last executing test programs: 2m35.701577112s ago: executing program 0 (id=1374): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r1}) syz_emit_ethernet(0x76, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @mcast2, @private2, [@hopopts={0x3a}], "f4c638be"}}}}}}}, 0x0) 2m35.334206893s ago: executing program 0 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x3d}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x3, 0x1, 0x4, @private2, @mcast1, 0x20, 0x7800, 0x5, 0x7}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@local, 0x0}, &(0x7f0000000500)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r6) readv(r6, &(0x7f0000001780)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000044}, 0x4048000) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000200)=""/166, &(0x7f00000002c0)=0xa6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c000280080017"], 0x38}}, 0x20040000) 2m34.208542817s ago: executing program 0 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}], 0x1) listen(r0, 0x80010040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0xb, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 2m33.889267164s ago: executing program 0 (id=1386): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r1}) syz_emit_ethernet(0x76, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @mcast2, @private2, [@hopopts={0x3a}], "f4c638be"}}}}}}}, 0x0) 2m33.503151847s ago: executing program 0 (id=1390): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x4008800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x300, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) write$tun(r3, &(0x7f0000000100)=ANY=[], 0x26) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "0a520b4c951ee12e"}}}}}}}, 0x0) 2m29.626677561s ago: executing program 0 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 'syzkaller0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) write(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a320000cd5e815f0000060a010400000000000000000500000008000b4000000000240004802000018007000100637400001400028013487eb4d414080001400002400000000d0900010073797a30000000001400000011000100000000000000"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x8, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000850000006c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m14.522401007s ago: executing program 32 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 'syzkaller0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) write(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a320000cd5e815f0000060a010400000000000000000500000008000b4000000000240004802000018007000100637400001400028013487eb4d414080001400002400000000d0900010073797a30000000001400000011000100000000000000"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x8, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000850000006c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.91297189s ago: executing program 5 (id=2515): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (fail_nth: 6) 17.827306483s ago: executing program 1 (id=2516): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f0000003d00)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7}, &(0x7f0000000040)=0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000000300)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)="b9a010023d6c5ba69aef8c89fc2ec4d3a210e47893bae5257dfb686a8bc1a367faf0da8eb8c3997add62309178bd10a9d47dcd1212279f663411a2ce305851effd360a2bfbb012f1f15a246303df2ae54f8ce1cb60de2b89de1246ce2e800ad3e5c20f079dc5d714c18ff665fcc061e15025a21e201d68e2e61b4dcfb21a", 0x7e}, {&(0x7f0000000540)="8176c724103b0d68484915e8eff97c5ae7c719a70c1c1055eccc458b84afa06014125c16a610ebc7380c79c0f828ef127681c9af31070805780bf50e143effc4c524869c1665b58f27a22a7588dcea7145d633c4", 0x54}], 0x2, &(0x7f0000000680)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xbb, [@empty, @empty, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @multicast1, @multicast2]}, @ssrr={0x89, 0xb, 0x7, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2]}, @generic={0x7, 0x4, "4ed8"}, @timestamp={0x44, 0xa, 0x1b, 0x0, 0x6, [0xffff0001, 0x2, 0x1, 0x2, 0x0, 0x2, 0x8]}, @lsrr={0x83, 0x1f, 0x47, [@multicast2, @rand_addr=0x64010100, @private=0xa010102, @multicast1, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0xe}]}, @generic={0xdd68b03510df80d6, 0x7, "167215fab9"}, @timestamp_addr={0x44, 0x1c, 0x68, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x1ff}, {@multicast2, 0x80000001}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xd, "9ea863086f3a97353c9e55"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0xe8}, 0x840) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f00000008c0)="f06e00dcbcfd57c354333182854115b7", 0x10) close(r12) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000003c0)={r11, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x2, @mcast2, 0x8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in6={0xa, 0x4e23, 0x4, @local, 0x2}]}, &(0x7f0000000400)=0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@initdev, @local}, &(0x7f0000000100)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8a}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0xfffffffffffffcfc, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x5c}}, 0x10) 17.69016706s ago: executing program 2 (id=2517): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6d}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40840}, 0x1) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x410, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x5b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x17}]]}, 0x40}}, 0x4000) 17.629105143s ago: executing program 1 (id=2518): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 2) sendmmsg(r0, 0x0, 0x0, 0x2000c080) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 17.628779963s ago: executing program 3 (id=2519): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x2000c080) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 17.585077281s ago: executing program 2 (id=2520): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket(0x2b, 0xa, 0xc6) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 17.491564359s ago: executing program 1 (id=2521): syz_emit_ethernet(0x35, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000002840)=[{0x0}], 0x1) recvmmsg(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x4b8}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{}, "a0441f4991eaa4b4c65c660b160b8f33df015e6555cf89b4011d09f3e7da5eb9c589b2c5c3ff791935542ec88e3cdde9bbfde00519728ca4f0979394929bcc880ded9fc382c9ff42ff1297d2cb1ace4ec38d7cc4a6b4c5b0a1adf658f5065e67aea95e7bd5300ed7ff552cfdc63a51ab95e80fb183c89c5a0d4d889001c3eeb2d7ed99de5a52928740bfaf4f5537b7b7f38a52adcb5ec62d4a24bd2eede6c2c167a6a3de5e7d1de861e7fac9ade96836c21aec2ea779c58f02f45ce840fb0366a2078c2b53166d97f5f0604fb507921b3c92eb416048253cdfe7993708db8370bb96254ba717c7e1d101ee3b57b0928fca7d118461d870a160cbab81d3ad852789087e312726ae3c5daf8390172075f927aeb9e4ef24d405cbdbcde9000f9ca952513587bf0c056952c2ad0ce8756035142329afa3bc6d73a419a0f778e22d83821dd3dec809c98afb6e3b3b0d102417fd125db2fe738995b76f9c6ab5a0bbdce776d7c6702a2e653e0509322846b1530e8285c35398e4e1ef73c6d1b7a40e40f7e17a772f33652c0871c5890f095d872e52977937f290b358ce9aac0c7a081be18be4ce2f4e7d9b2332da2e280c9afc5b3440f10e670374121d68d9990ce53b1065dbf0983d3e66449501551bb1bc9d171be184e6f212d8e47969f6f9a34381007baac2316a1415c99142f8380c037f98c0e8c44a7cab0d19207d1b5ae1daab169a930f6eb972034224a999f5fc8b4e3563639da7e5b490f6258900b9cbd274025c082c7f5375efff2944ae2ecc45aec6d61e605ebd45106f116d51d4b731f38e34cf49ee7bd99a40e8cc764e7c384db7dd8c7af94f64c7e2b93318c7127fc55c1c5cee9ca3284ff11e7ab37645d49ade45db2c95f9de308348f8f10c860077ddc14749c3ccb11a361e3c550d948ec93dd8e694eabbd755c49c055824db926b74cd15194237348fc5efa166c7dac9cca85e4f8b82f5fe1f49198bd034877348a5b9b015221d3e02ca3f1b2f13ebb87a241f175eb934974cb3cd2603190964938bb0fa3cd7787a539894c9be2db05a370b52297620f8975f3986bf30dffbcd6b253b9e464267640cf513ea2b05c2189dc503c83a88334974f89f0cea95f9622e56c18eb7b3147caa8057743f084be70f06ee9d6874a48f54d699604c8ab23d0045ec21c577269e17125e4dc5016647fc709fb930225e1d3965eb6aa024d3a3c255360eb3a0a88cc176654a4a383d0ca77315014b1370a8f42abf087bc213ee27ec14cc9b389a6331f23054e0666dbb159a0671eb06313f5533d615b5373b1810e711b7ae9eb446d3c3ffd8136948f38f7ed180148ccbccebff615a560783b7b0427f24c0b5b15b3c24524cb317e5da81cb2b7d03ad07fe2e769010d2d3222bb05b9f9746921e60a0be7956350c779092e62229322e682cd2213241d53936cc3cc2f02059c49e94bb9113b4e83c79f729a0652cacad45dc772a5eed8438eafe2802a1f36177c79a8d0afaf4279b5196794a374674aac5ec6124ea4d6de24ccde78ab0b0cfd388ba58e6189299588e31d5c02db06b412333b7379079a7a6dc125d9603ae27ea94625f5e0f85609caf22d825b8d3b599553982e6006503160ab10f037c41809e885fa81d6f6d364707c2b4fe0a742a587eabd2425f82289898604a496a4f5f67dfcb803e004d63317088d0ed748bb1fd027c288df6179f26e80d4facdac01cb7b51bbe0a7915d19bdb1d96f51eacb9ba94e1df851c435939175db843137440cf5e21354cb3e61e6761eb6989423382026a73243dc3d17a119fe20560fc3b6b6963f8f1c2c39808b00202759a127ba34fc2bdded41ce4e96fafc29ce2517b4ecaec48a6b6458d006ff06522481a00ac950f144d5b31fd0e31ffe5222a45731eed241884f5eda87a1e3d83d83ab427d1c86ae7f3dfa648719426fa56105e74f3d3a63029cb21bb7f69bf79d8615f3d375b33095bfe6bf91a59fedd789ab37086c915ffb9d95b3f6e4efe19b8fda0e4b6252edd36417dbcf8e9850707a120cfec50f695bd319024848fdf94d0ea029b71be8419316ba9a07137d433de06fc272b5a8ac4f28dd74150dd328f8165ad26d38d60a9467d12f5d7e48a0209aac1b9e4541dc5d40fd9fdaac6f52cf7beb4fe7a710fb4540b61681e5a7f72d37a41f0d236483d362415d73ac3042f60d7e010c837354ff7531c199f8c67b344f5bfd23155aaffe13021cffbcf4a318ec860542855c91abf36c71861229ba1c0c1df6093cbf6afd2c7b1660a85c191cc445377a28619f63ab736c3e1b1ea7a45c95b0deb6f5d257907948e84eb8c509abc3d0b2139af1d5a87b8a5f46968e77c7955c0b4fff5c11455f393946cf07728b0e1281a4cb67724a427c822ba1be6a469ad70b73fdf87c44fd31714861a5ac734518b111084aecd4dab37cb60a23d2ad3982a850620e47840f1093c205aad5897dab1c181930caaf3f3da585b8f4293fda72ec45bed08c6b5eb493ddea63f00141fec116300f0083492029642273f76610d14655a3c8ff35558c59a8ee34f5f4706f3eed5b270cb2d3bb5fe23d154db3a97fdc87d53f3597168eeb57aa9fea862a1798dc5378984fe747a09122c0275a13da0248776fe66731de57fc30e052a02f56162fe3e1bec96992b78a967c6f1c880bfe0057e0bb9fd4f3f73e4b360145845ff5cae2c3bfa96eb7dfd34ae2933eb378cd50e8255d4a015b915e4ce8a30967a0256c313431c455202c4945212a26d24ff153e653b6c114ca1e7603df42058907f392227d3676a9744ac3b80716b26a8455fb840ad7aef092aa18bda7a9e8a11d086b90f7be3e3390c633afed3480c07617bd6804de6053361285675483f34e25e53f33923494471e332c2e6aee020e30c3c08f9be219859169276d6f82a79fc7fd2ea746dfb9cf5cafc6fc2c1565b6f324d7899a5fea26f8b9231b352ba88606a8a292699716b6640d33f7db3a86a1c85ceaa8a0b995efc1e41ff3e23c029a0b811333ccb09c8db3b40ff35e27f6bf3c898ab3b743f026ed4ef7cd8c89ed2d949f71555755fd517efcbdb97f855d42a765407ad0d6b1b66e64c48653cf1934060e19e28418c9bb876dcb0868f4c0ff70dcd4d73e60acdac5c8785251e57f6e4c6852f359ff2a3d42e53d2da83be7c667cee9647a0dafbf81c30388c1b2da831ca7f0fd59b353295fd93097256f4f44bc6cf7c7a24d1d776cd7853b22783293421ae324ea4f10dce551b443c19b1eda49a9d337bfd721d5b86694c1caee332acf51cc0b6c60bcccf257734b301ccc2a38285f3ceecadeda631eb571d1a59310d30b3e1854399f17cc7e62173475061b625c67731ed4f5cb4a31f7a7f7ec7c8562de9ce9b923f2c619261683fb585ce3e05124ec32f20628d76ca234e9529865ee19d4a1b07a27bb76cf7c0d1b40335cfa1c64a09aee7c8c4cc6a75d9405bf64db83b8b91320ce0966ff9784adadd2e3364e7589c8fb4aa80373aeab5b09241715a0b0b68607ca3f92406ef4c17e6d7b5c4cc043aee9d42e348120632efdb037bc32a1bd14237c678f650de62bf06653407d80165a93b4becaae26294a3ed6ef6a18ae3bf976a23d93b62cb665494a7294a60136ebab63eafb6b559395d72426cddbcc406e2670a6207c2e9be87d48b770cad5d6e30b615f671b052ae528cdd932a3b956fb2d0e7f9096cea2a652760928807342e6c49cc53a51e5b69b27b32bf0a19ff9b7b31c040e76505285f9fabd49235e28cbc2a9943f3083760692e824d10f087bcbfcb162d8ae58ce5a5f198b8ac5a36f019a91106499dab128b3c649f59cbede47a1a4d08970ce72882aa777c1b62c6962b9108ffd76f389c0b047de745982324a65790e5c0366fcc351c850909054780a862ea77e8a1deb7eae9bf21adda217999c4b431ae23aaff87c3067acfcad8293d5e9dadc53eb61a545247c516a60143f244f3c2c85b69f1e0b2e57cc3effdc9ca64168060c087e9bd4b786dae7995b3615e8b6c028890ddf7d9d8be5b730465e1dd602792404e04ec300656f61b83f9a4634b138a7a23a9a347d7a363a6b6b9408946b5725c1f11ad8e5c8140bb55d9207a17216fea5b751b9f1fcc5d3e94fd0e988d47a93382b40b914ba0f153eca89888fabeba27bc392c2cd104d203be7369ac714818e102a73ed6fec96c8ddf7a890b26d8ed6b10f263ecf38a66d1fcda33d7cff027118c66f04a00a465eafd59d657f29a6040aeed21d94383f9945c534509e507b0e48505f6bc7b67a754214e222319576fa97293ba20b861e7f8e4d0616288819b24fcea5a7e11beb65a5c0a351df40da63d8991f88386acad6f4290f79cc52bfcb311198421243f88ce585e466e5e3b86500d9fcf95013d3ab2b48450a341d37f09bb7fb9fb549ce97645469ca856567870a30d0b51650e2ff8802d34ef4ff6f6ec0ec696113d792e46664d23636281173dc274a654b7a7e25329108f5e29cdd7c823b8e85e0cfd892244766519fb950993f10a899709584e4ec21c5fae7f6c6e0cd50fc50abffb406873704351a57bb4020b68ce9e6987d0a0bb4bc3555eccf749d5c26d95acfea3666d780cf317b6562d3aeb059b1e93da4776ba846f9ae5a398a0171ba427537381501b1e5b366fed3cc92bf68f7527c1de453bf8332a63f41bbbfed01fbf122cd5dc5eebae6a208e834c7f94d1fa2c217cf1879c3d1ccb7cdfda9496756acb45d194e9e8888286626c7f47350a2b2d45d04f00c030e647dd6507f8888fb6ae185c2c4e4804d5f0f729084343bf752466c19f82a43a551b942e8bf76053177cb4313b727228b117525fdeee797b8e00682c0f30b23ae3c3429f2680bf1fc2662077068a6e1bca2c5668a61b92c11d67718e882654c5408dd55898dd3a8fee0073d1486680aac109e691b678569cae22a2f621b3fa8a0617d8d414b9f72b20a9422579dcc5db77cdb652bff0628d620a3c38637c11993bc1ead8e1457d513c0fe7c6f00f427e2e550d60d1cd43eda9fa5732f4bac890a34f51f0e30701f458e1b4a158ce461e0c18cf040d1febc3a926e329b00f36ba9f92321ae93dc995765f161fd5c8df8ed87d0b2accfc6ed9f9645fa124d9f3cd8f326ae8717603b072d282661f7124da8855f050f8c21841f19ea6fc2c8db0d1857114f41362c1547e2c7fc2cbd4a09947fc591ec0837ae6ffc5ecf7c1330f3754aeca637962109dbb17cfc08a559f10756a13503ef615c05cfd19d5fc572db0ee4a3511e75f16e75d06ddb7d425ceaa1bb8fe7965a42fa09e1df8f4fe7d56cfa1b8f5f5584c8a9415dc68084345175c0c1d549b48ba0dafd202fd6b36093aefa94e96da0ba74f6e8bec2c81aec8950c2e4555dce36add86a98a5ea9e34fbdc2ea9c62e37096d803e9e962caa3380b6e0c58525c58b2a56b7b298170ec1c24a5eb0461a4c77bb498c24c8c51a1bc034e70f6bf6c05eed9e72850a68dd95a3879747c15ac42e8a0962d6ce5b0bd4335293c7c6e3313670578d833b0c7a217a54e3e7c70ac4ec8e1d8531d73825b183c1bf213f46173a834bb80a0a970496812bd64c3db33b257f9e5b1459680e1a9bb91beb61a4aabae6c3bcb01e71ec04a86855852cf1b49c786cb6e75594623445b03a1e6733e552a1f8c0bc3c77c39795f24c6b0e78971c5f7461d524f336770a508e7f317d3e4d1c819947d087839f57ffb1f4fbc7b1b07d9d015f37a04f6a524051bffb63cf59d686cd6fd7ab4a8038dd699049deeb91efacb861c5ba61063fa7e"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x6f4}}, 0x0) 17.344811266s ago: executing program 2 (id=2522): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="ef884051be1fc2aa9247cf41ee48633bcc70d42b5a25cf030d8a6542e0ea6766bd5babf2f072cc58ee507b34d5ebc3ad014085b875b566bc94029da0999387d012f86b9f25400ecb737a335bdc16093e55b747028b26cfd0a5cf0852c81a32d470aaa26b3060c4edf9af156fd566505a401618594475c29a865e75e158ba6b457e7b473c", 0x84}], 0x1) 17.236008114s ago: executing program 2 (id=2523): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x2000c080) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 17.072808778s ago: executing program 4 (id=2525): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 17.012112179s ago: executing program 5 (id=2526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4048090) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 16.998462655s ago: executing program 4 (id=2527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 16.842450961s ago: executing program 4 (id=2528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x4000000) sendmsg$nl_generic(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) (fail_nth: 46) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc0, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffd, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}, 0xffffff00}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x57e}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) close(r3) 16.767991999s ago: executing program 5 (id=2529): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x200}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/88, 0x58) 16.708964316s ago: executing program 4 (id=2530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$sock(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)="868a", 0x2}, {&(0x7f0000001940)="6e436a5de5066c34e4014eb7f0e551", 0xf}], 0x2}, 0x80) readv(r4, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/116, 0x74}, {&(0x7f0000000080)=""/19, 0x13}], 0x2) sendmsg$nl_generic(r4, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000001dc0)={0x78, 0x2f, 0x20, 0x70bd2a, 0x25dfdbff, {0x3}, [@generic="935b0a94d7e7ca6bdbfb93abbba5e4dd1ff1121b1a929864e5602ff484ec5ea0a77f2fba254fda55d719a23ee8f60439157686e81020aa0728ffb6ac6812782b4ce783baa249de796c97776ba56e22426ddcc210d445e54840abc601e65f92d4fcb2ef"]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 16.672709754s ago: executing program 3 (id=2531): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000000000007000000860effffffff02082755f8bebdaf900401000000000000001400000000000000000001000100"/64], 0x40}}], 0x1, 0x804) 16.576227878s ago: executing program 3 (id=2532): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x98, 0x200, 0x0, 0x130, 0x298, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0xff000000, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@ip={@multicast1, @multicast1, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'hsr0\x00', {}, {}, 0x0, 0x3, 0x30}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xff000000], 0x4e23, 0x4e21, 0x4e24, 0x4e22, 0x56f, 0x8, 0x2, 0x0, 0xa3}}}, {{@ip={@private=0xa010101, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, 0xff, 0x1000001ff, 'veth1\x00', 'veth0_macvtap\x00', {}, {}, 0x1, 0x1, 0x41}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0xf7ff, [0x2f, 0x36, 0x1d, 0x1c, 0x23, 0x21, 0x2f, 0x7, 0x1a, 0x7, 0x2e, 0x37, 0x30, 0x9, 0x37, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x7, 0x1, &(0x7f0000000040)='9', 0xe, 0x4, 0x458, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) 16.512258174s ago: executing program 5 (id=2533): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="ef884051be1fc2aa9247cf41ee48633bcc70d42b5a25cf030d8a6542e0ea6766bd5babf2f072cc58ee507b34d5ebc3ad014085b875b566bc94029da0999387d012f86b9f25400ecb737a335bdc16093e55b747028b26cfd0a5cf0852c81a32d470aaa26b3060c4edf9af156fd566505a401618594475c29a865e75e158ba6b457e7b473cdaa449963a31e20571", 0x8d}], 0x1) 16.511268862s ago: executing program 1 (id=2534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002340)=""/4102, 0x1006}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/141, 0x8d}], 0x4}, 0xfffffffe}], 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000440)="48000000140d8c560a84606080ffe0064e204e20f6ffffffffffffff00000f7f8907000020008d42188fedc22e47ad8f75", 0x31}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff395954", 0x4d, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmmsg$inet6(r3, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f00000048c0)={0x43c, 0x37, 0x300, 0x70bd29, 0x25dfdbfc, {0x1f}, [@nested={0x13e, 0x13f, 0x0, 0x1, [@nested={0x4, 0x92}, @generic="941c89723f7a7f3b3c25e000a9c77bac576a946027083a4254b6f43fe3976a2f14ec897406e7a65bb52f0a47425252d0df1023e3ccf3e4f9c563ce0ebb97fc8a85d468d47d81efc1ed47e9f94ff4e5955cc2223d86991745fe05e3739531985ac34bee4a7fbd08707ba79d830821d31339115ce38735d04c617b612f3a0192013267d911676540e58fcb536b328465c7d011fc19eeee3ce6bb7383a3f26f934114405a02c43580aacc407b8f457864da2cc19d5f2224605cd285f5e7786059a3cc314fdcd5cb29c8bd5498e19a3274f88c11d98ac4d578ec51861e1befe1b2e42c0f7ff93376", @nested={0x4e, 0xd8, 0x0, 0x1, [@typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x148}, @generic="69c1b70863d8f5f720f7c3ab05dad0d6cd3c2049f56f4753e2ded967d64e32899ac7dc09ce11a66129f7dfa828bf60e2b793"]}]}, @nested={0x39, 0x1c, 0x0, 0x1, [@generic="ab5c91107ac373b80e58e26bf2f3bcdd774f1b5e4a70eefce6ee74c0021c999223f5a8e16775918838", @typed={0x8, 0xc8, 0x0, 0x0, @pid}, @nested={0x4, 0x12c}]}, @generic="73018ba8320d52a3af4b305f97667ad8ff525944d68da9f4030b5e5516003acb0aa7dbd238436a1da7f6b3330dcc41824eb845d55429524757e721d63ca6dad2b7f90b465dc2d92e0212905fd9264695a393e07f72cb523a0a460ce32e63281f82e676be71d3cc865700c24a5eb228ac412cd0f0c4c2828b7c5e5c63dc206c53ea641daa41a078d6db7fecc8f5885df237428a3b633b839b7145c87107de818451cf10012cc650f38e209a2c02621755b3d48e06807279f2d3b225c1d45a77cc13c036af24c3c907", @generic="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", @nested={0xc0, 0x72, 0x0, 0x1, [@nested={0x4, 0x1e}, @typed={0x8, 0x24, 0x0, 0x0, @fd=r0}, @generic="cc12e7eb75b1f8ebce9a17a9910872bef2cb789c8b4d7f2965999b1c52e06aa383727ce1d62fd3a380d8301737c1f3049a81f6e5e4ab360a2f6a94b4cbe3375b97907f90d9b7bbc4a35aca93c763200f68bf3205f6e327b1b476c5c028ddda931e3f90a9c472933b765f757ea532602ee9ea83bfaebacd6b1be67da6fb0101bfb58990e6a80659525bd87c1b4e407bd86572d6038921d3e951b12d812e4e6b5eaccf00350e6e5249", @typed={0x8, 0x82, 0x0, 0x0, @fd}]}, @nested={0x4, 0x130}, @typed={0x8, 0xf0, 0x0, 0x0, @pid}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8d4}, 0x20000000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964}, 0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x0, 0x3, 0x4, 0x2000000}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r7, 0x40047459, 0x0) write(r2, &(0x7f0000000000)="21000000470010aaaaaaaaaa0003000000000000000000000000000000030000000000000000000000000000000300"/76, 0x4d) listen(r0, 0x80010040) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc20000987800003f028cca7a02fd380c57c45d8691439c3b6de4829c7f339bf6bec31b950c301ac1c7775a19d3ce32a0526dddfa90bf74886cd0ddc5b5528fdf0d2515c104890448c925b4e338faaf18e9847f6e57bd8d6457bd9bb48e3846020c1c7f8a725f3c9f9c9dcaf5581a69822a282e6d83716d581e296a1acd54ed57c6c6976667e0dc7e2e261052c72048010044a3cba372c4eaccd3ac9f9a8f85e384216b6acc47e2a9a6497ecc2a858bf5607e1e1294bbc47139e2f9da5a02a811ac1289be01980e70c1c0c03f0bfe27841b24eb83f3516696"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0xb, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 16.511081318s ago: executing program 4 (id=2535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r1, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x2000c080) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) 16.437681119s ago: executing program 3 (id=2536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75", 0x39}], 0x1) listen(r0, 0x80010040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0xb, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (fail_nth: 3) 16.356475187s ago: executing program 1 (id=2537): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 16.229086333s ago: executing program 5 (id=2538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 16.201903743s ago: executing program 3 (id=2539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4048090) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 16.179828089s ago: executing program 2 (id=2540): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r10, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x8, 0x1}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000002240)=ANY=[@ANYRES16=r2, @ANYRES16=r13, @ANYBLOB="000426bd7000fedbdf253b00000008000300", @ANYRES32=r14, @ANYRES32=r11], 0x764}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 15.842559532s ago: executing program 1 (id=2541): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x72, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 15.781517966s ago: executing program 5 (id=2542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (fail_nth: 4) 15.715892346s ago: executing program 3 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x20}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x50bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000001}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x20}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x50bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000001}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) (async) 15.624397941s ago: executing program 2 (id=2544): syz_emit_ethernet(0x35, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000002840)=[{0x0}], 0x1) recvmmsg(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x4b8}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{}, "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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 15.535935675s ago: executing program 4 (id=2545): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 231.641142ms ago: executing program 33 (id=2542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) (fail_nth: 4) 192.69036ms ago: executing program 34 (id=2541): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x72, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 140.569657ms ago: executing program 35 (id=2544): syz_emit_ethernet(0x35, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000002840)=[{0x0}], 0x1) recvmmsg(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x4b8}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{}, "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"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 61.942062ms ago: executing program 36 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x20}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x50bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000001}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x20}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x50bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000001}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) (async) 0s ago: executing program 37 (id=2545): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) kernel console output (not intermixed with test programs): entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.163945][T12089] ? clear_bhb_loop+0x70/0xc0 [ 338.163971][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.163989][T12089] RIP: 0033:0x7f3a45d9e159 [ 338.164011][T12089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.164028][T12089] RSP: 002b:00007f3a46c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.164060][T12089] RAX: ffffffffffffffda RBX: 00007f3a46025fa0 RCX: 00007f3a45d9e159 [ 338.164075][T12089] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.164089][T12089] RBP: 00007f3a46c91090 R08: 0000000000000000 R09: 0000000000000000 [ 338.164101][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.164114][T12089] R13: 00007f3a46026038 R14: 00007f3a46025fa0 R15: 00007ffe66387068 [ 338.164148][T12089] [ 338.908633][T12116] FAULT_INJECTION: forcing a failure. [ 338.908633][T12116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.908668][T12116] CPU: 1 UID: 0 PID: 12116 Comm: syz.5.2029 Not tainted syzkaller #0 PREEMPT(full) [ 338.908690][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.908702][T12116] Call Trace: [ 338.908710][T12116] [ 338.908720][T12116] dump_stack_lvl+0xe8/0x150 [ 338.908753][T12116] should_fail_ex+0x410/0x560 [ 338.908781][T12116] _copy_from_user+0x2d/0xb0 [ 338.908807][T12116] ___sys_sendmsg+0x1c6/0x360 [ 338.908834][T12116] ? __lock_acquire+0x747/0x2de0 [ 338.908860][T12116] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.908930][T12116] ? __fget_files+0x2a/0x420 [ 338.908956][T12116] ? __fget_files+0x3a2/0x420 [ 338.908995][T12116] __x64_sys_sendmsg+0x1b1/0x290 [ 338.909025][T12116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.909074][T12116] do_syscall_64+0x166/0x520 [ 338.909097][T12116] ? trace_irq_disable+0x3b/0x140 [ 338.909118][T12116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.909138][T12116] ? clear_bhb_loop+0x70/0xc0 [ 338.909162][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.909181][T12116] RIP: 0033:0x7f5687f9e159 [ 338.909200][T12116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.909217][T12116] RSP: 002b:00007f5688ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.909240][T12116] RAX: ffffffffffffffda RBX: 00007f5688225fa0 RCX: 00007f5687f9e159 [ 338.909254][T12116] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 338.909267][T12116] RBP: 00007f5688ece090 R08: 0000000000000000 R09: 0000000000000000 [ 338.909280][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.909301][T12116] R13: 00007f5688226038 R14: 00007f5688225fa0 R15: 00007ffffe217b58 [ 338.909335][T12116] [ 339.743026][T12142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 340.173214][T12171] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.633344][T12190] FAULT_INJECTION: forcing a failure. [ 340.633344][T12190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.633380][T12190] CPU: 1 UID: 0 PID: 12190 Comm: syz.5.2051 Not tainted syzkaller #0 PREEMPT(full) [ 340.633402][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.633415][T12190] Call Trace: [ 340.633424][T12190] [ 340.633433][T12190] dump_stack_lvl+0xe8/0x150 [ 340.633468][T12190] should_fail_ex+0x410/0x560 [ 340.633496][T12190] _copy_from_iter+0x1d3/0x1660 [ 340.633529][T12190] ? lock_acquire+0x115/0x350 [ 340.633550][T12190] ? __pfx__copy_from_iter+0x10/0x10 [ 340.633574][T12190] ? lock_acquire+0x115/0x350 [ 340.633605][T12190] copy_page_from_iter+0x219/0x2d0 [ 340.633633][T12190] tun_get_user+0x1c16/0x44d0 [ 340.633658][T12190] ? tun_get_user+0x70a/0x44d0 [ 340.633699][T12190] ? aa_file_perm+0x4ed/0x15f0 [ 340.633725][T12190] ? __pfx_tun_get_user+0x10/0x10 [ 340.633747][T12190] ? __lock_acquire+0x747/0x2de0 [ 340.633782][T12190] ? ref_tracker_alloc+0x341/0x4b0 [ 340.633804][T12190] ? lock_acquire+0x115/0x350 [ 340.633829][T12190] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 340.633855][T12190] ? lock_acquire+0x115/0x350 [ 340.633875][T12190] ? tun_get+0x1c/0x2f0 [ 340.633902][T12190] ? tun_get+0x1c/0x2f0 [ 340.633921][T12190] ? tun_get+0x1c/0x2f0 [ 340.633947][T12190] tun_chr_write_iter+0x113/0x200 [ 340.633971][T12190] vfs_write+0x612/0xba0 [ 340.634009][T12190] ? __pfx_vfs_write+0x10/0x10 [ 340.634050][T12190] ? __fget_files+0x2a/0x420 [ 340.634085][T12190] ksys_write+0x150/0x270 [ 340.634117][T12190] ? __pfx_ksys_write+0x10/0x10 [ 340.634155][T12190] do_syscall_64+0x166/0x520 [ 340.634178][T12190] ? trace_irq_disable+0x3b/0x140 [ 340.634197][T12190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.634217][T12190] ? clear_bhb_loop+0x70/0xc0 [ 340.634243][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.634263][T12190] RIP: 0033:0x7f5687f5e98e [ 340.634283][T12190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.634300][T12190] RSP: 002b:00007f5688ecdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.634332][T12190] RAX: ffffffffffffffda RBX: 00007f5688ece6c0 RCX: 00007f5687f5e98e [ 340.634347][T12190] RDX: 000000000000003a RSI: 0000200000000440 RDI: 00000000000000c8 [ 340.634359][T12190] RBP: 00007f5688ece090 R08: 0000000000000000 R09: 0000000000000000 [ 340.634372][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.634384][T12190] R13: 00007f5688226038 R14: 00007f5688225fa0 R15: 00007ffffe217b58 [ 340.634417][T12190] [ 341.071890][T12205] FAULT_INJECTION: forcing a failure. [ 341.071890][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 341.071924][T12205] CPU: 1 UID: 0 PID: 12205 Comm: syz.4.2058 Not tainted syzkaller #0 PREEMPT(full) [ 341.071947][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.071960][T12205] Call Trace: [ 341.071969][T12205] [ 341.071976][T12205] dump_stack_lvl+0xe8/0x150 [ 341.072010][T12205] should_fail_ex+0x410/0x560 [ 341.072036][T12205] ? __alloc_skb+0x1db/0x7a0 [ 341.072064][T12205] should_failslab+0xa8/0x100 [ 341.072088][T12205] ? __alloc_skb+0x1db/0x7a0 [ 341.072108][T12205] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 341.072138][T12205] ? __alloc_skb+0x18d/0x7a0 [ 341.072161][T12205] ? __alloc_skb+0x1db/0x7a0 [ 341.072189][T12205] __alloc_skb+0x1db/0x7a0 [ 341.072217][T12205] netlink_sendmsg+0x5d4/0xb40 [ 341.072256][T12205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.072293][T12205] ? apparmor_socket_sendmsg+0x98/0x360 [ 341.072318][T12205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.072344][T12205] sock_sendmsg_nosec+0x13a/0x180 [ 341.072376][T12205] ____sys_sendmsg+0x54e/0x850 [ 341.072408][T12205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.072444][T12205] ? import_iovec+0x73/0xa0 [ 341.072471][T12205] ___sys_sendmsg+0x2a5/0x360 [ 341.072495][T12205] ? __lock_acquire+0x747/0x2de0 [ 341.072520][T12205] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.072583][T12205] ? __fget_files+0x2a/0x420 [ 341.072609][T12205] ? __fget_files+0x3a2/0x420 [ 341.072644][T12205] __x64_sys_sendmsg+0x1b1/0x290 [ 341.072674][T12205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.072723][T12205] do_syscall_64+0x166/0x520 [ 341.072745][T12205] ? trace_irq_disable+0x3b/0x140 [ 341.072765][T12205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.072785][T12205] ? clear_bhb_loop+0x70/0xc0 [ 341.072809][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.072827][T12205] RIP: 0033:0x7f2a3eb9e159 [ 341.072846][T12205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.072863][T12205] RSP: 002b:00007f2a3f981028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.072885][T12205] RAX: ffffffffffffffda RBX: 00007f2a3ee25fa0 RCX: 00007f2a3eb9e159 [ 341.072899][T12205] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 341.072912][T12205] RBP: 00007f2a3f981090 R08: 0000000000000000 R09: 0000000000000000 [ 341.072923][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.072935][T12205] R13: 00007f2a3ee26038 R14: 00007f2a3ee25fa0 R15: 00007fff7eda6b98 [ 341.072966][T12205] [ 341.306924][T12209] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 341.842471][T12237] syzkaller0: entered promiscuous mode [ 341.842497][T12237] syzkaller0: entered allmulticast mode [ 341.895910][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 341.896043][T12241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.963062][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 341.982977][T12241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.017563][T12249] Cannot find add_set index 4 as target [ 342.293242][T12259] FAULT_INJECTION: forcing a failure. [ 342.293242][T12259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.293278][T12259] CPU: 0 UID: 0 PID: 12259 Comm: syz.1.2075 Not tainted syzkaller #0 PREEMPT(full) [ 342.293300][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.293311][T12259] Call Trace: [ 342.293332][T12259] [ 342.293340][T12259] dump_stack_lvl+0xe8/0x150 [ 342.293376][T12259] should_fail_ex+0x410/0x560 [ 342.293404][T12259] _copy_from_user+0x2d/0xb0 [ 342.293431][T12259] ___sys_recvmsg+0x173/0x5a0 [ 342.293464][T12259] ? __pfx____sys_recvmsg+0x10/0x10 [ 342.293494][T12259] ? lock_acquire+0x115/0x350 [ 342.293546][T12259] do_recvmmsg+0x31a/0x7f0 [ 342.293583][T12259] ? __pfx_do_recvmmsg+0x10/0x10 [ 342.293621][T12259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 342.293647][T12259] ? __fget_files+0x3a2/0x420 [ 342.293681][T12259] __x64_sys_recvmmsg+0x198/0x250 [ 342.293709][T12259] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 342.293745][T12259] do_syscall_64+0x166/0x520 [ 342.293765][T12259] ? trace_irq_disable+0x3b/0x140 [ 342.293783][T12259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.293802][T12259] ? clear_bhb_loop+0x70/0xc0 [ 342.293826][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.293845][T12259] RIP: 0033:0x7f4f8179e159 [ 342.293864][T12259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.293879][T12259] RSP: 002b:00007f4f7f9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 342.293902][T12259] RAX: ffffffffffffffda RBX: 00007f4f81a26090 RCX: 00007f4f8179e159 [ 342.293918][T12259] RDX: 0000000003fffdf2 RSI: 0000200000000040 RDI: 0000000000000003 [ 342.293931][T12259] RBP: 00007f4f7f9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 342.293944][T12259] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 342.293957][T12259] R13: 00007f4f81a26128 R14: 00007f4f81a26090 R15: 00007fffe24cd3d8 [ 342.293992][T12259] [ 342.752287][T12273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2080'. [ 343.066337][T12290] FAULT_INJECTION: forcing a failure. [ 343.066337][T12290] name failslab, interval 1, probability 0, space 0, times 0 [ 343.066373][T12290] CPU: 1 UID: 0 PID: 12290 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) [ 343.066395][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.066407][T12290] Call Trace: [ 343.066415][T12290] [ 343.066423][T12290] dump_stack_lvl+0xe8/0x150 [ 343.066455][T12290] should_fail_ex+0x410/0x560 [ 343.066492][T12290] ? __alloc_skb+0x1db/0x7a0 [ 343.066514][T12290] should_failslab+0xa8/0x100 [ 343.066539][T12290] ? __alloc_skb+0x1db/0x7a0 [ 343.066559][T12290] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 343.066588][T12290] ? __alloc_skb+0x18d/0x7a0 [ 343.066615][T12290] ? __alloc_skb+0x1db/0x7a0 [ 343.066646][T12290] __alloc_skb+0x1db/0x7a0 [ 343.066674][T12290] netlink_sendmsg+0x5d4/0xb40 [ 343.066711][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.066747][T12290] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.066772][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.066798][T12290] sock_sendmsg_nosec+0x13a/0x180 [ 343.066822][T12290] ____sys_sendmsg+0x54e/0x850 [ 343.066855][T12290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.066891][T12290] ? import_iovec+0x73/0xa0 [ 343.066922][T12290] ___sys_sendmsg+0x2a5/0x360 [ 343.066947][T12290] ? __lock_acquire+0x747/0x2de0 [ 343.066973][T12290] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.067054][T12290] ? __fget_files+0x2a/0x420 [ 343.067079][T12290] ? __fget_files+0x3a2/0x420 [ 343.067114][T12290] __x64_sys_sendmsg+0x1b1/0x290 [ 343.067145][T12290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.067196][T12290] do_syscall_64+0x166/0x520 [ 343.067219][T12290] ? trace_irq_disable+0x3b/0x140 [ 343.067239][T12290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.067259][T12290] ? clear_bhb_loop+0x70/0xc0 [ 343.067284][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.067304][T12290] RIP: 0033:0x7f3a45d9e159 [ 343.067323][T12290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.067340][T12290] RSP: 002b:00007f3a46c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.067362][T12290] RAX: ffffffffffffffda RBX: 00007f3a46025fa0 RCX: 00007f3a45d9e159 [ 343.067377][T12290] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 343.067390][T12290] RBP: 00007f3a46c91090 R08: 0000000000000000 R09: 0000000000000000 [ 343.067403][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.067415][T12290] R13: 00007f3a46026038 R14: 00007f3a46025fa0 R15: 00007ffe66387068 [ 343.067449][T12290] [ 343.693963][T12308] pim6reg1: entered promiscuous mode [ 343.693987][T12308] pim6reg1: entered allmulticast mode [ 343.708425][T12308] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2093'. [ 343.986260][T12318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.966946][T12363] syz_tun: entered allmulticast mode [ 346.982074][T12362] syz_tun: left allmulticast mode [ 347.401905][T12382] syz_tun: entered allmulticast mode [ 347.410425][T12382] FAULT_INJECTION: forcing a failure. [ 347.410425][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.410455][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.4.2110 Not tainted syzkaller #0 PREEMPT(full) [ 347.410475][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.410485][T12382] Call Trace: [ 347.410558][T12382] [ 347.410607][T12382] dump_stack_lvl+0xe8/0x150 [ 347.410746][T12382] should_fail_ex+0x410/0x560 [ 347.410831][T12382] _copy_from_iter+0x1d3/0x1660 [ 347.410893][T12382] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 347.410956][T12382] ? __pfx_policy_nodemask+0x10/0x10 [ 347.410978][T12382] ? lock_acquire+0x115/0x350 [ 347.411019][T12382] ? __pfx__copy_from_iter+0x10/0x10 [ 347.411041][T12382] ? alloc_pages_mpol+0x256/0x390 [ 347.411072][T12382] copy_page_from_iter+0x219/0x2d0 [ 347.411095][T12382] tun_get_user+0x1c16/0x44d0 [ 347.411165][T12382] ? tun_get_user+0x70a/0x44d0 [ 347.411199][T12382] ? aa_file_perm+0x4ed/0x15f0 [ 347.411275][T12382] ? __pfx_tun_get_user+0x10/0x10 [ 347.411296][T12382] ? __lock_acquire+0x747/0x2de0 [ 347.411328][T12382] ? ref_tracker_alloc+0x341/0x4b0 [ 347.411378][T12382] ? lock_acquire+0x115/0x350 [ 347.411397][T12382] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 347.411419][T12382] ? lock_acquire+0x115/0x350 [ 347.411436][T12382] ? tun_get+0x1c/0x2f0 [ 347.411460][T12382] ? tun_get+0x1c/0x2f0 [ 347.411478][T12382] ? tun_get+0x1c/0x2f0 [ 347.411500][T12382] tun_chr_write_iter+0x113/0x200 [ 347.411522][T12382] vfs_write+0x612/0xba0 [ 347.411571][T12382] ? __pfx_vfs_write+0x10/0x10 [ 347.411606][T12382] ? __fget_files+0x2a/0x420 [ 347.411646][T12382] ksys_write+0x150/0x270 [ 347.411674][T12382] ? __pfx_ksys_write+0x10/0x10 [ 347.411711][T12382] do_syscall_64+0x166/0x520 [ 347.411808][T12382] ? trace_irq_disable+0x3b/0x140 [ 347.411849][T12382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.411885][T12382] ? clear_bhb_loop+0x70/0xc0 [ 347.411907][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.411925][T12382] RIP: 0033:0x7f2a3eb5e98e [ 347.411964][T12382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.412002][T12382] RSP: 002b:00007f2a3f980fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.412041][T12382] RAX: ffffffffffffffda RBX: 00007f2a3f9816c0 RCX: 00007f2a3eb5e98e [ 347.412055][T12382] RDX: 000000000000003e RSI: 0000200000000040 RDI: 00000000000000c8 [ 347.412066][T12382] RBP: 00007f2a3f981090 R08: 0000000000000000 R09: 0000000000000000 [ 347.412078][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.412089][T12382] R13: 00007f2a3ee26038 R14: 00007f2a3ee25fa0 R15: 00007fff7eda6b98 [ 347.412120][T12382] [ 347.417406][T12380] syz_tun: left allmulticast mode [ 348.590211][ T5630] Bluetooth: unknown link type 231 [ 348.590274][ T5630] Bluetooth: hci1: connection err: -111 [ 348.944482][T12443] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 349.153163][T12451] pim6reg: entered allmulticast mode [ 349.162397][T12452] pim6reg: left allmulticast mode [ 349.322649][T12458] netlink: 'syz.2.2135': attribute type 1 has an invalid length. [ 349.322674][T12458] netlink: 'syz.2.2135': attribute type 2 has an invalid length. [ 349.322687][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2135'. [ 349.485906][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 349.579983][T12471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 349.643502][T12466] nbd1: detected capacity change from 0 to 63 [ 349.682376][ T5630] block nbd1: Receive control failed (result -104) [ 349.868354][ T5736] wlan0 speed is unknown, defaulting to 1000 [ 349.868464][ T5736] syz0: Port: 1 Link ACTIVE [ 351.019680][T12531] FAULT_INJECTION: forcing a failure. [ 351.019680][T12531] name failslab, interval 1, probability 0, space 0, times 0 [ 351.019713][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.3.2163 Not tainted syzkaller #0 PREEMPT(full) [ 351.019734][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.019747][T12531] Call Trace: [ 351.019756][T12531] [ 351.019765][T12531] dump_stack_lvl+0xe8/0x150 [ 351.019801][T12531] should_fail_ex+0x410/0x560 [ 351.019828][T12531] ? __alloc_skb+0x1db/0x7a0 [ 351.019971][T12531] should_failslab+0xa8/0x100 [ 351.019997][T12531] ? __alloc_skb+0x1db/0x7a0 [ 351.020017][T12531] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 351.020047][T12531] ? __alloc_skb+0x18d/0x7a0 [ 351.020069][T12531] ? __alloc_skb+0x1db/0x7a0 [ 351.020099][T12531] __alloc_skb+0x1db/0x7a0 [ 351.020127][T12531] alloc_skb_with_frags+0xc6/0x760 [ 351.020178][T12531] ? __lock_acquire+0x747/0x2de0 [ 351.020201][T12531] ? __pfx___schedule+0x10/0x10 [ 351.020264][T12531] sock_alloc_send_pskb+0x878/0x990 [ 351.020334][T12531] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 351.020371][T12531] ? packet_sendmsg+0x31ea/0x5150 [ 351.020447][T12531] packet_sendmsg+0x33a6/0x5150 [ 351.020467][T12531] ? up_write+0x19d/0x4a0 [ 351.020503][T12531] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 351.020529][T12531] ? __lock_acquire+0x747/0x2de0 [ 351.020564][T12531] ? lock_acquire+0x115/0x350 [ 351.020588][T12531] ? __lock_acquire+0x747/0x2de0 [ 351.020618][T12531] ? __pfx_packet_sendmsg+0x10/0x10 [ 351.020637][T12531] ? aa_sk_perm+0x713/0x900 [ 351.020657][T12531] ? __lock_acquire+0x747/0x2de0 [ 351.020682][T12531] ? debug_mutex_wake_waiter+0x50/0x230 [ 351.020711][T12531] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.020735][T12531] ? aa_sock_msg_perm+0x144/0x210 [ 351.020764][T12531] ? apparmor_socket_sendmsg+0x98/0x360 [ 351.020788][T12531] ? __pfx_packet_sendmsg+0x10/0x10 [ 351.020808][T12531] sock_sendmsg_nosec+0x13a/0x180 [ 351.020830][T12531] ____sys_sendmsg+0x54e/0x850 [ 351.020863][T12531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.020899][T12531] ? import_iovec+0x73/0xa0 [ 351.020928][T12531] ___sys_sendmsg+0x2a5/0x360 [ 351.020952][T12531] ? __lock_acquire+0x747/0x2de0 [ 351.020977][T12531] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.021041][T12531] ? __fget_files+0x2a/0x420 [ 351.021068][T12531] ? __fget_files+0x3a2/0x420 [ 351.021104][T12531] __x64_sys_sendmsg+0x1b1/0x290 [ 351.021134][T12531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.021184][T12531] do_syscall_64+0x166/0x520 [ 351.021207][T12531] ? trace_irq_disable+0x3b/0x140 [ 351.021236][T12531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.021256][T12531] ? clear_bhb_loop+0x70/0xc0 [ 351.021282][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.021300][T12531] RIP: 0033:0x7f3a45d9e159 [ 351.021321][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.021338][T12531] RSP: 002b:00007f3a46c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.021361][T12531] RAX: ffffffffffffffda RBX: 00007f3a46026090 RCX: 00007f3a45d9e159 [ 351.021377][T12531] RDX: 0000000000008804 RSI: 0000200000000440 RDI: 0000000000000008 [ 351.021390][T12531] RBP: 00007f3a46c70090 R08: 0000000000000000 R09: 0000000000000000 [ 351.021403][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.021415][T12531] R13: 00007f3a46026128 R14: 00007f3a46026090 R15: 00007ffe66387068 [ 351.021448][T12531] [ 351.083643][T12527] syzkaller0: entered promiscuous mode [ 351.083667][T12527] syzkaller0: entered allmulticast mode [ 353.549451][T12537] 8021q: VLANs not supported on lo [ 353.815699][T12565] FAULT_INJECTION: forcing a failure. [ 353.815699][T12565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.815736][T12565] CPU: 1 UID: 0 PID: 12565 Comm: syz.4.2171 Not tainted syzkaller #0 PREEMPT(full) [ 353.815759][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.815771][T12565] Call Trace: [ 353.815779][T12565] [ 353.815788][T12565] dump_stack_lvl+0xe8/0x150 [ 353.815823][T12565] should_fail_ex+0x410/0x560 [ 353.815852][T12565] _copy_from_iter+0x1d3/0x1660 [ 353.815877][T12565] ? __alloc_skb+0x27a/0x7a0 [ 353.815903][T12565] ? __alloc_skb+0x27a/0x7a0 [ 353.815927][T12565] ? __alloc_skb+0x27a/0x7a0 [ 353.815949][T12565] ? __pfx__copy_from_iter+0x10/0x10 [ 353.815969][T12565] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 353.815998][T12565] ? __alloc_skb+0x27a/0x7a0 [ 353.816018][T12565] ? __alloc_skb+0x27a/0x7a0 [ 353.816046][T12565] ? netlink_sendmsg+0x650/0xb40 [ 353.816182][T12565] ? skb_put+0x112/0x210 [ 353.816210][T12565] netlink_sendmsg+0x6c0/0xb40 [ 353.816249][T12565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.816287][T12565] ? apparmor_socket_sendmsg+0x98/0x360 [ 353.816312][T12565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.816340][T12565] sock_sendmsg_nosec+0x13a/0x180 [ 353.816365][T12565] ____sys_sendmsg+0x54e/0x850 [ 353.816398][T12565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.816444][T12565] ? import_iovec+0x73/0xa0 [ 353.816472][T12565] ___sys_sendmsg+0x2a5/0x360 [ 353.816496][T12565] ? __lock_acquire+0x747/0x2de0 [ 353.816522][T12565] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.816586][T12565] ? __fget_files+0x2a/0x420 [ 353.816612][T12565] ? __fget_files+0x3a2/0x420 [ 353.816648][T12565] __x64_sys_sendmsg+0x1b1/0x290 [ 353.816678][T12565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.816725][T12565] do_syscall_64+0x166/0x520 [ 353.816749][T12565] ? trace_irq_disable+0x3b/0x140 [ 353.816769][T12565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.816789][T12565] ? clear_bhb_loop+0x70/0xc0 [ 353.816815][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.816836][T12565] RIP: 0033:0x7f2a3eb9e159 [ 353.816855][T12565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.816872][T12565] RSP: 002b:00007f2a3cdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.816894][T12565] RAX: ffffffffffffffda RBX: 00007f2a3ee26090 RCX: 00007f2a3eb9e159 [ 353.816910][T12565] RDX: 0000000000000810 RSI: 0000200000000b80 RDI: 0000000000000004 [ 353.816922][T12565] RBP: 00007f2a3cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.816934][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.816946][T12565] R13: 00007f2a3ee26128 R14: 00007f2a3ee26090 R15: 00007fff7eda6b98 [ 353.816979][T12565] [ 353.881171][T12566] FAULT_INJECTION: forcing a failure. [ 353.881171][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 353.881201][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.3.2173 Not tainted syzkaller #0 PREEMPT(full) [ 353.881222][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.881232][T12566] Call Trace: [ 353.881239][T12566] [ 353.881247][T12566] dump_stack_lvl+0xe8/0x150 [ 353.881278][T12566] should_fail_ex+0x410/0x560 [ 353.881302][T12566] ? __alloc_skb+0x1db/0x7a0 [ 353.881323][T12566] should_failslab+0xa8/0x100 [ 353.881347][T12566] ? __alloc_skb+0x1db/0x7a0 [ 353.881365][T12566] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 353.881391][T12566] ? __alloc_skb+0x18d/0x7a0 [ 353.881411][T12566] ? __alloc_skb+0x1db/0x7a0 [ 353.881438][T12566] __alloc_skb+0x1db/0x7a0 [ 353.881463][T12566] netlink_sendmsg+0x5d4/0xb40 [ 353.881498][T12566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.881531][T12566] ? apparmor_socket_sendmsg+0x98/0x360 [ 353.881552][T12566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.881576][T12566] sock_sendmsg_nosec+0x13a/0x180 [ 353.881598][T12566] ____sys_sendmsg+0x54e/0x850 [ 353.881626][T12566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.881658][T12566] ? import_iovec+0x73/0xa0 [ 353.881684][T12566] ___sys_sendmsg+0x2a5/0x360 [ 353.881705][T12566] ? __lock_acquire+0x747/0x2de0 [ 353.881732][T12566] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.881789][T12566] ? __fget_files+0x2a/0x420 [ 353.881811][T12566] ? __fget_files+0x3a2/0x420 [ 353.881843][T12566] __x64_sys_sendmsg+0x1b1/0x290 [ 353.881869][T12566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.881919][T12566] do_syscall_64+0x166/0x520 [ 353.881940][T12566] ? trace_irq_disable+0x3b/0x140 [ 353.881957][T12566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.881975][T12566] ? clear_bhb_loop+0x70/0xc0 [ 353.881997][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.882014][T12566] RIP: 0033:0x7f3a45d9e159 [ 353.882031][T12566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.882046][T12566] RSP: 002b:00007f3a46c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.882066][T12566] RAX: ffffffffffffffda RBX: 00007f3a46025fa0 RCX: 00007f3a45d9e159 [ 353.882080][T12566] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 353.882091][T12566] RBP: 00007f3a46c91090 R08: 0000000000000000 R09: 0000000000000000 [ 353.882102][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.882112][T12566] R13: 00007f3a46026038 R14: 00007f3a46025fa0 R15: 00007ffe66387068 [ 353.882141][T12566] [ 354.402831][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'. [ 354.461693][T12584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2182'. [ 354.760441][T12595] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2185'. [ 354.804387][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2187'. [ 354.807654][T12598] netlink: 'syz.5.2187': attribute type 1 has an invalid length. [ 354.903584][T12603] FAULT_INJECTION: forcing a failure. [ 354.903584][T12603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.903620][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.4.2189 Not tainted syzkaller #0 PREEMPT(full) [ 354.903641][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.903652][T12603] Call Trace: [ 354.903661][T12603] [ 354.903668][T12603] dump_stack_lvl+0xe8/0x150 [ 354.903703][T12603] should_fail_ex+0x410/0x560 [ 354.903742][T12603] prepare_alloc_pages+0x223/0x600 [ 354.903771][T12603] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 354.903798][T12603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.903826][T12603] ? __pfx_policy_nodemask+0x10/0x10 [ 354.903853][T12603] ? __mutex_unlock_slowpath+0x731/0x900 [ 354.903887][T12603] alloc_pages_mpol+0x21e/0x390 [ 354.903918][T12603] ___kmalloc_large_node+0x4f/0x120 [ 354.903941][T12603] __kmalloc_large_noprof+0x1a/0x90 [ 354.903963][T12603] hidp_connection_add+0x3bd/0x1a00 [ 354.904043][T12603] hidp_sock_ioctl+0x403/0x650 [ 354.904096][T12603] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 354.904168][T12603] ? do_vfs_ioctl+0x116f/0x1530 [ 354.904205][T12603] sock_do_ioctl+0x101/0x320 [ 354.904228][T12603] ? __pfx_sock_do_ioctl+0x10/0x10 [ 354.904245][T12603] ? hook_file_ioctl+0x1f2/0x600 [ 354.904306][T12603] sock_ioctl+0x57a/0x7e0 [ 354.904339][T12603] ? __pfx_sock_ioctl+0x10/0x10 [ 354.904369][T12603] ? __fget_files+0x2a/0x420 [ 354.904397][T12603] ? __fget_files+0x3a2/0x420 [ 354.904421][T12603] ? __fget_files+0x2a/0x420 [ 354.904451][T12603] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.904499][T12603] ? __pfx_sock_ioctl+0x10/0x10 [ 354.904528][T12603] __se_sys_ioctl+0xfc/0x170 [ 354.904551][T12603] do_syscall_64+0x166/0x520 [ 354.904576][T12603] ? trace_irq_disable+0x3b/0x140 [ 354.904597][T12603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.904616][T12603] ? clear_bhb_loop+0x70/0xc0 [ 354.904641][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.904661][T12603] RIP: 0033:0x7f2a3eb9e159 [ 354.904679][T12603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.904695][T12603] RSP: 002b:00007f2a3f981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.904726][T12603] RAX: ffffffffffffffda RBX: 00007f2a3ee25fa0 RCX: 00007f2a3eb9e159 [ 354.904740][T12603] RDX: 00002000000000c0 RSI: 00000000400448c8 RDI: 0000000000000004 [ 354.904753][T12603] RBP: 00007f2a3f981090 R08: 0000000000000000 R09: 0000000000000000 [ 354.904765][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.904776][T12603] R13: 00007f2a3ee26038 R14: 00007f2a3ee25fa0 R15: 00007fff7eda6b98 [ 354.904809][T12603] [ 355.634570][T12631] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2197'. [ 355.634595][T12631] netlink: 'syz.4.2197': attribute type 9 has an invalid length. [ 355.841564][T12618] netlink: 'syz.2.2194': attribute type 83 has an invalid length. [ 356.779218][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2204'. [ 356.912729][T12663] debugfs: '1ùà^!00000000000000000000003ÿÿÿÿ' already exists in 'ieee80211' [ 356.947248][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2210'. [ 357.333604][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 357.513640][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2218'. [ 358.059001][T12719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.117200][T12724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2223'. [ 360.031655][T12670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.390019][T12733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.907552][T12758] IPVS: Error connecting to the multicast addr [ 361.310439][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2237'. [ 362.304708][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 362.369301][T12823] bridge4: port 1(dummy0) entered blocking state [ 362.369590][T12823] bridge4: port 1(dummy0) entered disabled state [ 362.369771][T12823] dummy0: entered allmulticast mode [ 362.372398][T12823] dummy0: entered promiscuous mode [ 362.380662][T12822] bridge4: port 1(dummy0) entered blocking state [ 362.380818][T12822] bridge4: port 1(dummy0) entered forwarding state [ 363.651681][ T1287] IPVS: starting estimator thread 0... [ 363.737413][T12845] IPVS: using max 24 ests per chain, 57600 per kthread [ 364.537522][T12885] syzkaller0: entered promiscuous mode [ 364.537546][T12885] syzkaller0: entered allmulticast mode [ 364.820660][T12901] FAULT_INJECTION: forcing a failure. [ 364.820660][T12901] name failslab, interval 1, probability 0, space 0, times 0 [ 364.820694][T12901] CPU: 0 UID: 0 PID: 12901 Comm: syz.1.2271 Not tainted syzkaller #0 PREEMPT(full) [ 364.820717][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.820729][T12901] Call Trace: [ 364.820737][T12901] [ 364.820746][T12901] dump_stack_lvl+0xe8/0x150 [ 364.820780][T12901] should_fail_ex+0x410/0x560 [ 364.820810][T12901] should_failslab+0xa8/0x100 [ 364.820837][T12901] __kvmalloc_node_noprof+0x176/0x820 [ 364.820861][T12901] ? __nf_register_net_hook+0x232/0x930 [ 364.820956][T12901] ? nf_hook_entries_grow+0x287/0x740 [ 364.820976][T12901] ? nf_hook_entries_grow+0x287/0x740 [ 364.821015][T12901] nf_hook_entries_grow+0x287/0x740 [ 364.821054][T12901] __nf_register_net_hook+0x2c9/0x930 [ 364.821097][T12901] nf_register_net_hook+0xb2/0x190 [ 364.821125][T12901] nf_register_net_hooks+0x44/0x1b0 [ 364.821151][T12901] nf_defrag_ipv6_enable+0x87/0x120 [ 364.821261][T12901] nf_ct_netns_do_get+0x1e7/0x5c0 [ 364.821330][T12901] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 364.821359][T12901] ? rcu_is_watching+0x16/0xb0 [ 364.821392][T12901] ? trace_kmalloc+0x2a/0xf0 [ 364.821409][T12901] ? __bitmap_set+0x12f/0x170 [ 364.821468][T12901] nf_ct_netns_get+0x61/0x320 [ 364.821495][T12901] nft_ct_get_init+0x5bf/0x9c0 [ 364.821565][T12901] nf_tables_newrule+0x179e/0x28a0 [ 364.821646][T12901] ? __pfx_nf_tables_newrule+0x10/0x10 [ 364.821671][T12901] ? lock_acquire+0x115/0x350 [ 364.821693][T12901] ? nfnl_pernet+0x23/0x240 [ 364.821732][T12901] ? __nla_parse+0x40/0x60 [ 364.821762][T12901] nfnetlink_rcv+0x1288/0x28c0 [ 364.821831][T12901] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 364.821876][T12901] ? ref_tracker_free+0x689/0x830 [ 364.821930][T12901] ? skb_clone+0x246/0x3a0 [ 364.821961][T12901] ? __netlink_deliver_tap+0x811/0x860 [ 364.822001][T12901] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.822028][T12901] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.822065][T12901] netlink_unicast+0x7bd/0x940 [ 364.822114][T12901] netlink_sendmsg+0x813/0xb40 [ 364.822155][T12901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.822194][T12901] ? apparmor_socket_sendmsg+0x98/0x360 [ 364.822221][T12901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.822258][T12901] sock_sendmsg_nosec+0x13a/0x180 [ 364.822284][T12901] ____sys_sendmsg+0x54e/0x850 [ 364.822317][T12901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.822353][T12901] ? import_iovec+0x73/0xa0 [ 364.822383][T12901] ___sys_sendmsg+0x2a5/0x360 [ 364.822409][T12901] ? __lock_acquire+0x747/0x2de0 [ 364.822434][T12901] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.822503][T12901] ? __fget_files+0x2a/0x420 [ 364.822530][T12901] ? __fget_files+0x3a2/0x420 [ 364.822568][T12901] __x64_sys_sendmsg+0x1b1/0x290 [ 364.822599][T12901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.822652][T12901] do_syscall_64+0x166/0x520 [ 364.822675][T12901] ? trace_irq_disable+0x3b/0x140 [ 364.822695][T12901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.822717][T12901] ? clear_bhb_loop+0x70/0xc0 [ 364.822741][T12901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.822758][T12901] RIP: 0033:0x7f4f8179e159 [ 364.822777][T12901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.822792][T12901] RSP: 002b:00007f4f7f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.822814][T12901] RAX: ffffffffffffffda RBX: 00007f4f81a25fa0 RCX: 00007f4f8179e159 [ 364.822829][T12901] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 364.822841][T12901] RBP: 00007f4f7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.822853][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.822864][T12901] R13: 00007f4f81a26038 R14: 00007f4f81a25fa0 R15: 00007fffe24cd3d8 [ 364.822901][T12901] [ 365.467471][T12911] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 365.689432][T12911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.244441][ T5736] hid-generic 0005:0458:0009.0019: item fetching failed at offset 0/1 [ 366.250240][ T5736] hid-generic 0005:0458:0009.0019: probe with driver hid-generic failed with error -22 [ 366.389779][T12960] FAULT_INJECTION: forcing a failure. [ 366.389779][T12960] name failslab, interval 1, probability 0, space 0, times 0 [ 366.389818][T12960] CPU: 0 UID: 0 PID: 12960 Comm: syz.3.2285 Not tainted syzkaller #0 PREEMPT(full) [ 366.389841][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.389853][T12960] Call Trace: [ 366.389861][T12960] [ 366.389871][T12960] dump_stack_lvl+0xe8/0x150 [ 366.389906][T12960] should_fail_ex+0x410/0x560 [ 366.389936][T12960] should_failslab+0xa8/0x100 [ 366.389961][T12960] ? skb_clone+0x212/0x3a0 [ 366.389990][T12960] kmem_cache_alloc_noprof+0xa1/0x600 [ 366.390022][T12960] ? skb_clone+0x212/0x3a0 [ 366.390056][T12960] skb_clone+0x212/0x3a0 [ 366.390085][T12960] bpf_clone_redirect+0x170/0x4b0 [ 366.390190][T12960] ? bpf_test_run+0x1d1/0x830 [ 366.390241][T12960] bpf_prog_047103ee48f4f65a+0x5f/0x68 [ 366.390266][T12960] ? __kernel_text_address+0xd/0x30 [ 366.390307][T12960] ? arch_stack_walk+0xfb/0x150 [ 366.390344][T12960] ? __pfx___schedule+0x10/0x10 [ 366.390382][T12960] ? preempt_schedule_thunk+0x16/0x40 [ 366.390407][T12960] ? preempt_schedule_common+0x7f/0xd0 [ 366.390429][T12960] ? bpf_test_run+0x1d1/0x830 [ 366.390461][T12960] ? bpf_test_timer_continue+0x10c/0x320 [ 366.390486][T12960] bpf_test_run+0x354/0x830 [ 366.390539][T12960] ? __pfx_bpf_test_run+0x10/0x10 [ 366.390587][T12960] ? __kasan_krealloc+0xec/0x110 [ 366.390619][T12960] ? bpf_prog_test_run_skb+0x903/0x2230 [ 366.390647][T12960] ? convert___skb_to_skb+0x3d/0x5b0 [ 366.390680][T12960] bpf_prog_test_run_skb+0xe35/0x2230 [ 366.390739][T12960] ? __fget_files+0x3a2/0x420 [ 366.390765][T12960] ? __fget_files+0x2a/0x420 [ 366.390797][T12960] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 366.390826][T12960] bpf_prog_test_run+0x2c5/0x340 [ 366.390868][T12960] __sys_bpf+0xa22/0xd90 [ 366.390898][T12960] ? __pfx___sys_bpf+0x10/0x10 [ 366.390931][T12960] ? __fget_files+0x2a/0x420 [ 366.390974][T12960] ? ksys_write+0x242/0x270 [ 366.391007][T12960] ? __pfx_ksys_write+0x10/0x10 [ 366.391043][T12960] __x64_sys_bpf+0xba/0xd0 [ 366.391068][T12960] do_syscall_64+0x166/0x520 [ 366.391092][T12960] ? trace_irq_disable+0x3b/0x140 [ 366.391112][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.391132][T12960] ? clear_bhb_loop+0x70/0xc0 [ 366.391157][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.391176][T12960] RIP: 0033:0x7f3a45d9e159 [ 366.391196][T12960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.391211][T12960] RSP: 002b:00007f3a46c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.391238][T12960] RAX: ffffffffffffffda RBX: 00007f3a46025fa0 RCX: 00007f3a45d9e159 [ 366.391253][T12960] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 366.391266][T12960] RBP: 00007f3a46c91090 R08: 0000000000000000 R09: 0000000000000000 [ 366.391278][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.391290][T12960] R13: 00007f3a46026038 R14: 00007f3a46025fa0 R15: 00007ffe66387068 [ 366.391325][T12960] [ 366.659253][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 367.723834][T13015] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 367.723859][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.2.2301 Not tainted syzkaller #0 PREEMPT(full) [ 367.723885][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.723897][T13015] Call Trace: [ 367.723907][T13015] [ 367.723916][T13015] dump_stack_lvl+0xe8/0x150 [ 367.723955][T13015] sysfs_warn_dup+0x8e/0xa0 [ 367.724035][T13015] sysfs_do_create_link_sd+0xc0/0x110 [ 367.724070][T13015] device_add_class_symlinks+0x1cf/0x240 [ 367.724193][T13015] device_add+0x467/0xb80 [ 367.724219][T13015] wiphy_register+0x1fc8/0x2ff0 [ 367.724316][T13015] ? __pfx_wiphy_register+0x10/0x10 [ 367.724339][T13015] ? __pfx_netdev_run_todo+0x10/0x10 [ 367.724411][T13015] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 367.724485][T13015] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 367.724545][T13015] ieee80211_register_hw+0x3dbb/0x4b00 [ 367.724607][T13015] ? ieee80211_register_hw+0x1981/0x4b00 [ 367.724663][T13015] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 367.724692][T13015] ? __asan_memset+0x22/0x50 [ 367.724723][T13015] ? __hrtimer_setup+0x1b7/0x260 [ 367.724765][T13015] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 367.724851][T13015] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 367.724910][T13015] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 367.724934][T13015] ? kstrndup+0xbd/0x160 [ 367.724976][T13015] ? kstrndup+0xbd/0x160 [ 367.724999][T13015] hwsim_new_radio_nl+0xd8b/0xf90 [ 367.725041][T13015] genl_family_rcv_msg_doit+0x233/0x340 [ 367.725076][T13015] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 367.725117][T13015] ? bpf_lsm_capable+0x9/0x20 [ 367.725134][T13015] ? security_capable+0x7e/0x2c0 [ 367.725200][T13015] genl_rcv_msg+0x614/0x7a0 [ 367.725232][T13015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.725255][T13015] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 367.725297][T13015] netlink_rcv_skb+0x226/0x4a0 [ 367.725329][T13015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.725355][T13015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.725404][T13015] ? down_read+0x2be/0x330 [ 367.725459][T13015] genl_rcv+0x28/0x40 [ 367.725481][T13015] netlink_unicast+0x7bd/0x940 [ 367.725525][T13015] netlink_sendmsg+0x813/0xb40 [ 367.725569][T13015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.725611][T13015] ? apparmor_socket_sendmsg+0x98/0x360 [ 367.725637][T13015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.725668][T13015] sock_sendmsg_nosec+0x13a/0x180 [ 367.725692][T13015] ____sys_sendmsg+0x54e/0x850 [ 367.725726][T13015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.725763][T13015] ? import_iovec+0x73/0xa0 [ 367.725794][T13015] ___sys_sendmsg+0x2a5/0x360 [ 367.725820][T13015] ? __lock_acquire+0x747/0x2de0 [ 367.725848][T13015] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.725881][T13015] ? futex_wait+0x2a2/0x390 [ 367.725949][T13015] ? __fget_files+0x2a/0x420 [ 367.725976][T13015] ? __fget_files+0x3a2/0x420 [ 367.726015][T13015] __x64_sys_sendmsg+0x1b1/0x290 [ 367.726046][T13015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.726099][T13015] do_syscall_64+0x166/0x520 [ 367.726123][T13015] ? trace_irq_disable+0x3b/0x140 [ 367.726144][T13015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.726165][T13015] ? clear_bhb_loop+0x70/0xc0 [ 367.726203][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.726224][T13015] RIP: 0033:0x7fbe57d9e159 [ 367.726246][T13015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.726265][T13015] RSP: 002b:00007fbe58d30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.726290][T13015] RAX: ffffffffffffffda RBX: 00007fbe58025fa0 RCX: 00007fbe57d9e159 [ 367.726305][T13015] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 367.726320][T13015] RBP: 00007fbe57e3506b R08: 0000000000000000 R09: 0000000000000000 [ 367.726333][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.726347][T13015] R13: 00007fbe58026038 R14: 00007fbe58025fa0 R15: 00007ffc31ab19f8 [ 367.726387][T13015] [ 368.152134][T13023] syz_tun: entered allmulticast mode [ 368.153920][T13023] wg2: entered allmulticast mode [ 368.158967][T13022] syz_tun: left allmulticast mode [ 368.351018][T13032] syz_tun: entered allmulticast mode [ 368.361280][T13031] syz_tun: left allmulticast mode [ 368.403590][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2310'. [ 368.420860][T13034] netlink: 'syz.2.2308': attribute type 2 has an invalid length. [ 368.420886][T13034] netlink: 'syz.2.2308': attribute type 2 has an invalid length. [ 368.449718][ T5736] hid-generic 0005:16C0:0009.001A: item fetching failed at offset 0/1 [ 368.454310][ T5736] hid-generic 0005:16C0:0009.001A: probe with driver hid-generic failed with error -22 [ 368.849507][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2315'. [ 368.851112][T13056] syzkaller0: entered promiscuous mode [ 368.851135][T13056] syzkaller0: entered allmulticast mode [ 369.059087][T13062] FAULT_INJECTION: forcing a failure. [ 369.059087][T13062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.059112][T13062] CPU: 0 UID: 0 PID: 13062 Comm: syz.1.2317 Not tainted syzkaller #0 PREEMPT(full) [ 369.059127][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.059134][T13062] Call Trace: [ 369.059139][T13062] [ 369.059145][T13062] dump_stack_lvl+0xe8/0x150 [ 369.059168][T13062] should_fail_ex+0x410/0x560 [ 369.059185][T13062] _copy_from_user+0x2d/0xb0 [ 369.059251][T13062] ___sys_recvmsg+0x173/0x5a0 [ 369.059272][T13062] ? __pfx____sys_recvmsg+0x10/0x10 [ 369.059294][T13062] ? lock_acquire+0x115/0x350 [ 369.059339][T13062] do_recvmmsg+0x31a/0x7f0 [ 369.059375][T13062] ? __pfx_do_recvmmsg+0x10/0x10 [ 369.059413][T13062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 369.059445][T13062] ? __fget_files+0x3a2/0x420 [ 369.059471][T13062] __x64_sys_recvmmsg+0x198/0x250 [ 369.059488][T13062] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 369.059511][T13062] do_syscall_64+0x166/0x520 [ 369.059525][T13062] ? trace_irq_disable+0x3b/0x140 [ 369.059536][T13062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.059549][T13062] ? clear_bhb_loop+0x70/0xc0 [ 369.059563][T13062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.059575][T13062] RIP: 0033:0x7f4f8179e159 [ 369.059588][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.059597][T13062] RSP: 002b:00007f4f7f9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 369.059612][T13062] RAX: ffffffffffffffda RBX: 00007f4f81a26090 RCX: 00007f4f8179e159 [ 369.059621][T13062] RDX: 0000000003fffdf2 RSI: 0000200000000040 RDI: 0000000000000003 [ 369.059629][T13062] RBP: 00007f4f7f9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.059636][T13062] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 369.059644][T13062] R13: 00007f4f81a26128 R14: 00007f4f81a26090 R15: 00007fffe24cd3d8 [ 369.059663][T13062] [ 370.188164][T13112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.239464][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 371.151659][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2346'. [ 371.975605][T13182] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 371.975634][T13182] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 372.110320][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'. [ 372.128681][T13194] syz_tun: entered allmulticast mode [ 372.129570][T13194] FAULT_INJECTION: forcing a failure. [ 372.129570][T13194] name failslab, interval 1, probability 0, space 0, times 0 [ 372.129591][T13194] CPU: 0 UID: 0 PID: 13194 Comm: syz.5.2361 Not tainted syzkaller #0 PREEMPT(full) [ 372.129606][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.129613][T13194] Call Trace: [ 372.129618][T13194] [ 372.129624][T13194] dump_stack_lvl+0xe8/0x150 [ 372.129647][T13194] should_fail_ex+0x410/0x560 [ 372.129664][T13194] should_failslab+0xa8/0x100 [ 372.129678][T13194] ? dst_alloc+0x105/0x170 [ 372.129747][T13194] kmem_cache_alloc_noprof+0xa1/0x600 [ 372.129765][T13194] ? __lock_acquire+0x747/0x2de0 [ 372.129778][T13194] ? dst_alloc+0x105/0x170 [ 372.129804][T13194] dst_alloc+0x105/0x170 [ 372.129822][T13194] ip_route_input_rcu+0x146e/0x3190 [ 372.129866][T13194] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 372.129880][T13194] ? __skb_flow_dissect+0x652a/0x6d50 [ 372.129916][T13194] ? lock_acquire+0x115/0x350 [ 372.129933][T13194] ? ip_route_input_noref+0xad/0x270 [ 372.129946][T13194] ip_route_input_noref+0x17c/0x270 [ 372.129959][T13194] ? __pfx_ip_route_input_noref+0x10/0x10 [ 372.129974][T13194] ? ipt_do_table+0x2b9/0x15d0 [ 372.130013][T13194] ? __pfx_ipt_do_table+0x10/0x10 [ 372.130028][T13194] ip_rcv_finish_core+0x593/0x1c00 [ 372.130049][T13194] ip_rcv_finish+0x14c/0x2a0 [ 372.130065][T13194] NF_HOOK+0x336/0x3c0 [ 372.130081][T13194] ? __pfx_ip_rcv_finish+0x10/0x10 [ 372.130094][T13194] ? NF_HOOK+0x9e/0x3c0 [ 372.130108][T13194] ? __pfx_NF_HOOK+0x10/0x10 [ 372.130123][T13194] ? __pfx_ip_rcv_finish+0x10/0x10 [ 372.130141][T13194] ? netif_receive_skb+0x102/0xbf0 [ 372.130152][T13194] ? __pfx_ip_rcv+0x10/0x10 [ 372.130166][T13194] netif_receive_skb+0x45b/0xbf0 [ 372.130189][T13194] ? __pfx_netif_receive_skb+0x10/0x10 [ 372.130214][T13194] ? rcu_is_watching+0x16/0xb0 [ 372.130236][T13194] ? tun_rx_batched+0x185/0x790 [ 372.130260][T13194] tun_rx_batched+0x1de/0x790 [ 372.130289][T13194] ? __pfx_tun_rx_batched+0x10/0x10 [ 372.130307][T13194] ? lock_acquire+0x115/0x350 [ 372.130322][T13194] ? tun_get_user+0x23ba/0x44d0 [ 372.130334][T13194] ? __local_bh_enable_ip+0xd6/0x140 [ 372.130357][T13194] ? tun_get_user+0x27b0/0x44d0 [ 372.130370][T13194] tun_get_user+0x2be0/0x44d0 [ 372.130389][T13194] ? tun_get_user+0x27b0/0x44d0 [ 372.130405][T13194] ? aa_file_perm+0x4ed/0x15f0 [ 372.130420][T13194] ? __pfx_tun_get_user+0x10/0x10 [ 372.130433][T13194] ? __lock_acquire+0x747/0x2de0 [ 372.130452][T13194] ? ref_tracker_alloc+0x341/0x4b0 [ 372.130465][T13194] ? lock_acquire+0x115/0x350 [ 372.130477][T13194] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 372.130492][T13194] ? lock_acquire+0x115/0x350 [ 372.130504][T13194] ? tun_get+0x1c/0x2f0 [ 372.130518][T13194] ? tun_get+0x1c/0x2f0 [ 372.130530][T13194] ? tun_get+0x1c/0x2f0 [ 372.130544][T13194] tun_chr_write_iter+0x113/0x200 [ 372.130558][T13194] vfs_write+0x612/0xba0 [ 372.130579][T13194] ? __pfx_vfs_write+0x10/0x10 [ 372.130600][T13194] ? __fget_files+0x2a/0x420 [ 372.130620][T13194] ksys_write+0x150/0x270 [ 372.130638][T13194] ? __pfx_ksys_write+0x10/0x10 [ 372.130660][T13194] do_syscall_64+0x166/0x520 [ 372.130674][T13194] ? trace_irq_disable+0x3b/0x140 [ 372.130686][T13194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.130698][T13194] ? clear_bhb_loop+0x70/0xc0 [ 372.130712][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.130723][T13194] RIP: 0033:0x7f5687f5e98e [ 372.130736][T13194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.130746][T13194] RSP: 002b:00007f5688ecdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.130761][T13194] RAX: ffffffffffffffda RBX: 00007f5688ece6c0 RCX: 00007f5687f5e98e [ 372.130770][T13194] RDX: 000000000000003e RSI: 0000200000000100 RDI: 00000000000000c8 [ 372.130778][T13194] RBP: 00007f5688ece090 R08: 0000000000000000 R09: 0000000000000000 [ 372.130792][T13194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.130799][T13194] R13: 00007f5688226038 R14: 00007f5688225fa0 R15: 00007ffffe217b58 [ 372.130817][T13194] [ 372.131031][T13193] syz_tun: left allmulticast mode [ 372.532966][T13198] syzkaller0: entered promiscuous mode [ 372.532990][T13198] syzkaller0: entered allmulticast mode [ 372.779745][T13207] FAULT_INJECTION: forcing a failure. [ 372.779745][T13207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.779779][T13207] CPU: 0 UID: 0 PID: 13207 Comm: syz.4.2365 Not tainted syzkaller #0 PREEMPT(full) [ 372.779805][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.779817][T13207] Call Trace: [ 372.779825][T13207] [ 372.779833][T13207] dump_stack_lvl+0xe8/0x150 [ 372.779866][T13207] should_fail_ex+0x410/0x560 [ 372.779893][T13207] _copy_from_iter+0x1d3/0x1660 [ 372.779915][T13207] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.779943][T13207] ? __pfx_policy_nodemask+0x10/0x10 [ 372.779967][T13207] ? lock_acquire+0x115/0x350 [ 372.779986][T13207] ? __pfx__copy_from_iter+0x10/0x10 [ 372.780010][T13207] ? alloc_pages_mpol+0x256/0x390 [ 372.780043][T13207] copy_page_from_iter+0x219/0x2d0 [ 372.780069][T13207] tun_get_user+0x1c16/0x44d0 [ 372.780093][T13207] ? tun_get_user+0x70a/0x44d0 [ 372.780131][T13207] ? aa_file_perm+0x4ed/0x15f0 [ 372.780154][T13207] ? __pfx_tun_get_user+0x10/0x10 [ 372.780177][T13207] ? __lock_acquire+0x747/0x2de0 [ 372.780222][T13207] ? ref_tracker_alloc+0x341/0x4b0 [ 372.780243][T13207] ? lock_acquire+0x115/0x350 [ 372.780263][T13207] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 372.780288][T13207] ? lock_acquire+0x115/0x350 [ 372.780306][T13207] ? tun_get+0x1c/0x2f0 [ 372.780332][T13207] ? tun_get+0x1c/0x2f0 [ 372.780351][T13207] ? tun_get+0x1c/0x2f0 [ 372.780376][T13207] tun_chr_write_iter+0x113/0x200 [ 372.780400][T13207] vfs_write+0x612/0xba0 [ 372.780435][T13207] ? __pfx_vfs_write+0x10/0x10 [ 372.780471][T13207] ? __fget_files+0x2a/0x420 [ 372.780505][T13207] ksys_write+0x150/0x270 [ 372.780534][T13207] ? __pfx_ksys_write+0x10/0x10 [ 372.780571][T13207] do_syscall_64+0x166/0x520 [ 372.780593][T13207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.780612][T13207] ? clear_bhb_loop+0x70/0xc0 [ 372.780635][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.780654][T13207] RIP: 0033:0x7f2a3eb5e98e [ 372.780673][T13207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.780689][T13207] RSP: 002b:00007f2a3cdd4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.780710][T13207] RAX: ffffffffffffffda RBX: 00007f2a3cdd56c0 RCX: 00007f2a3eb5e98e [ 372.780724][T13207] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8 [ 372.780737][T13207] RBP: 00007f2a3cdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 372.780749][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.780761][T13207] R13: 00007f2a3ee26218 R14: 00007f2a3ee26180 R15: 00007fff7eda6b98 [ 372.780794][T13207] [ 374.250569][T13227] netlink: 'syz.3.2371': attribute type 2 has an invalid length. [ 374.250618][T13227] netlink: 'syz.3.2371': attribute type 2 has an invalid length. [ 375.410518][T13243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 375.629992][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'. [ 375.707093][T13265] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2386'. [ 376.057484][T13282] FAULT_INJECTION: forcing a failure. [ 376.057484][T13282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.057508][T13282] CPU: 0 UID: 0 PID: 13282 Comm: syz.1.2390 Not tainted syzkaller #0 PREEMPT(full) [ 376.057522][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.057529][T13282] Call Trace: [ 376.057535][T13282] [ 376.057540][T13282] dump_stack_lvl+0xe8/0x150 [ 376.057563][T13282] should_fail_ex+0x410/0x560 [ 376.057580][T13282] _copy_from_user+0x2d/0xb0 [ 376.057596][T13282] ___sys_sendmsg+0x1c6/0x360 [ 376.057612][T13282] ? __lock_acquire+0x747/0x2de0 [ 376.057631][T13282] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.057667][T13282] ? __fget_files+0x2a/0x420 [ 376.057682][T13282] ? __fget_files+0x3a2/0x420 [ 376.057703][T13282] __x64_sys_sendmsg+0x1b1/0x290 [ 376.057720][T13282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.057752][T13282] do_syscall_64+0x166/0x520 [ 376.057767][T13282] ? trace_irq_disable+0x3b/0x140 [ 376.057779][T13282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.057790][T13282] ? clear_bhb_loop+0x70/0xc0 [ 376.057804][T13282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.057816][T13282] RIP: 0033:0x7f4f8179e159 [ 376.057829][T13282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.057845][T13282] RSP: 002b:00007f4f7f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.057868][T13282] RAX: ffffffffffffffda RBX: 00007f4f81a25fa0 RCX: 00007f4f8179e159 [ 376.057884][T13282] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 376.057896][T13282] RBP: 00007f4f7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.057908][T13282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.057920][T13282] R13: 00007f4f81a26038 R14: 00007f4f81a25fa0 R15: 00007fffe24cd3d8 [ 376.057953][T13282] [ 376.752818][T13297] syzkaller0: entered promiscuous mode [ 376.752846][T13297] syzkaller0: entered allmulticast mode [ 378.801219][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.096517][T13316] tipc: Cannot configure node identity twice [ 379.352424][T13339] netlink: 'syz.5.2409': attribute type 12 has an invalid length. [ 379.513897][T13335] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2407'. [ 379.556102][T13349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.761699][T13359] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2415'. [ 379.908330][T13364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'. [ 379.908585][T13364] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2419'. [ 379.971923][T13367] netlink: 'syz.3.2418': attribute type 25 has an invalid length. [ 380.008716][T13367] ip_tables: iptables: counters copy to user failed while replacing table [ 380.078503][ T4948] block nbd1: Possible stuck request ffff88802770e000: control (read@0,1024B). Runtime 30 seconds [ 380.079025][ T4948] block nbd1: Possible stuck request ffff88802770e1c0: control (read@1024,1024B). Runtime 30 seconds [ 380.079060][ T4948] block nbd1: Possible stuck request ffff88802770e380: control (read@2048,1024B). Runtime 30 seconds [ 380.079087][ T4948] block nbd1: Possible stuck request ffff88802770e540: control (read@3072,1024B). Runtime 30 seconds [ 380.130257][T13375] syzkaller0: entered promiscuous mode [ 380.130279][T13375] syzkaller0: entered allmulticast mode [ 380.130848][T13367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.876213][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 381.109251][T13412] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2434'. [ 381.500424][T13422] netlink: 'syz.1.2438': attribute type 25 has an invalid length. [ 381.503907][T13422] ip_tables: iptables: counters copy to user failed while replacing table [ 381.556472][T13423] syzkaller0: entered promiscuous mode [ 381.556492][T13423] syzkaller0: entered allmulticast mode [ 381.581313][T13422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.291255][T13444] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!00000000000000000000003ÿÿÿÿ' [ 382.291279][T13444] CPU: 0 UID: 0 PID: 13444 Comm: syz.4.2448 Not tainted syzkaller #0 PREEMPT(full) [ 382.291304][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.291317][T13444] Call Trace: [ 382.291326][T13444] [ 382.291336][T13444] dump_stack_lvl+0xe8/0x150 [ 382.291374][T13444] sysfs_warn_dup+0x8e/0xa0 [ 382.291407][T13444] sysfs_do_create_link_sd+0xc0/0x110 [ 382.291442][T13444] device_add_class_symlinks+0x1cf/0x240 [ 382.291473][T13444] device_add+0x467/0xb80 [ 382.291499][T13444] wiphy_register+0x1fc8/0x2ff0 [ 382.291543][T13444] ? __pfx_wiphy_register+0x10/0x10 [ 382.291564][T13444] ? __pfx_netdev_run_todo+0x10/0x10 [ 382.291597][T13444] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 382.291636][T13444] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 382.291666][T13444] ieee80211_register_hw+0x3dbb/0x4b00 [ 382.291709][T13444] ? ieee80211_register_hw+0x1981/0x4b00 [ 382.291767][T13444] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 382.291797][T13444] ? __asan_memset+0x22/0x50 [ 382.291830][T13444] ? __hrtimer_setup+0x1b7/0x260 [ 382.291858][T13444] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 382.291889][T13444] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 382.291951][T13444] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 382.291975][T13444] ? kstrndup+0xbd/0x160 [ 382.292005][T13444] ? kstrndup+0xbd/0x160 [ 382.292029][T13444] hwsim_new_radio_nl+0xd8b/0xf90 [ 382.292073][T13444] genl_family_rcv_msg_doit+0x233/0x340 [ 382.292109][T13444] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.292161][T13444] ? bpf_lsm_capable+0x9/0x20 [ 382.292180][T13444] ? security_capable+0x7e/0x2c0 [ 382.292218][T13444] genl_rcv_msg+0x614/0x7a0 [ 382.292261][T13444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.292286][T13444] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 382.292328][T13444] netlink_rcv_skb+0x226/0x4a0 [ 382.292362][T13444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.292387][T13444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.292435][T13444] ? down_read+0x2be/0x330 [ 382.292470][T13444] genl_rcv+0x28/0x40 [ 382.292490][T13444] netlink_unicast+0x7bd/0x940 [ 382.292530][T13444] netlink_sendmsg+0x813/0xb40 [ 382.292573][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.292615][T13444] ? apparmor_socket_sendmsg+0x98/0x360 [ 382.292644][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.292673][T13444] sock_sendmsg_nosec+0x13a/0x180 [ 382.292699][T13444] ____sys_sendmsg+0x54e/0x850 [ 382.292735][T13444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.292773][T13444] ? import_iovec+0x73/0xa0 [ 382.292807][T13444] ___sys_sendmsg+0x2a5/0x360 [ 382.292833][T13444] ? __lock_acquire+0x747/0x2de0 [ 382.292870][T13444] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.292903][T13444] ? futex_wait+0x2a2/0x390 [ 382.292972][T13444] ? __fget_files+0x2a/0x420 [ 382.292999][T13444] ? __fget_files+0x3a2/0x420 [ 382.293050][T13444] __x64_sys_sendmsg+0x1b1/0x290 [ 382.293082][T13444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.293138][T13444] do_syscall_64+0x166/0x520 [ 382.293164][T13444] ? trace_irq_disable+0x3b/0x140 [ 382.293186][T13444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.293208][T13444] ? clear_bhb_loop+0x70/0xc0 [ 382.293235][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.293265][T13444] RIP: 0033:0x7f2a3eb9e159 [ 382.293286][T13444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.293304][T13444] RSP: 002b:00007f2a3f981028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.293327][T13444] RAX: ffffffffffffffda RBX: 00007f2a3ee25fa0 RCX: 00007f2a3eb9e159 [ 382.293343][T13444] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 382.293357][T13444] RBP: 00007f2a3ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 382.293370][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.293382][T13444] R13: 00007f2a3ee26038 R14: 00007f2a3ee25fa0 R15: 00007fff7eda6b98 [ 382.293420][T13444] [ 382.517213][T13447] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2449'. [ 382.904704][T13464] sch_tbf: burst 65537 is lower than device lo mtu (65550) ! [ 382.958655][T13455] syzkaller0: entered promiscuous mode [ 382.958681][T13455] syzkaller0: entered allmulticast mode [ 383.178083][T13477] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2455'. [ 383.390783][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 383.775604][T13499] IPVS: set_ctl: invalid protocol: 50 172.20.20.48:20003 [ 384.330962][T13522] syzkaller0: entered promiscuous mode [ 384.330986][T13522] syzkaller0: entered allmulticast mode [ 385.233491][T13550] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2476'. [ 385.343879][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'. [ 385.555669][T13566] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2480'. [ 385.697034][T13572] netlink: 'syz.2.2483': attribute type 21 has an invalid length. [ 385.697127][T13572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2483'. [ 385.702340][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 385.813752][T13574] syzkaller0: entered promiscuous mode [ 385.813778][T13574] syzkaller0: entered allmulticast mode [ 385.957362][T13579] FAULT_INJECTION: forcing a failure. [ 385.957362][T13579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.957399][T13579] CPU: 0 UID: 0 PID: 13579 Comm: syz.2.2486 Not tainted syzkaller #0 PREEMPT(full) [ 385.957422][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.957435][T13579] Call Trace: [ 385.957444][T13579] [ 385.957453][T13579] dump_stack_lvl+0xe8/0x150 [ 385.957490][T13579] should_fail_ex+0x410/0x560 [ 385.957520][T13579] _copy_to_user+0x31/0xb0 [ 385.957549][T13579] simple_read_from_buffer+0xe1/0x170 [ 385.957584][T13579] proc_fail_nth_read+0x1bb/0x230 [ 385.957614][T13579] ? common_file_perm+0x20e/0x2b0 [ 385.957642][T13579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.957677][T13579] ? rw_verify_area+0x24a/0x4c0 [ 385.957707][T13579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.957737][T13579] vfs_read+0x213/0xa80 [ 385.957772][T13579] ? __pfx___mutex_lock+0x10/0x10 [ 385.957799][T13579] ? __pfx_vfs_read+0x10/0x10 [ 385.957830][T13579] ? __fget_files+0x2a/0x420 [ 385.957862][T13579] ? __fget_files+0x3a2/0x420 [ 385.957887][T13579] ? __fget_files+0x2a/0x420 [ 385.957924][T13579] ksys_read+0x150/0x270 [ 385.957957][T13579] ? __pfx_ksys_read+0x10/0x10 [ 385.958000][T13579] do_syscall_64+0x166/0x520 [ 385.958023][T13579] ? trace_irq_disable+0x3b/0x140 [ 385.958043][T13579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.958063][T13579] ? clear_bhb_loop+0x70/0xc0 [ 385.958089][T13579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.958109][T13579] RIP: 0033:0x7fbe57d5e98e [ 385.958128][T13579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.958145][T13579] RSP: 002b:00007fbe58d2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.958168][T13579] RAX: ffffffffffffffda RBX: 00007fbe58d306c0 RCX: 00007fbe57d5e98e [ 385.958182][T13579] RDX: 000000000000000f RSI: 00007fbe58d300a0 RDI: 0000000000000004 [ 385.958206][T13579] RBP: 00007fbe58d30090 R08: 0000000000000000 R09: 0000000000000000 [ 385.958219][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.958232][T13579] R13: 00007fbe58026038 R14: 00007fbe58025fa0 R15: 00007ffc31ab19f8 [ 385.958268][T13579] [ 386.093669][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'. [ 386.346465][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 386.393267][T13593] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 386.701791][T13607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2495'. [ 387.018171][T13624] syzkaller0: entered promiscuous mode [ 387.018196][T13624] syzkaller0: entered allmulticast mode [ 387.026654][T13627] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2500'. [ 387.252074][T13637] syzkaller0: entered promiscuous mode [ 387.252099][T13637] syzkaller0: entered allmulticast mode [ 387.387276][T13642] netlink: 'syz.5.2505': attribute type 20 has an invalid length. [ 387.387293][T13642] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.133175][T13665] syzkaller0: entered promiscuous mode [ 388.133202][T13665] syzkaller0: entered allmulticast mode [ 388.311392][T13673] syzkaller0: entered promiscuous mode [ 388.311417][T13673] syzkaller0: entered allmulticast mode [ 388.390372][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bd6f800: rx timeout, send abort [ 388.392721][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd6f800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 388.590590][T13683] FAULT_INJECTION: forcing a failure. [ 388.590590][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 388.590624][T13683] CPU: 0 UID: 0 PID: 13683 Comm: syz.1.2518 Not tainted syzkaller #0 PREEMPT(full) [ 388.590647][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.590669][T13683] Call Trace: [ 388.590678][T13683] [ 388.590687][T13683] dump_stack_lvl+0xe8/0x150 [ 388.590723][T13683] should_fail_ex+0x410/0x560 [ 388.590753][T13683] should_failslab+0xa8/0x100 [ 388.590780][T13683] __kmalloc_cache_noprof+0xa3/0x600 [ 388.590808][T13683] ? sctp_association_new+0x89/0x25d0 [ 388.590928][T13683] ? sctp_association_new+0x89/0x25d0 [ 388.590952][T13683] ? sctp_has_association+0x2f/0x1f0 [ 388.591026][T13683] sctp_association_new+0x89/0x25d0 [ 388.591049][T13683] ? sctp_has_association+0x2f/0x1f0 [ 388.591085][T13683] sctp_connect_new_asoc+0x2e4/0x6b0 [ 388.591138][T13683] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 388.591162][T13683] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 388.591185][T13683] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 388.591207][T13683] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 388.591232][T13683] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 388.591258][T13683] ? security_sctp_bind_connect+0x7e/0x2c0 [ 388.591307][T13683] sctp_sendmsg+0x159b/0x2d00 [ 388.591343][T13683] ? kstrtouint+0x6e/0xe0 [ 388.591374][T13683] ? __pfx_sctp_sendmsg+0x10/0x10 [ 388.591396][T13683] ? lock_acquire+0x115/0x350 [ 388.591415][T13683] ? get_pid_task+0x20/0x1f0 [ 388.591453][T13683] ? aa_sock_msg_perm+0xfc/0x210 [ 388.591475][T13683] ? sock_rps_record_flow+0x19/0x350 [ 388.591526][T13683] ? inet_sendmsg+0x298/0x320 [ 388.591543][T13683] ? apparmor_socket_sendmsg+0x98/0x360 [ 388.591566][T13683] ? __pfx_inet_sendmsg+0x10/0x10 [ 388.591585][T13683] sock_sendmsg_nosec+0x10e/0x180 [ 388.591610][T13683] __sys_sendto+0x408/0x5a0 [ 388.591634][T13683] ? ksys_write+0x1e6/0x270 [ 388.591674][T13683] ? __pfx___sys_sendto+0x10/0x10 [ 388.591696][T13683] ? __mutex_unlock_slowpath+0x731/0x900 [ 388.591753][T13683] ? __pfx_ksys_write+0x10/0x10 [ 388.591786][T13683] __x64_sys_sendto+0xde/0x100 [ 388.591815][T13683] do_syscall_64+0x166/0x520 [ 388.591836][T13683] ? trace_irq_disable+0x3b/0x140 [ 388.591854][T13683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.591873][T13683] ? clear_bhb_loop+0x70/0xc0 [ 388.591898][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.591917][T13683] RIP: 0033:0x7f4f8179e159 [ 388.591937][T13683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.591954][T13683] RSP: 002b:00007f4f7f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 388.591977][T13683] RAX: ffffffffffffffda RBX: 00007f4f81a25fa0 RCX: 00007f4f8179e159 [ 388.591992][T13683] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 388.592004][T13683] RBP: 00007f4f7f9f6090 R08: 00002000000001c0 R09: 0000000000000010 [ 388.592016][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.592028][T13683] R13: 00007f4f81a26038 R14: 00007f4f81a25fa0 R15: 00007fffe24cd3d8 [ 388.592061][T13683] [ 389.212118][T13702] syzkaller0: entered promiscuous mode [ 389.212138][T13702] syzkaller0: entered allmulticast mode [ 389.255902][T13704] syzkaller0: entered promiscuous mode [ 389.255919][T13704] syzkaller0: entered allmulticast mode [ 389.514697][T13712] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2530'. [ 389.538732][T13712] gretap0: entered promiscuous mode [ 389.627934][ T5721] hid-generic 0005:0458:0009.001B: item fetching failed at offset 0/1 [ 389.633180][ T5721] hid-generic 0005:0458:0009.001B: probe with driver hid-generic failed with error -22 [ 389.779305][T13724] FAULT_INJECTION: forcing a failure. [ 389.779305][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 389.779339][T13724] CPU: 1 UID: 0 PID: 13724 Comm: syz.3.2536 Not tainted syzkaller #0 PREEMPT(full) [ 389.779362][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.779374][T13724] Call Trace: [ 389.779382][T13724] [ 389.779391][T13724] dump_stack_lvl+0xe8/0x150 [ 389.779428][T13724] should_fail_ex+0x410/0x560 [ 389.779459][T13724] should_failslab+0xa8/0x100 [ 389.779484][T13724] ? __nf_conntrack_alloc+0x81/0x3e0 [ 389.779510][T13724] kmem_cache_alloc_noprof+0xa1/0x600 [ 389.779540][T13724] ? nf_ct_pernet+0x45/0x270 [ 389.779565][T13724] ? __nf_conntrack_alloc+0x81/0x3e0 [ 389.779599][T13724] __nf_conntrack_alloc+0x81/0x3e0 [ 389.779630][T13724] init_conntrack+0x170/0x1080 [ 389.779665][T13724] ? __pfx_init_conntrack+0x10/0x10 [ 389.779700][T13724] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 389.779726][T13724] ? __siphash_unaligned+0x25c/0x3e0 [ 389.779846][T13724] nf_conntrack_in+0xc13/0x1600 [ 389.779899][T13724] ? __pfx_nf_conntrack_in+0x10/0x10 [ 389.779936][T13724] ? ipt_do_table+0x2b9/0x15d0 [ 389.779975][T13724] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 389.779994][T13724] ? ip_sabotage_in+0x57/0x270 [ 389.780075][T13724] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 389.780103][T13724] nf_hook_slow+0xc5/0x220 [ 389.780140][T13724] NF_HOOK+0x21f/0x3c0 [ 389.780169][T13724] ? __pfx_ip_rcv_finish+0x10/0x10 [ 389.780193][T13724] ? NF_HOOK+0x9e/0x3c0 [ 389.780220][T13724] ? __pfx_NF_HOOK+0x10/0x10 [ 389.780248][T13724] ? __pfx_ip_rcv_finish+0x10/0x10 [ 389.780280][T13724] ? netif_receive_skb+0x102/0xbf0 [ 389.780299][T13724] ? __pfx_ip_rcv+0x10/0x10 [ 389.780322][T13724] netif_receive_skb+0x45b/0xbf0 [ 389.780347][T13724] ? __pfx_netif_receive_skb+0x10/0x10 [ 389.780371][T13724] ? rcu_is_watching+0x16/0xb0 [ 389.780392][T13724] ? tun_rx_batched+0x185/0x790 [ 389.780416][T13724] tun_rx_batched+0x1de/0x790 [ 389.780444][T13724] ? __pfx_tun_rx_batched+0x10/0x10 [ 389.780465][T13724] ? lock_acquire+0x115/0x350 [ 389.780492][T13724] ? tun_get_user+0x23ba/0x44d0 [ 389.780512][T13724] ? __local_bh_enable_ip+0xd6/0x140 [ 389.780536][T13724] ? tun_get_user+0x27b0/0x44d0 [ 389.780558][T13724] tun_get_user+0x2be0/0x44d0 [ 389.780593][T13724] ? tun_get_user+0x27b0/0x44d0 [ 389.780619][T13724] ? aa_file_perm+0x4ed/0x15f0 [ 389.780645][T13724] ? __pfx_tun_get_user+0x10/0x10 [ 389.780669][T13724] ? __lock_acquire+0x747/0x2de0 [ 389.780707][T13724] ? ref_tracker_alloc+0x341/0x4b0 [ 389.780730][T13724] ? lock_acquire+0x115/0x350 [ 389.780753][T13724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 389.780779][T13724] ? lock_acquire+0x115/0x350 [ 389.780800][T13724] ? tun_get+0x1c/0x2f0 [ 389.780829][T13724] ? tun_get+0x1c/0x2f0 [ 389.780850][T13724] ? tun_get+0x1c/0x2f0 [ 389.780877][T13724] tun_chr_write_iter+0x113/0x200 [ 389.780903][T13724] vfs_write+0x612/0xba0 [ 389.780943][T13724] ? __pfx_vfs_write+0x10/0x10 [ 389.780985][T13724] ? __fget_files+0x2a/0x420 [ 389.781023][T13724] ksys_write+0x150/0x270 [ 389.781055][T13724] ? __pfx_ksys_write+0x10/0x10 [ 389.781099][T13724] do_syscall_64+0x166/0x520 [ 389.781131][T13724] ? trace_irq_disable+0x3b/0x140 [ 389.781150][T13724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.781172][T13724] ? clear_bhb_loop+0x70/0xc0 [ 389.781198][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.781224][T13724] RIP: 0033:0x7f3a45d5e98e [ 389.781244][T13724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.781261][T13724] RSP: 002b:00007f3a46c90fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.781284][T13724] RAX: ffffffffffffffda RBX: 00007f3a46c916c0 RCX: 00007f3a45d5e98e [ 389.781300][T13724] RDX: 000000000000003a RSI: 0000200000000440 RDI: 00000000000000c8 [ 389.781313][T13724] RBP: 00007f3a46c91090 R08: 0000000000000000 R09: 0000000000000000 [ 389.781326][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.781338][T13724] R13: 00007f3a46026038 R14: 00007f3a46025fa0 R15: 00007ffe66387068 [ 389.781373][T13724] [ 390.196348][T13729] syzkaller0: entered promiscuous mode [ 390.196370][T13729] syzkaller0: entered allmulticast mode [ 390.230808][T13731] syzkaller0: entered promiscuous mode [ 390.230825][T13731] syzkaller0: entered allmulticast mode [ 390.269894][T13734] __nla_validate_parse: 1 callbacks suppressed [ 390.269939][T13734] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2540'. [ 390.376063][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 390.376095][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 390.471965][T13742] FAULT_INJECTION: forcing a failure. [ 390.471965][T13742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.472001][T13742] CPU: 1 UID: 0 PID: 13742 Comm: syz.5.2542 Not tainted syzkaller #0 PREEMPT(full) [ 390.472023][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.472036][T13742] Call Trace: [ 390.472044][T13742] [ 390.472054][T13742] dump_stack_lvl+0xe8/0x150 [ 390.472089][T13742] should_fail_ex+0x410/0x560 [ 390.472119][T13742] _copy_from_iter+0x1d3/0x1660 [ 390.472143][T13742] ? __alloc_skb+0x27a/0x7a0 [ 390.472169][T13742] ? __alloc_skb+0x27a/0x7a0 [ 390.472195][T13742] ? __alloc_skb+0x27a/0x7a0 [ 390.472227][T13742] ? __pfx__copy_from_iter+0x10/0x10 [ 390.472247][T13742] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 390.472277][T13742] ? __alloc_skb+0x27a/0x7a0 [ 390.472298][T13742] ? __alloc_skb+0x27a/0x7a0 [ 390.472328][T13742] ? netlink_sendmsg+0x650/0xb40 [ 390.472358][T13742] ? skb_put+0x112/0x210 [ 390.472390][T13742] netlink_sendmsg+0x6c0/0xb40 [ 390.472431][T13742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.472469][T13742] ? apparmor_socket_sendmsg+0x98/0x360 [ 390.472494][T13742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.472523][T13742] sock_sendmsg_nosec+0x13a/0x180 [ 390.472548][T13742] ____sys_sendmsg+0x54e/0x850 [ 390.472582][T13742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.472619][T13742] ? import_iovec+0x73/0xa0 [ 390.472648][T13742] ___sys_sendmsg+0x2a5/0x360 [ 390.472674][T13742] ? __lock_acquire+0x747/0x2de0 [ 390.472700][T13742] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.472765][T13742] ? __fget_files+0x2a/0x420 [ 390.472791][T13742] ? __fget_files+0x3a2/0x420 [ 390.472828][T13742] __x64_sys_sendmsg+0x1b1/0x290 [ 390.472858][T13742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.472906][T13742] do_syscall_64+0x166/0x520 [ 390.472930][T13742] ? trace_irq_disable+0x3b/0x140 [ 390.472950][T13742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.472971][T13742] ? clear_bhb_loop+0x70/0xc0 [ 390.472995][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.473014][T13742] RIP: 0033:0x7f5687f9e159 [ 390.473034][T13742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.473051][T13742] RSP: 002b:00007f5688ead028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.473073][T13742] RAX: ffffffffffffffda RBX: 00007f5688226090 RCX: 00007f5687f9e159 [ 390.473087][T13742] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 390.473100][T13742] RBP: 00007f5688ead090 R08: 0000000000000000 R09: 0000000000000000 [ 390.473112][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.473124][T13742] R13: 00007f5688226128 R14: 00007f5688226090 R15: 00007ffffe217b58 [ 390.473157][T13742] [ 390.719226][T13750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.222405][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.231462][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.233589][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.249461][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.250200][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.372573][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 406.373264][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.407259][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 406.408469][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.409605][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 406.411518][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.414773][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.415910][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 406.416739][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 406.422932][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.548502][ T5622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 406.554502][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 406.562344][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 406.581906][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 406.582603][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 406.623922][ T5622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.633012][ T5622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 406.635869][ T5622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 406.652546][ T5622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 406.655402][ T5622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 407.424268][T13759] hsr0 speed is unknown, defaulting to 1000 [ 407.430715][T13759] wlan0 speed is unknown, defaulting to 1000 [ 407.654240][T13763] hsr0 speed is unknown, defaulting to 1000 [ 407.674505][T13771] hsr0 speed is unknown, defaulting to 1000 [ 407.680098][T13763] wlan0 speed is unknown, defaulting to 1000 [ 407.717670][T13771] wlan0 speed is unknown, defaulting to 1000 [ 407.718762][T13769] hsr0 speed is unknown, defaulting to 1000 [ 407.742091][T13762] hsr0 speed is unknown, defaulting to 1000 [ 407.748287][T13769] wlan0 speed is unknown, defaulting to 1000 [ 407.780669][T13762] wlan0 speed is unknown, defaulting to 1000 [ 408.315653][ T5630] Bluetooth: hci0: command tx timeout [ 408.327328][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.327436][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.327633][T13759] bridge_slave_0: entered allmulticast mode [ 408.329450][T13759] bridge_slave_0: entered promiscuous mode [ 408.332229][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.332340][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.332489][T13759] bridge_slave_1: entered allmulticast mode [ 408.334328][T13759] bridge_slave_1: entered promiscuous mode [ 408.475449][ T5630] Bluetooth: hci7: command tx timeout [ 408.476077][ T5630] Bluetooth: hci6: command tx timeout [ 408.550534][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.590168][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.635258][ T5630] Bluetooth: hci8: command tx timeout [ 408.717413][ T5630] Bluetooth: hci9: command tx timeout [ 408.743419][T13769] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.743610][T13769] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.743734][T13769] bridge_slave_0: entered allmulticast mode [ 408.747045][T13769] bridge_slave_0: entered promiscuous mode [ 408.749887][T13769] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.750068][T13769] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.750197][T13769] bridge_slave_1: entered allmulticast mode [ 408.752019][T13769] bridge_slave_1: entered promiscuous mode [ 408.756129][T13759] team0: Port device team_slave_0 added [ 408.759299][T13759] team0: Port device team_slave_1 added [ 408.916835][T13769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.919790][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.919807][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.919831][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.920320][T13771] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.920504][T13771] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.920653][T13771] bridge_slave_0: entered allmulticast mode [ 408.922372][T13771] bridge_slave_0: entered promiscuous mode [ 408.926710][T13771] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.926829][T13771] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.926959][T13771] bridge_slave_1: entered allmulticast mode [ 408.928872][T13771] bridge_slave_1: entered promiscuous mode [ 408.963964][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.964080][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.964209][T13763] bridge_slave_0: entered allmulticast mode [ 408.966874][T13763] bridge_slave_0: entered promiscuous mode [ 408.970803][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.970924][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.971086][T13763] bridge_slave_1: entered allmulticast mode [ 408.973007][T13763] bridge_slave_1: entered promiscuous mode [ 408.978629][T13769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.997116][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.997132][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.997155][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.130576][T13771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.158104][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.160182][T13769] team0: Port device team_slave_0 added [ 409.163690][T13769] team0: Port device team_slave_1 added [ 409.167446][T13771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.198144][T13762] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.198332][T13762] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.198479][T13762] bridge_slave_0: entered allmulticast mode [ 409.200262][T13762] bridge_slave_0: entered promiscuous mode [ 409.209720][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.240928][T13762] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.241028][T13762] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.241147][T13762] bridge_slave_1: entered allmulticast mode [ 409.242693][T13762] bridge_slave_1: entered promiscuous mode [ 409.325708][T13771] team0: Port device team_slave_0 added [ 409.326526][T13769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.326541][T13769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.326565][T13769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.329067][T13771] team0: Port device team_slave_1 added [ 409.334316][T13759] hsr_slave_0: entered promiscuous mode [ 409.338032][T13759] hsr_slave_1: entered promiscuous mode [ 409.338835][T13759] debugfs: 'hsr0' already exists in 'hsr' [ 409.338853][T13759] Cannot create hsr debugfs directory [ 409.360015][T13763] team0: Port device team_slave_0 added [ 409.378352][T13769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.378367][T13769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.378389][T13769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.400668][T13762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.403869][T13763] team0: Port device team_slave_1 added [ 409.481442][T13762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.497854][T13771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.497868][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.497882][T13771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.499920][T13771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.499930][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.499945][T13771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.629354][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.629373][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.629399][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.637613][T13769] hsr_slave_0: entered promiscuous mode [ 409.638694][T13769] hsr_slave_1: entered promiscuous mode [ 409.639389][T13769] debugfs: 'hsr0' already exists in 'hsr' [ 409.639407][T13769] Cannot create hsr debugfs directory [ 409.653345][T13762] team0: Port device team_slave_0 added [ 409.654503][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.654516][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.654539][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.691386][T13762] team0: Port device team_slave_1 added [ 409.819978][T13771] hsr_slave_0: entered promiscuous mode [ 409.820876][T13771] hsr_slave_1: entered promiscuous mode [ 409.821368][T13771] debugfs: 'hsr0' already exists in 'hsr' [ 409.821388][T13771] Cannot create hsr debugfs directory [ 409.832443][T13762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.832458][T13762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.832480][T13762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.900685][T13762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.900701][T13762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.900722][T13762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.984500][T13763] hsr_slave_0: entered promiscuous mode [ 409.989030][T13763] hsr_slave_1: entered promiscuous mode [ 409.989848][T13763] debugfs: 'hsr0' already exists in 'hsr' [ 409.989866][T13763] Cannot create hsr debugfs directory [ 410.162775][T13762] hsr_slave_0: entered promiscuous mode [ 410.163037][ T4948] block nbd1: Possible stuck request ffff88802770e000: control (read@0,1024B). Runtime 60 seconds [ 410.163084][ T4948] block nbd1: Possible stuck request ffff88802770e1c0: control (read@1024,1024B). Runtime 60 seconds [ 410.163107][ T4948] block nbd1: Possible stuck request ffff88802770e380: control (read@2048,1024B). Runtime 60 seconds [ 410.163128][ T4948] block nbd1: Possible stuck request ffff88802770e540: control (read@3072,1024B). Runtime 60 seconds [ 410.164159][T13762] hsr_slave_1: entered promiscuous mode [ 410.167581][T13762] debugfs: 'hsr0' already exists in 'hsr' [ 410.167602][T13762] Cannot create hsr debugfs directory [ 410.395119][ T5630] Bluetooth: hci0: command tx timeout [ 410.564065][ T5630] Bluetooth: hci7: command tx timeout [ 410.564102][ T5630] Bluetooth: hci6: command tx timeout [ 410.717524][ T5622] Bluetooth: hci8: command tx timeout [ 410.795856][ T5622] Bluetooth: hci9: command tx timeout [ 412.475243][ T5622] Bluetooth: hci0: command tx timeout [ 412.635815][ T5622] Bluetooth: hci6: command tx timeout [ 412.635855][ T5622] Bluetooth: hci7: command tx timeout [ 412.795369][ T5630] Bluetooth: hci8: command tx timeout [ 412.879093][ T5630] Bluetooth: hci9: command tx timeout [ 414.455916][ T4985] udevd[4985]: worker [10669] /devices/virtual/block/nbd1 is taking a long time [ 414.556399][ T5630] Bluetooth: hci0: command tx timeout [ 414.717063][ T5622] Bluetooth: hci6: command tx timeout [ 414.717119][ T5630] Bluetooth: hci7: command tx timeout [ 414.877204][ T5630] Bluetooth: hci8: command tx timeout [ 414.955005][ T5630] Bluetooth: hci9: command tx timeout [ 440.237240][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.237645][ T4948] block nbd1: Possible stuck request ffff88802770e000: control (read@0,1024B). Runtime 90 seconds [ 440.237672][ T4948] block nbd1: Possible stuck request ffff88802770e1c0: control (read@1024,1024B). Runtime 90 seconds [ 440.237687][ T4948] block nbd1: Possible stuck request ffff88802770e380: control (read@2048,1024B). Runtime 90 seconds [ 440.237702][ T4948] block nbd1: Possible stuck request ffff88802770e540: control (read@3072,1024B). Runtime 90 seconds [ 466.430795][ T5622] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 466.443959][ T5622] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 466.446065][ T5622] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 466.460594][ T5622] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 466.461273][ T5622] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 466.608323][ T5622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 466.612257][ T5622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 466.613008][ T5622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 466.619287][ T5622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 466.645642][ T5622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 466.684400][ T4933] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 466.695073][ T4933] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 466.695903][ T4933] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 466.698388][ T4933] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 466.699060][ T4933] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 466.886192][ T4933] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 466.888752][ T4933] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 466.890837][ T4933] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 466.891860][ T4933] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 466.893158][ T4933] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 467.042860][ T5630] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 467.059567][ T5630] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 467.065731][ T5630] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 467.077849][ T5630] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 467.078482][ T5630] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 467.772481][T14028] hsr0 speed is unknown, defaulting to 1000 [ 467.777191][T14028] wlan0 speed is unknown, defaulting to 1000 [ 467.812798][T14021] hsr0 speed is unknown, defaulting to 1000 [ 467.831410][T14021] wlan0 speed is unknown, defaulting to 1000 [ 468.010999][T14025] hsr0 speed is unknown, defaulting to 1000 [ 468.041710][T14025] wlan0 speed is unknown, defaulting to 1000 [ 468.116479][T14034] hsr0 speed is unknown, defaulting to 1000 [ 468.158051][T14034] wlan0 speed is unknown, defaulting to 1000 [ 468.159283][T14038] hsr0 speed is unknown, defaulting to 1000 [ 468.189236][T14038] wlan0 speed is unknown, defaulting to 1000 [ 468.555572][ T5630] Bluetooth: hci10: command tx timeout [ 468.658043][T14028] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.658248][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.658386][T14028] bridge_slave_0: entered allmulticast mode [ 468.660118][T14028] bridge_slave_0: entered promiscuous mode [ 468.703013][T14028] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.703460][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.703988][T14028] bridge_slave_1: entered allmulticast mode [ 468.706855][T14028] bridge_slave_1: entered promiscuous mode [ 468.716427][ T5630] Bluetooth: hci11: command tx timeout [ 468.795698][ T5630] Bluetooth: hci12: command tx timeout [ 468.814541][T14021] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.814729][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.816109][T14021] bridge_slave_0: entered allmulticast mode [ 468.817990][T14021] bridge_slave_0: entered promiscuous mode [ 468.856823][T14028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.864646][T14021] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.864744][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.868824][T14021] bridge_slave_1: entered allmulticast mode [ 468.870712][T14021] bridge_slave_1: entered promiscuous mode [ 468.925348][T14028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.958125][ T5630] Bluetooth: hci13: command tx timeout [ 469.050352][T14028] team0: Port device team_slave_0 added [ 469.067496][T14021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.085087][T14028] team0: Port device team_slave_1 added [ 469.126210][T14021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.157110][T14028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.157128][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.157153][T14028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.195242][ T5630] Bluetooth: hci14: command tx timeout [ 469.221785][T14028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.221804][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.221829][T14028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.271681][T14025] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.271802][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.272071][T14025] bridge_slave_0: entered allmulticast mode [ 469.273259][T14025] bridge_slave_0: entered promiscuous mode [ 469.328876][T14021] team0: Port device team_slave_0 added [ 469.329207][T14025] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.329324][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.329465][T14025] bridge_slave_1: entered allmulticast mode [ 469.331013][T14025] bridge_slave_1: entered promiscuous mode [ 469.376067][T14034] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.376209][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.376349][T14034] bridge_slave_0: entered allmulticast mode [ 469.378196][T14034] bridge_slave_0: entered promiscuous mode [ 469.383117][T14021] team0: Port device team_slave_1 added [ 469.434445][T14028] hsr_slave_0: entered promiscuous mode [ 469.436652][T14028] hsr_slave_1: entered promiscuous mode [ 469.437443][T14028] debugfs: 'hsr0' already exists in 'hsr' [ 469.437462][T14028] Cannot create hsr debugfs directory [ 469.439016][T14034] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.439128][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.439583][T14034] bridge_slave_1: entered allmulticast mode [ 469.442042][T14034] bridge_slave_1: entered promiscuous mode [ 469.512712][T14021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.512730][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.512757][T14021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.518314][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.559722][T14034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.563584][T14021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.563599][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.563622][T14021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.569484][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.640018][T14034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.662265][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.662368][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.662495][T14038] bridge_slave_0: entered allmulticast mode [ 469.663775][T14038] bridge_slave_0: entered promiscuous mode [ 469.668744][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.668911][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.669048][T14038] bridge_slave_1: entered allmulticast mode [ 469.670951][T14038] bridge_slave_1: entered promiscuous mode [ 469.758289][T14034] team0: Port device team_slave_0 added [ 469.760411][T14025] team0: Port device team_slave_0 added [ 469.796698][T14034] team0: Port device team_slave_1 added [ 469.815901][T14025] team0: Port device team_slave_1 added [ 469.830165][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.877449][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.883509][T14021] hsr_slave_0: entered promiscuous mode [ 469.884253][T14021] hsr_slave_1: entered promiscuous mode [ 469.884723][T14021] debugfs: 'hsr0' already exists in 'hsr' [ 469.884744][T14021] Cannot create hsr debugfs directory [ 469.897946][T14034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.897964][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.897986][T14034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.920929][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.920946][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.920967][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.943218][T14034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.943236][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.943259][T14034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.029194][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.029211][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.029234][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.108215][T14038] team0: Port device team_slave_0 added [ 470.133706][T14038] team0: Port device team_slave_1 added [ 470.229805][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.229825][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.229850][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.251557][T14034] hsr_slave_0: entered promiscuous mode [ 470.252743][T14034] hsr_slave_1: entered promiscuous mode [ 470.253561][T14034] debugfs: 'hsr0' already exists in 'hsr' [ 470.253579][T14034] Cannot create hsr debugfs directory [ 470.274592][T14025] hsr_slave_0: entered promiscuous mode [ 470.281216][T14025] hsr_slave_1: entered promiscuous mode [ 470.286959][T14025] debugfs: 'hsr0' already exists in 'hsr' [ 470.286981][T14025] Cannot create hsr debugfs directory [ 470.293243][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.293259][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.293282][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.361665][ T4948] block nbd1: Possible stuck request ffff88802770e000: control (read@0,1024B). Runtime 120 seconds [ 470.361708][ T4948] block nbd1: Possible stuck request ffff88802770e1c0: control (read@1024,1024B). Runtime 120 seconds [ 470.361736][ T4948] block nbd1: Possible stuck request ffff88802770e380: control (read@2048,1024B). Runtime 120 seconds [ 470.361759][ T4948] block nbd1: Possible stuck request ffff88802770e540: control (read@3072,1024B). Runtime 120 seconds [ 470.594430][T14038] hsr_slave_0: entered promiscuous mode [ 470.597287][T14038] hsr_slave_1: entered promiscuous mode [ 470.598093][T14038] debugfs: 'hsr0' already exists in 'hsr' [ 470.598112][T14038] Cannot create hsr debugfs directory [ 470.635189][ T5630] Bluetooth: hci10: command tx timeout [ 470.795193][ T5630] Bluetooth: hci11: command tx timeout [ 470.875245][ T5630] Bluetooth: hci12: command tx timeout [ 471.037591][ T5630] Bluetooth: hci13: command tx timeout [ 471.277548][ T5630] Bluetooth: hci14: command tx timeout [ 472.715090][ T5630] Bluetooth: hci10: command tx timeout [ 472.875754][ T5630] Bluetooth: hci11: command tx timeout [ 472.955192][ T5630] Bluetooth: hci12: command tx timeout [ 473.115846][ T5630] Bluetooth: hci13: command tx timeout [ 473.355174][ T5630] Bluetooth: hci14: command tx timeout [ 474.795515][ T5630] Bluetooth: hci10: command tx timeout [ 474.955129][ T5630] Bluetooth: hci11: command tx timeout [ 475.035672][ T5630] Bluetooth: hci12: command tx timeout [ 475.195017][ T5630] Bluetooth: hci13: command tx timeout [ 475.435392][ T5630] Bluetooth: hci14: command tx timeout [ 500.397417][ T4948] block nbd1: Possible stuck request ffff88802770e000: control (read@0,1024B). Runtime 150 seconds [ 500.397464][ T4948] block nbd1: Possible stuck request ffff88802770e1c0: control (read@1024,1024B). Runtime 150 seconds [ 500.397491][ T4948] block nbd1: Possible stuck request ffff88802770e380: control (read@2048,1024B). Runtime 150 seconds [ 500.397517][ T4948] block nbd1: Possible stuck request ffff88802770e540: control (read@3072,1024B). Runtime 150 seconds [ 501.676210][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.995428][ T5630] Bluetooth: hci5: command 0x0405 tx timeout [ 526.798663][ T5630] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 526.816676][ T5630] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 526.817806][ T5630] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 526.819814][ T5630] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 526.822195][ T5630] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 526.950230][ T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 526.956978][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 526.962147][ T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 526.969540][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 526.971757][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 526.975890][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 526.977286][ T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 526.978043][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 526.981178][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 526.982692][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 527.086481][ T4933] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 527.088909][ T4933] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 527.095503][ T4933] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 527.122336][ T4933] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 527.123081][ T4933] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 527.404353][T14140] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 527.411605][T14140] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 527.427000][T14140] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 527.446886][T14140] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 527.449135][T14140] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 528.053772][T14120] hsr0 speed is unknown, defaulting to 1000 [ 528.059203][T14116] hsr0 speed is unknown, defaulting to 1000 [ 528.060986][T14120] wlan0 speed is unknown, defaulting to 1000 [ 528.071214][T14116] wlan0 speed is unknown, defaulting to 1000 [ 528.321065][T14119] hsr0 speed is unknown, defaulting to 1000 [ 528.350841][T14119] wlan0 speed is unknown, defaulting to 1000 [ 528.456481][T14139] hsr0 speed is unknown, defaulting to 1000 [ 528.483777][T14124] hsr0 speed is unknown, defaulting to 1000 [ 528.500366][T14139] wlan0 speed is unknown, defaulting to 1000 [ 528.525916][T14124] wlan0 speed is unknown, defaulting to 1000 [ 528.876582][T14140] Bluetooth: hci15: command tx timeout [ 528.942426][T14116] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.942638][T14116] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.943043][T14116] bridge_slave_0: entered allmulticast mode [ 528.970226][T14116] bridge_slave_0: entered promiscuous mode [ 529.019452][T14116] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.019563][T14116] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.019957][T14116] bridge_slave_1: entered allmulticast mode [ 529.021432][T14116] bridge_slave_1: entered promiscuous mode [ 529.035230][T14140] Bluetooth: hci17: command tx timeout [ 529.035846][T14140] Bluetooth: hci16: command tx timeout [ 529.147364][T14116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.194106][T14116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.196688][T14134] Bluetooth: hci18: command tx timeout [ 529.240069][T14120] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.240219][T14120] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.240311][T14120] bridge_slave_0: entered allmulticast mode [ 529.241475][T14120] bridge_slave_0: entered promiscuous mode [ 529.312381][T14120] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.312529][T14120] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.312663][T14120] bridge_slave_1: entered allmulticast mode [ 529.314250][T14120] bridge_slave_1: entered promiscuous mode [ 529.337887][T14116] team0: Port device team_slave_0 added [ 529.357269][T14134] Bluetooth: hci0: command 0x0406 tx timeout [ 529.357373][T14134] Bluetooth: hci7: command 0x0406 tx timeout [ 529.357399][T14134] Bluetooth: hci8: command 0x0406 tx timeout [ 529.357421][T14134] Bluetooth: hci9: command 0x0406 tx timeout [ 529.357717][T14134] Bluetooth: hci6: command 0x0406 tx timeout [ 529.478564][T14116] team0: Port device team_slave_1 added [ 529.515766][T14123] Bluetooth: hci19: command tx timeout [ 529.577605][T14119] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.577718][T14119] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.577808][T14119] bridge_slave_0: entered allmulticast mode [ 529.578902][T14119] bridge_slave_0: entered promiscuous mode [ 529.581625][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.581782][T14119] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.582203][T14119] bridge_slave_1: entered allmulticast mode [ 529.584078][T14119] bridge_slave_1: entered promiscuous mode [ 529.622053][T14119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.626257][T14119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.657287][T14120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.704493][T14120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.705885][T14116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.705899][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.705921][T14116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.708480][T14116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.708493][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.708516][T14116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.799165][T14119] team0: Port device team_slave_0 added [ 529.845297][T14116] hsr_slave_0: entered promiscuous mode [ 529.846081][T14116] hsr_slave_1: entered promiscuous mode [ 529.846651][T14116] debugfs: 'hsr0' already exists in 'hsr' [ 529.846673][T14116] Cannot create hsr debugfs directory [ 529.849148][T14119] team0: Port device team_slave_1 added [ 529.849440][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.849594][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.849695][T14139] bridge_slave_0: entered allmulticast mode [ 529.850886][T14139] bridge_slave_0: entered promiscuous mode [ 529.930353][T14120] team0: Port device team_slave_0 added [ 529.943737][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.944130][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.944503][T14139] bridge_slave_1: entered allmulticast mode [ 529.947597][T14139] bridge_slave_1: entered promiscuous mode [ 529.950037][T14119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.950051][T14119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.950074][T14119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.952985][T14119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.952999][T14119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.953022][T14119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.027716][T14120] team0: Port device team_slave_1 added [ 530.117369][T14120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.117389][T14120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.117414][T14120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.134666][T14139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.177768][T14120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.177787][T14120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.177811][T14120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.191212][T14139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.199110][T14119] hsr_slave_0: entered promiscuous mode [ 530.200224][T14119] hsr_slave_1: entered promiscuous mode [ 530.201053][T14119] debugfs: 'hsr0' already exists in 'hsr' [ 530.201071][T14119] Cannot create hsr debugfs directory [ 530.201412][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.201604][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.202074][T14124] bridge_slave_0: entered allmulticast mode [ 530.204636][T14124] bridge_slave_0: entered promiscuous mode [ 530.277281][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.277454][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.277915][T14124] bridge_slave_1: entered allmulticast mode [ 530.281517][T14124] bridge_slave_1: entered promiscuous mode [ 530.301330][T14139] team0: Port device team_slave_0 added [ 530.361209][T14139] team0: Port device team_slave_1 added [ 530.384035][T14120] hsr_slave_0: entered promiscuous mode [ 530.385547][T14120] hsr_slave_1: entered promiscuous mode [ 530.386278][T14120] debugfs: 'hsr0' already exists in 'hsr' [ 530.386296][T14120] Cannot create hsr debugfs directory [ 530.424415][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.477606][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.494500][ T4948] block nbd1: Possible stuck request ffff88802770e000: control (read@0,1024B). Runtime 180 seconds [ 530.494547][ T4948] block nbd1: Possible stuck request ffff88802770e1c0: control (read@1024,1024B). Runtime 180 seconds [ 530.494574][ T4948] block nbd1: Possible stuck request ffff88802770e380: control (read@2048,1024B). Runtime 180 seconds [ 530.494600][ T4948] block nbd1: Possible stuck request ffff88802770e540: control (read@3072,1024B). Runtime 180 seconds [ 530.519444][T14139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.519460][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.519483][T14139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.579948][T14139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.579965][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.579988][T14139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.692488][T14124] team0: Port device team_slave_0 added [ 530.735642][T14124] team0: Port device team_slave_1 added [ 530.797069][T14139] hsr_slave_0: entered promiscuous mode [ 530.798301][T14139] hsr_slave_1: entered promiscuous mode [ 530.799690][T14139] debugfs: 'hsr0' already exists in 'hsr' [ 530.799711][T14139] Cannot create hsr debugfs directory [ 530.867464][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.867481][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.867502][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.936723][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.936739][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.936761][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.978706][T14123] Bluetooth: hci15: command tx timeout [ 531.089046][T14124] hsr_slave_0: entered promiscuous mode [ 531.089753][T14124] hsr_slave_1: entered promiscuous mode [ 531.090233][T14124] debugfs: 'hsr0' already exists in 'hsr' [ 531.090253][T14124] Cannot create hsr debugfs directory [ 531.118339][T14123] Bluetooth: hci16: command tx timeout [ 531.118345][ T4933] Bluetooth: hci17: command tx timeout [ 531.276353][T14123] Bluetooth: hci18: command tx timeout [ 531.594951][T14123] Bluetooth: hci19: command tx timeout [ 533.045760][T14123] Bluetooth: hci15: command tx timeout [ 533.195347][T14123] Bluetooth: hci17: command tx timeout [ 533.195363][ T4933] Bluetooth: hci16: command tx timeout [ 533.355363][T14123] Bluetooth: hci18: command tx timeout [ 533.685242][T14123] Bluetooth: hci19: command tx timeout [ 535.115425][T14123] Bluetooth: hci15: command tx timeout [ 535.275263][T14123] Bluetooth: hci16: command tx timeout [ 535.275278][ T4933] Bluetooth: hci17: command tx timeout [ 535.294347][ T4985] udevd[4985]: worker [10669] /devices/virtual/block/nbd1 timeout; kill it [ 535.294499][ T4985] udevd[4985]: seq 15768 '/devices/virtual/block/nbd1' killed [ 535.435495][ T4933] Bluetooth: hci18: command tx timeout [ 535.755090][ T4933] Bluetooth: hci19: command tx timeout [ 541.995645][ T32] INFO: task syz.1.2541:13736 blocked for more than 143 seconds. [ 541.995676][ T32] Not tainted syzkaller #0 [ 541.995687][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.995696][ T32] task:syz.1.2541 state:D stack:24800 pid:13736 tgid:13735 ppid:5619 task_flags:0x480140 flags:0x00080002 [ 541.995756][ T32] Call Trace: [ 541.995764][ T32] ** replaying previous printk message ** [ 541.995764][ T32] [ 541.995778][ T32] __schedule+0x17db/0x58f0 [ 541.995813][ T32] ? __lock_acquire+0x747/0x2de0 [ 541.995867][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 541.995904][ T32] ? __pfx___schedule+0x10/0x10 [ 541.995929][ T32] ? lock_acquire+0x115/0x350 [ 541.995961][ T32] ? schedule+0x90/0x2b0 [ 541.995987][ T32] schedule+0x164/0x2b0 [ 541.996012][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 541.996143][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 541.996179][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 541.996218][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 541.996245][ T32] nbd_set_size+0x4c5/0x7d0 [ 541.996301][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 541.996354][ T32] ? nla_memcpy+0x5b/0xc0 [ 541.996394][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 541.996430][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 541.996456][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 541.996483][ T32] ? __nla_parse+0x40/0x60 [ 541.996514][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 541.996550][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 541.996582][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 541.996619][ T32] ? __lock_acquire+0x747/0x2de0 [ 541.996650][ T32] genl_rcv_msg+0x614/0x7a0 [ 541.996678][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.996698][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 541.996730][ T32] netlink_rcv_skb+0x226/0x4a0 [ 541.996758][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.996783][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.996884][ T32] ? down_read+0x2be/0x330 [ 541.996932][ T32] genl_rcv+0x28/0x40 [ 541.996955][ T32] netlink_unicast+0x7bd/0x940 [ 541.996997][ T32] netlink_sendmsg+0x813/0xb40 [ 541.997047][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.997084][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 541.997110][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.997169][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 541.997197][ T32] ____sys_sendmsg+0x54e/0x850 [ 541.997227][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.997968][ T32] ? import_iovec+0x73/0xa0 [ 541.998004][ T32] ___sys_sendmsg+0x2a5/0x360 [ 541.998029][ T32] ? __lock_acquire+0x747/0x2de0 [ 541.998057][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.998090][ T32] ? futex_wait+0x2a2/0x390 [ 541.998170][ T32] ? __fget_files+0x2a/0x420 [ 541.998199][ T32] ? __fget_files+0x3a2/0x420 [ 541.998240][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 541.998272][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.998324][ T32] do_syscall_64+0x166/0x520 [ 541.998352][ T32] ? trace_irq_disable+0x3b/0x140 [ 541.998374][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.998398][ T32] ? clear_bhb_loop+0x70/0xc0 [ 541.998424][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.998445][ T32] RIP: 0033:0x7f4f8179e159 [ 541.998466][ T32] RSP: 002b:00007f4f7f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.998491][ T32] RAX: ffffffffffffffda RBX: 00007f4f81a25fa0 RCX: 00007f4f8179e159 [ 541.998505][ T32] RDX: 0000000020000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 541.998520][ T32] RBP: 00007f4f8183506b R08: 0000000000000000 R09: 0000000000000000 [ 541.998533][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.998545][ T32] R13: 00007f4f81a26038 R14: 00007f4f81a25fa0 R15: 00007fffe24cd3d8 [ 541.998581][ T32] [ 541.998591][ T32] INFO: task syz.5.2542:13738 blocked for more than 143 seconds. [ 541.998608][ T32] Not tainted syzkaller #0 [ 541.998619][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.998629][ T32] task:syz.5.2542 state:D stack:27872 pid:13738 tgid:13737 ppid:10277 task_flags:0x400040 flags:0x00080002 [ 541.998682][ T32] Call Trace: [ 541.998689][ T32] [ 541.998702][ T32] __schedule+0x17db/0x58f0 [ 541.998783][ T32] ? __pfx___schedule+0x10/0x10 [ 541.998820][ T32] ? schedule+0x90/0x2b0 [ 541.998849][ T32] schedule+0x164/0x2b0 [ 541.998874][ T32] schedule_preempt_disabled+0x13/0x30 [ 541.998897][ T32] __mutex_lock+0x7c1/0x1550 [ 541.998929][ T32] ? __mutex_lock+0x5d4/0x1550 [ 541.998959][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 541.998987][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 541.999020][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 541.999058][ T32] ? radix_tree_lookup+0x240/0x290 [ 541.999086][ T32] genl_rcv_msg+0x10b/0x7a0 [ 541.999117][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.999170][ T32] netlink_rcv_skb+0x226/0x4a0 [ 541.999201][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.999228][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.999277][ T32] ? down_read+0x2be/0x330 [ 541.999308][ T32] genl_rcv+0x28/0x40 [ 541.999331][ T32] netlink_unicast+0x7bd/0x940 [ 541.999371][ T32] netlink_sendmsg+0x813/0xb40 [ 541.999443][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.999484][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 541.999510][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.999539][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 541.999564][ T32] __sys_sendto+0x408/0x5a0 [ 541.999596][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 541.999655][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 541.999706][ T32] __x64_sys_sendto+0xde/0x100 [ 541.999736][ T32] do_syscall_64+0x166/0x520 [ 541.999759][ T32] ? trace_irq_disable+0x3b/0x140 [ 541.999779][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.999800][ T32] ? clear_bhb_loop+0x70/0xc0 [ 541.999826][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.999846][ T32] RIP: 0033:0x7f5687f5e98e [ 541.999865][ T32] RSP: 002b:00007f5688ecce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 541.999886][ T32] RAX: ffffffffffffffda RBX: 00007f5688ece6c0 RCX: 00007f5687f5e98e [ 541.999901][ T32] RDX: 0000000000000020 RSI: 00007f5688ecd000 RDI: 0000000000000004 [ 541.999915][ T32] RBP: 0000000000000000 R08: 00007f5688eccf04 R09: 000000000000000c [ 541.999928][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 541.999940][ T32] R13: 00007f5688eccf58 R14: 00007f5688ecd000 R15: 0000000000000000 [ 541.999975][ T32] [ 541.999986][ T32] INFO: task syz.3.2543:13741 blocked for more than 143 seconds. [ 542.000001][ T32] Not tainted syzkaller #0 [ 542.000011][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.000021][ T32] task:syz.3.2543 state:D stack:27256 pid:13741 tgid:13740 ppid:5618 task_flags:0x400040 flags:0x00080002 [ 542.000079][ T32] Call Trace: [ 542.000086][ T32] [ 542.000100][ T32] __schedule+0x17db/0x58f0 [ 542.000166][ T32] ? __pfx___schedule+0x10/0x10 [ 542.000202][ T32] ? schedule+0x90/0x2b0 [ 542.000229][ T32] schedule+0x164/0x2b0 [ 542.000255][ T32] schedule_preempt_disabled+0x13/0x30 [ 542.000286][ T32] __mutex_lock+0x7c1/0x1550 [ 542.000317][ T32] ? __mutex_lock+0x5d4/0x1550 [ 542.000347][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 542.000373][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 542.000406][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 542.000441][ T32] ? radix_tree_lookup+0x240/0x290 [ 542.000466][ T32] genl_rcv_msg+0x10b/0x7a0 [ 542.000498][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.000542][ T32] netlink_rcv_skb+0x226/0x4a0 [ 542.000573][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.000599][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.000645][ T32] ? down_read+0x2be/0x330 [ 542.000677][ T32] genl_rcv+0x28/0x40 [ 542.000699][ T32] netlink_unicast+0x7bd/0x940 [ 542.000739][ T32] netlink_sendmsg+0x813/0xb40 [ 542.000779][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.000820][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.000845][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.000875][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 542.000900][ T32] __sys_sendto+0x408/0x5a0 [ 542.000932][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 542.000993][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 542.001020][ T32] __x64_sys_sendto+0xde/0x100 [ 542.001050][ T32] do_syscall_64+0x166/0x520 [ 542.001074][ T32] ? trace_irq_disable+0x3b/0x140 [ 542.001094][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.001115][ T32] ? clear_bhb_loop+0x70/0xc0 [ 542.001151][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.001172][ T32] RIP: 0033:0x7f3a45d5e98e [ 542.001189][ T32] RSP: 002b:00007f3a46c8fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.001209][ T32] RAX: ffffffffffffffda RBX: 00007f3a46c916c0 RCX: 00007f3a45d5e98e [ 542.001224][ T32] RDX: 0000000000000020 RSI: 00007f3a46c90000 RDI: 0000000000000003 [ 542.001237][ T32] RBP: 0000000000000000 R08: 00007f3a46c8ff04 R09: 000000000000000c [ 542.001251][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 542.001265][ T32] R13: 00007f3a46c8ff58 R14: 00007f3a46c90000 R15: 0000000000000000 [ 542.001307][ T32] [ 542.001317][ T32] INFO: task syz.3.2543:13744 blocked for more than 143 seconds. [ 542.001332][ T32] Not tainted syzkaller #0 [ 542.001343][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.001353][ T32] task:syz.3.2543 state:D stack:27872 pid:13744 tgid:13740 ppid:5618 task_flags:0x400040 flags:0x00080002 [ 542.001413][ T32] Call Trace: [ 542.001421][ T32] [ 542.001435][ T32] __schedule+0x17db/0x58f0 [ 542.001493][ T32] ? __pfx___schedule+0x10/0x10 [ 542.001528][ T32] ? schedule+0x90/0x2b0 [ 542.001555][ T32] schedule+0x164/0x2b0 [ 542.001582][ T32] schedule_preempt_disabled+0x13/0x30 [ 542.001604][ T32] __mutex_lock+0x7c1/0x1550 [ 542.001634][ T32] ? __mutex_lock+0x5d4/0x1550 [ 542.001680][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 542.001708][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 542.001742][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 542.001776][ T32] ? radix_tree_lookup+0x240/0x290 [ 542.001803][ T32] genl_rcv_msg+0x10b/0x7a0 [ 542.001834][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.001879][ T32] netlink_rcv_skb+0x226/0x4a0 [ 542.001910][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.001937][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.001985][ T32] ? down_read+0x2be/0x330 [ 542.002018][ T32] genl_rcv+0x28/0x40 [ 542.002040][ T32] netlink_unicast+0x7bd/0x940 [ 542.002090][ T32] netlink_sendmsg+0x813/0xb40 [ 542.002140][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.002181][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.002207][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.002237][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 542.002263][ T32] __sys_sendto+0x408/0x5a0 [ 542.002296][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 542.002358][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 542.002385][ T32] __x64_sys_sendto+0xde/0x100 [ 542.002415][ T32] do_syscall_64+0x166/0x520 [ 542.002440][ T32] ? trace_irq_disable+0x3b/0x140 [ 542.002460][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.002482][ T32] ? clear_bhb_loop+0x70/0xc0 [ 542.002509][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.002530][ T32] RIP: 0033:0x7f3a45d5e98e [ 542.002548][ T32] RSP: 002b:00007f3a46c4de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.002568][ T32] RAX: ffffffffffffffda RBX: 00007f3a46c4f6c0 RCX: 00007f3a45d5e98e [ 542.002583][ T32] RDX: 0000000000000020 RSI: 00007f3a46c4e000 RDI: 0000000000000003 [ 542.002596][ T32] RBP: 0000000000000000 R08: 00007f3a46c4df04 R09: 000000000000000c [ 542.002611][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 542.002625][ T32] R13: 00007f3a46c4df58 R14: 00007f3a46c4e000 R15: 0000000000000000 [ 542.002659][ T32] [ 542.002670][ T32] INFO: task syz.2.2544:13751 blocked for more than 143 seconds. [ 542.002685][ T32] Not tainted syzkaller #0 [ 542.002696][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.002706][ T32] task:syz.2.2544 state:D stack:27872 pid:13751 tgid:13745 ppid:5617 task_flags:0x400040 flags:0x00080002 [ 542.002767][ T32] Call Trace: [ 542.002775][ T32] [ 542.002789][ T32] __schedule+0x17db/0x58f0 [ 542.002847][ T32] ? __pfx___schedule+0x10/0x10 [ 542.002881][ T32] ? schedule+0x90/0x2b0 [ 542.002909][ T32] schedule+0x164/0x2b0 [ 542.002935][ T32] schedule_preempt_disabled+0x13/0x30 [ 542.002958][ T32] __mutex_lock+0x7c1/0x1550 [ 542.002990][ T32] ? __mutex_lock+0x5d4/0x1550 [ 542.003020][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 542.003047][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 542.003082][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 542.003117][ T32] ? radix_tree_lookup+0x240/0x290 [ 542.003153][ T32] genl_rcv_msg+0x10b/0x7a0 [ 542.003185][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.003230][ T32] netlink_rcv_skb+0x226/0x4a0 [ 542.003262][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.003290][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.003340][ T32] ? down_read+0x2be/0x330 [ 542.003373][ T32] genl_rcv+0x28/0x40 [ 542.003395][ T32] netlink_unicast+0x7bd/0x940 [ 542.003437][ T32] netlink_sendmsg+0x813/0xb40 [ 542.003478][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.003512][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.003534][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.003554][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 542.003569][ T32] __sys_sendto+0x408/0x5a0 [ 542.003587][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 542.003620][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 542.003637][ T32] __x64_sys_sendto+0xde/0x100 [ 542.003655][ T32] do_syscall_64+0x166/0x520 [ 542.003669][ T32] ? trace_irq_disable+0x3b/0x140 [ 542.003680][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.003693][ T32] ? clear_bhb_loop+0x70/0xc0 [ 542.003707][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.003719][ T32] RIP: 0033:0x7fbe57d5e98e [ 542.003733][ T32] RSP: 002b:00007fbe58d0de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.003746][ T32] RAX: ffffffffffffffda RBX: 00007fbe58d0f6c0 RCX: 00007fbe57d5e98e [ 542.003755][ T32] RDX: 0000000000000020 RSI: 00007fbe58d0e000 RDI: 0000000000000006 [ 542.003763][ T32] RBP: 0000000000000000 R08: 00007fbe58d0df04 R09: 000000000000000c [ 542.003771][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 542.003779][ T32] R13: 00007fbe58d0df58 R14: 00007fbe58d0e000 R15: 0000000000000000 [ 542.003798][ T32] [ 542.003804][ T32] INFO: task syz.4.2545:13750 blocked for more than 143 seconds. [ 542.003813][ T32] Not tainted syzkaller #0 [ 542.003819][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.003825][ T32] task:syz.4.2545 state:D stack:26024 pid:13750 tgid:13749 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 542.003853][ T32] Call Trace: [ 542.003857][ T32] [ 542.003865][ T32] __schedule+0x17db/0x58f0 [ 542.003895][ T32] ? __pfx___schedule+0x10/0x10 [ 542.003914][ T32] ? schedule+0x90/0x2b0 [ 542.003929][ T32] schedule+0x164/0x2b0 [ 542.003944][ T32] schedule_preempt_disabled+0x13/0x30 [ 542.003957][ T32] __mutex_lock+0x7c1/0x1550 [ 542.003974][ T32] ? __mutex_lock+0x5d4/0x1550 [ 542.003990][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 542.004005][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 542.004024][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 542.004043][ T32] ? radix_tree_lookup+0x240/0x290 [ 542.004058][ T32] genl_rcv_msg+0x10b/0x7a0 [ 542.004076][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.004100][ T32] netlink_rcv_skb+0x226/0x4a0 [ 542.004117][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.004132][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.004167][ T32] ? down_read+0x2be/0x330 [ 542.004184][ T32] genl_rcv+0x28/0x40 [ 542.004196][ T32] netlink_unicast+0x7bd/0x940 [ 542.004219][ T32] netlink_sendmsg+0x813/0xb40 [ 542.004242][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.004264][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.004278][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.004294][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 542.004309][ T32] __sys_sendto+0x408/0x5a0 [ 542.004327][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 542.004359][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 542.004374][ T32] __x64_sys_sendto+0xde/0x100 [ 542.004391][ T32] do_syscall_64+0x166/0x520 [ 542.004405][ T32] ? trace_irq_disable+0x3b/0x140 [ 542.004416][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.004428][ T32] ? clear_bhb_loop+0x70/0xc0 [ 542.004443][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.004455][ T32] RIP: 0033:0x7f2a3eb5e98e [ 542.004465][ T32] RSP: 002b:00007f2a3f97fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.004478][ T32] RAX: ffffffffffffffda RBX: 00007f2a3f9816c0 RCX: 00007f2a3eb5e98e [ 542.004487][ T32] RDX: 0000000000000020 RSI: 00007f2a3f980000 RDI: 0000000000000005 [ 542.004495][ T32] RBP: 0000000000000000 R08: 00007f2a3f97ff04 R09: 000000000000000c [ 542.004503][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 542.004510][ T32] R13: 00007f2a3f97ff58 R14: 00007f2a3f980000 R15: 0000000000000000 [ 542.004529][ T32] [ 542.004561][ T32] [ 542.004561][ T32] Showing all locks held in the system: [ 542.004569][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 542.004649][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 542.012755][ T32] locks held by syslogd/4967: 2, last CPU#1: [ 542.012778][ T32] #0: ffff888036a3a7f0 (&u->iolock){+.+.}-{4:4}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 542.012863][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 542.012919][ T32] locks held by getty/5374: 2, on CPU#0: [ 542.012978][ T32] #0: ffff8880357830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 542.013110][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 542.013187][ T32] locks held by udevd/10669: 1, on CPU#1: [ 542.013202][ T32] #0: ffff888026613350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 542.013281][ T32] locks held by syz.1.2541/13736: 6, on CPU#1: [ 542.013296][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.013345][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.013395][ T32] #2: ffff8880274c8260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 542.013439][ T32] #3: ffff8880265b3e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 542.013488][ T32] #4: ffff8880265b3840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 542.013572][ T32] #5: ffff8880265b3878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 542.013631][ T32] locks held by syz.5.2542/13738: 2, on CPU#0: [ 542.013646][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.013696][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.013747][ T32] locks held by syz.3.2543/13741: 2, on CPU#0: [ 542.013761][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.013810][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.013862][ T32] locks held by syz.3.2543/13744: 2, on CPU#0: [ 542.013876][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.013926][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.013976][ T32] locks held by syz.2.2544/13751: 2, on CPU#1: [ 542.013991][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.014040][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.014092][ T32] locks held by syz.4.2545/13750: 2, on CPU#1: [ 542.014106][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.042544][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.042594][ T32] locks held by syz-executor/13759: 2, on CPU#0: [ 542.042608][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.042661][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.042707][ T32] locks held by syz-executor/13762: 2, on CPU#1: [ 542.042721][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.042764][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.042810][ T32] locks held by syz-executor/13763: 2, on CPU#1: [ 542.042823][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.042867][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.042913][ T32] locks held by syz-executor/13769: 2, on CPU#1: [ 542.042925][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.042969][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043013][ T32] locks held by syz-executor/13771: 2, on CPU#1: [ 542.043027][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043069][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043118][ T32] locks held by syz-executor/14021: 2, on CPU#0: [ 542.043131][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043174][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043220][ T32] locks held by syz-executor/14025: 2, on CPU#1: [ 542.043232][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043275][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043321][ T32] locks held by syz-executor/14028: 2, on CPU#0: [ 542.043333][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043377][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043422][ T32] locks held by syz-executor/14034: 2, on CPU#1: [ 542.043434][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043483][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043559][ T32] locks held by syz-executor/14038: 2, on CPU#1: [ 542.043573][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043618][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043674][ T32] locks held by syz-executor/14116: 2, on CPU#0: [ 542.043687][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043731][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043777][ T32] locks held by syz-executor/14119: 2, on CPU#0: [ 542.043790][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043834][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043879][ T32] locks held by syz-executor/14120: 2, on CPU#0: [ 542.043892][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.043935][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.043981][ T32] locks held by syz-executor/14124: 2, on CPU#1: [ 542.043993][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.044037][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.044084][ T32] locks held by syz-executor/14139: 2, on CPU#0: [ 542.044097][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 542.044141][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 542.044191][ T32] [ 542.044196][ T32] ============================================= [ 542.044196][ T32] [ 542.044205][ T32] NMI backtrace for cpu 1 [ 542.044218][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 542.044238][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.044249][ T32] Call Trace: [ 542.044257][ T32] [ 542.044265][ T32] dump_stack_lvl+0xe8/0x150 [ 542.044294][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 542.044382][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 542.044412][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 542.044441][ T32] sys_info+0x135/0x170 [ 542.044465][ T32] watchdog+0xfd7/0x1030 [ 542.044491][ T32] ? watchdog+0x1c7/0x1030 [ 542.044517][ T32] kthread+0x38b/0x480 [ 542.044536][ T32] ? __pfx_watchdog+0x10/0x10 [ 542.044553][ T32] ? __pfx_kthread+0x10/0x10 [ 542.044573][ T32] ret_from_fork+0x514/0xb70 [ 542.044593][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 542.044611][ T32] ? __switch_to+0xc89/0x1420 [ 542.044664][ T32] ? __pfx_kthread+0x10/0x10 [ 542.044684][ T32] ret_from_fork_asm+0x1a/0x30 [ 542.044725][ T32] [ 542.044733][ T32] Sending NMI from CPU 1 to CPUs 0: [ 542.044939][ C0] NMI backtrace for cpu 0 [ 542.044954][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 542.044974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.044985][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 542.045039][ C0] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da e4 75 06 cc 44 89 f9 80 e1 07 [ 542.045055][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 542.045072][ C0] RAX: 1ffffffff35a7a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 542.045085][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 542.045098][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 542.045110][ C0] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 542.045124][ C0] R13: 0000000000000000 R14: ffffffff9ad3d0c0 R15: 0000000000000000 [ 542.045146][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 542.045161][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.045175][ C0] CR2: 00007f7fac11ffe8 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 542.045192][ C0] Call Trace: [ 542.045199][ C0] [ 542.045209][ C0] wait_for_lsr+0x184/0x2f0 [ 542.045231][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 542.045260][ C0] serial8250_console_write+0xaa1/0x1200 [ 542.045280][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 542.045306][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 542.045325][ C0] ? __schedule+0x17f1/0x58f0 [ 542.045352][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 542.045389][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 542.045412][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 542.045449][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 542.045470][ C0] nbcon_kthread_func+0x679/0x880 [ 542.045492][ C0] ? nbcon_kthread_func+0x163/0x880 [ 542.045510][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 542.045532][ C0] ? __kthread_parkme+0x71/0x1f0 [ 542.045558][ C0] ? __kthread_parkme+0x199/0x1f0 [ 542.045585][ C0] kthread+0x38b/0x480 [ 542.045603][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 542.045620][ C0] ? __pfx_kthread+0x10/0x10 [ 542.045639][ C0] ret_from_fork+0x514/0xb70 [ 542.045657][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 542.045675][ C0] ? __switch_to+0xc89/0x1420 [ 542.045701][ C0] ? __pfx_kthread+0x10/0x10 [ 542.045719][ C0] ret_from_fork_asm+0x1a/0x30 [ 542.045752][ C0] [ 542.046812][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 544.654005][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 544.663130][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.673191][ T32] Call Trace: [ 544.676481][ T32] [ 544.679418][ T32] vpanic+0x56d/0xa60 [ 544.683504][ T32] ? __pfx___schedule+0x10/0x10 [ 544.688362][ T32] ? __pfx_vpanic+0x10/0x10 [ 544.692887][ T32] panic+0xc5/0xd0 [ 544.696619][ T32] ? __pfx_panic+0x10/0x10 [ 544.701042][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 544.706509][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 544.711892][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 544.718071][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 544.724249][ T32] watchdog+0x1030/0x1030 [ 544.728601][ T32] ? watchdog+0x1c7/0x1030 [ 544.733036][ T32] kthread+0x38b/0x480 [ 544.737111][ T32] ? __pfx_watchdog+0x10/0x10 [ 544.741788][ T32] ? __pfx_kthread+0x10/0x10 [ 544.746402][ T32] ret_from_fork+0x514/0xb70 [ 544.751005][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 544.756137][ T32] ? __switch_to+0xc89/0x1420 [ 544.760828][ T32] ? __pfx_kthread+0x10/0x10 [ 544.765425][ T32] ret_from_fork_asm+0x1a/0x30 [ 544.770215][ T32] [ 544.773658][ T32] Kernel Offset: disabled [ 544.778004][ T32] Rebooting in 86400 seconds..