 21 has an invalid length. [ 389.048357][T18237] netlink: 'syz.3.4006': attribute type 4 has an invalid length. [ 389.124620][T18244] ipvlan2: entered promiscuous mode [ 389.206453][T18249] FAULT_INJECTION: forcing a failure. [ 389.206453][T18249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.248162][T18249] CPU: 1 UID: 0 PID: 18249 Comm: syz.3.4010 Not tainted syzkaller #0 PREEMPT(full) [ 389.248192][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.248205][T18249] Call Trace: [ 389.248213][T18249] [ 389.248222][T18249] dump_stack_lvl+0x189/0x250 [ 389.248250][T18249] ? __pfx____ratelimit+0x10/0x10 [ 389.248276][T18249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.248299][T18249] ? __pfx__printk+0x10/0x10 [ 389.248341][T18249] should_fail_ex+0x414/0x560 [ 389.248370][T18249] _copy_to_user+0x31/0xb0 [ 389.248397][T18249] simple_read_from_buffer+0xe1/0x170 [ 389.248426][T18249] proc_fail_nth_read+0x1b3/0x220 [ 389.248456][T18249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.248487][T18249] ? rw_verify_area+0x2a6/0x4d0 [ 389.248510][T18249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.248539][T18249] vfs_read+0x200/0xa30 [ 389.248562][T18249] ? fdget_pos+0x247/0x320 [ 389.248586][T18249] ? __pfx___mutex_lock+0x10/0x10 [ 389.248613][T18249] ? __pfx_vfs_read+0x10/0x10 [ 389.248640][T18249] ? __fget_files+0x2a/0x420 [ 389.248661][T18249] ? __fget_files+0x3a0/0x420 [ 389.248678][T18249] ? __fget_files+0x2a/0x420 [ 389.248706][T18249] ksys_read+0x145/0x250 [ 389.248730][T18249] ? __fget_files+0x2a/0x420 [ 389.248748][T18249] ? __pfx_ksys_read+0x10/0x10 [ 389.248776][T18249] ? do_syscall_64+0xbe/0xf80 [ 389.248807][T18249] do_syscall_64+0xfa/0xf80 [ 389.248834][T18249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.248855][T18249] ? clear_bhb_loop+0x60/0xb0 [ 389.248879][T18249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.248899][T18249] RIP: 0033:0x7fe64e38e15c [ 389.248916][T18249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 389.248941][T18249] RSP: 002b:00007fe64f1f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.248964][T18249] RAX: ffffffffffffffda RBX: 00007fe64e5e5fa0 RCX: 00007fe64e38e15c [ 389.248979][T18249] RDX: 000000000000000f RSI: 00007fe64f1f20a0 RDI: 0000000000000005 [ 389.248992][T18249] RBP: 00007fe64f1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 389.249006][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.249018][T18249] R13: 00007fe64e5e6038 R14: 00007fe64e5e5fa0 R15: 00007ffd87669398 [ 389.249054][T18249] [ 389.694994][T18266] sctp: [Deprecated]: syz.1.4015 (pid 18266) Use of int in max_burst socket option deprecated. [ 389.694994][T18266] Use struct sctp_assoc_value instead [ 389.711348][T18223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.032964][ T5841] block nbd1: Receive control failed (result -32) [ 390.050479][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.425933][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.433816][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.592998][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.607873][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.711777][T18289] bond1: left promiscuous mode [ 390.716620][T18289] bond1: left allmulticast mode [ 390.751099][T18289] gtp0: left promiscuous mode [ 390.755888][T18289] gtp0: left allmulticast mode [ 390.768204][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.782421][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.792403][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.202975][T18313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.211724][T18345] Unsupported ieee802154 address type: 0 [ 391.212697][T18341] __nla_validate_parse: 9 callbacks suppressed [ 391.212750][T18341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4039'. [ 391.293858][T18348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4039'. [ 391.344408][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4042'. [ 391.637597][T18370] FAULT_INJECTION: forcing a failure. [ 391.637597][T18370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.658642][T18370] CPU: 0 UID: 0 PID: 18370 Comm: syz.2.4049 Not tainted syzkaller #0 PREEMPT(full) [ 391.658672][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.658694][T18370] Call Trace: [ 391.658702][T18370] [ 391.658710][T18370] dump_stack_lvl+0x189/0x250 [ 391.658738][T18370] ? __pfx____ratelimit+0x10/0x10 [ 391.658764][T18370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.658786][T18370] ? __pfx__printk+0x10/0x10 [ 391.658814][T18370] ? __might_fault+0xb0/0x130 [ 391.658851][T18370] should_fail_ex+0x414/0x560 [ 391.658879][T18370] _copy_from_iter+0x1cd/0x1630 [ 391.658910][T18370] ? __build_skb_around+0x22d/0x3c0 [ 391.658944][T18370] ? __pfx__copy_from_iter+0x10/0x10 [ 391.658967][T18370] ? __alloc_skb+0x2f1/0x430 [ 391.658997][T18370] ? __pfx___alloc_skb+0x10/0x10 [ 391.659028][T18370] ? netlink_sendmsg+0x642/0xb30 [ 391.659047][T18370] ? skb_put+0x11b/0x210 [ 391.659080][T18370] netlink_sendmsg+0x6b2/0xb30 [ 391.659112][T18370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.659136][T18370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.659159][T18370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.659186][T18370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.659209][T18370] __sock_sendmsg+0x21c/0x270 [ 391.659237][T18370] ____sys_sendmsg+0x505/0x820 [ 391.659279][T18370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.659317][T18370] ? import_iovec+0x74/0xa0 [ 391.659349][T18370] ___sys_sendmsg+0x21f/0x2a0 [ 391.659382][T18370] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.659421][T18370] ? rcu_read_lock_any_held+0xb3/0x120 [ 391.659473][T18370] ? __fget_files+0x2a/0x420 [ 391.659491][T18370] ? __fget_files+0x3a0/0x420 [ 391.659519][T18370] __x64_sys_sendmsg+0x19b/0x260 [ 391.659553][T18370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.659594][T18370] ? __pfx_ksys_write+0x10/0x10 [ 391.659624][T18370] ? do_syscall_64+0xbe/0xf80 [ 391.659655][T18370] do_syscall_64+0xfa/0xf80 [ 391.659691][T18370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.659711][T18370] ? clear_bhb_loop+0x60/0xb0 [ 391.659736][T18370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.659755][T18370] RIP: 0033:0x7f183218f749 [ 391.659774][T18370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.659791][T18370] RSP: 002b:00007f18330a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.659813][T18370] RAX: ffffffffffffffda RBX: 00007f18323e5fa0 RCX: 00007f183218f749 [ 391.659828][T18370] RDX: 0000000020040000 RSI: 0000200000000940 RDI: 0000000000000004 [ 391.659841][T18370] RBP: 00007f18330a1090 R08: 0000000000000000 R09: 0000000000000000 [ 391.659854][T18370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.659866][T18370] R13: 00007f18323e6038 R14: 00007f18323e5fa0 R15: 00007ffd324e31d8 [ 391.659899][T18370] [ 391.991382][T18378] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4051'. [ 392.020829][T18378] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 392.102946][T18385] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 392.120648][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.173716][T18393] netlink: 'syz.3.4055': attribute type 10 has an invalid length. [ 392.218736][T18397] netlink: 'syz.1.4053': attribute type 8 has an invalid length. [ 392.419017][T18399] syzkaller1: entered promiscuous mode [ 392.425399][T18399] syzkaller1: entered allmulticast mode [ 392.485423][T18406] syz_tun: entered allmulticast mode [ 392.493869][T18409] netlink: 'syz.1.4062': attribute type 6 has an invalid length. [ 392.510658][T18405] syz_tun: left allmulticast mode [ 392.639002][T18415] FAULT_INJECTION: forcing a failure. [ 392.639002][T18415] name failslab, interval 1, probability 0, space 0, times 0 [ 392.658602][T18413] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 392.675577][T18415] CPU: 0 UID: 0 PID: 18415 Comm: syz.1.4064 Not tainted syzkaller #0 PREEMPT(full) [ 392.675606][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.675619][T18415] Call Trace: [ 392.675627][T18415] [ 392.675635][T18415] dump_stack_lvl+0x189/0x250 [ 392.675665][T18415] ? __pfx____ratelimit+0x10/0x10 [ 392.675690][T18415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.675713][T18415] ? __pfx__printk+0x10/0x10 [ 392.675746][T18415] ? __pfx___might_resched+0x10/0x10 [ 392.675766][T18415] ? fs_reclaim_acquire+0x7d/0x100 [ 392.675799][T18415] should_fail_ex+0x414/0x560 [ 392.675827][T18415] should_failslab+0xa8/0x100 [ 392.675859][T18415] __kmalloc_noprof+0xcb/0x800 [ 392.675893][T18415] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 392.675921][T18415] ? rcu_is_watching+0x15/0xb0 [ 392.675950][T18415] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 392.675985][T18415] genl_family_rcv_msg_doit+0xb8/0x300 [ 392.676019][T18415] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 392.676054][T18415] ? apparmor_capable+0x137/0x1a0 [ 392.676082][T18415] ? bpf_lsm_capable+0x9/0x20 [ 392.676101][T18415] ? security_capable+0x7e/0x2e0 [ 392.676138][T18415] genl_rcv_msg+0x60e/0x790 [ 392.676176][T18415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.676201][T18415] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 392.676225][T18415] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 392.676251][T18415] ? __pfx_nl802154_post_doit+0x10/0x10 [ 392.676291][T18415] netlink_rcv_skb+0x208/0x470 [ 392.676313][T18415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.676341][T18415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.676382][T18415] ? down_read+0x274/0x2e0 [ 392.676409][T18415] ? genl_rcv+0xd/0x40 [ 392.676436][T18415] genl_rcv+0x28/0x40 [ 392.676460][T18415] netlink_unicast+0x82f/0x9e0 [ 392.676502][T18415] ? __pfx_netlink_unicast+0x10/0x10 [ 392.676535][T18415] ? netlink_sendmsg+0x642/0xb30 [ 392.676554][T18415] ? skb_put+0x11b/0x210 [ 392.676589][T18415] netlink_sendmsg+0x805/0xb30 [ 392.676621][T18415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.676646][T18415] ? aa_sock_msg_perm+0xf1/0x1b0 [ 392.676667][T18415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.676695][T18415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.676716][T18415] __sock_sendmsg+0x21c/0x270 [ 392.676745][T18415] ____sys_sendmsg+0x505/0x820 [ 392.676783][T18415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.676826][T18415] ? import_iovec+0x74/0xa0 [ 392.676861][T18415] ___sys_sendmsg+0x21f/0x2a0 [ 392.676904][T18415] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.676944][T18415] ? rcu_read_lock_any_held+0xb3/0x120 [ 392.677000][T18415] ? __fget_files+0x2a/0x420 [ 392.677019][T18415] ? __fget_files+0x3a0/0x420 [ 392.677050][T18415] __x64_sys_sendmsg+0x19b/0x260 [ 392.677086][T18415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.677129][T18415] ? __pfx_ksys_write+0x10/0x10 [ 392.677160][T18415] ? do_syscall_64+0xbe/0xf80 [ 392.677193][T18415] do_syscall_64+0xfa/0xf80 [ 392.677221][T18415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.677242][T18415] ? clear_bhb_loop+0x60/0xb0 [ 392.677268][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.677288][T18415] RIP: 0033:0x7ffa8598f749 [ 392.677306][T18415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.677324][T18415] RSP: 002b:00007ffa868c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.677346][T18415] RAX: ffffffffffffffda RBX: 00007ffa85be5fa0 RCX: 00007ffa8598f749 [ 392.677362][T18415] RDX: 0000000020040000 RSI: 0000200000000940 RDI: 0000000000000004 [ 392.677376][T18415] RBP: 00007ffa868c7090 R08: 0000000000000000 R09: 0000000000000000 [ 392.677390][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.677403][T18415] R13: 00007ffa85be6038 R14: 00007ffa85be5fa0 R15: 00007ffebe2fc158 [ 392.677439][T18415] [ 393.055377][T18419] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 393.063737][T18419] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4066'. [ 393.188522][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4068'. [ 393.344884][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 393.373565][T18437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4071'. [ 393.465456][T18444] vlan0: entered promiscuous mode [ 393.471110][T18444] vlan0: entered allmulticast mode [ 393.476611][T18444] veth0_vlan: entered allmulticast mode [ 393.541401][T18437] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 393.726840][T18457] FAULT_INJECTION: forcing a failure. [ 393.726840][T18457] name failslab, interval 1, probability 0, space 0, times 0 [ 393.743644][T18457] CPU: 0 UID: 0 PID: 18457 Comm: syz.1.4079 Not tainted syzkaller #0 PREEMPT(full) [ 393.743672][T18457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.743685][T18457] Call Trace: [ 393.743694][T18457] [ 393.743704][T18457] dump_stack_lvl+0x189/0x250 [ 393.743733][T18457] ? __pfx____ratelimit+0x10/0x10 [ 393.743760][T18457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.743783][T18457] ? __pfx__printk+0x10/0x10 [ 393.743815][T18457] ? __pfx___might_resched+0x10/0x10 [ 393.743839][T18457] ? fs_reclaim_acquire+0x7d/0x100 [ 393.743874][T18457] should_fail_ex+0x414/0x560 [ 393.743904][T18457] should_failslab+0xa8/0x100 [ 393.743936][T18457] kmem_cache_alloc_node_noprof+0x77/0x710 [ 393.743963][T18457] ? __alloc_skb+0x255/0x430 [ 393.743992][T18457] ? napi_skb_cache_get+0x4a5/0x780 [ 393.744019][T18457] ? napi_skb_cache_get+0x151/0x780 [ 393.744051][T18457] __alloc_skb+0x255/0x430 [ 393.744082][T18457] ? __pfx___alloc_skb+0x10/0x10 [ 393.744119][T18457] ? netlink_ack_tlv_len+0x6c/0x210 [ 393.744144][T18457] netlink_ack+0x146/0xa50 [ 393.744160][T18457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.744185][T18457] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 393.744210][T18457] ? __pfx_nl802154_post_doit+0x10/0x10 [ 393.744250][T18457] netlink_rcv_skb+0x28c/0x470 [ 393.744272][T18457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.744301][T18457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.744343][T18457] ? down_read+0x274/0x2e0 [ 393.744371][T18457] ? genl_rcv+0xd/0x40 [ 393.744398][T18457] genl_rcv+0x28/0x40 [ 393.744423][T18457] netlink_unicast+0x82f/0x9e0 [ 393.744464][T18457] ? __pfx_netlink_unicast+0x10/0x10 [ 393.744507][T18457] ? netlink_sendmsg+0x642/0xb30 [ 393.744526][T18457] ? skb_put+0x11b/0x210 [ 393.744559][T18457] netlink_sendmsg+0x805/0xb30 [ 393.744592][T18457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.744618][T18457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.744646][T18457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.744675][T18457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.744698][T18457] __sock_sendmsg+0x21c/0x270 [ 393.744727][T18457] ____sys_sendmsg+0x505/0x820 [ 393.744766][T18457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.744809][T18457] ? import_iovec+0x74/0xa0 [ 393.744843][T18457] ___sys_sendmsg+0x21f/0x2a0 [ 393.744878][T18457] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.744919][T18457] ? rcu_read_lock_any_held+0xb3/0x120 [ 393.744977][T18457] ? __fget_files+0x2a/0x420 [ 393.744995][T18457] ? __fget_files+0x3a0/0x420 [ 393.745027][T18457] __x64_sys_sendmsg+0x19b/0x260 [ 393.745064][T18457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.745107][T18457] ? __pfx_ksys_write+0x10/0x10 [ 393.745139][T18457] ? do_syscall_64+0xbe/0xf80 [ 393.745170][T18457] do_syscall_64+0xfa/0xf80 [ 393.745199][T18457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.745220][T18457] ? clear_bhb_loop+0x60/0xb0 [ 393.745246][T18457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.745266][T18457] RIP: 0033:0x7ffa8598f749 [ 393.745286][T18457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.745304][T18457] RSP: 002b:00007ffa868c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.745328][T18457] RAX: ffffffffffffffda RBX: 00007ffa85be5fa0 RCX: 00007ffa8598f749 [ 393.745344][T18457] RDX: 0000000020040000 RSI: 0000200000000940 RDI: 0000000000000004 [ 393.745358][T18457] RBP: 00007ffa868c7090 R08: 0000000000000000 R09: 0000000000000000 [ 393.745372][T18457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.745385][T18457] R13: 00007ffa85be6038 R14: 00007ffa85be5fa0 R15: 00007ffebe2fc158 [ 393.745421][T18457] [ 394.124714][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'. [ 394.134602][T18462] netlink: 'syz.4.4080': attribute type 33 has an invalid length. [ 394.142600][T18462] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4080'. [ 394.255869][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.741020][T18497] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 394.763441][T18499] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 394.778951][T18497] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 394.787894][T18497] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 394.798488][T18497] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 395.176273][T18520] xt_hashlimit: max too large, truncated to 1048576 [ 395.627941][T18544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.084110][T18573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.312166][T18587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 396.456612][T18589] veth5: entered allmulticast mode [ 396.465256][T18595] : renamed from hsr0 [ 396.679084][T18606] __nla_validate_parse: 8 callbacks suppressed [ 396.679105][T18606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4130'. [ 396.710118][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4130'. [ 396.719247][T18606] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4130'. [ 396.733598][T18606] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4130'. [ 396.746139][T18608] gre2: entered promiscuous mode [ 396.754544][T18608] gre2: entered allmulticast mode [ 396.785420][T18604] syzkaller0: entered promiscuous mode [ 396.795812][T18604] syzkaller0: entered allmulticast mode [ 396.796219][T18611] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4131'. [ 396.847028][T18611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4131'. [ 397.038454][T18619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4133'. [ 397.058466][T18621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4134'. [ 397.088342][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4135'. [ 397.252334][T18636] syz_tun: entered allmulticast mode [ 397.272889][T18635] syz_tun: left allmulticast mode [ 397.490613][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4143'. [ 397.514844][T18634] team0 (unregistering): Port device C removed [ 397.528944][T18634] team0 (unregistering): Port device team_slave_1 removed [ 397.538706][T18653] validate_nla: 3 callbacks suppressed [ 397.538725][T18653] netlink: 'syz.0.4142': attribute type 8 has an invalid length. [ 397.589135][T18645] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 397.626448][T18645] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 397.901758][T18671] netlink: 'syz.3.4146': attribute type 11 has an invalid length. [ 398.052942][T18682] xt_hashlimit: max too large, truncated to 1048576 [ 398.168896][T18685] netlink: 'syz.3.4150': attribute type 13 has an invalid length. [ 398.198586][T18689] netlink: zone id is out of range [ 398.219885][T18689] netlink: zone id is out of range [ 398.242292][T18689] netlink: zone id is out of range [ 398.249174][T18689] netlink: zone id is out of range [ 398.267896][T18700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.280711][T18689] netlink: zone id is out of range [ 398.407488][T18700] lo: entered promiscuous mode [ 398.417682][T18701] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.428645][T18701] syzkaller0: entered promiscuous mode [ 398.436524][T18701] syzkaller0: entered allmulticast mode [ 398.473463][T18685] tipc: Started in network mode [ 398.478577][T18685] tipc: Node identity 5252c402bec9, cluster identity 4711 [ 398.487263][T18685] tipc: Enabled bearer , priority 0 [ 398.520960][T18704] tipc: Resetting bearer [ 398.662433][T18704] tipc: Disabling bearer [ 398.699154][T18717] netlink: 'syz.1.4160': attribute type 6 has an invalid length. [ 398.719553][T18717] netlink: 'syz.1.4160': attribute type 10 has an invalid length. [ 398.745174][T18717] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.780413][T18717] bridge_slave_1: left allmulticast mode [ 398.793157][T18717] bridge_slave_1: left promiscuous mode [ 398.801532][T18717] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.816395][T18717] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 399.038908][T18740] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 399.603003][T18774] syzkaller1: entered promiscuous mode [ 399.618245][T18774] syzkaller1: entered allmulticast mode [ 400.168074][T18791] veth3: entered allmulticast mode [ 400.182591][T18799] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 400.216087][T18799] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 400.305106][T18795] lo speed is unknown, defaulting to 1000 [ 400.311770][T18795] lo speed is unknown, defaulting to 1000 [ 400.320719][T18795] lo speed is unknown, defaulting to 1000 [ 400.398539][T18795] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 400.436511][T18807] !: renamed from dummy0 (while UP) [ 400.496966][T18795] lo speed is unknown, defaulting to 1000 [ 400.506317][T18795] lo speed is unknown, defaulting to 1000 [ 400.514306][T18795] lo speed is unknown, defaulting to 1000 [ 400.540096][T18816] netlink: 'syz.1.4195': attribute type 10 has an invalid length. [ 400.550897][T18795] lo speed is unknown, defaulting to 1000 [ 400.559793][T18795] lo speed is unknown, defaulting to 1000 [ 400.580966][T18795] lo speed is unknown, defaulting to 1000 [ 400.957903][T18850] net_ratelimit: 4 callbacks suppressed [ 400.957926][T18850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 400.970036][T18850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 401.111109][T18856] netlink: 'syz.2.4211': attribute type 33 has an invalid length. [ 401.205230][T18856] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 401.224882][T18856] bond2 (unregistering): Released all slaves [ 401.533893][T18890] netlink: ct family unspecified [ 401.539072][T18890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.665011][T18893] bond0: (slave bridge_slave_1): Releasing backup interface [ 401.968952][T18912] sctp: [Deprecated]: syz.1.4227 (pid 18912) Use of int in max_burst socket option. [ 401.968952][T18912] Use struct sctp_assoc_value instead [ 402.143236][T18919] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 402.164299][T18919] macvtap1: left promiscuous mode [ 402.171237][T18919] vlan0: left promiscuous mode [ 402.178191][T18919] ipvlan2: left promiscuous mode [ 402.426166][T18938] netlink: 'syz.4.4234': attribute type 12 has an invalid length. [ 402.459039][T18938] netlink: 'syz.4.4234': attribute type 29 has an invalid length. [ 402.560683][T18938] __nla_validate_parse: 14 callbacks suppressed [ 402.560704][T18938] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4234'. [ 402.591574][T18938] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4234'. [ 402.679360][T18936] netlink: 'syz.4.4234': attribute type 12 has an invalid length. [ 402.687272][T18936] netlink: 'syz.4.4234': attribute type 29 has an invalid length. [ 402.735973][T18936] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4234'. [ 402.762420][T18936] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4234'. [ 402.781583][T18953] netlink: 'syz.0.4237': attribute type 1 has an invalid length. [ 402.811791][T18953] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4237'. [ 402.971866][T18965] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 403.003769][T18966] vlan0: entered promiscuous mode [ 403.032387][T18966] vlan0: entered allmulticast mode [ 403.037654][T18966] veth0_vlan: entered allmulticast mode [ 403.082720][T18973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4241'. [ 403.145472][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4244'. [ 403.252600][T18984] netlink: 'syz.4.4246': attribute type 12 has an invalid length. [ 403.384583][T18987] netlink: 'syz.4.4246': attribute type 12 has an invalid length. [ 403.413202][T18986] netlink: 'syz.3.4245': attribute type 1 has an invalid length. [ 403.491130][T18986] bond2: entered promiscuous mode [ 403.496823][T18986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.528097][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 403.537814][T18997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4248'. [ 403.722504][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'. [ 403.743091][T19006] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 403.759162][T19006] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 404.140954][T19029] rdma_op ffff888053aa69f0 conn xmit_rdma 0000000000000000 [ 404.374800][T19039] lo speed is unknown, defaulting to 1000 [ 404.704736][T19036] lo: entered allmulticast mode [ 404.713662][ T5836] lo speed is unknown, defaulting to 1000 [ 404.720647][ T5836] syz2: Port: 1 Link ACTIVE [ 404.941800][T19056] syzkaller0: entered promiscuous mode [ 404.947482][T19056] syzkaller0: entered allmulticast mode [ 405.105150][T19066] netlink: 'syz.1.4271': attribute type 1 has an invalid length. [ 405.412602][T19084] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 405.520762][T19088] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 405.994046][T19111] !: renamed from dummy0 (while UP) [ 406.097449][T19121] pim6reg527: entered allmulticast mode [ 406.142574][T19111] netlink: 'syz.1.4289': attribute type 27 has an invalid length. [ 406.366691][T19142] netlink: 'syz.1.4300': attribute type 25 has an invalid length. [ 406.857988][T19173] netlink: 'syz.1.4310': attribute type 1 has an invalid length. [ 407.328850][T19205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.398926][T19209] bond4: option arp_missed_max: invalid value (0) [ 407.406414][T19209] bond4: option arp_missed_max: allowed values 1 - 255 [ 407.444934][T19209] bond4 (unregistering): Released all slaves [ 407.587076][T19222] __nla_validate_parse: 15 callbacks suppressed [ 407.587091][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4324'. [ 407.684158][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4325'. [ 407.852008][T19240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4328'. [ 408.275666][T19258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4337'. [ 408.454425][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4341'. [ 408.504500][T19274] Cannot find del_set index 4 as target [ 408.572648][T19278] xt_SECMARK: invalid mode: 9 [ 408.608012][T19280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.804540][T19294] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 408.986984][T19301] validate_nla: 1 callbacks suppressed [ 408.987007][T19301] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 409.033583][T19301] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4353'. [ 409.131836][T19309] netlink: 'syz.2.4354': attribute type 1 has an invalid length. [ 409.162836][T19309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4354'. [ 409.186412][T19309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4354'. [ 409.228491][T19313] xt_hashlimit: invalid rate [ 409.229604][T19314] xt_hashlimit: invalid rate [ 409.262168][T19316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4358'. [ 409.277351][T19316] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4358'. [ 409.287827][T19316] netlink: 'syz.4.4358': attribute type 6 has an invalid length. [ 409.497000][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 60 seconds [ 409.512370][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 60 seconds [ 409.523794][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 60 seconds [ 409.536860][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 60 seconds [ 409.625810][T19337] team0: entered allmulticast mode [ 409.631609][T19337] team_slave_0: entered allmulticast mode [ 409.637391][T19337] team_slave_1: entered allmulticast mode [ 409.936291][T19343] infiniband !yz!: set down [ 409.941444][T19343] infiniband !yz!: added team_slave_0 [ 409.986634][T19343] RDS/IB: !yz!: added [ 409.993570][T19343] smc: adding ib device !yz! with port count 1 [ 410.002112][T19343] smc: ib device !yz! port 1 has no pnetid [ 410.110382][T19351] bond0: (slave caif0): Error: Device type is different from other slaves [ 410.293875][T19353] xt_SECMARK: invalid mode: 9 [ 410.444753][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 410.453588][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.472115][T19274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.774509][T19364] net veth1_virt_wifi : renamed from virt_wifi0 [ 410.837117][T19369] lo speed is unknown, defaulting to 1000 [ 411.084139][T19383] xt_SECMARK: invalid mode: 9 [ 411.399110][T19401] netlink: 'syz.3.4386': attribute type 21 has an invalid length. [ 411.600806][T19404] x_tables: duplicate underflow at hook 1 [ 412.097525][T19423] xt_SECMARK: invalid mode: 9 [ 412.388051][T19434] nbd: device at index 2 is going down [ 412.579073][ T5836] IPVS: starting estimator thread 0... [ 412.680142][T19450] IPVS: using max 28 ests per chain, 67200 per kthread [ 412.696906][T19452] netlink: 'syz.3.4401': attribute type 21 has an invalid length. [ 412.696906][T19453] netlink: 'syz.3.4401': attribute type 21 has an invalid length. [ 413.060329][T19462] xt_SECMARK: invalid mode: 9 [ 413.525966][T19485] xt_SECMARK: invalid mode: 9 [ 413.535896][T19478] __nla_validate_parse: 8 callbacks suppressed [ 413.535917][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 413.630686][T19478] netlink: 'syz.1.4413': attribute type 1 has an invalid length. [ 413.638497][T19478] netlink: 'syz.1.4413': attribute type 2 has an invalid length. [ 413.748946][T19497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4418'. [ 413.836997][T19498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4418'. [ 413.870163][T19500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4418'. [ 414.237287][T19518] netlink: 'syz.4.4424': attribute type 10 has an invalid length. [ 414.290279][T19524] tipc: Enabled bearer , priority 0 [ 414.417537][T19524] syzkaller0: entered promiscuous mode [ 414.424882][T19528] xt_SECMARK: invalid mode: 9 [ 414.433454][T19524] syzkaller0: entered allmulticast mode [ 414.452715][T19524] tipc: Resetting bearer [ 414.491203][T19531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 414.598819][ T2910] tipc: Resetting bearer [ 414.612507][T19523] tipc: Resetting bearer [ 414.685174][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.695169][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.718751][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.735178][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.758588][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.984108][T19523] tipc: Disabling bearer [ 416.002465][ T5910] tipc: Node number set to 251888049 [ 416.078005][T19541] lo speed is unknown, defaulting to 1000 [ 416.173699][T19546] netlink: 'syz.2.4431': attribute type 33 has an invalid length. [ 416.186102][T19546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4431'. [ 416.258748][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4431'. [ 416.401431][T19562] netlink: 'syz.4.4436': attribute type 10 has an invalid length. [ 416.839564][ T52] Bluetooth: hci1: command tx timeout [ 416.953350][T19589] FAULT_INJECTION: forcing a failure. [ 416.953350][T19589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.015544][T19589] CPU: 0 UID: 0 PID: 19589 Comm: syz.1.4443 Not tainted syzkaller #0 PREEMPT(full) [ 417.015591][T19589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.015605][T19589] Call Trace: [ 417.015615][T19589] [ 417.015625][T19589] dump_stack_lvl+0x189/0x250 [ 417.015652][T19589] ? __pfx____ratelimit+0x10/0x10 [ 417.015684][T19589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.015713][T19589] ? __pfx__printk+0x10/0x10 [ 417.015749][T19589] ? __might_fault+0xb0/0x130 [ 417.015786][T19589] should_fail_ex+0x414/0x560 [ 417.015816][T19589] _copy_to_iter+0x404/0x1790 [ 417.015847][T19589] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 417.015881][T19589] ? __pfx__copy_to_iter+0x10/0x10 [ 417.015905][T19589] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 417.015932][T19589] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 417.015959][T19589] __skb_datagram_iter+0xf8/0x990 [ 417.015982][T19589] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 417.016013][T19589] skb_copy_datagram_iter+0xb5/0x210 [ 417.016039][T19589] netlink_recvmsg+0x2ab/0xa30 [ 417.016071][T19589] ? __pfx_netlink_recvmsg+0x10/0x10 [ 417.016097][T19589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.016120][T19589] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 417.016147][T19589] ? security_socket_recvmsg+0x7e/0x2e0 [ 417.016177][T19589] ? __pfx_netlink_recvmsg+0x10/0x10 [ 417.016198][T19589] sock_recvmsg+0x22c/0x270 [ 417.016228][T19589] ____sys_recvmsg+0x1c9/0x460 [ 417.016258][T19589] ? __pfx_____sys_recvmsg+0x10/0x10 [ 417.016299][T19589] ? import_iovec+0x74/0xa0 [ 417.016332][T19589] ___sys_recvmsg+0x1b5/0x510 [ 417.016358][T19589] ? __pfx____sys_recvmsg+0x10/0x10 [ 417.016404][T19589] ? __fget_files+0x3a0/0x420 [ 417.016441][T19589] do_recvmmsg+0x307/0x770 [ 417.016471][T19589] ? __pfx_do_recvmmsg+0x10/0x10 [ 417.016505][T19589] ? _copy_from_user+0x94/0xb0 [ 417.016550][T19589] __x64_sys_recvmmsg+0x1af/0x240 [ 417.016575][T19589] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 417.016600][T19589] ? do_syscall_64+0xbe/0xf80 [ 417.016631][T19589] do_syscall_64+0xfa/0xf80 [ 417.016659][T19589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.016681][T19589] ? clear_bhb_loop+0x60/0xb0 [ 417.016706][T19589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.016727][T19589] RIP: 0033:0x7ffa8598f749 [ 417.016746][T19589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.016765][T19589] RSP: 002b:00007ffa868c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 417.016787][T19589] RAX: ffffffffffffffda RBX: 00007ffa85be5fa0 RCX: 00007ffa8598f749 [ 417.016803][T19589] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 417.016818][T19589] RBP: 00007ffa868c7090 R08: 0000200000003700 R09: 0000000000000000 [ 417.016833][T19589] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 417.016846][T19589] R13: 00007ffa85be6038 R14: 00007ffa85be5fa0 R15: 00007ffebe2fc158 [ 417.016882][T19589] [ 417.422490][T19541] chnl_net:caif_netlink_parms(): no params data found [ 417.574675][T19603] xt_SECMARK: invalid mode: 9 [ 417.694879][T19541] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.713007][T19541] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.721660][T19541] bridge_slave_0: entered allmulticast mode [ 417.730694][T19541] bridge_slave_0: entered promiscuous mode [ 417.744892][T19541] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.753700][T19541] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.763373][T19541] bridge_slave_1: entered allmulticast mode [ 417.765753][T19615] netlink: 'syz.0.4453': attribute type 39 has an invalid length. [ 417.774302][T19541] bridge_slave_1: entered promiscuous mode [ 417.784701][T19617] openvswitch: netlink: IP tunnel dst address not specified [ 417.803017][T19616] syzkaller0: entered promiscuous mode [ 417.808551][T19616] syzkaller0: entered allmulticast mode [ 417.820190][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 417.933804][T19541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.954785][T19541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.068604][T19628] FAULT_INJECTION: forcing a failure. [ 418.068604][T19628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.082302][T19628] CPU: 1 UID: 0 PID: 19628 Comm: syz.2.4456 Not tainted syzkaller #0 PREEMPT(full) [ 418.082330][T19628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.082343][T19628] Call Trace: [ 418.082352][T19628] [ 418.082360][T19628] dump_stack_lvl+0x189/0x250 [ 418.082388][T19628] ? __pfx____ratelimit+0x10/0x10 [ 418.082412][T19628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.082435][T19628] ? __pfx__printk+0x10/0x10 [ 418.082462][T19628] ? __might_fault+0xb0/0x130 [ 418.082500][T19628] should_fail_ex+0x414/0x560 [ 418.082530][T19628] _copy_to_iter+0x589/0x1790 [ 418.082572][T19628] ? __pfx__copy_to_iter+0x10/0x10 [ 418.082594][T19628] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 418.082624][T19628] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 418.082651][T19628] __skb_datagram_iter+0xf8/0x990 [ 418.082674][T19628] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 418.082706][T19628] skb_copy_datagram_iter+0xb5/0x210 [ 418.082732][T19628] netlink_recvmsg+0x2ab/0xa30 [ 418.082763][T19628] ? __pfx_netlink_recvmsg+0x10/0x10 [ 418.082790][T19628] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.082812][T19628] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 418.082840][T19628] ? security_socket_recvmsg+0x7e/0x2e0 [ 418.082865][T19628] ? __pfx_netlink_recvmsg+0x10/0x10 [ 418.082887][T19628] sock_recvmsg+0x22c/0x270 [ 418.082915][T19628] ____sys_recvmsg+0x1c9/0x460 [ 418.082945][T19628] ? __pfx_____sys_recvmsg+0x10/0x10 [ 418.082981][T19628] ? import_iovec+0x74/0xa0 [ 418.083013][T19628] ___sys_recvmsg+0x1b5/0x510 [ 418.083039][T19628] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.083096][T19628] ? __fget_files+0x3a0/0x420 [ 418.083127][T19628] do_recvmmsg+0x307/0x770 [ 418.083156][T19628] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.083189][T19628] ? _copy_from_user+0x94/0xb0 [ 418.083235][T19628] __x64_sys_recvmmsg+0x1af/0x240 [ 418.083260][T19628] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.083286][T19628] ? do_syscall_64+0xbe/0xf80 [ 418.083318][T19628] do_syscall_64+0xfa/0xf80 [ 418.083345][T19628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.083366][T19628] ? clear_bhb_loop+0x60/0xb0 [ 418.083392][T19628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.083413][T19628] RIP: 0033:0x7f183218f749 [ 418.083432][T19628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.083449][T19628] RSP: 002b:00007f18330a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.083471][T19628] RAX: ffffffffffffffda RBX: 00007f18323e5fa0 RCX: 00007f183218f749 [ 418.083486][T19628] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 418.083500][T19628] RBP: 00007f18330a1090 R08: 0000200000003700 R09: 0000000000000000 [ 418.083513][T19628] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 418.083526][T19628] R13: 00007f18323e6038 R14: 00007f18323e5fa0 R15: 00007ffd324e31d8 [ 418.083557][T19628] [ 418.086260][T19541] team0: Port device team_slave_0 added [ 418.410681][T19541] team0: Port device team_slave_1 added [ 418.591604][T19541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.599073][T19541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.636448][T19541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.650276][T19541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.657267][T19541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.689899][T19541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.701466][T19644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4458'. [ 418.715819][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4458'. [ 418.866682][T19541] hsr_slave_0: entered promiscuous mode [ 418.890345][T19541] hsr_slave_1: entered promiscuous mode [ 418.896914][T19541] debugfs: 'hsr0' already exists in 'hsr' [ 418.910305][T19541] Cannot create hsr debugfs directory [ 418.919547][ T52] Bluetooth: hci1: command tx timeout [ 419.192804][T19672] : entered promiscuous mode [ 419.346300][T19541] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 419.362235][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4470'. [ 419.371774][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'. [ 419.385730][T19680] netlink: 'syz.0.4470': attribute type 15 has an invalid length. [ 419.406679][T19541] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 419.414860][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4470'. [ 419.429117][ T3548] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 419.438644][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'. [ 419.445486][ T3548] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 419.458871][T19680] netlink: 'syz.0.4470': attribute type 15 has an invalid length. [ 419.474052][T19541] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.488418][ T3548] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 419.502839][T19541] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.512620][T19685] x_tables: duplicate underflow at hook 1 [ 419.535559][ T3548] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 419.711474][T19541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.781075][T19541] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.805309][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.812634][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.834754][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.842009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.853050][T19705] siw: device registration error -23 [ 420.020889][T19712] xt_SECMARK: invalid mode: 9 [ 420.187131][T19721] xt_recent: Unsupported userspace flags (000000b1) [ 420.282984][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'. [ 420.310029][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4483'. [ 420.407850][T19541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.493976][T19736] syzkaller0: entered promiscuous mode [ 420.509085][T19736] syzkaller0: entered allmulticast mode [ 421.002588][T19759] syzkaller0: entered promiscuous mode [ 421.008132][T19759] syzkaller0: entered allmulticast mode [ 421.014204][ T52] Bluetooth: hci1: command tx timeout [ 421.119114][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 421.167358][T19541] veth0_vlan: entered promiscuous mode [ 421.181641][T19763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4494'. [ 421.233021][T19541] veth1_vlan: entered promiscuous mode [ 421.294271][T19774] FAULT_INJECTION: forcing a failure. [ 421.294271][T19774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.336485][T19541] veth0_macvtap: entered promiscuous mode [ 421.345681][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz.0.4496 Not tainted syzkaller #0 PREEMPT(full) [ 421.345718][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.345732][T19774] Call Trace: [ 421.345740][T19774] [ 421.345750][T19774] dump_stack_lvl+0x189/0x250 [ 421.345779][T19774] ? __pfx____ratelimit+0x10/0x10 [ 421.345805][T19774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.345829][T19774] ? __pfx__printk+0x10/0x10 [ 421.345873][T19774] should_fail_ex+0x414/0x560 [ 421.345903][T19774] _copy_to_iter+0x589/0x1790 [ 421.345948][T19774] ? __pfx__copy_to_iter+0x10/0x10 [ 421.345973][T19774] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 421.346003][T19774] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 421.346030][T19774] __skb_datagram_iter+0xf8/0x990 [ 421.346053][T19774] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 421.346086][T19774] skb_copy_datagram_iter+0xb5/0x210 [ 421.346113][T19774] netlink_recvmsg+0x2ab/0xa30 [ 421.346145][T19774] ? __pfx_netlink_recvmsg+0x10/0x10 [ 421.346173][T19774] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.346197][T19774] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 421.346225][T19774] ? security_socket_recvmsg+0x7e/0x2e0 [ 421.346250][T19774] ? __pfx_netlink_recvmsg+0x10/0x10 [ 421.346272][T19774] sock_recvmsg+0x22c/0x270 [ 421.346302][T19774] ____sys_recvmsg+0x1c9/0x460 [ 421.346333][T19774] ? __pfx_____sys_recvmsg+0x10/0x10 [ 421.346371][T19774] ? import_iovec+0x74/0xa0 [ 421.346406][T19774] ___sys_recvmsg+0x1b5/0x510 [ 421.346432][T19774] ? __pfx____sys_recvmsg+0x10/0x10 [ 421.346481][T19774] ? __fget_files+0x3a0/0x420 [ 421.346513][T19774] do_recvmmsg+0x307/0x770 [ 421.346544][T19774] ? __pfx_do_recvmmsg+0x10/0x10 [ 421.346579][T19774] ? _copy_from_user+0x94/0xb0 [ 421.346627][T19774] __x64_sys_recvmmsg+0x1af/0x240 [ 421.346652][T19774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 421.346678][T19774] ? do_syscall_64+0xbe/0xf80 [ 421.346721][T19774] do_syscall_64+0xfa/0xf80 [ 421.346749][T19774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.346770][T19774] ? clear_bhb_loop+0x60/0xb0 [ 421.346795][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.346815][T19774] RIP: 0033:0x7f053d58f749 [ 421.346833][T19774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.346852][T19774] RSP: 002b:00007f053e3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 421.346874][T19774] RAX: ffffffffffffffda RBX: 00007f053d7e5fa0 RCX: 00007f053d58f749 [ 421.346889][T19774] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 421.346904][T19774] RBP: 00007f053e3c1090 R08: 0000200000003700 R09: 0000000000000000 [ 421.346918][T19774] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 421.346930][T19774] R13: 00007f053d7e6038 R14: 00007f053d7e5fa0 R15: 00007ffef331d9b8 [ 421.346964][T19774] [ 421.632420][T19541] veth1_macvtap: entered promiscuous mode [ 421.653952][T19541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.668102][T19541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.690168][ T141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.708525][ T141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.732381][ T141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.751694][ T141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.937680][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.979812][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.076350][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.094568][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.698142][T19805] netlink: 'syz.5.4504': attribute type 4 has an invalid length. [ 423.081451][ T52] Bluetooth: hci1: command tx timeout [ 423.151012][T19816] netlink: 'syz.1.4507': attribute type 14 has an invalid length. [ 423.413569][T19836] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 423.792065][T19856] netlink: 'syz.4.4521': attribute type 9 has an invalid length. [ 423.946359][T19865] __nla_validate_parse: 5 callbacks suppressed [ 423.946380][T19865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4526'. [ 424.252266][T19877] netlink: 'syz.2.4531': attribute type 29 has an invalid length. [ 424.272791][T19877] netlink: 'syz.2.4531': attribute type 29 has an invalid length. [ 424.288964][T19877] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4531'. [ 424.489941][T19891] FAULT_INJECTION: forcing a failure. [ 424.489941][T19891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.503958][T19891] CPU: 0 UID: 0 PID: 19891 Comm: syz.0.4536 Not tainted syzkaller #0 PREEMPT(full) [ 424.503986][T19891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.503999][T19891] Call Trace: [ 424.504007][T19891] [ 424.504016][T19891] dump_stack_lvl+0x189/0x250 [ 424.504044][T19891] ? __pfx____ratelimit+0x10/0x10 [ 424.504088][T19891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.504110][T19891] ? __pfx__printk+0x10/0x10 [ 424.504154][T19891] should_fail_ex+0x414/0x560 [ 424.504183][T19891] _copy_to_iter+0x589/0x1790 [ 424.504226][T19891] ? __pfx__copy_to_iter+0x10/0x10 [ 424.504251][T19891] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 424.504281][T19891] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 424.504310][T19891] __skb_datagram_iter+0xf8/0x990 [ 424.504335][T19891] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 424.504388][T19891] skb_copy_datagram_iter+0xb5/0x210 [ 424.504416][T19891] netlink_recvmsg+0x2ab/0xa30 [ 424.504457][T19891] ? __pfx_netlink_recvmsg+0x10/0x10 [ 424.504486][T19891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 424.504509][T19891] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 424.504537][T19891] ? security_socket_recvmsg+0x7e/0x2e0 [ 424.504561][T19891] ? __pfx_netlink_recvmsg+0x10/0x10 [ 424.504583][T19891] sock_recvmsg+0x22c/0x270 [ 424.504612][T19891] ____sys_recvmsg+0x1c9/0x460 [ 424.504641][T19891] ? __pfx_____sys_recvmsg+0x10/0x10 [ 424.504678][T19891] ? import_iovec+0x74/0xa0 [ 424.504712][T19891] ___sys_recvmsg+0x1b5/0x510 [ 424.504739][T19891] ? __pfx____sys_recvmsg+0x10/0x10 [ 424.504787][T19891] ? __fget_files+0x3a0/0x420 [ 424.504819][T19891] do_recvmmsg+0x307/0x770 [ 424.504854][T19891] ? __pfx_do_recvmmsg+0x10/0x10 [ 424.504889][T19891] ? _copy_from_user+0x94/0xb0 [ 424.504936][T19891] __x64_sys_recvmmsg+0x1af/0x240 [ 424.504961][T19891] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 424.504987][T19891] ? do_syscall_64+0xbe/0xf80 [ 424.505018][T19891] do_syscall_64+0xfa/0xf80 [ 424.505056][T19891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.505077][T19891] ? clear_bhb_loop+0x60/0xb0 [ 424.505103][T19891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.505123][T19891] RIP: 0033:0x7f053d58f749 [ 424.505143][T19891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.505162][T19891] RSP: 002b:00007f053e3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 424.505184][T19891] RAX: ffffffffffffffda RBX: 00007f053d7e5fa0 RCX: 00007f053d58f749 [ 424.505200][T19891] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 424.505215][T19891] RBP: 00007f053e3c1090 R08: 0000200000003700 R09: 0000000000000000 [ 424.505229][T19891] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 424.505243][T19891] R13: 00007f053d7e6038 R14: 00007f053d7e5fa0 R15: 00007ffef331d9b8 [ 424.505278][T19891] [ 425.492832][T19935] netlink: 'syz.1.4549': attribute type 29 has an invalid length. [ 425.763533][T19955] netlink: 'syz.1.4558': attribute type 10 has an invalid length. [ 425.863054][T19962] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.874143][T19964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4560'. [ 426.095453][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 426.206089][T19984] bond6: entered promiscuous mode [ 426.211462][T19984] bond6: entered allmulticast mode [ 426.217078][T19984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.441082][T19997] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 426.472910][T19997] bond5 (unregistering): Released all slaves [ 426.490720][T20005] netlink: 'syz.2.4572': attribute type 10 has an invalid length. [ 426.642677][T20008] syz_tun: entered allmulticast mode [ 426.662223][T20007] syz_tun: left allmulticast mode [ 426.703259][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 426.730562][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 426.762546][T20015] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4579'. [ 426.786982][T20015] nbd: couldn't find a device at index 50331648 [ 426.851190][T20017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4580'. [ 426.919592][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 426.950911][T20022] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4584'. [ 427.417004][T20052] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4587'. [ 427.501628][T20054] nbd: couldn't find a device at index 50331648 [ 427.610853][T20059] netlink: 'syz.1.4594': attribute type 4 has an invalid length. [ 427.957849][T20069] openvswitch: netlink: IP tunnel dst address not specified [ 428.267591][T20091] sctp: [Deprecated]: syz.1.4604 (pid 20091) Use of int in max_burst socket option deprecated. [ 428.267591][T20091] Use struct sctp_assoc_value instead [ 428.416016][T20097] nbd: couldn't find a device at index 50331648 [ 428.701452][T20108] ipt_REJECT: TCP_RESET invalid for non-tcp [ 428.816016][T20113] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 428.840126][T20113] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 428.878021][T20117] batadv1: entered allmulticast mode [ 428.970571][T20122] __nla_validate_parse: 8 callbacks suppressed [ 428.970591][T20122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4615'. [ 429.138392][T20126] bond0: option ad_select: unable to set because the bond device is up [ 429.199207][T20125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.336344][T20136] netlink: 'syz.5.4621': attribute type 3 has an invalid length. [ 429.353226][T20136] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4621'. [ 432.280339][ T5204] udevd[5204]: worker [14691] /devices/virtual/block/nbd0 is taking a long time [ 439.560514][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 90 seconds [ 439.571454][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 90 seconds [ 439.582545][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 90 seconds [ 439.593951][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 90 seconds [ 444.730231][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.743265][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.751931][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.760599][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.768589][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.818035][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.827483][T20153] lo speed is unknown, defaulting to 1000 [ 444.828451][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.843407][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.851951][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 444.860785][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.908032][T20155] lo speed is unknown, defaulting to 1000 [ 445.254378][T20153] chnl_net:caif_netlink_parms(): no params data found [ 445.691005][T20153] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.698405][T20153] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.730550][T20153] bridge_slave_0: entered allmulticast mode [ 445.754408][T20153] bridge_slave_0: entered promiscuous mode [ 445.775555][T20153] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.800876][T20153] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.808337][T20153] bridge_slave_1: entered allmulticast mode [ 445.830621][T20153] bridge_slave_1: entered promiscuous mode [ 446.055810][T20153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.108726][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 446.121484][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.142360][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.146996][T20153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.169970][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.178607][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.257596][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 446.267110][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 446.276423][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 446.286037][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 446.293901][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 446.358665][T20155] chnl_net:caif_netlink_parms(): no params data found [ 446.384360][T20153] team0: Port device team_slave_0 added [ 446.409133][T20153] team0: Port device team_slave_1 added [ 446.425804][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 446.447407][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 446.455798][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 446.465935][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 446.476101][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 446.548912][T20153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.556107][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.582517][T20153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.613857][T20153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.621257][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.648333][T20153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.673071][T20168] lo speed is unknown, defaulting to 1000 [ 446.730370][T20171] lo speed is unknown, defaulting to 1000 [ 446.742381][T20153] hsr_slave_0: entered promiscuous mode [ 446.751076][T20153] hsr_slave_1: entered promiscuous mode [ 446.757511][T20153] debugfs: 'hsr0' already exists in 'hsr' [ 446.764210][T20153] Cannot create hsr debugfs directory [ 446.816437][T20155] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.823964][T20155] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.831881][T20155] bridge_slave_0: entered allmulticast mode [ 446.840098][ T5841] Bluetooth: hci3: command tx timeout [ 446.846900][T20155] bridge_slave_0: entered promiscuous mode [ 446.873649][T20155] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.881737][T20155] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.889030][T20155] bridge_slave_1: entered allmulticast mode [ 446.897351][T20155] bridge_slave_1: entered promiscuous mode [ 446.913538][T20173] lo speed is unknown, defaulting to 1000 [ 446.920153][ T5841] Bluetooth: hci6: command tx timeout [ 447.004032][T20155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.033841][T20155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.107968][T20155] team0: Port device team_slave_0 added [ 447.151894][T20155] team0: Port device team_slave_1 added [ 447.263226][T20155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.270755][T20155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.297078][T20155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.345242][T20155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.352436][T20155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.378816][T20155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.572834][T20155] hsr_slave_0: entered promiscuous mode [ 447.580658][T20155] hsr_slave_1: entered promiscuous mode [ 447.587107][T20155] debugfs: 'hsr0' already exists in 'hsr' [ 447.593909][T20155] Cannot create hsr debugfs directory [ 447.936460][T20168] chnl_net:caif_netlink_parms(): no params data found [ 448.136605][T20171] chnl_net:caif_netlink_parms(): no params data found [ 448.192109][T20168] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.199665][T20168] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.207122][T20168] bridge_slave_0: entered allmulticast mode [ 448.215455][T20168] bridge_slave_0: entered promiscuous mode [ 448.261012][T20168] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.268242][T20168] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.276432][T20168] bridge_slave_1: entered allmulticast mode [ 448.282632][ T5841] Bluetooth: hci7: command tx timeout [ 448.289811][T20168] bridge_slave_1: entered promiscuous mode [ 448.369881][ T5841] Bluetooth: hci8: command tx timeout [ 448.433533][T20168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.445746][T20173] chnl_net:caif_netlink_parms(): no params data found [ 448.474978][T20168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.498931][T20171] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.506404][T20171] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.513926][T20171] bridge_slave_0: entered allmulticast mode [ 448.520855][ T5841] Bluetooth: hci9: command tx timeout [ 448.528619][T20171] bridge_slave_0: entered promiscuous mode [ 448.566307][T20171] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.574013][T20171] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.582339][T20171] bridge_slave_1: entered allmulticast mode [ 448.590321][T20171] bridge_slave_1: entered promiscuous mode [ 448.637811][T20168] team0: Port device team_slave_0 added [ 448.673812][T20168] team0: Port device team_slave_1 added [ 448.695808][T20171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.734202][T20171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.787130][T20168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.794421][T20168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.821278][T20168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.833428][T20173] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.841591][T20173] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.850459][T20173] bridge_slave_0: entered allmulticast mode [ 448.857920][T20173] bridge_slave_0: entered promiscuous mode [ 448.881378][T20168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.888398][T20168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.915666][T20168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.926608][ T5841] Bluetooth: hci3: command tx timeout [ 448.934053][T20173] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.942363][T20173] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.950048][T20173] bridge_slave_1: entered allmulticast mode [ 448.957429][T20173] bridge_slave_1: entered promiscuous mode [ 448.966852][T20171] team0: Port device team_slave_0 added [ 448.997499][T20171] team0: Port device team_slave_1 added [ 449.003829][ T5841] Bluetooth: hci6: command tx timeout [ 449.042667][T20173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.082552][T20173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.093379][T20171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.100562][T20171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.127413][T20171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.167137][T20171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.174411][T20171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.200988][T20171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.218505][T20168] hsr_slave_0: entered promiscuous mode [ 449.225364][T20168] hsr_slave_1: entered promiscuous mode [ 449.231781][T20168] debugfs: 'hsr0' already exists in 'hsr' [ 449.237620][T20168] Cannot create hsr debugfs directory [ 449.267930][T20173] team0: Port device team_slave_0 added [ 449.277316][T20173] team0: Port device team_slave_1 added [ 449.358038][T20173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.365437][T20173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.392441][T20173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.425328][T20171] hsr_slave_0: entered promiscuous mode [ 449.432660][T20171] hsr_slave_1: entered promiscuous mode [ 449.438883][T20171] debugfs: 'hsr0' already exists in 'hsr' [ 449.445349][T20171] Cannot create hsr debugfs directory [ 449.451796][T20173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.458758][T20173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.485615][T20173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.625492][T20173] hsr_slave_0: entered promiscuous mode [ 449.632690][T20173] hsr_slave_1: entered promiscuous mode [ 449.638878][T20173] debugfs: 'hsr0' already exists in 'hsr' [ 449.645628][T20173] Cannot create hsr debugfs directory [ 449.994117][T20173] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.068935][T20173] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.115783][T20173] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.187515][T20173] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.359557][ T5841] Bluetooth: hci7: command tx timeout [ 450.445036][ T5841] Bluetooth: hci8: command tx timeout [ 450.599539][ T5841] Bluetooth: hci9: command tx timeout [ 450.999666][ T5841] Bluetooth: hci3: command tx timeout [ 451.080429][ T5841] Bluetooth: hci6: command tx timeout [ 452.439480][ T5841] Bluetooth: hci7: command tx timeout [ 452.519567][ T5841] Bluetooth: hci8: command tx timeout [ 452.679707][ T5841] Bluetooth: hci9: command tx timeout [ 453.079597][ T5841] Bluetooth: hci3: command tx timeout [ 453.159590][ T5841] Bluetooth: hci6: command tx timeout [ 454.519556][ T5841] Bluetooth: hci7: command tx timeout [ 454.599502][ T5841] Bluetooth: hci8: command tx timeout [ 454.759603][ T5841] Bluetooth: hci9: command tx timeout [ 457.650565][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 469.640736][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 120 seconds [ 469.651662][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 120 seconds [ 469.662761][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 120 seconds [ 469.674315][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 120 seconds [ 499.729990][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 150 seconds [ 499.740991][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 150 seconds [ 499.752519][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 150 seconds [ 499.764541][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 150 seconds [ 504.545524][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 504.555863][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 504.564706][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 504.574103][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 504.582341][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 504.621385][T20197] lo speed is unknown, defaulting to 1000 [ 504.903948][T20197] chnl_net:caif_netlink_parms(): no params data found [ 504.992056][T20197] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.000231][T20197] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.007526][T20197] bridge_slave_0: entered allmulticast mode [ 505.015535][T20197] bridge_slave_0: entered promiscuous mode [ 505.023919][T20197] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.032342][T20197] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.039796][T20197] bridge_slave_1: entered allmulticast mode [ 505.047250][T20197] bridge_slave_1: entered promiscuous mode [ 505.086666][T20197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.099131][T20197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.137343][T20197] team0: Port device team_slave_0 added [ 505.146390][T20197] team0: Port device team_slave_1 added [ 505.180666][T20197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.187659][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.214130][T20197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.226809][T20197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.234527][T20197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.261699][T20197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.311040][T20197] hsr_slave_0: entered promiscuous mode [ 505.318435][T20197] hsr_slave_1: entered promiscuous mode [ 505.325341][T20197] debugfs: 'hsr0' already exists in 'hsr' [ 505.331225][T20197] Cannot create hsr debugfs directory [ 505.635455][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 505.645257][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 505.655131][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 505.671539][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 505.682398][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 505.736674][T20206] lo speed is unknown, defaulting to 1000 [ 506.068928][T20206] chnl_net:caif_netlink_parms(): no params data found [ 506.154915][T20206] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.162460][T20206] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.169974][T20206] bridge_slave_0: entered allmulticast mode [ 506.177654][T20206] bridge_slave_0: entered promiscuous mode [ 506.186506][T20206] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.195067][T20206] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.203690][T20206] bridge_slave_1: entered allmulticast mode [ 506.211315][T20206] bridge_slave_1: entered promiscuous mode [ 506.247787][T20206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.261282][T20206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.299797][T20206] team0: Port device team_slave_0 added [ 506.307975][T20206] team0: Port device team_slave_1 added [ 506.339228][T20206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.347606][T20206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.374341][T20206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.388262][T20206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.395814][T20206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.422523][T20206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.553565][T20206] hsr_slave_0: entered promiscuous mode [ 506.570755][T20206] hsr_slave_1: entered promiscuous mode [ 506.577441][T20206] debugfs: 'hsr0' already exists in 'hsr' [ 506.600769][T20206] Cannot create hsr debugfs directory [ 506.687355][ T5841] Bluetooth: hci10: command tx timeout [ 507.025470][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 507.038686][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 507.047754][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 507.070463][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 507.078910][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 507.184640][T20217] lo speed is unknown, defaulting to 1000 [ 507.225592][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 507.236358][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 507.245165][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 507.260921][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 507.268707][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 507.280324][ T5837] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 507.288354][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 507.297580][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 507.307952][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 507.317066][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 507.505056][T20221] lo speed is unknown, defaulting to 1000 [ 507.533024][T20219] lo speed is unknown, defaulting to 1000 [ 507.719686][ T52] Bluetooth: hci11: command tx timeout [ 507.820056][T20217] chnl_net:caif_netlink_parms(): no params data found [ 508.112257][T20217] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.121411][T20217] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.128812][T20217] bridge_slave_0: entered allmulticast mode [ 508.137257][T20217] bridge_slave_0: entered promiscuous mode [ 508.152541][T20217] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.160431][T20217] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.167751][T20217] bridge_slave_1: entered allmulticast mode [ 508.175572][T20217] bridge_slave_1: entered promiscuous mode [ 508.211152][T20221] chnl_net:caif_netlink_parms(): no params data found [ 508.251340][T20217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.292362][T20217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.355443][T20217] team0: Port device team_slave_0 added [ 508.373441][T20217] team0: Port device team_slave_1 added [ 508.436726][T20217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.444173][T20217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.472130][T20217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.484238][T20221] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.492411][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.499866][T20221] bridge_slave_0: entered allmulticast mode [ 508.507237][T20221] bridge_slave_0: entered promiscuous mode [ 508.519117][T20217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.526526][T20217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.553597][T20217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.565475][T20221] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.573123][T20221] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.581193][T20221] bridge_slave_1: entered allmulticast mode [ 508.588841][T20221] bridge_slave_1: entered promiscuous mode [ 508.654894][T20221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.709219][T20221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.759486][ T52] Bluetooth: hci10: command tx timeout [ 508.780830][T20217] hsr_slave_0: entered promiscuous mode [ 508.788226][T20217] hsr_slave_1: entered promiscuous mode [ 508.796374][T20217] debugfs: 'hsr0' already exists in 'hsr' [ 508.804297][T20217] Cannot create hsr debugfs directory [ 508.840761][T20221] team0: Port device team_slave_0 added [ 508.846723][T20219] chnl_net:caif_netlink_parms(): no params data found [ 508.874851][T20221] team0: Port device team_slave_1 added [ 508.964956][T20221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.972289][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.998808][T20221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.035484][T20221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.043109][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.070667][T20221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.159544][ T52] Bluetooth: hci12: command tx timeout [ 509.207552][T20221] hsr_slave_0: entered promiscuous mode [ 509.215422][T20221] hsr_slave_1: entered promiscuous mode [ 509.222111][T20221] debugfs: 'hsr0' already exists in 'hsr' [ 509.227854][T20221] Cannot create hsr debugfs directory [ 509.252041][T20219] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.259508][T20219] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.267334][T20219] bridge_slave_0: entered allmulticast mode [ 509.275751][T20219] bridge_slave_0: entered promiscuous mode [ 509.292138][T20219] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.300034][T20219] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.307309][T20219] bridge_slave_1: entered allmulticast mode [ 509.315260][T20219] bridge_slave_1: entered promiscuous mode [ 509.398760][T20219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.408082][ T52] Bluetooth: hci13: command tx timeout [ 509.413243][ T5841] Bluetooth: hci14: command tx timeout [ 509.443448][T20219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.518208][T20219] team0: Port device team_slave_0 added [ 509.540239][T20219] team0: Port device team_slave_1 added [ 509.613493][T20219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.620706][T20219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.648415][T20219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.675342][T20219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.683180][T20219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.709620][T20219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.777885][T20219] hsr_slave_0: entered promiscuous mode [ 509.784805][T20219] hsr_slave_1: entered promiscuous mode [ 509.793771][T20219] debugfs: 'hsr0' already exists in 'hsr' [ 509.799820][T20219] Cannot create hsr debugfs directory [ 509.806523][ T5841] Bluetooth: hci11: command tx timeout [ 510.840219][ T5841] Bluetooth: hci10: command tx timeout [ 511.239827][ T5841] Bluetooth: hci12: command tx timeout [ 511.479790][ T5841] Bluetooth: hci14: command tx timeout [ 511.479814][ T52] Bluetooth: hci13: command tx timeout [ 511.879745][ T5841] Bluetooth: hci11: command tx timeout [ 512.919636][ T5841] Bluetooth: hci10: command tx timeout [ 513.319600][ T5841] Bluetooth: hci12: command tx timeout [ 513.559569][ T52] Bluetooth: hci13: command tx timeout [ 513.565458][ T5841] Bluetooth: hci14: command tx timeout [ 513.960182][ T5841] Bluetooth: hci11: command tx timeout [ 515.399636][ T5841] Bluetooth: hci12: command tx timeout [ 515.639685][ T52] Bluetooth: hci13: command tx timeout [ 515.645226][ T5841] Bluetooth: hci14: command tx timeout [ 529.813804][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 180 seconds [ 529.824869][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 180 seconds [ 529.836461][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 180 seconds [ 529.848089][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 180 seconds [ 531.483394][ T5204] udevd[5204]: worker [14691] /devices/virtual/block/nbd0 timeout; kill it [ 531.492343][ T5204] udevd[5204]: seq 20080 '/devices/virtual/block/nbd0' killed [ 549.802416][T20241] Bluetooth: hci2: command 0x0406 tx timeout [ 549.803720][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 559.879788][ T11] block nbd0: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 210 seconds [ 559.891821][ T11] block nbd0: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 210 seconds [ 559.903623][ T11] block nbd0: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 210 seconds [ 559.914675][ T11] block nbd0: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 210 seconds [ 565.115476][ T5854] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 565.124729][ T5854] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 565.134342][ T5854] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 565.142728][ T5854] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 565.153432][ T5854] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 565.202803][T20243] lo speed is unknown, defaulting to 1000 [ 565.485872][T20243] chnl_net:caif_netlink_parms(): no params data found [ 565.574065][T20243] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.581442][T20243] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.588758][T20243] bridge_slave_0: entered allmulticast mode [ 565.596908][T20243] bridge_slave_0: entered promiscuous mode [ 565.605880][T20243] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.613941][T20243] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.621372][T20243] bridge_slave_1: entered allmulticast mode [ 565.628969][T20243] bridge_slave_1: entered promiscuous mode [ 565.665724][T20243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.678276][T20243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.717898][T20243] team0: Port device team_slave_0 added [ 565.728572][T20243] team0: Port device team_slave_1 added [ 565.764197][T20243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.771299][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.798879][T20243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.812669][T20243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.820288][T20243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.846693][T20243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.902587][T20243] hsr_slave_0: entered promiscuous mode [ 565.910118][T20243] hsr_slave_1: entered promiscuous mode [ 565.916902][T20243] debugfs: 'hsr0' already exists in 'hsr' [ 565.923920][T20243] Cannot create hsr debugfs directory [ 566.232202][ T5854] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 566.244463][ T5854] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 566.253990][ T5854] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 566.263314][ T5854] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 566.271834][ T5854] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 566.315775][T20252] lo speed is unknown, defaulting to 1000 [ 566.684167][T20252] chnl_net:caif_netlink_parms(): no params data found [ 566.771804][T20252] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.779005][T20252] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.787067][T20252] bridge_slave_0: entered allmulticast mode [ 566.795154][T20252] bridge_slave_0: entered promiscuous mode [ 566.803893][T20252] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.811371][T20252] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.818675][T20252] bridge_slave_1: entered allmulticast mode [ 566.827103][T20252] bridge_slave_1: entered promiscuous mode [ 566.863643][T20252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.876236][T20252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.914479][T20252] team0: Port device team_slave_0 added [ 566.925629][T20252] team0: Port device team_slave_1 added [ 566.993345][T20252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.009506][T20252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.049495][T20252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.075296][T20252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.099500][T20252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.159444][T20252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.240452][ T5854] Bluetooth: hci15: command tx timeout [ 567.363547][T20252] hsr_slave_0: entered promiscuous mode [ 567.390853][T20252] hsr_slave_1: entered promiscuous mode [ 567.397954][T20252] debugfs: 'hsr0' already exists in 'hsr' [ 567.429409][T20252] Cannot create hsr debugfs directory [ 567.608405][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 567.617921][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 567.627309][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 567.635707][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 567.643851][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 567.723415][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 567.734583][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 567.743395][ T52] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 567.752484][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 567.761924][ T52] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 567.821767][ T5854] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 567.831825][ T5854] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 567.841195][ T5854] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 567.867976][ T5854] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 567.876701][ T5854] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 567.885301][T20263] lo speed is unknown, defaulting to 1000 [ 567.961343][T20265] lo speed is unknown, defaulting to 1000 [ 567.995297][T20267] lo speed is unknown, defaulting to 1000 [ 568.370270][ T5841] Bluetooth: hci16: command tx timeout [ 568.570586][T20263] chnl_net:caif_netlink_parms(): no params data found [ 568.807859][T20263] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.817556][T20263] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.827341][T20263] bridge_slave_0: entered allmulticast mode [ 568.836396][T20263] bridge_slave_0: entered promiscuous mode [ 568.870406][T20263] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.877639][T20263] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.886700][T20263] bridge_slave_1: entered allmulticast mode [ 568.895448][T20263] bridge_slave_1: entered promiscuous mode [ 568.933115][T20265] chnl_net:caif_netlink_parms(): no params data found [ 568.967015][T20263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.992575][T20263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.097702][T20263] team0: Port device team_slave_0 added [ 569.132577][T20263] team0: Port device team_slave_1 added [ 569.208706][T20265] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.216098][T20265] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.224434][T20265] bridge_slave_0: entered allmulticast mode [ 569.232147][T20265] bridge_slave_0: entered promiscuous mode [ 569.263296][T20265] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.270673][T20265] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.279108][T20265] bridge_slave_1: entered allmulticast mode [ 569.288231][T20265] bridge_slave_1: entered promiscuous mode [ 569.297698][T20263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.305922][T20263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.333893][ T5841] Bluetooth: hci15: command tx timeout [ 569.340782][T20263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.376334][T20263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.384021][T20263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.410910][T20263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.449422][T20265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.467650][T20265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.479797][T20267] chnl_net:caif_netlink_parms(): no params data found [ 569.577108][T20263] hsr_slave_0: entered promiscuous mode [ 569.584343][T20263] hsr_slave_1: entered promiscuous mode [ 569.593512][T20263] debugfs: 'hsr0' already exists in 'hsr' [ 569.599789][T20263] Cannot create hsr debugfs directory [ 569.616118][T20265] team0: Port device team_slave_0 added [ 569.640096][T20265] team0: Port device team_slave_1 added [ 569.719431][ T5841] Bluetooth: hci17: command tx timeout [ 569.730760][T20265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.737912][T20265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.764921][T20265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.800244][ T5841] Bluetooth: hci18: command tx timeout [ 569.815368][T20265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.823332][T20265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.849697][T20265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.895881][T20267] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.903229][T20267] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.911502][T20267] bridge_slave_0: entered allmulticast mode [ 569.918967][T20267] bridge_slave_0: entered promiscuous mode [ 569.936853][T20267] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.944974][T20267] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.952709][T20267] bridge_slave_1: entered allmulticast mode [ 569.960092][ T5841] Bluetooth: hci19: command tx timeout [ 569.965312][T20267] bridge_slave_1: entered promiscuous mode [ 570.054551][T20267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.082551][T20265] hsr_slave_0: entered promiscuous mode [ 570.090431][T20265] hsr_slave_1: entered promiscuous mode [ 570.096894][T20265] debugfs: 'hsr0' already exists in 'hsr' [ 570.103191][T20265] Cannot create hsr debugfs directory [ 570.112445][T20267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.207838][T20267] team0: Port device team_slave_0 added [ 570.236599][T20267] team0: Port device team_slave_1 added [ 570.283994][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 570.292485][T20289] Bluetooth: hci8: command 0x0406 tx timeout [ 570.300176][ T5841] Bluetooth: hci9: command 0x0406 tx timeout [ 570.307749][T20289] Bluetooth: hci6: command 0x0406 tx timeout [ 570.315302][ T5854] Bluetooth: hci7: command 0x0406 tx timeout [ 570.382078][T20267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.389070][T20267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.415823][T20267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.434688][T20267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.441852][T20269] Bluetooth: hci16: command tx timeout [ 570.450823][T20267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.477679][T20267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.603204][T20267] hsr_slave_0: entered promiscuous mode [ 570.612158][T20267] hsr_slave_1: entered promiscuous mode [ 570.618584][T20267] debugfs: 'hsr0' already exists in 'hsr' [ 570.626396][T20267] Cannot create hsr debugfs directory [ 571.400043][T20269] Bluetooth: hci15: command tx timeout [ 571.799849][T20269] Bluetooth: hci17: command tx timeout [ 571.879495][T20269] Bluetooth: hci18: command tx timeout [ 572.039692][T20269] Bluetooth: hci19: command tx timeout [ 572.519851][T20269] Bluetooth: hci16: command tx timeout [ 573.321695][ T31] INFO: task syz.0.4619:20137 blocked for more than 143 seconds. [ 573.330336][ T31] Not tainted syzkaller #0 [ 573.335726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.345154][ T31] task:syz.0.4619 state:D stack:26088 pid:20137 tgid:20129 ppid:15463 task_flags:0x400140 flags:0x00080002 [ 573.358601][ T31] Call Trace: [ 573.362663][ T31] [ 573.365642][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.371147][ T31] ? __pfx___schedule+0x10/0x10 [ 573.376512][ T31] ? schedule+0x91/0x360 [ 573.381758][ T31] schedule+0x165/0x360 [ 573.385996][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.392190][ T31] __mutex_lock+0x7e6/0x1350 [ 573.396858][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.402729][ T31] ? genl_rcv_msg+0x10d/0x790 [ 573.407481][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.412767][ T31] ? stack_trace_save+0x9c/0xe0 [ 573.417707][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 573.423351][ T31] ? radix_tree_lookup+0x240/0x290 [ 573.428525][ T31] genl_rcv_msg+0x10d/0x790 [ 573.433199][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.450937][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 573.469494][ T31] netlink_rcv_skb+0x208/0x470 [ 573.475053][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.489360][T20269] Bluetooth: hci15: command tx timeout [ 573.500922][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.506303][ T31] ? down_read+0x274/0x2e0 [ 573.527971][ T31] ? genl_rcv+0xd/0x40 [ 573.532612][ T31] genl_rcv+0x28/0x40 [ 573.536662][ T31] netlink_unicast+0x82f/0x9e0 [ 573.542525][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 573.547884][ T31] ? netlink_sendmsg+0x642/0xb30 [ 573.553371][ T31] ? skb_put+0x11b/0x210 [ 573.557689][ T31] netlink_sendmsg+0x805/0xb30 [ 573.567857][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.575900][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.581728][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.587069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.592516][ T31] __sock_sendmsg+0x21c/0x270 [ 573.597241][ T31] __sys_sendto+0x3bd/0x520 [ 573.602453][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 573.607526][ T31] ? do_futex+0x333/0x420 [ 573.612110][ T31] __x64_sys_sendto+0xde/0x100 [ 573.616933][ T31] do_syscall_64+0xfa/0xf80 [ 573.621593][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.627700][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.632815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.638728][ T31] RIP: 0033:0x7f053d5915dc [ 573.643701][ T31] RSP: 002b:00007f053e39eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 573.652308][ T31] RAX: ffffffffffffffda RBX: 00007f053e39efc0 RCX: 00007f053d5915dc [ 573.660404][ T31] RDX: 000000000000001c RSI: 00007f053e39f010 RDI: 0000000000000006 [ 573.668467][ T31] RBP: 0000000000000000 R08: 00007f053e39ef14 R09: 000000000000000c [ 573.676776][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 573.685021][ T31] R13: 00007f053e39ef68 R14: 00007f053e39f010 R15: 0000000000000000 [ 573.693476][ T31] [ 573.696632][ T31] INFO: task syz.5.4621:20136 blocked for more than 143 seconds. [ 573.705355][ T31] Not tainted syzkaller #0 [ 573.710497][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.719490][ T31] task:syz.5.4621 state:D stack:25848 pid:20136 tgid:20133 ppid:19541 task_flags:0x480140 flags:0x00080002 [ 573.732073][ T31] Call Trace: [ 573.735392][ T31] [ 573.738355][ T31] __schedule+0x14bc/0x5000 [ 573.743242][ T31] ? __pfx___schedule+0x10/0x10 [ 573.748149][ T31] ? schedule+0x91/0x360 [ 573.752736][ T31] schedule+0x165/0x360 [ 573.756919][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 573.762611][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 573.768722][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 573.775518][ T31] ? percpu_ref_kill_and_confirm+0x8a/0x120 [ 573.781647][ T31] ? __blk_freeze_queue_start+0x263/0x380 [ 573.787428][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 573.793866][ T31] nbd_set_size+0x47e/0x6a0 [ 573.798421][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 573.804222][ T31] ? nla_memcpy+0x5b/0xc0 [ 573.808634][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 573.813775][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 573.819382][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 573.825415][ T31] ? bpf_lsm_capable+0x9/0x20 [ 573.830363][ T31] ? security_capable+0x7e/0x2e0 [ 573.835359][ T31] ? radix_tree_lookup+0x240/0x290 [ 573.840847][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 573.846203][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 573.852439][ T31] ? rcu_is_watching+0x15/0xb0 [ 573.857243][ T31] ? __nla_parse+0x40/0x60 [ 573.862041][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 573.868433][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 573.874259][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 573.880795][T20269] Bluetooth: hci17: command tx timeout [ 573.887073][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 573.892489][ T31] genl_rcv_msg+0x60e/0x790 [ 573.897044][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.902337][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 573.908163][ T31] netlink_rcv_skb+0x208/0x470 [ 573.913434][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.918510][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.923990][ T31] ? down_read+0x274/0x2e0 [ 573.928459][ T31] ? genl_rcv+0xd/0x40 [ 573.932783][ T31] genl_rcv+0x28/0x40 [ 573.936812][ T31] netlink_unicast+0x82f/0x9e0 [ 573.941749][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 573.947085][ T31] ? netlink_sendmsg+0x642/0xb30 [ 573.952238][ T31] ? skb_put+0x11b/0x210 [ 573.956556][ T31] netlink_sendmsg+0x805/0xb30 [ 573.962172][T20269] Bluetooth: hci18: command tx timeout [ 573.964243][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.974426][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.979547][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.985758][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.991871][ T31] __sock_sendmsg+0x21c/0x270 [ 573.996624][ T31] ____sys_sendmsg+0x505/0x820 [ 574.002371][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.007736][ T31] ? import_iovec+0x74/0xa0 [ 574.012526][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 574.017268][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.022727][ T31] ? futex_wait+0x285/0x360 [ 574.027295][ T31] ? __fget_files+0x2a/0x420 [ 574.032075][ T31] ? __fget_files+0x3a0/0x420 [ 574.036796][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 574.042140][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.047675][ T31] ? do_syscall_64+0xbe/0xf80 [ 574.052587][ T31] do_syscall_64+0xfa/0xf80 [ 574.057140][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.063371][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.068168][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.074321][ T31] RIP: 0033:0x7f18e338f749 [ 574.078929][ T31] RSP: 002b:00007f18e42d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.088925][ T31] RAX: ffffffffffffffda RBX: 00007f18e35e5fa0 RCX: 00007f18e338f749 [ 574.097344][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 574.105647][ T31] RBP: 00007f18e3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.114049][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.122366][T20269] Bluetooth: hci19: command tx timeout [ 574.124726][ T31] R13: 00007f18e35e6038 R14: 00007f18e35e5fa0 R15: 00007ffdd2f6b408 [ 574.136891][ T31] [ 574.140161][ T31] INFO: task syz.1.4623:20141 blocked for more than 144 seconds. [ 574.147995][ T31] Not tainted syzkaller #0 [ 574.159826][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.168554][ T31] task:syz.1.4623 state:D stack:26888 pid:20141 tgid:20140 ppid:14839 task_flags:0x400140 flags:0x00080002 [ 574.180775][ T31] Call Trace: [ 574.184108][ T31] [ 574.187748][ T31] __schedule+0x14bc/0x5000 [ 574.193039][ T31] ? __pfx___schedule+0x10/0x10 [ 574.197949][ T31] ? schedule+0x91/0x360 [ 574.202872][ T31] schedule+0x165/0x360 [ 574.207301][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.213071][ T31] __mutex_lock+0x7e6/0x1350 [ 574.217721][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.223443][ T31] ? genl_rcv_msg+0x10d/0x790 [ 574.228156][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.233312][ T31] ? stack_trace_save+0x9c/0xe0 [ 574.238211][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 574.243529][ T31] ? radix_tree_lookup+0x240/0x290 [ 574.248688][ T31] genl_rcv_msg+0x10d/0x790 [ 574.253903][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.258991][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 574.264127][ T31] netlink_rcv_skb+0x208/0x470 [ 574.268931][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.274075][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.280277][ T31] ? down_read+0x274/0x2e0 [ 574.284834][ T31] ? genl_rcv+0xd/0x40 [ 574.289744][ T31] genl_rcv+0x28/0x40 [ 574.293790][ T31] netlink_unicast+0x82f/0x9e0 [ 574.298576][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 574.304006][ T31] ? netlink_sendmsg+0x642/0xb30 [ 574.308978][ T31] ? skb_put+0x11b/0x210 [ 574.314169][ T31] netlink_sendmsg+0x805/0xb30 [ 574.319182][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.325356][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 574.330479][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.335842][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.341735][ T31] __sock_sendmsg+0x21c/0x270 [ 574.346440][ T31] __sys_sendto+0x3bd/0x520 [ 574.351789][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 574.356879][ T31] ? count_memcg_event_mm+0x21/0x260 [ 574.363086][ T31] ? exc_page_fault+0x82/0x100 [ 574.368048][ T31] __x64_sys_sendto+0xde/0x100 [ 574.373422][ T31] do_syscall_64+0xfa/0xf80 [ 574.377963][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.384178][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.388991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.395854][ T31] RIP: 0033:0x7ffa859915dc [ 574.400618][ T31] RSP: 002b:00007ffa868c5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 574.409819][ T31] RAX: ffffffffffffffda RBX: 00007ffa868c5fc0 RCX: 00007ffa859915dc [ 574.418349][ T31] RDX: 0000000000000024 RSI: 00007ffa868c6010 RDI: 0000000000000004 [ 574.426647][ T31] RBP: 0000000000000000 R08: 00007ffa868c5f14 R09: 000000000000000c [ 574.434808][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 574.443661][ T31] R13: 00007ffa868c5f68 R14: 00007ffa868c6010 R15: 0000000000000000 [ 574.451890][ T31] [ 574.455034][ T31] INFO: task syz.4.4624:20143 blocked for more than 144 seconds. [ 574.468948][ T31] Not tainted syzkaller #0 [ 574.475286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.484299][ T31] task:syz.4.4624 state:D stack:26512 pid:20143 tgid:20142 ppid:16363 task_flags:0x400140 flags:0x00080002 [ 574.496470][ T31] Call Trace: [ 574.499873][ T31] [ 574.502855][ T31] __schedule+0x14bc/0x5000 [ 574.507444][ T31] ? __pfx___schedule+0x10/0x10 [ 574.512646][ T31] ? schedule+0x91/0x360 [ 574.516919][ T31] schedule+0x165/0x360 [ 574.527685][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.533490][ T31] __mutex_lock+0x7e6/0x1350 [ 574.538132][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.543121][ T31] ? genl_rcv_msg+0x10d/0x790 [ 574.547849][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.553070][ T31] ? stack_trace_save+0x9c/0xe0 [ 574.557970][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 574.563093][ T31] ? radix_tree_lookup+0x240/0x290 [ 574.568244][ T31] genl_rcv_msg+0x10d/0x790 [ 574.573033][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.578097][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 574.583172][ T31] netlink_rcv_skb+0x208/0x470 [ 574.587982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.593192][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.598539][ T31] ? down_read+0x274/0x2e0 [ 574.603337][T20269] Bluetooth: hci16: command tx timeout [ 574.608907][ T31] ? genl_rcv+0xd/0x40 [ 574.613193][ T31] genl_rcv+0x28/0x40 [ 574.617232][ T31] netlink_unicast+0x82f/0x9e0 [ 574.622158][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 574.627509][ T31] ? netlink_sendmsg+0x642/0xb30 [ 574.632790][ T31] ? skb_put+0x11b/0x210 [ 574.637057][ T31] netlink_sendmsg+0x805/0xb30 [ 574.642047][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.647375][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 574.652498][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.657832][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.663308][ T31] __sock_sendmsg+0x21c/0x270 [ 574.668029][ T31] __sys_sendto+0x3bd/0x520 [ 574.672773][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 574.677852][ T31] ? count_memcg_event_mm+0x21/0x260 [ 574.683600][ T31] ? exc_page_fault+0x82/0x100 [ 574.688618][ T31] __x64_sys_sendto+0xde/0x100 [ 574.694516][ T31] do_syscall_64+0xfa/0xf80 [ 574.699555][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.705745][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.711065][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.717003][ T31] RIP: 0033:0x7f9e7ef915dc [ 574.721948][ T31] RSP: 002b:00007f9e7ff0cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 574.730846][ T31] RAX: ffffffffffffffda RBX: 00007f9e7ff0cfc0 RCX: 00007f9e7ef915dc [ 574.738888][ T31] RDX: 0000000000000028 RSI: 00007f9e7ff0d010 RDI: 000000000000000c [ 574.747299][ T31] RBP: 0000000000000000 R08: 00007f9e7ff0cf14 R09: 000000000000000c [ 574.755508][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 574.763750][ T31] R13: 00007f9e7ff0cf68 R14: 00007f9e7ff0d010 R15: 0000000000000000 [ 574.772073][ T31] [ 574.775165][ T31] INFO: task syz.4.4624:20145 blocked for more than 144 seconds. [ 574.783093][ T31] Not tainted syzkaller #0 [ 574.788062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.797185][ T31] task:syz.4.4624 state:D stack:28152 pid:20145 tgid:20142 ppid:16363 task_flags:0x400140 flags:0x00080002 [ 574.809548][ T31] Call Trace: [ 574.812861][ T31] [ 574.815821][ T31] __schedule+0x14bc/0x5000 [ 574.820536][ T31] ? __pfx___schedule+0x10/0x10 [ 574.825539][ T31] ? schedule+0x91/0x360 [ 574.829956][ T31] schedule+0x165/0x360 [ 574.834136][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.839870][ T31] __mutex_lock+0x7e6/0x1350 [ 574.844544][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.849775][ T31] ? genl_rcv_msg+0x10d/0x790 [ 574.854520][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.859927][ T31] ? stack_trace_save+0x9c/0xe0 [ 574.864882][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 574.870050][ T31] ? radix_tree_lookup+0x240/0x290 [ 574.875205][ T31] genl_rcv_msg+0x10d/0x790 [ 574.879829][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.884938][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 574.890296][ T31] netlink_rcv_skb+0x208/0x470 [ 574.895135][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.900563][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.906595][ T31] ? down_read+0x274/0x2e0 [ 574.911386][ T31] ? genl_rcv+0xd/0x40 [ 574.915488][ T31] genl_rcv+0x28/0x40 [ 574.919979][ T31] netlink_unicast+0x82f/0x9e0 [ 574.925011][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 574.930697][ T31] ? netlink_sendmsg+0x642/0xb30 [ 574.935692][ T31] ? skb_put+0x11b/0x210 [ 574.940116][ T31] netlink_sendmsg+0x805/0xb30 [ 574.945342][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.950882][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 574.955869][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.961515][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.966847][ T31] __sock_sendmsg+0x21c/0x270 [ 574.972152][ T31] __sys_sendto+0x3bd/0x520 [ 574.976750][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 574.982415][ T31] ? lapic_next_event+0x11/0x20 [ 574.987318][ T31] ? clockevents_program_event+0x247/0x350 [ 574.995128][ T31] __x64_sys_sendto+0xde/0x100 [ 575.000484][ T31] do_syscall_64+0xfa/0xf80 [ 575.005061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.012501][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.017319][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.023380][ T31] RIP: 0033:0x7f9e7ef915dc [ 575.027883][ T31] RSP: 002b:00007f9e7feebec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 575.036630][ T31] RAX: ffffffffffffffda RBX: 00007f9e7feebfc0 RCX: 00007f9e7ef915dc [ 575.045353][ T31] RDX: 0000000000000024 RSI: 00007f9e7feec010 RDI: 000000000000000b [ 575.054212][ T31] RBP: 0000000000000000 R08: 00007f9e7feebf14 R09: 000000000000000c [ 575.062452][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 575.071041][ T31] R13: 00007f9e7feebf68 R14: 00007f9e7feec010 R15: 0000000000000000 [ 575.079074][ T31] [ 575.084136][ T31] INFO: task syz.2.4625:20148 blocked for more than 145 seconds. [ 575.092891][ T31] Not tainted syzkaller #0 [ 575.097886][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.107593][ T31] task:syz.2.4625 state:D stack:28280 pid:20148 tgid:20147 ppid:15874 task_flags:0x400040 flags:0x00080002 [ 575.120415][ T31] Call Trace: [ 575.123748][ T31] [ 575.126719][ T31] __schedule+0x14bc/0x5000 [ 575.131980][ T31] ? __pfx___schedule+0x10/0x10 [ 575.136888][ T31] ? schedule+0x91/0x360 [ 575.141236][ T31] schedule+0x165/0x360 [ 575.145430][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.151068][ T31] __mutex_lock+0x7e6/0x1350 [ 575.155711][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.161370][ T31] ? genl_rcv_msg+0x10d/0x790 [ 575.166131][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.171295][ T31] ? radix_tree_lookup+0x240/0x290 [ 575.176432][ T31] genl_rcv_msg+0x10d/0x790 [ 575.181055][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.186117][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 575.191828][ T31] netlink_rcv_skb+0x208/0x470 [ 575.196763][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.201907][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.207244][ T31] ? down_read+0x274/0x2e0 [ 575.212560][ T31] ? genl_rcv+0xd/0x40 [ 575.216698][ T31] genl_rcv+0x28/0x40 [ 575.221387][ T31] netlink_unicast+0x82f/0x9e0 [ 575.226236][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 575.231687][ T31] ? netlink_sendmsg+0x642/0xb30 [ 575.236664][ T31] ? skb_put+0x11b/0x210 [ 575.241189][ T31] netlink_sendmsg+0x805/0xb30 [ 575.246021][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.251795][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.256749][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.262144][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.267459][ T31] __sock_sendmsg+0x21c/0x270 [ 575.272570][ T31] __sys_sendto+0x3bd/0x520 [ 575.277144][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 575.282820][ T31] ? count_memcg_event_mm+0x21/0x260 [ 575.288161][ T31] ? exc_page_fault+0x82/0x100 [ 575.293134][ T31] __x64_sys_sendto+0xde/0x100 [ 575.297956][ T31] do_syscall_64+0xfa/0xf80 [ 575.302717][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.308934][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.314788][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.320955][ T31] RIP: 0033:0x7f18321915dc [ 575.325418][ T31] RSP: 002b:00007f183309fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 575.333905][ T31] RAX: ffffffffffffffda RBX: 00007f183309ffc0 RCX: 00007f18321915dc [ 575.342692][ T31] RDX: 0000000000000020 RSI: 00007f18330a0010 RDI: 0000000000000003 [ 575.350784][ T31] RBP: 0000000000000000 R08: 00007f183309ff14 R09: 000000000000000c [ 575.358798][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 575.366932][ T31] R13: 00007f183309ff68 R14: 00007f18330a0010 R15: 0000000000000000 [ 575.375673][ T31] [ 575.378778][ T31] INFO: task syz.2.4625:20149 blocked for more than 145 seconds. [ 575.386738][ T31] Not tainted syzkaller #0 [ 575.391754][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.401571][ T31] task:syz.2.4625 state:D stack:26968 pid:20149 tgid:20147 ppid:15874 task_flags:0x400140 flags:0x00080002 [ 575.413718][ T31] Call Trace: [ 575.417662][ T31] [ 575.420746][ T31] __schedule+0x14bc/0x5000 [ 575.425337][ T31] ? __pfx___schedule+0x10/0x10 [ 575.431085][ T31] ? schedule+0x91/0x360 [ 575.435399][ T31] schedule+0x165/0x360 [ 575.439674][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.445185][ T31] __mutex_lock+0x7e6/0x1350 [ 575.449910][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.454974][ T31] ? genl_rcv_msg+0x10d/0x790 [ 575.460454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.465538][ T31] ? radix_tree_lookup+0x240/0x290 [ 575.470772][ T31] genl_rcv_msg+0x10d/0x790 [ 575.475328][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.480616][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 575.485628][ T31] netlink_rcv_skb+0x208/0x470 [ 575.491259][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.496342][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.501770][ T31] ? down_read+0x274/0x2e0 [ 575.506237][ T31] ? genl_rcv+0xd/0x40 [ 575.510429][ T31] genl_rcv+0x28/0x40 [ 575.514528][ T31] netlink_unicast+0x82f/0x9e0 [ 575.520831][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 575.526277][ T31] ? netlink_sendmsg+0x642/0xb30 [ 575.531351][ T31] ? skb_put+0x11b/0x210 [ 575.535665][ T31] netlink_sendmsg+0x805/0xb30 [ 575.540745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.546099][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.551759][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.557189][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.563307][ T31] __sock_sendmsg+0x21c/0x270 [ 575.568115][ T31] __sys_sendto+0x3bd/0x520 [ 575.572914][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 575.578122][ T31] ? fd_install+0x95/0x3d0 [ 575.583289][ T31] ? fd_install+0x307/0x3d0 [ 575.587964][ T31] __x64_sys_sendto+0xde/0x100 [ 575.592862][ T31] do_syscall_64+0xfa/0xf80 [ 575.597515][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.603820][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.608547][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.615066][ T31] RIP: 0033:0x7f18321915dc [ 575.619571][ T31] RSP: 002b:00007f183307eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 575.628612][ T31] RAX: ffffffffffffffda RBX: 00007f183307efc0 RCX: 00007f18321915dc [ 575.636957][ T31] RDX: 0000000000000020 RSI: 00007f183307f010 RDI: 0000000000000007 [ 575.646060][ T31] RBP: 0000000000000000 R08: 00007f183307ef14 R09: 000000000000000c [ 575.654356][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 575.662991][ T31] R13: 00007f183307ef68 R14: 00007f183307f010 R15: 0000000000000000 [ 575.671643][ T31] [ 575.674786][ T31] [ 575.674786][ T31] Showing all locks held in the system: [ 575.683076][ T31] 1 lock held by khungtaskd/31: [ 575.687963][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 575.697951][ T31] 1 lock held by klogd/5193: [ 575.703016][ T31] #0: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 575.713868][ T31] 2 locks held by getty/5594: [ 575.718560][ T31] #0: ffff88814cded0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 575.730205][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 575.741500][ T31] 3 locks held by kworker/0:3/5836: [ 575.746753][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 575.756941][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 575.767253][ T31] #2: ffff8880b8825f98 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 575.776706][ T31] 1 lock held by udevd/14691: [ 575.781903][ T31] #0: ffff888024f35358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 575.791473][ T31] 2 locks held by syz.0.4619/20137: [ 575.796687][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.805692][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.815126][ T31] 6 locks held by syz.5.4621/20136: [ 575.820887][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.829828][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.838882][ T31] #2: ffff888024f3b278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 575.850259][ T31] #3: ffff88814272df58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 575.859826][ T31] #4: ffff88814272d8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 575.872143][ T31] #5: ffff88814272d930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 575.885627][ T31] 2 locks held by syz.1.4623/20141: [ 575.890957][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.899326][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.908386][ T31] 2 locks held by syz.4.4624/20143: [ 575.914254][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.922601][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.932548][ T31] 2 locks held by syz.4.4624/20145: [ 575.937795][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.946755][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.955878][ T31] 2 locks held by syz.2.4625/20148: [ 575.961039][T20269] Bluetooth: hci17: command tx timeout [ 575.961682][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.975649][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.984805][ T31] 2 locks held by syz.2.4625/20149: [ 575.991074][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.000003][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.009045][ T31] 2 locks held by syz-executor/20153: [ 576.014517][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.022911][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.033200][ T31] 2 locks held by syz-executor/20155: [ 576.038631][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.040487][T20269] Bluetooth: hci18: command tx timeout [ 576.048061][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.062250][ T31] 2 locks held by syz-executor/20168: [ 576.067667][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.076054][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.085187][ T31] 2 locks held by syz-executor/20171: [ 576.091282][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.099669][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.108711][ T31] 2 locks held by syz-executor/20173: [ 576.114275][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.123402][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.133127][ T31] 2 locks held by syz-executor/20197: [ 576.138534][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.146854][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.156521][ T31] 2 locks held by syz-executor/20206: [ 576.161983][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.170362][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.180177][ T31] 2 locks held by syz-executor/20217: [ 576.185621][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.193938][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.200795][T20269] Bluetooth: hci19: command tx timeout [ 576.203657][ T31] 2 locks held by syz-executor/20219: [ 576.215624][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.224083][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.233326][ T31] 2 locks held by syz-executor/20221: [ 576.239898][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.248134][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.257256][ T31] 2 locks held by syz-executor/20243: [ 576.262901][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.271722][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.280897][ T31] 2 locks held by syz-executor/20252: [ 576.286300][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.294749][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.304390][ T31] 2 locks held by syz-executor/20263: [ 576.309892][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.318157][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.327714][ T31] 2 locks held by syz-executor/20265: [ 576.333882][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.342876][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.352078][ T31] 2 locks held by syz-executor/20267: [ 576.357477][ T31] #0: ffffffff8f35d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 576.366449][ T31] #1: ffffffff8f35d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 576.375709][ T31] [ 576.378072][ T31] ============================================= [ 576.378072][ T31] [ 576.386644][ T31] NMI backtrace for cpu 0 [ 576.386665][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.386688][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.386701][ T31] Call Trace: [ 576.386709][ T31] [ 576.386718][ T31] dump_stack_lvl+0x189/0x250 [ 576.386748][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.386770][ T31] ? __pfx__printk+0x10/0x10 [ 576.386810][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 576.386834][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 576.386859][ T31] ? __pfx__printk+0x10/0x10 [ 576.386893][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.386927][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.386952][ T31] watchdog+0xf3c/0xf80 [ 576.386985][ T31] ? watchdog+0x1e2/0xf80 [ 576.387018][ T31] kthread+0x711/0x8a0 [ 576.387049][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.387074][ T31] ? __pfx_kthread+0x10/0x10 [ 576.387103][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.387128][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 576.387153][ T31] ? __pfx_kthread+0x10/0x10 [ 576.387180][ T31] ret_from_fork+0x599/0xb30 [ 576.387215][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.387258][ T31] ? __switch_to_asm+0x39/0x70 [ 576.387283][ T31] ? __switch_to_asm+0x33/0x70 [ 576.387306][ T31] ? __pfx_kthread+0x10/0x10 [ 576.387343][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.387387][ T31] [ 576.387395][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.539062][ C1] NMI backtrace for cpu 1 [ 576.539081][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 576.539107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.539119][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 576.539147][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 576.539163][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 576.539180][ C1] RAX: 981d0637487ffc00 RBX: ffffffff8197438a RCX: 981d0637487ffc00 [ 576.539200][ C1] RDX: 0000000000000001 RSI: ffffffff8d76c03a RDI: ffffffff8bbfc660 [ 576.539213][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 576.539228][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805c70 [ 576.539241][ C1] R13: 1ffff1100395eb70 R14: 0000000000000001 R15: 0000000000000001 [ 576.539255][ C1] FS: 0000000000000000(0000) GS:ffff8881261b0000(0000) knlGS:0000000000000000 [ 576.539269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.539282][ C1] CR2: 00007f1c10917d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 576.539298][ C1] Call Trace: [ 576.539307][ C1] [ 576.539314][ C1] default_idle+0x13/0x20 [ 576.539356][ C1] default_idle_call+0x73/0xb0 [ 576.539384][ C1] do_idle+0x1ea/0x520 [ 576.539403][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.539423][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 576.539446][ C1] ? __pfx_do_idle+0x10/0x10 [ 576.539469][ C1] ? do_idle+0xa/0x520 [ 576.539488][ C1] cpu_startup_entry+0x44/0x60 [ 576.539506][ C1] start_secondary+0x101/0x110 [ 576.539531][ C1] common_startup_64+0x13e/0x147 [ 576.539561][ C1]