last executing test programs: 2m6.222765892s ago: executing program 4 (id=1196): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="d01dcecec1f1f052361d08931f270294bcdf8b07db61920a360c5fca892ff11c556264f8cc701d54403141266ffa70a9f183b21bfec61127cab8a489f22525cefa784a5a85a448deba8b024e7c57a4fe2b9330768c6991035effb3430210e0ccbb5eb2753fb7ca25f3e19683150b1aadd4a86a737683ee26f47c51fc23f135155cfb68f280ff2e9c39425d9d4dfbf8f75fc455623210a09f345ced37d1f6380d5f617de1e7bf3226644dfbff054250eec9889f45c3cec8aef69f48b09a0b3bd8951829a060db26062005cce3e2aed738dec0cfdee23cb1d1b04be5d66fc6e15a", 0xe0}, {&(0x7f0000000280)="d8bd18723c6867d1398d031b4ca8c9f2218778afea887bb561365533686c11f3c01e6659aaaa281533dae73578ebc150360434dd8a0e8cf69db002e02e088b1a90201160a05fb12be2237f0c93b1209eaefcb66839a788c73596734e1c3ba8416f62e5ae", 0x64}, {&(0x7f00000001c0)="fcf9f514af0d429216b02cd72f34190d5242ab462828b425202b6c84ec0bb39e2810695a1d1d323868664fbe742df8fe", 0x30}, {&(0x7f00000004c0)="8521d39845bbdb09a0f1aec66129dd6df0d8ced7716022532318c3fd3352573a9f70cab2a8a553815b9b510837c9ec3559b65a09c79ef48caadec382a310c764d61753ad39b12ac47e", 0x49}, {&(0x7f0000000680)="3d9dd7e80f2769c15c73e46244356596840c54df6339037842ea2cc09e82b0db8f90c2a779e01f94fa23ceb434e42901a90317e5f44f982dd390ec94373bc19fca562e", 0x43}, {&(0x7f0000000700)="1a9ab6745aa82d61b5bdeffb5b63d3e307549aedce6486809aed9c1b9bbe100fa7ec0addc2cde3afed028771cedcfb856b5fac1da4f72eb2b4192bc33029df3371b164de4826298ffcf58c7999fa18f57f2b1061d7a21d29665222a1726aaedae407402cfc8dff8f22171269b1405b767380973034d66c13b55f3a24cd57ba2f12574a61baa21bc7bb666aea1c0392bfd34621cce6c79c01d24f0081ceaede9d9c5de31e32bd125ef951bc7accfc152671b8bc3cdeab56d0d2a5192626d37f83ecfb17ac27adb3a481579539c1c81e258464294f", 0xd4}], 0x6, &(0x7f0000000e40)=[{0xe0, 0x88, 0x400, "a51c3d613eb70dc9c761b9df87408012dc0a8ee65a4877fca8085a35e21921cc1854bb5de63260e87bf13a21b56933c356d435cf3382bb8ad3dd0a3b0cc2c82378d00a165730e5d2738b619f6bb52950e29ada3f1f1855d4c0fed2f8482d3551cda51da6193b2fcf8dfa865d489f83a425fdae80d439240bc054813090e0417c47650b80a738f248bf52744adce37022d04c0eeea0eed443f48d304dee28931f462dea3fa5ba3d266fbb40a5d66abb98bac49f50b556ec6264df30b2a002655cd2f8bef6d01be0a1422d15d607"}], 0xe0}, 0x4048004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000380)={0x3, 'pim6reg1\x00', {0x4f}, 0xe}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet6(0xa, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="210028bd7000fbdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="0500080000"], 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x40020) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) close(r0) 2m5.880176309s ago: executing program 4 (id=1200): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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"/280, 0x118}, {&(0x7f0000000d80)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd5", 0xc4}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x11, 0x0, 0x0) 2m5.111228558s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)={0x24, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x24}}, 0x800) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817000535", 0x33fe0}], 0x1}, 0x0) 2m0.483877355s ago: executing program 0 (id=1247): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0xefd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r10, r9, 0x2, 0x6, 0x4000, @void, @value}, 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xbd4f}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x8c6}, 0x8) 2m0.284243038s ago: executing program 0 (id=1249): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000000000007110720000000000060000000000000095000000000000007efdb70185e7b6ab06eaaf6d76aede3172761d9f1c4e8eaaec7d23b2c6fb650ae8924673c745c5ce46b727a281a9f97a481c8ede2edc12"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000200)={0x4, &(0x7f0000000040)=[{0x6, 0x5, 0xa, 0x9}, {0x101, 0x2, 0xa}, {0x5, 0x7f, 0x4, 0x6}, {0xd, 0xbc, 0x0, 0x7}]}, 0x10) sendto$unix(r3, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="34000000130001000000000000000000080000000900000008000000dfffffff0c00b9800800e900ac1414bb0800318033e1d16d"], 0x34}], 0x1}, 0x20000081) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000013c0)={0x0}, &(0x7f0000001400)=0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002640)={0x1, 0xffffffffffffffff}, 0x4) sendmmsg$unix(r3, &(0x7f00000027c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x4008081}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000880)="9a41c4d4c8c1b24a336f5b32abd86ec493298c5f4c0d5fa101997c2f5ea2b6d52e811d6072b3feb8ae0f23b788e7bc0e3825f84fc05a1c4410bfade82f049547b639b9e94efbccd574ee9c60d6a7eeb50e03e0294d4f60b14093dd657805140d2ee867dec098ad47d07737d6a9b1c97214ae87c78b7b551c326e7cc6642ef07dae7251a8b4d5f84fc0d83bb0645d6f5a3fa81b0b71b5", 0x96}], 0x1, 0x0, 0x0, 0x4040880}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)="43e3c60be2c00951c8826c2082b42a7cc9bfc496814ad0fe010c984773b9aa3a0282d0dba9ca46ed8cbaf0f506ac0c2449c8265ad327c993daab3e8b454d75", 0x3f}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x855}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)="71b978b877ced4837095e534c4cfbd4d9cc0e7446ea9a0c7721fc26f646ebd100d6132a8acc9d8666098dcfb265c0544748b4ea7cb7bf3cd03281f809cdb2bc8bee7191f318b8f708823c9efa49c54de7a9a0a84cc5f8a", 0x57}, {&(0x7f0000000c40)="62df67b2f57499611184698bbe8ee98fa087e253d5dce8b8d1414eff9076649d13ca3768529f5105bb6d99c5380275da361214d55b42bd56294590f537779d3314fd80e3db027bbb6f37e2b0208f66d75d6cbbd79bc001484e004a9500f66dca28a7c3a670bdf8bfb9759470602cbd021a752060f7bce90498a9d4f71596e146313e8132cb3f5f2c0fd10a66a6f954731b86b39046b879cc5216d63bd639a36ba56c46d8f3d3", 0xa6}, {&(0x7f0000000d00)="8a834776c097c649156baa445d0cedf67a9a7e5e902ca52a84d9", 0x1a}, {&(0x7f0000000d40)="69d7ab918b9a74113976e6b316b6326d75d7c208fe72de0c60cef6780664423b640922a8f084c45a51c74cf85ac037daef273dc583e74cfe34df6ae89de4c6d2d36b7e12f05da92bfb78f6c20bbdb0f326a4f32f09c208a0f2516037b993ba16417359301755ad8eeb40d13f356bf760b9a22f27e07e32446927b6d10ae317de065bc00e9f4cb34496b7d28f9c283c79b465581916b475e8766622a2c8551dc346dd6528c5459551e1d9834c83805f643c58f7e7fdba1b41406ed69c23ca7e3e4cbb3ac595611a0a21a2f95bcadd2aa4cf04a3cc8a21edc228fd911ae4cc42899ba0f30f9d2efcc2449f54a7", 0xec}, {&(0x7f0000000e40)="4e69958542f383f5eb0c28288ec889840eac0e878e6a6f172e5fce457fe1520472445953fe31c7579e69566e62aa8c8eb4386b2556aa7fc0b1b7cb67be248d008e7c0809120799c23420", 0x4a}, {&(0x7f0000004100)="410718a99467e0b493576abc941a132fb75a326292bbafedbc90251b4bbde85b31c9cdbd54584da0f8e1286839ce4c8693bed82ea28f1b24ab0b22b0b70ac06e1a6033b647d2c260b370eebb6732175a6e5ec2927911df8d6d2a36a2ebf8963a42919dd5dbc6eac2a5d5425f7717ed05f69d32067c171fb42855bcf9eef5a3bbb4d620b069f7c590ac35bc911b7681ea717e0d3c957600cabacdd8b73e359f7a3ea6dfa5603f3b867cabb05399856a4cf27f8d44d2eaa13ea59d25698c6d46174dbdb0420d230a1ab354b0b3ee279d49eec0466d1245b75b858005f874900dc6b1ac91639f542b5e65d7c0ac1185dd22f3f04508808a81fc9281b8641c5d37ad97176018b696928c5a7d5a59fa69d1ebfc866524978ae27a32f2e79761be9eed7236469b393d4c3a8830a25e923270fe116436439517614b13d7ee89372f4753ead6f93c38c4370ba96f65747803031b2f523a23dd85984648ff6f239ad21ab43f343095fdf724cfea1655321be2bba1f7f284c37acef5f385ae7635b0d84ea698b0b47379d5483609d5e4a73ac034d827ac36d953981ea60fdf7925b8d2488bce885d14975684a0176d126f6f10c53ba27a20940bb958523af29427b9bc2832a10f43d322371367833aee074310b9ca98ad21ec9a050a08d4ce95f121c4c3c0146dff93284d0a4dbca08a279a6eecd8a3dc5160684220b57f529ae9a9a39fc1ef367ae1a8749a1e2b8f43fd04710484a0e265c9ae3bd985105069668223f89975819411321e194de949204766a63e803f76a98bf58d3c7d02dfcf0cb501941a8aa0196eaeba6d0bcad388a5549eee6be0ea64764542d73fa56ca3862ff756442247fbcf8bbd392b9eb3bb033eae02d20f7196c350ace5e0600f32a1f0033ded6ac5b0d91cc76eedd5ae17af04fc5fe26470df560295faf3412c869cb2fa2f4f395a627eac16f9d216fe9ae158d02cb6e9901ad62676e3f1ca4e10fd68054b08cd4050fb5af57bfe287d510b3ea6c11fd0d416bfeb41ec3bbd3f33ddfce6cc6ea0b85e8ae36096b63d915fb168a3af353f21a995092917c51b9558c95d3ae82a7f8381b29fa4c89d6130a6346f13ef92417c7b4ccb4ab23fbc50f9d06b4b895241502473edb8568cd9c103588d1f6ce65abceea757ea799fcdef4195d8736df02dd0d948df20eca254c38be1919323880bcfa89af930b6008c8338a5038c4c868340031b0dd7cf31bd00c59eef00e352cb886b92596d386c1e864a1dc2dd9b7409550dd0019de76d11026ec4d361024f52a10845f07d1282c5c3374edf4c4f4ab85ead171a3aa1a363a7a0fea0b5165ea1747d3f03445c42d2852135b372856cea1a2618ce4a45cd0820802cdf24a743fa5103caca4fe801ac9eb201e48c4d59cf84478f953378f511a2e76d9d31bff31ad792b2230206a596b7b71883b02e7dbe9d3640eb8dc92f322d05c7da22768ba49f188d6bf8f7028ff5575ff0974591a284509d84deb1367aab573ce1251621ff623dbf78f7c02a5b6fb2251c51e08054594f17f46137363f5716dc03c44b11cc7f31428affd66bf5eeac3584315412be85b0510e944fe190cf813c160710ed68e80ab156e75ddf81266748c1e89a58d35f9a9eb072ba21b63fcdb1c4015ddaeab2e1035d3d1aea4de10e24c5687c8df06b10b7ff5e89dd554d688bedceb830341cd4f259f179460f072dd0f6f6fa39a69d4309fd3d70faf58d8960e4b54594de81dd77c5b42ba6dd3ac170301d121208ab2b2091393dbdafc34eb7fe436eb2c9aeda49248f27ba22983e9a68cd80f94e7c553ec81dd51da331980fe9af67180dd9735cb7ce7f937d432b6ecd252b43cbf59b7282e6f61f80e1019606b1b61665b8443bdf70196f76ad885323ad93b6d95ded21200eadfebcbb201ac8cc8620a1feef58410c2652cb98207416eceeca954e31d0e6539d379c9b221c4873c3968f3ad17c9cc1d40b3289a0ec889f59523e8d5bf76aad7437a1857ef5682ecef514c207f18829128711f8d4a52431f18babc4fbc02349df6fadd9c29fb7e9f0875c990509e7b65f15608ef26b183a543b703837e2ca28233647d5a51dd1d949c6c1112f9c7636a98f8040ab4b3d7f2a4feaeb51de14ac213da84cff94d1326c64b310f01c9ea4bb0280e6122d034e8d271077c6f583c5338a62c397df507e2b226dccbc5883255fa7a3c5664c826e1c523333f142a7fd9c88b3fd700b9274682695cfbf65c26ae8a2be33e3e523530b869aad47d96f58662b115d1b2684e3a1ad8e6b0f102426b444b573d4a3cbf74944bdd83fdae60a3b5980d160fa978c78936aaddb9cc9dd562c2df3fb13b48e05651adfd7555a4ef74eb689c681119ec058b47b4cd4ee2bd7cfa653aa9b4648ae234f64dafb52c05f52df28d4d86a7043be0adc0685c0fab5d55e5a0e46d10cfcaf0c0deb149d3698efe4e1cb09732828bd237be98ec92808a55dae1d67056c321c265bb0e00f315860ce4ef1704c9b5a1401cbefaf1c2f976e1eb770c5fc4dbf5ccfc3c7f07b27811150e972fffcbb7ec244e5691fe6fd0c42918f938dd54ab8d1bfb0d5ba96f42055352c254a02c802fad310aab6f6d3a379c2746ea028a58770d1c1f0519eff2797660ceae1299205d53574f66c68971388c350f884f305dcef2ae3aad82ef94458754d83bd533210571d3134f6a9669eb99dab3f2d20c2d04489051f5e83bffcd60e2e8a01c56ba46b1d5f1bb7c674bd6dfc3fdde92fa4559ab6a19c6de39c29938bc76e7367cd6950213ebc1b0779132bea009cebc4593bd80d3cadecd95d325170807657ba94a28be9de8987d57242ca7985ce53a8cc7a664a7f72543b3d5fa92adca48595d46146df2d4c380a21b96959a2f416a13e2606d8fc8b13f8fc9f4448e15627aeecd51cf6d5cdafa7da3ce29f43558a3a50f6effb7bc734480a34541837ad64671e1079e3ef4c4cf04083a195e07863ca2c17ece625efbf6318104cc5c20940d395093b81c2dd8ff65901a87e783aed30b7b9164cfb6a7a329b22754c5a2f48031f2749bce63c2efd8ea0e71ddc9a052b6f84438b0f74dbf345ee52b60db7d2a289e86514496ae1c86b62ba09f114ad54d0f13f1865388b102c9fcfcb176662cdd052e306c6b2c09397e0df07606a3a6bb11226286019a32643d393fd4afb33783deca585e9d876ca2f8a5f456b942be6bff9bd6bc134e4d5cdc0f9533f06dff169252fe19754617f130d06fdd578ebce44f7b0aab9289ff96a7399912e7b5e86e5fd31e3df824b0daed1fd9f56272834aa9ce12ae1ea6be53fc921c46a4cc8b3620e1a6be40a915c50af9103359fb2d1993b36d593cf5c7d48a051f08750c5fe254118b8d5d40beefa872f033687058d93f2d9ff48b258b7786a5291f17736a9ae7afdfbb61b51773fdeb405dfe80492bbf1e7f991a1d3221ee3d61443279ccd2e69585436c56aae97beb1c725aedf7729f9b926049a08e1f003c9c7f3d33e3f5aa526b40ed2a12223b5631fc39c5967a9c07cc7b09ee1bad8ef562d8a1dbe6d7b0830585d56c209c5fc703f3c771bf5498176aba5475c36c605988ed06d59968a2b171c8679fa58933abc38302935844603dcd17e0537fea9a798cd6c49e0b9379418ef67d530190c955e992e1940b7c2bd0a6d90cb5ba84000427e16aee2bcd63686c0b468bfdd270942a792bdf5952ec8599ade3946cebbfada6ea7bb348732e01b6421ccd97e37b2f9f4e49df203252b191544e8cd078d3fcf105a5d35f263b0e8afccf75a32f35b0995e67cb287a09e7579c3ea635bab93f6ebb2444f23a335d4d646dd9113a5bf79b68ca7f1c9e51b4f7d43f52883bfe38473d065827580647b7c04949162e398814101e103f5f870f2221e89053c449801bd4e0ba0798ff37c6304de9c6f5abf0d32c790492df2be943fcc384a07f817b37ef60e1aa5deaf95bf158610c799810f89a27dc22987c9437c55118927f86206d49e92f605d72909a2843f98cfdf88aef838a6b491cb5ebd79080bfc74eca093a89561927da46842f44607958b339f46ad124194a2b694a148f4983e8c9d205c82ad72ae5eba5daaf1ee3fb85adcc2f8b0e6928a787ee38bd58cc1c543f2d043276f4224d700560ff9988ff67bd98bde26388291e08e44dac99938dd99fc151f74e1ae301495ba095a845546b40b3d972c8a6515e95fda0a68a6a35bdab3f7af000751a5170afed325524fe4230aeee6bafad5f316675a63c32f5c4b09cc352a73b9388bb170f66ca93d6f01451bf89ee1a5539e5b6a76ec0d04d700ba5231d35159645e77974a12ca0437e7e2c6a9ded82dd685439e97d59a5a1e6801ca6248035de1bd1ccfae7e524ff634addd5b82c970f8faa0c653f0ba4065f970bf35b63916f6132f9afbb61ad0ca15c1705cdfcf20b157dbff1a13e73ba23d5c90cb2e161b6bd71fcdcdb027c1eff1d2c759598dabe3f7f562962e29f6263e6101748f64f9c64bc10d97d2f3aabddbd2d9506a7241b0fae6950bc49fc4f438367c1b09f5d41a3e681614048e32591505a23fbdb231d6435eddee55e793ca2402afe5ac3ee7bfec48ca7a3e2c357f21928cadeb949efa55cb432413170d1f577263d9ff401830c856c6500930bb898f3f64d6ca10ef6bbf2b50e5703093a1caadd911e45025f57642913e4d33eb95eaa67acce860f94b2d4392e7c856bf2dbaa7c64a1caf3eaf4c06a81913da2eeb814b994ca44ae460d6b68dc2d09cdb54337845df18d0d51171899342b7f498dcd45430cd677dc95f2405ee2e3a83531bd10dd924dbd6de3a56358a95d9296e4c6ad7dea055d093dd955fe8104a05394b17e934ce2ef720a2e9ce1f6b38b3688ff51deab06dc80bad58171fca11dbfea731c7726cf9ffd3d32d9f4ed7ff0aa75a7f6bd6c2c91b3668bcf4fcb85cf92770e6b326ffc26a25e035febb87e044274b2500c5a79693d172386b2b554fcbeefbc31362cfd55bd7c2d25522521daca7039b30fd420037c3a910569ba11aa36899228c55844aacbf1f8054e5593ff486da56d6ea703e6fb63bdfd61d9ba7f3d6466f9e9d2accefb19e623741650c1aa5a451c496ac04178531c6b3610cdd43377af54d81c3bf5d82701147acfa6b0e0bdd994e71e3c0be24736cdb007f4fbbcc99972785041ec1e227d7bb5001f83fba3bfd98b6b8fd08ad647ef5cd602f3448d64d343926a3b2b251fa650d666399fc6df8f445b7979ff01a42af220f2679186100b552a0e984be1fddf212d6e5e1a51368a224523c1ab02baf2cb962bf3bade5b7103704d8e4870d8789c1ade01ee81842ae0d808d6d4e1cd69795eab0d66a65ad2675540b8f591d334603fd48fa89c9cd9d64cc41160cd1a86761e6f1e2a0e03a174c0637d4510112276ba0304cfc7e9fc4cc12377c82037d5d433b41d2bfaadd05bc97ae262fa283a9505cc7dd73f7d8fc4c89be6aea076aa55b557d1a3afc16b49e95ed1c474d888d046a3d99ccc6b959244bd4aec9419b622c1c2bffb0d68a72605534e6b49bb6fe1a4eb23a51b64012f36d64170c0f6a69a31857b86d75e2c3e2d3673bb8f96a260fe13a5e1fc922e781dd71881289078727de033fed2fe63ed35e876db061a4d5f1d904be56edb53082ba1eb3e4e225cc214d5938fc772142c600281b5407603ac1938b2d8717bc95b08cd56cc11d6c709a0bb31969ff02777c3b78ad0f37ebf502ce9d1865608398d7e31c173db234531114d847a1bb903f0a5ecb15ea3971f73f60f1993c204c10d915226d3d0ef60fdfc899", 0x1000}], 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c005296f8d50e00010000000000009338bde94504a0002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000300000000d97a402a783492720b44a5", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x41}}], 0x4, 0x27b5ab540d5e9435) sendmmsg$unix(r3, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0xffdd) 1m59.342999821s ago: executing program 0 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x8812}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 34.412813996s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)={0x24, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x24}}, 0x800) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817000535", 0x33fe0}], 0x1}, 0x0) 27.617869118s ago: executing program 0 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x8812}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 19.32625065s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)={0x24, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x24}}, 0x800) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817000535", 0x33fe0}], 0x1}, 0x0) 12.822748271s ago: executing program 0 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x8812}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 10.68124178s ago: executing program 3 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x301, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 10.516899125s ago: executing program 3 (id=1420): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "17cd3bac3e00"}, 0x28) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000240)='-', 0xfdef}], 0x1) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r9], 0x20}, 0x1, 0x6}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 10.38145813s ago: executing program 3 (id=1423): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x93) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x93) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.932119055s ago: executing program 3 (id=1430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x480, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.857195545s ago: executing program 3 (id=1431): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'gre0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfe, 0x2f, 0x0, @empty, @empty}}}}) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x80) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0a7c90f326ff9c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c14ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b6bd2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4846e9fc09ce0afb670f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e73130600d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d915837d1f2e04596d82f6ea3e41d81c1ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294ce89fcb8ef4fbd874f13f9cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac9783bd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e080000000000000036b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29c5e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e40ae05b10a79f77dc9db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673996b090e9a8b28cb66dd1c8d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000636c77fbac141416e000030a44080503fe80000000000000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f00000010c0)=0x3, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) 8.37732759s ago: executing program 3 (id=1436): unshare(0xc040480) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4, 0x1}, 0xc) accept4$llc(r2, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x80800) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r6 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000800dbea00000000", @ANYRES32=0x1, @ANYBLOB="0002000007000000000000000000000000000000100710b0c1bf2922ccd2fc5c005fd6697ce0b702450700004ef55f671fbb148f3bd2610cfb983473f6fabbd6d30dd47acd0b4bd8718fd1a2bd26048fd03bd2280e0c3274f916860400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="0c010000160011040000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffd08001f00000000000c000f"], 0x10c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x200000000000000, 0x0, 0x4000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x80) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x48}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r12, &(0x7f0000002600)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x2, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0xa) 5.349483178s ago: executing program 1 (id=1454): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001cc0)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x60}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c3faf854bcd6e4e274a46f6f613a4172cb44bbf7a6d0d02f5e42039048be39f2fdcf73baa5ca00005d75bcf263a886b0c274fea4dc106d2817363fc6db4d512026f65adad4863d4e9ef7c7a0beb596353ad16d137ede7caf876402d0b03c0f7d77a865e6648186ee4e0f2163ed67e9921232ceaf0d85e035ad4e7efe9e7c9dd1188e36bd75ebcb7c9a19a867912662c1c120753b748d8158b5d66f5bc4214e036acb739c34", @ANYRES64=r2, @ANYRES16=r3], 0x48) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000015000000400001802c0004001400010002000000ac14142a00000000000000001400020002000000e0dab85c6c000000000000000d0001007564703a73"], 0x54}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r8, 0x0, 0x0, 0x40010102, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000540)="75dafa5a000097e35922d15983ce0fcad4a860f54cfb037f726c44907f31fbba599bdbb153d4f12ed83e6540ff8fdf1bb6de7099c2f9dbb73ebe48d1b840452de1080e38ff4e59bb2b9b35a5d057b87b3fc20c000018e71f2366cd975a75118909eed965106a2182705d2b24687c45b83662076726d164a90242a68ca461cbc7a3bf612810f74c482e649cf11ae294c643d696bb28b54e7941297c998ec2ab584a8da2b4c8e38a2b4d046aed7d44756d02e48078c3e99f3ea5b0d7d9a3ef4e674954dab1bb49576b0000004d98", 0xcd}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0x142}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab", 0x11}], 0x3, &(0x7f0000000180)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040), 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r9, &(0x7f00000000c0)=@l2, &(0x7f0000000040)=0x80, 0x80000) 4.814475891s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)={0x24, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x24}}, 0x800) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817000535", 0x33fe0}], 0x1}, 0x0) 4.03366385s ago: executing program 1 (id=1457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cad5bac8af"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}, 0x1, 0x300}, 0x0) 3.802329337s ago: executing program 1 (id=1460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffd0d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffd0d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) (async) 3.573916692s ago: executing program 1 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x10, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x9, 0x6}, {0x4, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xc8, 0xc8, 0x230, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00'}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x287, 0x140, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'ipvlan1\x00', {}, 0x0, 0x3}}, @common=@unspec=@physdev={{0x68}, {'bridge_slave_0\x00', {}, 'ip6erspan0\x00', {}, 0x0, 0x1b}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="fd4000000800", @random="24475466a8f0", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "902d03", 0x20, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @padn, @generic, @pad1]}]}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002000000080000018000000000"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) syz_emit_ethernet(0xfc0, &(0x7f0000000780)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xf8a, 0x3a, 0xff, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x5, "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"}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @nop]}}}}}}}, 0x0) 3.370239614s ago: executing program 2 (id=1462): r0 = socket(0xa, 0x6, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) socket(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) writev(r1, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f030e00f00712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'bond0\x00', {0x2, 0x0, @empty}}) 3.254376179s ago: executing program 1 (id=1463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000080000000000000000002200009500e864b748fb17"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x304}, "02fd965061c7e25b", "5db614e01c881406de84a3595aaa986e4e51df4267d952df3cd831c09c9b0ff9", "4832c55a", "f25e9e01618fb6f6"}, 0x38) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006800e97800000000000000000a00000000000000080005", @ANYRES32=r8, @ANYBLOB="fbc9457abf63f62b3a1c6915319d090744d4f4d3b2d7683d010f4af61420b4364af75cef0955702325e3b2c0e1d3143ac0d959520ca68d92767dcb838bcbf0f69d8782a9de1529ba42783c2281fa6b9101000100bc230f1f7e6a0a03c3b58768e7d5b4bb2312eae1fbd581cade07f141d955ba96dfa2cbcc84bc12794f1c20e7a052abc30b446c8cf4e9f7fd3425e7df7236506de9b45cdf69bec5bedbf5a6725e26a8d76f5e94a3009b"], 0x20}}, 0x20000800) socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0xa00, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 2.598960907s ago: executing program 2 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xa00, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.380817909s ago: executing program 2 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="1c002c"], 0x38}}, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03e4ffffff0000000098ed030bf20000000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a00)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe2f) (async) socketpair(0x2c, 0x2, 0x1000300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0xa, 0x400, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x3, 0x9, 0xc, @mcast2, @empty, 0x40, 0x8000, 0xffff8000, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0xfffffec8, &(0x7f0000000dc0)="b9ff0300600d698ca4c65515ef0b7018b52d27835ebca1a747aeb8ed3833e2bbb408b3e21c8789203eacf8ff012a52be9a750d33d721dd0ec35b8c9aea92fc98126a702085effd33fd6d3062f2c5cbc9ab13112b2c93768530cb9de6b93bf7c74f5ac299b1650549a74dfb5eccc77dbb077fc7efb27406a70c630f6a4d95e18c88fe79767106c4d0346fd8b9f8c265e9d7d0922cf599fd1425ce204063", 0x0, 0x0, 0x60000000, 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) unshare(0xa020480) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000500)=ANY=[], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9, &(0x7f0000000780)}, 0x20) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000a80)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e3ff000000b3117d6b00005781f7915100000000e7ffffffefad"], 0x50) 2.249392378s ago: executing program 1 (id=1466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000004003f00000008000300", @ANYRES32=r5, @ANYBLOB="20005e80080001"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0xb4, r4, 0x380, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x81}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x7}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xf2a4}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x100}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xd9}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xb}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x1e}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40801}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x20, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}}, 0x0) 2.215762292s ago: executing program 0 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f00)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x8812}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 1.222223934s ago: executing program 2 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000800000000900000000060015000400000014001680100008800c000380"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000300)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4fa860", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r4], 0x1c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r7], 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r6, 0x3}, 0x69) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$MRT6_DONE(r9, 0x29, 0xc9, 0x12, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x20, 0x48, 0x5, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @empty}}}}) socket$nl_generic(0x10, 0x3, 0x10) 141.575597ms ago: executing program 2 (id=1468): r0 = socket$kcm(0x10, 0x5, 0x10) pipe(&(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg(r3, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="e47239336065f28fa25ffb1545b2f1f706d233c54967b5a222189fb6849384aebbd302eb958409b26b8220ba3fba22", @ANYRES32, @ANYBLOB, @ANYBLOB="0aad78415a6a34de51e51699c2eede3e7827979990f28fcd50828fdb470b1c396dc216de62433a43ec72e02e072d4f0667e78c7a0d6615532d8ff67cc2c6dfb41411aa1ecc7adbe165f591133128b528bb0c6631ce724d6310a5eb3d3173cc5b4a5f1630cb11fce075dfdc8160d73697fcfe815934a7638e3df53a40070670167e9797dbeba47f6dd69175e92fd2ff554ca8028e4b9c6cdd23ac862319134013e96a801c74741bc206422ba15849eb13e1b9bb2241b28c756231c5ee6c2ace1ae60b6203563bf692dee0be90a75cb077caa613e40992526b"], 0x20) r6 = socket(0x10, 0x5, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000100)=@udp=r6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=1469): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90624fc600d00030005000100033582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered disabled state [ 237.893903][ T9620] bridge_slave_1: entered allmulticast mode [ 237.900954][ T9620] bridge_slave_1: entered promiscuous mode [ 237.914495][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1239'. [ 237.933801][ T9737] netlink: 'syz.0.1239': attribute type 12 has an invalid length. [ 237.941882][ T9737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1239'. [ 238.021484][ T9763] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1245'. [ 238.068643][ T9620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.083640][ T9620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.225223][ T9620] team0: Port device team_slave_0 added [ 238.234502][ T9620] team0: Port device team_slave_1 added [ 238.327257][ T9782] FAULT_INJECTION: forcing a failure. [ 238.327257][ T9782] name failslab, interval 1, probability 0, space 0, times 0 [ 238.341298][ T9782] CPU: 0 UID: 0 PID: 9782 Comm: syz.1.1250 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 238.351674][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.361763][ T9782] Call Trace: [ 238.365057][ T9782] [ 238.368001][ T9782] dump_stack_lvl+0x241/0x360 [ 238.372713][ T9782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.377953][ T9782] ? __pfx__printk+0x10/0x10 [ 238.382580][ T9782] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 238.388600][ T9782] ? __pfx___might_resched+0x10/0x10 [ 238.393920][ T9782] should_fail_ex+0x3b0/0x4e0 [ 238.398705][ T9782] should_failslab+0xac/0x100 [ 238.403410][ T9782] ? __alloc_skb+0x1c3/0x440 [ 238.408021][ T9782] kmem_cache_alloc_node_noprof+0x71/0x320 [ 238.413853][ T9782] __alloc_skb+0x1c3/0x440 [ 238.418316][ T9782] ? __pfx___alloc_skb+0x10/0x10 [ 238.423293][ T9782] ? netlink_autobind+0xd6/0x2f0 [ 238.428241][ T9782] ? netlink_autobind+0x2b0/0x2f0 [ 238.433282][ T9782] netlink_sendmsg+0x638/0xcb0 [ 238.438068][ T9782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.443365][ T9782] ? aa_sock_msg_perm+0x91/0x160 [ 238.448315][ T9782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.453624][ T9782] __sock_sendmsg+0x221/0x270 [ 238.458316][ T9782] ____sys_sendmsg+0x52a/0x7e0 [ 238.463115][ T9782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.468426][ T9782] __sys_sendmsg+0x292/0x380 [ 238.473062][ T9782] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.478190][ T9782] ? __pfx_vfs_write+0x10/0x10 [ 238.482983][ T9782] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.489325][ T9782] ? do_syscall_64+0x100/0x230 [ 238.494092][ T9782] ? do_syscall_64+0xb6/0x230 [ 238.498776][ T9782] do_syscall_64+0xf3/0x230 [ 238.503290][ T9782] ? clear_bhb_loop+0x35/0x90 [ 238.507980][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.513886][ T9782] RIP: 0033:0x7f427597dff9 [ 238.518305][ T9782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.538013][ T9782] RSP: 002b:00007f42767bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.546445][ T9782] RAX: ffffffffffffffda RBX: 00007f4275b35f80 RCX: 00007f427597dff9 [ 238.554425][ T9782] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 238.562398][ T9782] RBP: 00007f42767bf090 R08: 0000000000000000 R09: 0000000000000000 [ 238.570373][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.578352][ T9782] R13: 0000000000000000 R14: 00007f4275b35f80 R15: 00007ffefceb7ac8 [ 238.586342][ T9782] [ 238.616086][ T5239] Bluetooth: hci3: command tx timeout [ 238.657540][ T9788] FAULT_INJECTION: forcing a failure. [ 238.657540][ T9788] name failslab, interval 1, probability 0, space 0, times 0 [ 238.685790][ T9788] CPU: 0 UID: 0 PID: 9788 Comm: syz.2.1251 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 238.696191][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.706254][ T9788] Call Trace: [ 238.709573][ T9788] [ 238.712513][ T9788] dump_stack_lvl+0x241/0x360 [ 238.717240][ T9788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.722470][ T9788] ? __pfx__printk+0x10/0x10 [ 238.727076][ T9788] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 238.732717][ T9788] ? __pfx___might_resched+0x10/0x10 [ 238.738013][ T9788] should_fail_ex+0x3b0/0x4e0 [ 238.742697][ T9788] ? __kernfs_new_node+0xd8/0x870 [ 238.747724][ T9788] should_failslab+0xac/0x100 [ 238.752400][ T9788] ? __kernfs_new_node+0xd8/0x870 [ 238.757421][ T9788] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 238.762886][ T9788] __kernfs_new_node+0xd8/0x870 [ 238.767777][ T9788] ? __pfx___kernfs_new_node+0x10/0x10 [ 238.773258][ T9788] ? __pfx_lock_acquire+0x10/0x10 [ 238.778297][ T9788] ? __pfx___might_resched+0x10/0x10 [ 238.783592][ T9788] ? sysfs_create_dir_ns+0x189/0x3a0 [ 238.788965][ T9788] ? sysfs_create_dir_ns+0x1cf/0x3a0 [ 238.794254][ T9788] kernfs_new_node+0x137/0x240 [ 238.799026][ T9788] __kernfs_create_file+0x49/0x2e0 [ 238.804228][ T9788] sysfs_add_file_mode_ns+0x24a/0x310 [ 238.809605][ T9788] sysfs_create_file_ns+0x197/0x2a0 [ 238.814897][ T9788] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 238.820628][ T9788] ? __dev_fwnode+0x50/0x80 [ 238.825143][ T9788] ? device_create_file+0xf2/0x1c0 [ 238.830263][ T9788] device_add+0x522/0xbf0 [ 238.834599][ T9788] ? device_initialize+0x266/0x460 [ 238.839716][ T9788] wakeup_source_sysfs_add+0x1aa/0x270 [ 238.845200][ T9788] wakeup_source_register+0x171/0x250 [ 238.850572][ T9788] ep_insert+0xe71/0x1aa0 [ 238.854912][ T9788] ? __pfx_ep_insert+0x10/0x10 [ 238.859682][ T9788] ? __fget_files+0x29/0x470 [ 238.864278][ T9788] ? apparmor_capable+0x13b/0x1b0 [ 238.869310][ T9788] ? bpf_lsm_capable+0x9/0x10 [ 238.873983][ T9788] ? security_capable+0x7e/0x2d0 [ 238.878922][ T9788] do_epoll_ctl+0x8c9/0xf60 [ 238.883427][ T9788] ? do_epoll_ctl+0x761/0xf60 [ 238.888105][ T9788] __x64_sys_epoll_ctl+0x161/0x1a0 [ 238.893223][ T9788] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 238.898861][ T9788] ? do_syscall_64+0x100/0x230 [ 238.903629][ T9788] ? do_syscall_64+0xb6/0x230 [ 238.908311][ T9788] do_syscall_64+0xf3/0x230 [ 238.912823][ T9788] ? clear_bhb_loop+0x35/0x90 [ 238.917507][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.923406][ T9788] RIP: 0033:0x7f5d0417dff9 [ 238.927828][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.947452][ T9788] RSP: 002b:00007f5d04f5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 238.955872][ T9788] RAX: ffffffffffffffda RBX: 00007f5d04336058 RCX: 00007f5d0417dff9 [ 238.963846][ T9788] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 238.971816][ T9788] RBP: 00007f5d04f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 238.979786][ T9788] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 238.987759][ T9788] R13: 0000000000000000 R14: 00007f5d04336058 R15: 00007ffc574b17d8 [ 238.995741][ T9788] [ 239.073983][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.081516][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.199305][ T9620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.295841][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1257'. [ 239.306124][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.317529][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.402676][ T9620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.518574][ T9620] hsr_slave_0: entered promiscuous mode [ 239.539862][ T9620] hsr_slave_1: entered promiscuous mode [ 239.564466][ T9620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.577860][ T9620] Cannot create hsr debugfs directory [ 239.596632][ T9809] netlink: 'syz.2.1259': attribute type 4 has an invalid length. [ 239.752162][ T9814] netlink: 'syz.2.1259': attribute type 4 has an invalid length. [ 239.772148][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 239.794237][ T9825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.837849][ T9825] Bluetooth: MGMT ver 1.23 [ 239.847556][ T9822] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 239.973339][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.984953][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.996216][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.008666][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.017647][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 240.027116][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.130990][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.301634][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 240.311852][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.670531][ T5238] Bluetooth: hci3: command tx timeout [ 240.701973][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.749976][ T9856] netlink: 'syz.2.1272': attribute type 5 has an invalid length. [ 242.128496][ T5238] Bluetooth: hci2: command tx timeout [ 242.758352][ T5238] Bluetooth: hci3: command tx timeout [ 244.167530][ T5238] Bluetooth: hci2: command tx timeout [ 244.261139][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.298650][ T35] bridge_slave_1: left allmulticast mode [ 245.304357][ T35] bridge_slave_1: left promiscuous mode [ 245.398605][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.495697][ T35] bridge_slave_0: left allmulticast mode [ 245.538966][ T35] bridge_slave_0: left promiscuous mode [ 245.544726][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.278389][ T5238] Bluetooth: hci2: command tx timeout [ 248.348459][ T5238] Bluetooth: hci2: command tx timeout [ 251.048780][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.228999][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.380939][ T35] bond0 (unregistering): Released all slaves [ 253.478568][ T35] veth1_to_bond: left promiscuous mode [ 253.608463][ T35] hsr_slave_0: left promiscuous mode [ 253.688562][ T35] hsr_slave_1: left promiscuous mode [ 253.738637][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.746115][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.900872][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.998428][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.209117][ T35] veth1_macvtap: left promiscuous mode [ 254.215924][ T35] veth0_macvtap: left promiscuous mode [ 254.348558][ T35] veth1_vlan: left promiscuous mode [ 254.353912][ T35] veth0_vlan: left promiscuous mode [ 256.091538][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.097879][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.638940][ T35] team0 (unregistering): Port device team_slave_1 removed [ 296.649354][ T35] team0 (unregistering): Port device team_slave_0 removed [ 310.102926][ T9620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.165217][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'. [ 310.242370][ T9871] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 310.246796][ T9620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.342234][ T9620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.167498][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.179701][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.179889][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.196901][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.200967][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.220531][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.225167][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.248038][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.258137][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 311.265529][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 311.275937][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.276608][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.348919][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.363470][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.371829][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.420649][ T5244] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.432783][ T4622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.474071][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.483655][ T5243] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.484761][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.500982][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.502334][ T4622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.510308][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.520591][ T4622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.522260][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.529551][ T4622] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 311.536406][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.545193][ T4622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 311.551478][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 311.571739][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.264689][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.314047][ T9901] chnl_net:caif_netlink_parms(): no params data found [ 312.373635][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.386056][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 312.458069][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.466716][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.474275][ T9901] bridge_slave_0: entered allmulticast mode [ 312.481274][ T9901] bridge_slave_0: entered promiscuous mode [ 312.509426][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.522374][ T9903] chnl_net:caif_netlink_parms(): no params data found [ 312.575414][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.582784][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.590628][ T9901] bridge_slave_1: entered allmulticast mode [ 312.597211][ T9901] bridge_slave_1: entered promiscuous mode [ 312.632536][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.765682][ T9898] chnl_net:caif_netlink_parms(): no params data found [ 312.777400][ T9901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.789814][ T9901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.858601][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.865734][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.877007][ T9891] bridge_slave_0: entered allmulticast mode [ 312.888706][ T9891] bridge_slave_0: entered promiscuous mode [ 312.908867][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 312.937087][ T9901] team0: Port device team_slave_0 added [ 312.996373][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.004577][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.012387][ T9891] bridge_slave_1: entered allmulticast mode [ 313.021182][ T9891] bridge_slave_1: entered promiscuous mode [ 313.035898][ T9901] team0: Port device team_slave_1 added [ 313.105747][ T9903] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.125451][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.136293][ T9903] bridge_slave_0: entered allmulticast mode [ 313.149368][ T9903] bridge_slave_0: entered promiscuous mode [ 313.188942][ T9903] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.196089][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.216084][ T9903] bridge_slave_1: entered allmulticast mode [ 313.237129][ T9903] bridge_slave_1: entered promiscuous mode [ 313.288905][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.295900][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.332650][ T9901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.480322][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.487556][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.522707][ T53] Bluetooth: hci6: command tx timeout [ 313.528536][ T5242] Bluetooth: hci5: command tx timeout [ 313.534612][ T9901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.587438][ T9903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.607583][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.657692][ T9903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.676547][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.689075][ T53] Bluetooth: hci7: command tx timeout [ 313.689836][ T5242] Bluetooth: hci8: command tx timeout [ 313.695396][ T53] Bluetooth: hci2: command tx timeout [ 313.728764][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.735981][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.758774][ T9898] bridge_slave_0: entered allmulticast mode [ 313.765777][ T9898] bridge_slave_0: entered promiscuous mode [ 313.906800][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.921239][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.928630][ T9898] bridge_slave_1: entered allmulticast mode [ 313.935538][ T9898] bridge_slave_1: entered promiscuous mode [ 313.959900][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.967086][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.980878][ T9893] bridge_slave_0: entered allmulticast mode [ 313.987942][ T9893] bridge_slave_0: entered promiscuous mode [ 314.021466][ T9903] team0: Port device team_slave_0 added [ 314.096763][ T9891] team0: Port device team_slave_0 added [ 314.134805][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.154610][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.167660][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.185056][ T9893] bridge_slave_1: entered allmulticast mode [ 314.194656][ T9893] bridge_slave_1: entered promiscuous mode [ 314.216356][ T9901] hsr_slave_0: entered promiscuous mode [ 314.228481][ T9901] hsr_slave_1: entered promiscuous mode [ 314.240831][ T9901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.258346][ T9901] Cannot create hsr debugfs directory [ 314.283737][ T9903] team0: Port device team_slave_1 added [ 314.299984][ T9891] team0: Port device team_slave_1 added [ 314.354016][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.419863][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.426859][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.455293][ T9903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.555287][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.578594][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.607172][ T9891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.624798][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.631919][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.667933][ T9891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.690106][ T9903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.697085][ T9903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.735677][ T9903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.762797][ T9898] team0: Port device team_slave_0 added [ 314.779837][ T9898] team0: Port device team_slave_1 added [ 314.840123][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.865451][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.970043][ T9893] team0: Port device team_slave_0 added [ 314.976736][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.984684][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.011392][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.027202][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.038785][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.065882][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.101847][ T9893] team0: Port device team_slave_1 added [ 315.111013][ T9891] hsr_slave_0: entered promiscuous mode [ 315.117440][ T9891] hsr_slave_1: entered promiscuous mode [ 315.124013][ T9891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.132094][ T9891] Cannot create hsr debugfs directory [ 315.221167][ T9903] hsr_slave_0: entered promiscuous mode [ 315.230362][ T9903] hsr_slave_1: entered promiscuous mode [ 315.237114][ T9903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.245164][ T9903] Cannot create hsr debugfs directory [ 315.280568][ T9898] hsr_slave_0: entered promiscuous mode [ 315.287721][ T9898] hsr_slave_1: entered promiscuous mode [ 315.298634][ T9898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.306221][ T9898] Cannot create hsr debugfs directory [ 315.340889][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.347862][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.374763][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.387630][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.395117][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.421537][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.488187][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.559843][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.599228][ T53] Bluetooth: hci5: command tx timeout [ 315.599234][ T5242] Bluetooth: hci6: command tx timeout [ 315.643701][ T9893] hsr_slave_0: entered promiscuous mode [ 315.652073][ T9893] hsr_slave_1: entered promiscuous mode [ 315.658154][ T9893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.665859][ T9893] Cannot create hsr debugfs directory [ 315.684757][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.758523][ T53] Bluetooth: hci8: command tx timeout [ 315.758613][ T5242] Bluetooth: hci7: command tx timeout [ 315.768363][ T53] Bluetooth: hci2: command tx timeout [ 315.804803][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.113136][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.220210][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.307403][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.322858][ T9901] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.381158][ T9901] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.431535][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.454519][ T9901] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.514740][ T9901] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.681930][ T35] bridge_slave_1: left allmulticast mode [ 316.687632][ T35] bridge_slave_1: left promiscuous mode [ 316.696637][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.707528][ T35] bridge_slave_0: left allmulticast mode [ 316.713950][ T35] bridge_slave_0: left promiscuous mode [ 316.719955][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.736981][ T35] bridge_slave_1: left allmulticast mode [ 316.742741][ T35] bridge_slave_1: left promiscuous mode [ 316.748490][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.757299][ T35] bridge_slave_0: left allmulticast mode [ 316.763030][ T35] bridge_slave_0: left promiscuous mode [ 316.769194][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.777908][ T35] bridge_slave_1: left allmulticast mode [ 316.783719][ T35] bridge_slave_1: left promiscuous mode [ 316.790064][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.798581][ T35] bridge_slave_0: left allmulticast mode [ 316.804290][ T35] bridge_slave_0: left promiscuous mode [ 316.811342][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.450917][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.457300][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.681784][ T53] Bluetooth: hci6: command tx timeout [ 317.688422][ T5242] Bluetooth: hci5: command tx timeout [ 317.843775][ T5242] Bluetooth: hci7: command tx timeout [ 317.848360][ T53] Bluetooth: hci2: command tx timeout [ 317.849299][ T5243] Bluetooth: hci8: command tx timeout [ 317.874861][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.897389][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.909176][ T35] bond0 (unregistering): Released all slaves [ 317.920419][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.930890][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.944805][ T35] bond0 (unregistering): Released all slaves [ 318.051166][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.066669][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.077137][ T35] bond0 (unregistering): Released all slaves [ 318.177565][ T35] bond0 (unregistering): Released all slaves [ 318.309056][ T9901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.396629][ T9901] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.531237][ T9891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.571709][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.578878][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.608410][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.615547][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.716890][ T9891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.782899][ T9891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.810886][ T9891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.433259][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.480684][ T35] hsr_slave_0: left promiscuous mode [ 319.487573][ T35] hsr_slave_1: left promiscuous mode [ 319.502823][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.510596][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.519351][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.526763][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.537522][ T35] hsr_slave_0: left promiscuous mode [ 319.544662][ T35] hsr_slave_1: left promiscuous mode [ 319.551393][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.559489][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.570151][ T35] hsr_slave_0: left promiscuous mode [ 319.581167][ T35] hsr_slave_1: left promiscuous mode [ 319.587077][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.595904][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.604187][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.612003][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.627297][ T35] hsr_slave_0: left promiscuous mode [ 319.633262][ T35] hsr_slave_1: left promiscuous mode [ 319.666793][ T35] veth1_macvtap: left promiscuous mode [ 319.672618][ T35] veth0_macvtap: left promiscuous mode [ 319.678284][ T35] veth1_vlan: left promiscuous mode [ 319.684537][ T35] veth0_vlan: left promiscuous mode [ 319.691310][ T35] veth1_macvtap: left promiscuous mode [ 319.696846][ T35] veth0_macvtap: left promiscuous mode [ 319.703135][ T35] veth1_vlan: left promiscuous mode [ 319.708502][ T35] veth0_vlan: left promiscuous mode [ 319.714559][ T35] veth1_macvtap: left promiscuous mode [ 319.720740][ T35] veth0_macvtap: left promiscuous mode [ 319.726323][ T35] veth1_vlan: left promiscuous mode [ 319.731969][ T35] veth0_vlan: left promiscuous mode [ 319.758513][ T5243] Bluetooth: hci5: command tx timeout [ 319.768384][ T5243] Bluetooth: hci6: command tx timeout [ 319.918661][ T5242] Bluetooth: hci7: command tx timeout [ 319.924139][ T5243] Bluetooth: hci8: command tx timeout [ 319.929711][ T5242] Bluetooth: hci2: command tx timeout [ 320.283776][ T35] team0 (unregistering): Port device team_slave_1 removed [ 320.322211][ T35] team0 (unregistering): Port device team_slave_0 removed [ 320.801584][ T35] team0 (unregistering): Port device team_slave_1 removed [ 320.840907][ T35] team0 (unregistering): Port device team_slave_0 removed [ 321.266644][ T35] team0 (unregistering): Port device team_slave_1 removed [ 321.308998][ T35] team0 (unregistering): Port device team_slave_0 removed [ 322.140688][ T35] team0 (unregistering): Port device wg2 removed [ 322.369958][ T9901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.386347][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.466300][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.473491][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.605511][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.612687][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.917803][ T9901] veth0_vlan: entered promiscuous mode [ 322.961001][ T9901] veth1_vlan: entered promiscuous mode [ 323.075712][ T9901] veth0_macvtap: entered promiscuous mode [ 323.103017][ T9901] veth1_macvtap: entered promiscuous mode [ 323.122739][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.151773][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.171946][ T9901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.188861][ T9901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.197599][ T9901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.215386][ T9901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.321740][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.359491][ T9903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.378648][ T9903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.406905][ T9903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.419738][ T9903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.474617][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.482698][ T9891] veth0_vlan: entered promiscuous mode [ 323.487782][ T9891] veth1_vlan: entered promiscuous mode [ 323.522324][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.580729][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.584919][ T9891] veth0_macvtap: entered promiscuous mode [ 323.595090][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.617229][ T9898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.632944][ T9891] veth1_macvtap: entered promiscuous mode [ 323.666802][ T9898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.677031][ T9898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.698051][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.710935][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.723361][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.752643][ T9898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.813552][ T9893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.831646][ T9893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.846065][ T9893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.855296][ T9893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.865189][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.875910][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.892310][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.908043][ T9891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.917995][ T9891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.927082][ T9891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.937225][ T9891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.123406][ T35] IPVS: stop unused estimator thread 0... [ 324.176447][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.195125][ T9898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.204016][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.235612][ T9903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.319688][ T9898] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.351422][ T9903] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.368948][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.376816][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.381070][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.407586][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.419774][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.426899][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.505597][ T9893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.516033][ T9893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.548490][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.555722][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.564514][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.571645][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.580620][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.587738][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.596463][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.603608][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.624719][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.631860][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.700784][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.824369][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.850010][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.864736][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.906699][ T9898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.917544][ T9898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.927187][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.937331][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.946372][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.971781][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.022387][ T9903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.032863][ T9903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.178101][T10112] syz_tun: entered promiscuous mode [ 325.186624][T10112] batadv_slave_0: entered promiscuous mode [ 325.193506][T10112] hsr1: entered allmulticast mode [ 325.199508][T10112] syz_tun: entered allmulticast mode [ 325.204818][T10112] batadv_slave_0: entered allmulticast mode [ 325.240244][ T9898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.299221][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.351431][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.421011][ T9903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.503475][T10123] netlink: 35732 bytes leftover after parsing attributes in process `syz.2.1285'. [ 325.512922][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 325.572046][ T9898] veth0_vlan: entered promiscuous mode [ 325.582897][ T9898] veth1_vlan: entered promiscuous mode [ 325.610403][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 325.621931][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 325.646203][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.665424][T10096] chnl_net:caif_netlink_parms(): no params data found [ 325.685522][ T9903] veth0_vlan: entered promiscuous mode [ 325.704355][ T9898] veth0_macvtap: entered promiscuous mode [ 325.713077][ T9898] veth1_macvtap: entered promiscuous mode [ 325.738217][ T9903] veth1_vlan: entered promiscuous mode [ 325.805064][ T9893] veth0_vlan: entered promiscuous mode [ 325.865547][ T9893] veth1_vlan: entered promiscuous mode [ 325.905339][ T35] bridge_slave_1: left allmulticast mode [ 325.917185][ T35] bridge_slave_1: left promiscuous mode [ 325.923754][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.933664][ T35] bridge_slave_0: left allmulticast mode [ 325.941040][ T35] bridge_slave_0: left promiscuous mode [ 325.946725][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.254424][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.267650][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.279349][ T35] bond0 (unregistering): Released all slaves [ 326.294631][ T9903] veth0_macvtap: entered promiscuous mode [ 326.322264][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.330289][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.338628][T10096] bridge_slave_0: entered allmulticast mode [ 326.349935][T10096] bridge_slave_0: entered promiscuous mode [ 326.357708][ T9898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.369255][ T9898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.379568][ T9898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.390835][ T9898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.410245][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.494230][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.501828][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.509747][T10096] bridge_slave_1: entered allmulticast mode [ 326.516686][T10096] bridge_slave_1: entered promiscuous mode [ 326.524619][ T9903] veth1_macvtap: entered promiscuous mode [ 326.621039][ T9898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.631986][ T9898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.642214][ T9898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.653670][ T9898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.669620][ T9898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.679344][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.701270][ T9903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.713690][ T9903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.731505][ T9903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.745438][ T9903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.762211][ T9903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.775527][ T9903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.793858][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.845643][ T35] hsr_slave_0: left promiscuous mode [ 326.851902][ T35] hsr_slave_1: left promiscuous mode [ 326.857789][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.867414][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.876429][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.892297][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.912692][ T35] veth1_macvtap: left promiscuous mode [ 326.918785][ T35] veth0_macvtap: left promiscuous mode [ 326.924391][ T35] veth1_vlan: left promiscuous mode [ 326.930101][ T35] veth0_vlan: left promiscuous mode [ 327.039482][ T5243] Bluetooth: hci0: command tx timeout [ 327.485055][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.526276][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.884617][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.902370][ T9903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.913222][ T9903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.934777][ T9903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.946503][ T9903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.957353][ T9903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.965647][ T9898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.974631][ T9898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.983620][ T9898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.992682][ T9898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.006278][T10137] tipc: Started in network mode [ 328.011782][T10137] tipc: Node identity c6e0e875ae2d, cluster identity 4711 [ 328.020297][T10137] tipc: Enabled bearer , priority 10 [ 328.091493][T10096] team0: Port device team_slave_0 added [ 328.126970][T10096] team0: Port device team_slave_1 added [ 328.153717][ T9903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.163768][ T9903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.172760][ T9903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.181595][ T9903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.236403][ T9893] veth0_macvtap: entered promiscuous mode [ 328.252462][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.260124][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.286408][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.331763][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.340863][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.345536][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.360801][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.383826][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.402861][ T9893] veth1_macvtap: entered promiscuous mode [ 328.441231][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.461004][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.520114][T10096] hsr_slave_0: entered promiscuous mode [ 328.529795][T10096] hsr_slave_1: entered promiscuous mode [ 328.597518][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.613407][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.623878][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.634497][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.645014][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.658323][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.691121][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.779928][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.802106][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.819671][T10153] FAULT_INJECTION: forcing a failure. [ 328.819671][T10153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.828294][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.856401][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.859056][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.1.1276 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 328.866393][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.876639][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.876659][T10153] Call Trace: [ 328.876671][T10153] [ 328.876681][T10153] dump_stack_lvl+0x241/0x360 [ 328.887192][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.897121][T10153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.897154][T10153] ? __pfx__printk+0x10/0x10 [ 328.901693][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.903343][T10153] ? __pfx_lock_release+0x10/0x10 [ 328.939773][T10153] should_fail_ex+0x3b0/0x4e0 [ 328.944461][T10153] _copy_from_iter+0x1ed/0x1d60 [ 328.949315][T10153] ? __virt_addr_valid+0x183/0x530 [ 328.954425][T10153] ? __pfx_lock_release+0x10/0x10 [ 328.959460][T10153] ? __alloc_skb+0x28f/0x440 [ 328.964058][T10153] ? __pfx__copy_from_iter+0x10/0x10 [ 328.969347][T10153] ? __virt_addr_valid+0x183/0x530 [ 328.974457][T10153] ? __virt_addr_valid+0x183/0x530 [ 328.979567][T10153] ? __virt_addr_valid+0x45f/0x530 [ 328.984678][T10153] ? __check_object_size+0x48e/0x900 [ 328.989971][T10153] netlink_sendmsg+0x73d/0xcb0 [ 328.994752][T10153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.000197][T10153] ? aa_sock_msg_perm+0x91/0x160 [ 329.005160][T10153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.010467][T10153] __sock_sendmsg+0x221/0x270 [ 329.015158][T10153] ____sys_sendmsg+0x52a/0x7e0 [ 329.019929][T10153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.025222][T10153] __sys_sendmsg+0x292/0x380 [ 329.029812][T10153] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.034933][T10153] ? __pfx_vfs_write+0x10/0x10 [ 329.039719][T10153] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 329.046051][T10153] ? do_syscall_64+0x100/0x230 [ 329.050818][T10153] ? do_syscall_64+0xb6/0x230 [ 329.055499][T10153] do_syscall_64+0xf3/0x230 [ 329.060006][T10153] ? clear_bhb_loop+0x35/0x90 [ 329.064686][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.070586][T10153] RIP: 0033:0x7fd433d7dff9 [ 329.075005][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.094615][T10153] RSP: 002b:00007fd434b0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.103036][T10153] RAX: ffffffffffffffda RBX: 00007fd433f36058 RCX: 00007fd433d7dff9 [ 329.111011][T10153] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 329.118989][T10153] RBP: 00007fd434b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 329.126982][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.134978][T10153] R13: 0000000000000000 R14: 00007fd433f36058 R15: 00007ffea4b8ec28 [ 329.142972][T10153] [ 329.160153][ T5243] Bluetooth: hci0: command tx timeout [ 329.160885][ T5234] tipc: Node number set to 1758324853 [ 329.207858][ T9893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.232897][ T9893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.241946][ T9893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.250764][ T9893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.287926][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.297901][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.307835][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.315743][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.356124][T10165] Cannot find del_set index 0 as target [ 329.375911][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1291'. [ 329.501528][T10169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1292'. [ 329.513868][T10169] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1292'. [ 329.533887][T10169] netlink: 'syz.2.1292': attribute type 6 has an invalid length. [ 329.559695][T10169] netlink: 'syz.2.1292': attribute type 5 has an invalid length. [ 329.568104][T10169] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1292'. [ 329.617242][T10160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1290'. [ 329.804766][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.828183][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.899906][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 329.923841][T10187] wg2: entered promiscuous mode [ 329.936908][T10187] team0: Device wg2 is of different type [ 329.986908][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.018737][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.502971][T10096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.544932][T10096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.589273][T10204] __nla_validate_parse: 2 callbacks suppressed [ 330.589290][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1296'. [ 330.595134][T10096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.643086][T10096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.208648][ T5243] Bluetooth: hci0: command tx timeout [ 331.246150][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.311628][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.326445][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.356418][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.368728][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.376164][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.409943][T10224] tipc: Enabling of bearer rejected, failed to enable media [ 331.452610][T10212] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 331.460353][T10212] syzkaller0: linktype set to 512 [ 331.496199][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.514623][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.533401][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.540581][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.560660][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.567803][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.681082][ T3849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.703021][T10224] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 331.712945][T10224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1299'. [ 331.725017][T10224] ipvlan1: entered promiscuous mode [ 331.735604][T10224] ipvlan1: entered allmulticast mode [ 331.741447][T10224] veth0_vlan: entered allmulticast mode [ 331.752691][T10224] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 331.793609][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 331.887593][ T3849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.950782][T10240] bridge0: port 3(gretap0) entered blocking state [ 331.966222][T10240] bridge0: port 3(gretap0) entered disabled state [ 331.986325][T10240] gretap0: entered allmulticast mode [ 332.005137][T10252] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1303'. [ 332.016024][T10240] gretap0: entered promiscuous mode [ 332.030471][T10240] bridge0: port 3(gretap0) entered blocking state [ 332.037053][T10240] bridge0: port 3(gretap0) entered forwarding state [ 332.104756][ T3849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.147634][T10245] gretap0: left allmulticast mode [ 332.167635][T10245] gretap0: left promiscuous mode [ 332.177370][T10245] bridge0: port 3(gretap0) entered disabled state [ 332.310413][ T3849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.384583][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1304'. [ 332.403480][T10267] x_tables: duplicate underflow at hook 1 [ 332.432275][T10267] x_tables: duplicate underflow at hook 2 [ 332.545053][T10220] chnl_net:caif_netlink_parms(): no params data found [ 332.855126][ T3849] bridge_slave_1: left allmulticast mode [ 332.864697][ T3849] bridge_slave_1: left promiscuous mode [ 332.870958][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.906554][ T3849] bridge_slave_0: left allmulticast mode [ 332.923486][ T3849] bridge_slave_0: left promiscuous mode [ 332.933756][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.006326][T10297] FAULT_INJECTION: forcing a failure. [ 333.006326][T10297] name failslab, interval 1, probability 0, space 0, times 0 [ 333.025893][T10299] netlink: 209584 bytes leftover after parsing attributes in process `syz.3.1314'. [ 333.036002][T10297] CPU: 0 UID: 0 PID: 10297 Comm: syz.1.1313 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 333.046463][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.056553][T10297] Call Trace: [ 333.059855][T10297] [ 333.062802][T10297] dump_stack_lvl+0x241/0x360 [ 333.067518][T10297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.072751][T10297] ? __pfx__printk+0x10/0x10 [ 333.077382][T10297] ? ref_tracker_alloc+0x332/0x490 [ 333.082524][T10297] should_fail_ex+0x3b0/0x4e0 [ 333.087234][T10297] ? skb_clone+0x20c/0x390 [ 333.091677][T10297] should_failslab+0xac/0x100 [ 333.096381][T10297] ? skb_clone+0x20c/0x390 [ 333.100827][T10297] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 333.106233][T10297] skb_clone+0x20c/0x390 [ 333.110506][T10297] __netlink_deliver_tap+0x3cc/0x7c0 [ 333.115835][T10297] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.121061][T10297] netlink_deliver_tap+0x19d/0x1b0 [ 333.126203][T10297] netlink_unicast+0x7c4/0x990 [ 333.131004][T10297] ? __pfx_netlink_unicast+0x10/0x10 [ 333.136315][T10297] ? __virt_addr_valid+0x183/0x530 [ 333.141452][T10297] ? __check_object_size+0x48e/0x900 [ 333.146767][T10297] netlink_sendmsg+0x8e4/0xcb0 [ 333.151575][T10297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.156903][T10297] ? aa_sock_msg_perm+0x91/0x160 [ 333.161878][T10297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.167198][T10297] __sock_sendmsg+0x221/0x270 [ 333.171913][T10297] ____sys_sendmsg+0x52a/0x7e0 [ 333.176710][T10297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.182040][T10297] __sys_sendmsg+0x292/0x380 [ 333.186661][T10297] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.191813][T10297] ? __pfx_vfs_write+0x10/0x10 [ 333.196638][T10297] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.203004][T10297] ? do_syscall_64+0x100/0x230 [ 333.207798][T10297] ? do_syscall_64+0xb6/0x230 [ 333.212501][T10297] do_syscall_64+0xf3/0x230 [ 333.217028][T10297] ? clear_bhb_loop+0x35/0x90 [ 333.221728][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.227648][T10297] RIP: 0033:0x7fd433d7dff9 [ 333.232087][T10297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.251725][T10297] RSP: 002b:00007fd434b2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.260178][T10297] RAX: ffffffffffffffda RBX: 00007fd433f35f80 RCX: 00007fd433d7dff9 [ 333.268176][T10297] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 333.276174][T10297] RBP: 00007fd434b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 333.278569][ T5242] Bluetooth: hci0: command tx timeout [ 333.284146][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.284163][T10297] R13: 0000000000000000 R14: 00007fd433f35f80 R15: 00007ffea4b8ec28 [ 333.284191][T10297] [ 333.453413][ T5242] Bluetooth: hci1: command tx timeout [ 333.626637][T10286] delete_channel: no stack [ 333.645084][ T3849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.657085][ T3849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.668209][ T3849] bond0 (unregistering): Released all slaves [ 333.684134][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.724551][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.733231][T10220] bridge_slave_0: entered allmulticast mode [ 333.740880][T10220] bridge_slave_0: entered promiscuous mode [ 333.755673][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.763673][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.775238][T10220] bridge_slave_1: entered allmulticast mode [ 333.785471][T10220] bridge_slave_1: entered promiscuous mode [ 333.963363][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.984724][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.046797][T10318] netlink: 'syz.2.1318': attribute type 12 has an invalid length. [ 334.055032][T10318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1318'. [ 334.103043][T10220] team0: Port device team_slave_0 added [ 334.215807][T10220] team0: Port device team_slave_1 added [ 334.265586][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.380867][ T3849] hsr_slave_0: left promiscuous mode [ 334.418373][ T3849] hsr_slave_1: left promiscuous mode [ 334.441896][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.473789][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.485331][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.500742][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.531153][ T3849] veth1_macvtap: left promiscuous mode [ 334.536873][ T3849] veth0_macvtap: left promiscuous mode [ 334.545183][ T3849] veth1_vlan: left promiscuous mode [ 334.550707][ T3849] veth0_vlan: left promiscuous mode [ 335.012885][T10358] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 335.371004][ T3849] team0 (unregistering): Port device team_slave_1 removed [ 335.418299][ T3849] team0 (unregistering): Port device team_slave_0 removed [ 335.518666][ T5242] Bluetooth: hci1: command tx timeout [ 335.805502][T10348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'. [ 335.835939][T10356] tap0: tun_chr_ioctl cmd 1074025677 [ 335.874510][T10356] tap0: linktype set to 1 [ 335.887730][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.902140][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.937902][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.970986][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.978001][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.018601][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.083194][T10371] FAULT_INJECTION: forcing a failure. [ 336.083194][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 336.117588][T10371] CPU: 0 UID: 0 PID: 10371 Comm: syz.3.1329 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 336.128077][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.138169][T10371] Call Trace: [ 336.141477][T10371] [ 336.144427][T10371] dump_stack_lvl+0x241/0x360 [ 336.149143][T10371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.154364][T10371] ? __pfx__printk+0x10/0x10 [ 336.158964][T10371] ? __kmalloc_noprof+0xb0/0x400 [ 336.163904][T10371] ? __pfx___might_resched+0x10/0x10 [ 336.169196][T10371] should_fail_ex+0x3b0/0x4e0 [ 336.173878][T10371] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 336.180120][T10371] should_failslab+0xac/0x100 [ 336.184797][T10371] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 336.191039][T10371] __kmalloc_noprof+0xd8/0x400 [ 336.195808][T10371] ? apparmor_capable+0x13b/0x1b0 [ 336.200839][T10371] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 336.206913][T10371] genl_rcv_msg+0x802/0xec0 [ 336.211418][T10371] ? mark_lock+0x9a/0x360 [ 336.215752][T10371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.220800][T10371] ? __pfx_lock_acquire+0x10/0x10 [ 336.225835][T10371] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 336.231218][T10371] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 336.236683][T10371] ? __pfx_nl80211_post_doit+0x10/0x10 [ 336.242145][T10371] ? __pfx___might_resched+0x10/0x10 [ 336.247445][T10371] netlink_rcv_skb+0x1e3/0x430 [ 336.252219][T10371] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.257250][T10371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.262549][T10371] ? __netlink_deliver_tap+0x77e/0x7c0 [ 336.268025][T10371] genl_rcv+0x28/0x40 [ 336.272008][T10371] netlink_unicast+0x7f6/0x990 [ 336.276781][T10371] ? __pfx_netlink_unicast+0x10/0x10 [ 336.282072][T10371] ? __virt_addr_valid+0x183/0x530 [ 336.287186][T10371] ? __check_object_size+0x48e/0x900 [ 336.292476][T10371] netlink_sendmsg+0x8e4/0xcb0 [ 336.297257][T10371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.302551][T10371] ? aa_sock_msg_perm+0x91/0x160 [ 336.307494][T10371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.312785][T10371] __sock_sendmsg+0x221/0x270 [ 336.317466][T10371] ____sys_sendmsg+0x52a/0x7e0 [ 336.322243][T10371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.327541][T10371] __sys_sendmsg+0x292/0x380 [ 336.332137][T10371] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.337257][T10371] ? __pfx_vfs_write+0x10/0x10 [ 336.342047][T10371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.348387][T10371] ? do_syscall_64+0x100/0x230 [ 336.353163][T10371] ? do_syscall_64+0xb6/0x230 [ 336.357841][T10371] do_syscall_64+0xf3/0x230 [ 336.362346][T10371] ? clear_bhb_loop+0x35/0x90 [ 336.367025][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.372926][T10371] RIP: 0033:0x7f025e37dff9 [ 336.377345][T10371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.396958][T10371] RSP: 002b:00007f025f137038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.405385][T10371] RAX: ffffffffffffffda RBX: 00007f025e535f80 RCX: 00007f025e37dff9 [ 336.413362][T10371] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 336.421335][T10371] RBP: 00007f025f137090 R08: 0000000000000000 R09: 0000000000000000 [ 336.429316][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.437292][T10371] R13: 0000000000000000 R14: 00007f025e535f80 R15: 00007ffe66b44bc8 [ 336.445281][T10371] [ 336.536552][T10220] hsr_slave_0: entered promiscuous mode [ 336.549698][T10220] hsr_slave_1: entered promiscuous mode [ 336.563874][T10220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.576903][T10220] Cannot create hsr debugfs directory [ 336.749058][ T937] IPVS: starting estimator thread 0... [ 336.787561][T10096] veth0_vlan: entered promiscuous mode [ 336.827239][T10096] veth1_vlan: entered promiscuous mode [ 336.838739][T10390] IPVS: using max 22 ests per chain, 52800 per kthread [ 336.941677][T10399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.989357][T10096] veth0_macvtap: entered promiscuous mode [ 337.043170][T10096] veth1_macvtap: entered promiscuous mode [ 337.067115][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 337.114655][T10411] ipt_REJECT: TCP_RESET invalid for non-tcp [ 337.125576][T10406] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 337.140089][T10406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1341'. [ 337.191551][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.216618][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.238302][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.254018][T10415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1343'. [ 337.263429][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.284220][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.294806][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.306554][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.343374][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.368448][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.388326][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.408291][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.418873][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.430207][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.445024][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.528668][T10096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.537426][T10096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.568155][T10096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.586012][T10096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.598705][ T5242] Bluetooth: hci1: command tx timeout [ 337.827747][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.859952][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.937310][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.939888][T10220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.955064][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.967332][T10220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.001459][T10220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.102656][T10446] FAULT_INJECTION: forcing a failure. [ 338.102656][T10446] name failslab, interval 1, probability 0, space 0, times 0 [ 338.125246][T10220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.148393][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.2.1353 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 338.158867][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.168952][T10446] Call Trace: [ 338.172256][T10446] [ 338.175210][T10446] dump_stack_lvl+0x241/0x360 [ 338.179924][T10446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.185150][T10446] ? __pfx__printk+0x10/0x10 [ 338.189770][T10446] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 338.195783][T10446] ? __pfx___might_resched+0x10/0x10 [ 338.201106][T10446] should_fail_ex+0x3b0/0x4e0 [ 338.205814][T10446] should_failslab+0xac/0x100 [ 338.210519][T10446] ? __alloc_skb+0x1c3/0x440 [ 338.215144][T10446] kmem_cache_alloc_node_noprof+0x71/0x320 [ 338.221057][T10446] __alloc_skb+0x1c3/0x440 [ 338.225514][T10446] ? __pfx___alloc_skb+0x10/0x10 [ 338.230487][T10446] ? netlink_ack_tlv_len+0x6e/0x200 [ 338.235716][T10446] netlink_ack+0x13f/0xa30 [ 338.240159][T10446] ? __pfx_lock_acquire+0x10/0x10 [ 338.245221][T10446] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 338.250704][T10446] ? __pfx_nl80211_post_doit+0x10/0x10 [ 338.256203][T10446] netlink_rcv_skb+0x262/0x430 [ 338.260998][T10446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.266051][T10446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.271377][T10446] ? __netlink_deliver_tap+0x77e/0x7c0 [ 338.276887][T10446] genl_rcv+0x28/0x40 [ 338.280898][T10446] netlink_unicast+0x7f6/0x990 [ 338.285699][T10446] ? __pfx_netlink_unicast+0x10/0x10 [ 338.291014][T10446] ? __virt_addr_valid+0x183/0x530 [ 338.296154][T10446] ? __check_object_size+0x48e/0x900 [ 338.301477][T10446] netlink_sendmsg+0x8e4/0xcb0 [ 338.306282][T10446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.311598][T10446] ? aa_sock_msg_perm+0x91/0x160 [ 338.316564][T10446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.321877][T10446] __sock_sendmsg+0x221/0x270 [ 338.326582][T10446] ____sys_sendmsg+0x52a/0x7e0 [ 338.331382][T10446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.336710][T10446] __sys_sendmsg+0x292/0x380 [ 338.341337][T10446] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.346482][T10446] ? __pfx_vfs_write+0x10/0x10 [ 338.351301][T10446] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.357659][T10446] ? do_syscall_64+0x100/0x230 [ 338.362449][T10446] ? do_syscall_64+0xb6/0x230 [ 338.367163][T10446] do_syscall_64+0xf3/0x230 [ 338.371688][T10446] ? clear_bhb_loop+0x35/0x90 [ 338.376391][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.382314][T10446] RIP: 0033:0x7f05f457dff9 [ 338.386751][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.406385][T10446] RSP: 002b:00007f05f3fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.414836][T10446] RAX: ffffffffffffffda RBX: 00007f05f4735f80 RCX: 00007f05f457dff9 [ 338.422839][T10446] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 338.430836][T10446] RBP: 00007f05f3fff090 R08: 0000000000000000 R09: 0000000000000000 [ 338.438832][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.446827][T10446] R13: 0000000000000000 R14: 00007f05f4735f80 R15: 00007fffcf99bd38 [ 338.454842][T10446] [ 338.586484][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.662001][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.673867][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.681033][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.781180][ T3849] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.788373][ T3849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.936475][T10470] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 338.946593][T10470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 339.007414][T10484] tipc: Started in network mode [ 339.021524][T10484] tipc: Node identity aaf401c4e24, cluster identity 4711 [ 339.045397][T10484] tipc: Enabled bearer , priority 26 [ 339.223411][T10495] netlink: 'syz.3.1360': attribute type 3 has an invalid length. [ 339.235178][T10495] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1360'. [ 339.254491][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.444392][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.546594][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.609146][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.636222][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.679622][ T5242] Bluetooth: hci1: command tx timeout [ 339.728152][T10220] veth0_vlan: entered promiscuous mode [ 339.741006][T10220] veth1_vlan: entered promiscuous mode [ 339.772656][T10220] veth0_macvtap: entered promiscuous mode [ 339.786029][T10220] veth1_macvtap: entered promiscuous mode [ 339.806715][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.817757][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.831907][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.878413][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.898430][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.910503][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.923030][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.940643][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.957669][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.970465][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.987356][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.016777][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.032643][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.044593][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.061070][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.080129][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.098588][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.117716][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.139823][T10534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1363'. [ 340.159839][ T7799] tipc: Node number set to 1219756484 [ 340.186732][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.208677][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.219723][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.230190][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.237940][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.246233][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.313662][T10220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.323694][T10220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.332929][T10220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.342034][T10220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.409731][T10544] xt_hashlimit: invalid rate [ 342.099513][ T63] bridge_slave_1: left allmulticast mode [ 342.108327][ T63] bridge_slave_1: left promiscuous mode [ 342.112302][T10561] IPv6: addrconf: prefix option has invalid lifetime [ 342.117928][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.141216][ T63] bridge_slave_0: left allmulticast mode [ 342.146907][ T63] bridge_slave_0: left promiscuous mode [ 342.160631][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.231226][T10567] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1377'. [ 342.271715][T10567] netlink: zone id is out of range [ 342.276955][T10567] netlink: zone id is out of range [ 342.288356][T10567] netlink: zone id is out of range [ 342.293712][T10567] netlink: zone id is out of range [ 342.301664][T10567] netlink: zone id is out of range [ 342.311385][T10567] netlink: zone id is out of range [ 342.316609][T10567] netlink: zone id is out of range [ 342.326177][ T5243] Bluetooth: hci0: command tx timeout [ 342.331097][T10567] netlink: zone id is out of range [ 342.349346][T10567] netlink: zone id is out of range [ 342.565529][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.582107][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.593834][ T63] bond0 (unregistering): Released all slaves [ 342.648390][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 342.657316][T10568] netlink: 'syz.3.1376': attribute type 3 has an invalid length. [ 342.686652][T10572] FAULT_INJECTION: forcing a failure. [ 342.686652][T10572] name failslab, interval 1, probability 0, space 0, times 0 [ 342.710824][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.1.1379 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 342.721403][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.731485][T10572] Call Trace: [ 342.734786][T10572] [ 342.737747][T10572] dump_stack_lvl+0x241/0x360 [ 342.742463][T10572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.747695][T10572] ? __pfx__printk+0x10/0x10 [ 342.752320][T10572] ? ref_tracker_alloc+0x332/0x490 [ 342.757464][T10572] should_fail_ex+0x3b0/0x4e0 [ 342.762177][T10572] ? skb_clone+0x20c/0x390 [ 342.766614][T10572] should_failslab+0xac/0x100 [ 342.771314][T10572] ? skb_clone+0x20c/0x390 [ 342.775755][T10572] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 342.781155][T10572] skb_clone+0x20c/0x390 [ 342.785421][T10572] __netlink_deliver_tap+0x3cc/0x7c0 [ 342.790745][T10572] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.795969][T10572] netlink_deliver_tap+0x19d/0x1b0 [ 342.801111][T10572] netlink_sendskb+0x68/0x140 [ 342.805807][T10572] netlink_unicast+0x39d/0x990 [ 342.810575][T10572] ? __asan_memcpy+0x40/0x70 [ 342.815181][T10572] ? __pfx_netlink_unicast+0x10/0x10 [ 342.820464][T10572] netlink_rcv_skb+0x262/0x430 [ 342.825222][T10572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.830236][T10572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.835520][T10572] ? __netlink_deliver_tap+0x77e/0x7c0 [ 342.840980][T10572] genl_rcv+0x28/0x40 [ 342.844969][T10572] netlink_unicast+0x7f6/0x990 [ 342.849754][T10572] ? __pfx_netlink_unicast+0x10/0x10 [ 342.855052][T10572] ? __virt_addr_valid+0x183/0x530 [ 342.860168][T10572] ? __check_object_size+0x48e/0x900 [ 342.865475][T10572] netlink_sendmsg+0x8e4/0xcb0 [ 342.870260][T10572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.875549][T10572] ? aa_sock_msg_perm+0x91/0x160 [ 342.880513][T10572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.885803][T10572] __sock_sendmsg+0x221/0x270 [ 342.890483][T10572] ____sys_sendmsg+0x52a/0x7e0 [ 342.895258][T10572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.900558][T10572] __sys_sendmsg+0x292/0x380 [ 342.905142][T10572] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.910270][T10572] ? __pfx_vfs_write+0x10/0x10 [ 342.915086][T10572] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.921442][T10572] ? do_syscall_64+0x100/0x230 [ 342.926226][T10572] ? do_syscall_64+0xb6/0x230 [ 342.930921][T10572] do_syscall_64+0xf3/0x230 [ 342.935446][T10572] ? clear_bhb_loop+0x35/0x90 [ 342.940147][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.946062][T10572] RIP: 0033:0x7fd433d7dff9 [ 342.950496][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.970128][T10572] RSP: 002b:00007fd434b2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.978556][T10572] RAX: ffffffffffffffda RBX: 00007fd433f35f80 RCX: 00007fd433d7dff9 [ 342.986531][T10572] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 342.994502][T10572] RBP: 00007fd434b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 343.002472][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.010446][T10572] R13: 0000000000000000 R14: 00007fd433f35f80 R15: 00007ffea4b8ec28 [ 343.018448][T10572] [ 343.346658][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.357341][ T63] hsr_slave_0: left promiscuous mode [ 343.394260][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.421557][ T63] hsr_slave_1: left promiscuous mode [ 343.434464][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.463378][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.479818][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.502323][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.579732][ T63] veth1_macvtap: left promiscuous mode [ 343.595558][ T63] veth0_macvtap: left promiscuous mode [ 343.604059][ T63] veth1_vlan: left promiscuous mode [ 343.609582][ T63] veth0_vlan: left promiscuous mode [ 343.653499][T10608] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 343.808080][T10615] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1390'. [ 344.160939][ T63] team0 (unregistering): Port device team_slave_1 removed [ 344.199647][ T63] team0 (unregistering): Port device team_slave_0 removed [ 344.398422][ T5243] Bluetooth: hci0: command tx timeout [ 344.770006][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.790492][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.811687][T10626] FAULT_INJECTION: forcing a failure. [ 344.811687][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.836434][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.3.1394 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 344.846914][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.856998][T10626] Call Trace: [ 344.860297][T10626] [ 344.863242][T10626] dump_stack_lvl+0x241/0x360 [ 344.867950][T10626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.871285][T10535] chnl_net:caif_netlink_parms(): no params data found [ 344.873153][T10626] ? __pfx__printk+0x10/0x10 [ 344.884516][T10626] ? snprintf+0xda/0x120 [ 344.888783][T10626] should_fail_ex+0x3b0/0x4e0 [ 344.893492][T10626] _copy_to_user+0x2f/0xb0 [ 344.897936][T10626] simple_read_from_buffer+0xca/0x150 [ 344.903340][T10626] proc_fail_nth_read+0x1e9/0x250 [ 344.908399][T10626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.913977][T10626] ? rw_verify_area+0x55e/0x6f0 [ 344.918851][T10626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.924421][T10626] vfs_read+0x201/0xbc0 [ 344.928610][T10626] ? __pfx_lock_release+0x10/0x10 [ 344.933670][T10626] ? __pfx_vfs_read+0x10/0x10 [ 344.938380][T10626] ? __fget_files+0x3f3/0x470 [ 344.943083][T10626] ? fdget_pos+0x24e/0x320 [ 344.947607][T10626] ksys_read+0x183/0x2b0 [ 344.951876][T10626] ? __pfx_ksys_read+0x10/0x10 [ 344.956660][T10626] ? do_syscall_64+0x100/0x230 [ 344.961449][T10626] ? do_syscall_64+0xb6/0x230 [ 344.964763][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1397'. [ 344.966130][T10626] do_syscall_64+0xf3/0x230 [ 344.979560][T10626] ? clear_bhb_loop+0x35/0x90 [ 344.984255][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.990167][T10626] RIP: 0033:0x7f025e37ca3c [ 344.994600][T10626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 345.014363][T10626] RSP: 002b:00007f025f137030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.022801][T10626] RAX: ffffffffffffffda RBX: 00007f025e535f80 RCX: 00007f025e37ca3c [ 345.030785][T10626] RDX: 000000000000000f RSI: 00007f025f1370a0 RDI: 0000000000000005 [ 345.038783][T10626] RBP: 00007f025f137090 R08: 0000000000000000 R09: 0000000000000000 [ 345.046780][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.054773][T10626] R13: 0000000000000000 R14: 00007f025e535f80 R15: 00007ffe66b44bc8 [ 345.062791][T10626] [ 345.095883][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1398'. [ 345.324556][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.355694][T10535] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.367716][T10535] bridge_slave_0: entered allmulticast mode [ 345.387154][T10535] bridge_slave_0: entered promiscuous mode [ 345.442670][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'. [ 345.457997][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'. [ 345.489888][T10658] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 345.546102][T10658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.579358][T10535] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.586503][T10535] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.654007][T10535] bridge_slave_1: entered allmulticast mode [ 345.712981][T10535] bridge_slave_1: entered promiscuous mode [ 345.788666][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 345.863120][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.883737][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.969817][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.987788][T10535] team0: Port device team_slave_0 added [ 345.996761][T10535] team0: Port device team_slave_1 added [ 346.019199][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.026177][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.055216][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.086146][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.102156][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.109373][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.135525][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.175602][T10535] hsr_slave_0: entered promiscuous mode [ 346.182043][T10535] hsr_slave_1: entered promiscuous mode [ 346.211679][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.347436][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.479189][ T5243] Bluetooth: hci0: command tx timeout [ 346.652245][T10703] Cannot find add_set index 0 as target [ 346.724848][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.737083][T10716] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1411'. [ 346.752698][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.761223][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.771220][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.778885][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.786180][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.786811][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 346.814302][T10721] x_tables: duplicate entry at hook 3 [ 347.027355][T10725] syz.3.1413[10725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.027457][T10725] syz.3.1413[10725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.060416][T10725] syz.3.1413[10725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.114728][ T63] bridge_slave_1: left allmulticast mode [ 347.132601][ T63] bridge_slave_1: left promiscuous mode [ 347.138721][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.149296][ T63] bridge_slave_0: left allmulticast mode [ 347.154973][ T63] bridge_slave_0: left promiscuous mode [ 347.161015][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.485370][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.497363][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.508493][ T63] bond0 (unregistering): Released all slaves [ 347.646974][T10732] net_ratelimit: 284 callbacks suppressed [ 347.646997][T10732] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.776615][T10726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.777395][T10732] __nla_validate_parse: 3 callbacks suppressed [ 347.777411][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 347.920601][T10738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.055513][T10535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.117363][T10535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.172374][ T63] hsr_slave_0: left promiscuous mode [ 348.204101][ T63] hsr_slave_1: left promiscuous mode [ 348.220650][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.232454][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.255137][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.277913][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.293133][T10774] xt_limit: Overflow, try lower: 262144/524288 [ 348.326540][ T63] veth1_macvtap: left promiscuous mode [ 348.335339][ T63] veth0_macvtap: left promiscuous mode [ 348.344436][ T63] veth1_vlan: left promiscuous mode [ 348.352888][ T63] veth0_vlan: left promiscuous mode [ 348.382015][T10779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1424'. [ 348.882432][ T5242] Bluetooth: hci1: command tx timeout [ 349.040673][ T63] team0 (unregistering): Port device team_slave_1 removed [ 349.105759][ T63] team0 (unregistering): Port device team_slave_0 removed [ 349.193360][T10801] syz.1.1429[10801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.193462][T10801] syz.1.1429[10801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.208591][T10801] syz.1.1429[10801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.498399][T10535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.553034][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 349.592579][T10535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.620963][T10717] chnl_net:caif_netlink_parms(): no params data found [ 349.635876][T10806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1432'. [ 349.725902][T10810] netlink: 'syz.3.1431': attribute type 2 has an invalid length. [ 349.797870][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.816253][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.838056][T10717] bridge_slave_0: entered allmulticast mode [ 349.850168][T10717] bridge_slave_0: entered promiscuous mode [ 349.908016][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.928196][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.962677][T10801] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 349.964180][T10717] bridge_slave_1: entered allmulticast mode [ 349.989503][T10717] bridge_slave_1: entered promiscuous mode [ 350.072111][T10717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.108036][T10717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.129835][T10824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1435'. [ 350.175594][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'. [ 350.206070][T10828] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1437'. [ 350.242132][T10717] team0: Port device team_slave_0 added [ 350.247652][T10828] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 350.252725][T10717] team0: Port device team_slave_1 added [ 350.300191][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1437'. [ 350.313185][T10833] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 350.330557][T10833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1437'. [ 350.341308][T10833] netlink: 'syz.2.1437': attribute type 8 has an invalid length. [ 350.365296][T10832] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 350.369172][T10535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.389962][T10832] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 350.399548][T10717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.406514][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.438429][T10832] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1438'. [ 350.447586][T10832] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 350.471721][T10717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.503041][T10717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.511754][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.563356][T10717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.591686][T10535] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.690746][T10717] hsr_slave_0: entered promiscuous mode [ 350.702405][T10717] hsr_slave_1: entered promiscuous mode [ 350.714002][T10717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.733831][T10717] Cannot create hsr debugfs directory [ 350.745144][T10846] netlink: 'syz.2.1440': attribute type 4 has an invalid length. [ 350.771357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.778586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.809104][T10839] netlink: 'syz.2.1440': attribute type 4 has an invalid length. [ 350.943796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.951022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.960755][ T5242] Bluetooth: hci1: command tx timeout [ 351.093513][T10535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.112507][T10535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.425679][T10872] syz.2.1446[10872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.425774][T10872] syz.2.1446[10872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.467544][T10535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.478537][T10872] syz.2.1446[10872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.755072][T10883] vlan2: entered promiscuous mode [ 351.775767][T10883] xfrm0: entered promiscuous mode [ 351.783231][T10883] vlan2: entered allmulticast mode [ 351.795492][T10883] xfrm0: entered allmulticast mode [ 351.801917][T10883] team0: Device vlan2 is up. Set it down before adding it as a team port [ 351.813833][T10883] xfrm0: left allmulticast mode [ 351.822846][T10883] xfrm0: left promiscuous mode [ 351.968453][T10717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.988115][T10717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.017157][T10717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.042803][T10717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.074882][T10897] vlan2: entered promiscuous mode [ 352.188468][T10535] veth0_vlan: entered promiscuous mode [ 352.237422][T10535] veth1_vlan: entered promiscuous mode [ 352.244912][T10874] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 352.303882][T10717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.366403][T10535] veth0_macvtap: entered promiscuous mode [ 352.395586][T10535] veth1_macvtap: entered promiscuous mode [ 352.426953][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.455363][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.462532][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.492910][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.500106][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.519660][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.532277][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.542618][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.562375][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.581848][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.602865][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.635396][T10535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.704490][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.742695][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.756388][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.774013][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.785015][T10535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.801554][T10535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.829632][T10535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.856457][T10535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.876707][T10535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.894259][T10535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.911356][T10535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.039361][ T5242] Bluetooth: hci1: command tx timeout [ 353.051037][T10934] tipc: Enabling of bearer rejected, failed to enable media [ 353.062213][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.101514][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.160535][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.175439][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.337065][T10717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.487679][T10717] veth0_vlan: entered promiscuous mode [ 353.515770][T10717] veth1_vlan: entered promiscuous mode [ 353.531435][T10951] netlink: 'syz.2.1455': attribute type 3 has an invalid length. [ 353.560661][T10951] __nla_validate_parse: 4 callbacks suppressed [ 353.560679][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 353.597002][T10717] veth0_macvtap: entered promiscuous mode [ 353.615889][T10717] veth1_macvtap: entered promiscuous mode [ 353.640974][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.661569][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.689944][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.728362][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.751787][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.791544][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.813811][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.825403][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.852005][T10717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.919779][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 353.970148][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.986962][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.998153][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.020592][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.041203][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.054219][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.068553][T10717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.083653][T10717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.095771][T10717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.141947][ T3849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.171722][T10717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.188928][T10717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.197669][T10717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.206496][T10717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.274726][ T3849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.391231][ T3849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.412000][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.429606][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.487437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.516185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.661592][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.671459][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.684461][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.694309][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.718530][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.726542][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.733165][ T3849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.785573][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 354.803966][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 355.051785][T11001] Cannot find add_set index 0 as target [ 355.378830][T11013] syz.1.1463[11013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.378935][T11013] syz.1.1463[11013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.397861][T11013] syz.1.1463[11013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.544417][ T3849] bridge_slave_1: left allmulticast mode [ 355.678533][ T3849] bridge_slave_1: left promiscuous mode [ 355.687741][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.775731][ T3849] bridge_slave_0: left allmulticast mode [ 355.805778][ T3849] bridge_slave_0: left promiscuous mode [ 355.830999][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.141248][T11013] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 357.636967][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.650408][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.659326][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.667359][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.676503][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.687009][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.010016][ T3849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.048776][ T3849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.071772][ T3849] bond0 (unregistering): Released all slaves [ 358.128731][T11034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 358.197550][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 358.215367][T11042] lo: entered allmulticast mode [ 358.222168][T11042] lo: left allmulticast mode [ 358.561607][T11051] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 358.583790][T11051] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1469'. [ 358.614263][T11051] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1469'. [ 359.764638][ T5243] Bluetooth: hci1: command tx timeout [ 361.219977][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.231968][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.240140][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.254567][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.265300][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 361.273022][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.838742][ T5242] Bluetooth: hci1: command tx timeout [ 363.358442][ T5242] Bluetooth: hci3: command tx timeout [ 363.918429][ T5242] Bluetooth: hci1: command tx timeout [ 365.440674][ T5242] Bluetooth: hci3: command tx timeout [ 365.998467][ T5242] Bluetooth: hci1: command tx timeout [ 367.077831][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.095163][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.103793][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.112919][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.121226][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 367.128677][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.519117][ T5243] Bluetooth: hci3: command tx timeout [ 369.206495][ T5243] Bluetooth: hci4: command tx timeout [ 369.235004][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.245346][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.253672][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.263055][ T5242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.270808][ T5242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 369.296603][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.598494][ T5242] Bluetooth: hci3: command tx timeout [ 371.278445][ T5242] Bluetooth: hci4: command tx timeout [ 371.358680][ T5242] Bluetooth: hci6: command tx timeout [ 373.359216][ T5242] Bluetooth: hci4: command tx timeout [ 373.438641][ T5242] Bluetooth: hci6: command tx timeout [ 375.439157][ T5242] Bluetooth: hci4: command tx timeout [ 375.519263][ T5242] Bluetooth: hci6: command tx timeout [ 377.603560][ T5243] Bluetooth: hci6: command tx timeout [ 378.893379][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905211][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.486772][T11051] syz_tun (unregistering): left promiscuous mode [ 399.441644][T10986] chnl_net:caif_netlink_parms(): no params data found [ 417.084795][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.094420][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.103538][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.117008][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.128007][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 417.135895][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.907172][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.916790][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.933689][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.943106][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.956636][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 418.968118][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.199048][ T5242] Bluetooth: hci2: command tx timeout [ 419.488218][ C0] sched: DL replenish lagged too much [ 420.994965][T10986] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 421.038761][ T5243] Bluetooth: hci5: command tx timeout [ 421.149603][ T5242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 421.158955][ T5242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 421.166781][ T5242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 421.175453][ T5242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 421.185823][ T5242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 421.203364][ T5242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.278778][ T5242] Bluetooth: hci2: command tx timeout [ 423.118671][ T5242] Bluetooth: hci5: command tx timeout [ 423.278383][ T5242] Bluetooth: hci7: command tx timeout [ 423.358591][ T5242] Bluetooth: hci2: command tx timeout [ 425.198577][ T5242] Bluetooth: hci5: command tx timeout [ 425.358341][ T5242] Bluetooth: hci7: command tx timeout [ 425.438571][ T5242] Bluetooth: hci2: command tx timeout [ 427.278563][ T5242] Bluetooth: hci5: command tx timeout [ 427.438329][ T5242] Bluetooth: hci7: command tx timeout [ 428.024721][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.034674][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.043297][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.051211][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.060823][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 428.068108][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.518321][ T5242] Bluetooth: hci7: command tx timeout [ 429.999321][ T5243] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 430.008375][ T5243] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 430.018594][ T5243] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 430.026483][ T5243] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 430.034122][ T5243] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 430.041780][ T5243] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 430.158562][ T5243] Bluetooth: hci0: command tx timeout [ 432.078420][ T5243] Bluetooth: hci9: command tx timeout [ 432.238389][ T5243] Bluetooth: hci0: command tx timeout [ 434.158516][ T5243] Bluetooth: hci9: command tx timeout [ 434.319223][ T5243] Bluetooth: hci0: command tx timeout [ 436.238395][ T5243] Bluetooth: hci9: command tx timeout [ 436.398426][ T5243] Bluetooth: hci0: command tx timeout [ 437.285928][ T5243] Bluetooth: hci8: command 0x0406 tx timeout [ 438.318440][ T5242] Bluetooth: hci9: command tx timeout [ 440.325233][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.331669][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 479.413681][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 479.482846][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 479.514306][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 479.622735][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 479.672510][ T5243] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 479.692388][ T5243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 480.378906][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 480.387999][ T5243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 480.396260][ T5243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 480.405381][ T5243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 480.418403][ T5243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 480.425817][ T5243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 482.016239][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 482.027650][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 482.036300][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 482.045487][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 482.055357][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 482.063048][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 482.158471][ T5242] Bluetooth: hci10: command tx timeout [ 482.478385][ T5242] Bluetooth: hci11: command tx timeout [ 483.358391][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 484.158499][ T5243] Bluetooth: hci12: command tx timeout [ 484.238348][ T5243] Bluetooth: hci10: command tx timeout [ 484.558327][ T5243] Bluetooth: hci11: command tx timeout [ 486.238351][ T5243] Bluetooth: hci12: command tx timeout [ 486.318419][ T5243] Bluetooth: hci10: command tx timeout [ 486.638375][ T5243] Bluetooth: hci11: command tx timeout [ 488.318401][ T5243] Bluetooth: hci12: command tx timeout [ 488.398312][ T5243] Bluetooth: hci10: command tx timeout [ 488.483968][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 488.724754][ T5242] Bluetooth: hci11: command tx timeout [ 489.014011][ T5243] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 489.025353][ T5243] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 489.033926][ T5243] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 489.043841][ T5243] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 489.051725][ T5243] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 489.059149][ T5243] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 490.398349][ T5243] Bluetooth: hci12: command tx timeout [ 491.119657][ T5243] Bluetooth: hci13: command tx timeout [ 491.137311][ T5242] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 491.146490][ T5242] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 491.158901][ T5242] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 491.167312][ T5242] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 491.175569][ T5242] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 491.184528][ T5242] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 493.198995][ T5243] Bluetooth: hci13: command tx timeout [ 493.278484][ T5243] Bluetooth: hci14: command tx timeout [ 493.606936][ T5243] Bluetooth: hci6: command 0x0406 tx timeout [ 493.613882][ T5231] Bluetooth: hci4: command 0x0406 tx timeout [ 495.281018][ T5242] Bluetooth: hci13: command tx timeout [ 495.358626][ T5242] Bluetooth: hci14: command tx timeout [ 497.358255][ T5242] Bluetooth: hci13: command tx timeout [ 497.438533][ T5242] Bluetooth: hci14: command tx timeout [ 499.518542][ T5242] Bluetooth: hci14: command tx timeout [ 501.762940][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.773634][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.678321][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 540.938604][ T5242] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 540.950612][ T5242] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 540.962044][ T5242] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 540.978508][ T5242] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 540.986912][ T5242] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 540.997418][ T5242] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 541.598724][ T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 541.608969][ T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 541.616957][ T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 541.625220][ T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 541.633171][ T53] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 541.641573][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 542.457191][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 542.467448][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 542.475931][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 542.492053][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 542.499883][ T53] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 542.509408][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 543.038341][ T5243] Bluetooth: hci15: command tx timeout [ 543.678326][ T5243] Bluetooth: hci16: command tx timeout [ 544.558491][ T5243] Bluetooth: hci17: command tx timeout [ 544.801799][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 544.809083][ T5243] Bluetooth: hci7: command 0x0406 tx timeout [ 545.118470][ T53] Bluetooth: hci15: command tx timeout [ 545.758236][ T53] Bluetooth: hci16: command tx timeout [ 546.638399][ T53] Bluetooth: hci17: command tx timeout [ 547.198454][ T5242] Bluetooth: hci15: command tx timeout [ 547.839185][ T53] Bluetooth: hci16: command tx timeout [ 548.718336][ T53] Bluetooth: hci17: command tx timeout [ 549.076353][ T5242] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 549.085429][ T5242] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 549.093458][ T5242] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 549.102391][ T5242] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 549.115986][ T5242] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 549.125676][ T5242] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 549.278393][ T5242] Bluetooth: hci15: command tx timeout [ 549.918350][ T5242] Bluetooth: hci16: command tx timeout [ 550.798425][ T5242] Bluetooth: hci17: command tx timeout [ 551.198529][ T5242] Bluetooth: hci18: command tx timeout [ 552.244217][ T53] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 552.263917][ T53] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 552.271989][ T53] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 552.280029][ T53] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 552.292628][ T53] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 552.300839][ T53] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 553.278425][ T53] Bluetooth: hci18: command tx timeout [ 554.398448][ T53] Bluetooth: hci19: command tx timeout [ 555.049358][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 555.055439][ T53] Bluetooth: hci9: command 0x0406 tx timeout [ 555.358350][ T5243] Bluetooth: hci18: command tx timeout [ 556.478399][ T5243] Bluetooth: hci19: command tx timeout [ 557.438375][ T5243] Bluetooth: hci18: command tx timeout [ 558.558409][ T5243] Bluetooth: hci19: command tx timeout [ 560.638633][ T5243] Bluetooth: hci19: command tx timeout [ 563.201217][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.207548][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.118478][ T30] INFO: task kworker/u8:8:3849 blocked for more than 143 seconds. [ 581.126348][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 581.175053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.231346][ T30] task:kworker/u8:8 state:D stack:20920 pid:3849 tgid:3849 ppid:2 flags:0x00004000 [ 581.261054][ T30] Workqueue: netns cleanup_net [ 581.291642][ T30] Call Trace: [ 581.294968][ T30] [ 581.297915][ T30] __schedule+0x1895/0x4b30 [ 581.333862][ T30] ? __pfx___schedule+0x10/0x10 [ 581.358271][ T30] ? __pfx_lock_release+0x10/0x10 [ 581.363376][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 581.398705][ T30] ? kthread_data+0x52/0xd0 [ 581.403307][ T30] ? schedule+0x90/0x320 [ 581.407588][ T30] ? wq_worker_sleeping+0x66/0x240 [ 581.498159][ T30] ? schedule+0x90/0x320 [ 581.502477][ T30] schedule+0x14b/0x320 [ 581.506659][ T30] schedule_preempt_disabled+0x13/0x30 [ 581.608299][ T30] __mutex_lock+0x6a7/0xd70 [ 581.612865][ T30] ? __mutex_lock+0x52a/0xd70 [ 581.617560][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 581.673786][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 581.706502][ T30] ? net_generic+0x1f/0x240 [ 581.727697][ T30] ppp_exit_net+0xe3/0x3d0 [ 581.748210][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 581.753277][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 581.800190][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 581.806104][ T30] cleanup_net+0x802/0xcc0 [ 581.858307][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 581.863311][ T30] ? process_scheduled_works+0x976/0x1850 [ 581.908203][ T30] process_scheduled_works+0xa63/0x1850 [ 581.913833][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.954968][ T30] ? assign_work+0x364/0x3d0 [ 581.978381][ T30] worker_thread+0x870/0xd30 [ 582.014622][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 582.027243][ T30] ? __kthread_parkme+0x169/0x1d0 [ 582.054522][ T30] ? __pfx_worker_thread+0x10/0x10 [ 582.073395][ T30] kthread+0x2f0/0x390 [ 582.077528][ T30] ? __pfx_worker_thread+0x10/0x10 [ 582.113259][ T30] ? __pfx_kthread+0x10/0x10 [ 582.117915][ T30] ret_from_fork+0x4b/0x80 [ 582.148253][ T30] ? __pfx_kthread+0x10/0x10 [ 582.152887][ T30] ret_from_fork_asm+0x1a/0x30 [ 582.157698][ T30] [ 582.202475][ T30] INFO: task dhcpcd:4898 blocked for more than 144 seconds. [ 582.228347][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 582.235675][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.287080][ T30] task:dhcpcd state:D stack:20128 pid:4898 tgid:4898 ppid:4897 flags:0x00000002 [ 582.333001][ T30] Call Trace: [ 582.336327][ T30] [ 582.352467][ T30] __schedule+0x1895/0x4b30 [ 582.357039][ T30] ? __pfx___schedule+0x10/0x10 [ 582.388403][ T30] ? __pfx_lock_release+0x10/0x10 [ 582.394243][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 582.434958][ T30] ? schedule+0x90/0x320 [ 582.454546][ T30] schedule+0x14b/0x320 [ 582.463444][ T30] schedule_preempt_disabled+0x13/0x30 [ 582.485966][ T30] __mutex_lock+0x6a7/0xd70 [ 582.490601][ T30] ? __mutex_lock+0x52a/0xd70 [ 582.525288][ T30] ? rtnl_dumpit+0x99/0x200 [ 582.545119][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 582.564976][ T30] ? __alloc_skb+0x28f/0x440 [ 582.578281][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 582.583264][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 582.600063][ T30] rtnl_dumpit+0x99/0x200 [ 582.604440][ T30] netlink_dump+0x647/0xd80 [ 582.622101][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 582.627338][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 582.640135][ T30] __netlink_dump_start+0x5a2/0x790 [ 582.645376][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 582.672836][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 582.677836][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.705963][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 582.723969][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 582.744734][ T30] netlink_rcv_skb+0x1e3/0x430 [ 582.750924][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.756427][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.781539][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.786791][ T30] netlink_unicast+0x7f6/0x990 [ 582.816556][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 582.832845][ T30] ? __virt_addr_valid+0x183/0x530 [ 582.838000][ T30] ? __check_object_size+0x48e/0x900 [ 582.863245][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 582.868065][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.883722][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 582.908462][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.913790][ T30] __sock_sendmsg+0x221/0x270 [ 582.936979][ T30] __sys_sendto+0x39b/0x4f0 [ 582.952389][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 582.957484][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.978148][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.984524][ T30] ? exc_page_fault+0x590/0x8c0 [ 583.015150][ T30] __x64_sys_sendto+0xde/0x100 [ 583.025481][ T30] do_syscall_64+0xf3/0x230 [ 583.043422][ T30] ? clear_bhb_loop+0x35/0x90 [ 583.058177][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.064112][ T30] RIP: 0033:0x7f23f5be3ad7 [ 583.084104][ T30] RSP: 002b:00007fffcddccc28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 583.112315][ T30] RAX: ffffffffffffffda RBX: 00007fffcddcdd50 RCX: 00007f23f5be3ad7 [ 583.132872][ T30] RDX: 0000000000000014 RSI: 00007fffcddcdc70 RDI: 0000000000000018 [ 583.158417][ T30] RBP: 00007fffcddcdce0 R08: 00007fffcddcdc54 R09: 000000000000000c [ 583.166426][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 583.201973][ T30] R13: 00007fffcddcdc54 R14: 00007fffcddcdc70 R15: 0000000000000105 [ 583.227437][ T30] [ 583.237798][ T30] INFO: task syz-executor:10986 blocked for more than 145 seconds. [ 583.268493][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 583.275802][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.308294][ T30] task:syz-executor state:D stack:21728 pid:10986 tgid:10986 ppid:1 flags:0x00004006 [ 583.345056][ T30] Call Trace: [ 583.354315][ T30] [ 583.357284][ T30] __schedule+0x1895/0x4b30 [ 583.374691][ T30] ? __pfx___schedule+0x10/0x10 [ 583.388003][ T30] ? __pfx_lock_release+0x10/0x10 [ 583.404734][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 583.418335][ T30] ? schedule+0x90/0x320 [ 583.422612][ T30] schedule+0x14b/0x320 [ 583.426789][ T30] schedule_preempt_disabled+0x13/0x30 [ 583.460428][ T30] __mutex_lock+0x6a7/0xd70 [ 583.464975][ T30] ? __mutex_lock+0x52a/0xd70 [ 583.498200][ T30] ? tun_chr_close+0x3b/0x1b0 [ 583.502923][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 583.507974][ T30] ? __pfx_call_rcu+0x10/0x10 [ 583.542324][ T30] tun_chr_close+0x3b/0x1b0 [ 583.546873][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 583.573711][ T30] __fput+0x23f/0x880 [ 583.577793][ T30] task_work_run+0x24f/0x310 [ 583.594830][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 583.604560][ T30] ? __pfx_task_work_run+0x10/0x10 [ 583.618737][ T30] ? do_exit+0xa2a/0x28e0 [ 583.623107][ T30] ? kmem_cache_free+0x1a2/0x420 [ 583.628065][ T30] ? do_exit+0xa2a/0x28e0 [ 583.640079][ T30] do_exit+0xa2f/0x28e0 [ 583.644283][ T30] ? __pfx_do_exit+0x10/0x10 [ 583.653703][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 583.662857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.673933][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 583.692900][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 583.698057][ T30] do_group_exit+0x207/0x2c0 [ 583.704326][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.717334][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 583.725113][ T30] get_signal+0x176f/0x1810 [ 583.735282][ T30] ? __sock_sendmsg+0x113/0x270 [ 583.741573][ T30] ? __pfx_get_signal+0x10/0x10 [ 583.746473][ T30] arch_do_signal_or_restart+0x96/0x860 [ 583.761050][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 583.767250][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.780752][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 583.786517][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 583.796788][ T30] do_syscall_64+0x100/0x230 [ 583.803852][ T30] ? clear_bhb_loop+0x35/0x90 [ 583.814334][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.823374][ T30] RIP: 0033:0x7f30ba57fe8c [ 583.827821][ T30] RSP: 002b:00007fff91215bd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 583.841471][ T30] RAX: 000000000000003c RBX: 00007f30bb264620 RCX: 00007f30ba57fe8c [ 583.862337][ T30] RDX: 000000000000003c RSI: 00007f30bb264670 RDI: 0000000000000003 [ 583.873916][ T30] RBP: 0000000000000000 R08: 00007fff91215c24 R09: 000000000000000c [ 583.885417][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 583.897405][ T30] R13: 0000000000000000 R14: 00007f30bb264670 R15: 0000000000000000 [ 583.910300][ T30] [ 583.913408][ T30] INFO: task syz-executor:11058 blocked for more than 146 seconds. [ 583.928193][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 583.935498][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 583.954120][ T30] task:syz-executor state:D stack:21728 pid:11058 tgid:11058 ppid:1 flags:0x00000004 [ 583.966880][ T30] Call Trace: [ 583.974752][ T30] [ 583.977715][ T30] __schedule+0x1895/0x4b30 [ 583.984820][ T30] ? __pfx___schedule+0x10/0x10 [ 583.994317][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.003666][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 584.013772][ T30] ? schedule+0x90/0x320 [ 584.018051][ T30] schedule+0x14b/0x320 [ 584.024794][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.036074][ T30] __mutex_lock+0x6a7/0xd70 [ 584.043103][ T30] ? __mutex_lock+0x52a/0xd70 [ 584.047811][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 584.062095][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.067169][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 584.076985][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 584.084924][ T30] ? __lock_acquire+0x1384/0x2050 [ 584.094567][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.102733][ T30] netlink_rcv_skb+0x1e3/0x430 [ 584.107538][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.121732][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.127088][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.136077][ T30] netlink_unicast+0x7f6/0x990 [ 584.145728][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 584.153519][ T30] ? __virt_addr_valid+0x183/0x530 [ 584.164830][ T30] ? __check_object_size+0x48e/0x900 [ 584.172632][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 584.177458][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.187534][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 584.195000][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.204867][ T30] __sock_sendmsg+0x221/0x270 [ 584.213903][ T30] __sys_sendto+0x39b/0x4f0 [ 584.223129][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 584.231082][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 584.237536][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 584.248556][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.257081][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 584.268310][ T30] __x64_sys_sendto+0xde/0x100 [ 584.273138][ T30] do_syscall_64+0xf3/0x230 [ 584.277659][ T30] ? clear_bhb_loop+0x35/0x90 [ 584.290146][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.296082][ T30] RIP: 0033:0x7fb74157fe8c [ 584.306836][ T30] RSP: 002b:00007ffec40cc2b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 584.317863][ T30] RAX: ffffffffffffffda RBX: 00007fb742264620 RCX: 00007fb74157fe8c [ 584.334032][ T30] RDX: 000000000000003c RSI: 00007fb742264670 RDI: 0000000000000003 [ 584.343908][ T30] RBP: 0000000000000000 R08: 00007ffec40cc304 R09: 000000000000000c [ 584.359536][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 584.367538][ T30] R13: 0000000000000000 R14: 00007fb742264670 R15: 0000000000000000 [ 584.382375][ T30] [ 584.385482][ T30] INFO: task syz-executor:11062 blocked for more than 146 seconds. [ 584.395996][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 584.411312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.425868][ T30] task:syz-executor state:D stack:21728 pid:11062 tgid:11062 ppid:1 flags:0x00000004 [ 584.442558][ T30] Call Trace: [ 584.445869][ T30] [ 584.452560][ T30] __schedule+0x1895/0x4b30 [ 584.457126][ T30] ? __pfx___schedule+0x10/0x10 [ 584.467523][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.475070][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 584.485492][ T30] ? schedule+0x90/0x320 [ 584.492262][ T30] schedule+0x14b/0x320 [ 584.496467][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.508076][ T30] __mutex_lock+0x6a7/0xd70 [ 584.512928][ T30] ? __mutex_lock+0x52a/0xd70 [ 584.517643][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 584.529691][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.534765][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 584.545589][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 584.555493][ T30] ? __lock_acquire+0x1384/0x2050 [ 584.568419][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.573936][ T30] netlink_rcv_skb+0x1e3/0x430 [ 584.584838][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.590641][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.595982][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.609714][ T30] netlink_unicast+0x7f6/0x990 [ 584.614522][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 584.626906][ T30] ? __virt_addr_valid+0x183/0x530 [ 584.632384][ T30] ? __check_object_size+0x48e/0x900 [ 584.637701][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 584.650639][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.655969][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 584.665926][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.675344][ T30] __sock_sendmsg+0x221/0x270 [ 584.684030][ T30] __sys_sendto+0x39b/0x4f0 [ 584.692145][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 584.697231][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.706824][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 584.718277][ T30] __x64_sys_sendto+0xde/0x100 [ 584.723083][ T30] do_syscall_64+0xf3/0x230 [ 584.727601][ T30] ? clear_bhb_loop+0x35/0x90 [ 584.740992][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.751642][ T30] RIP: 0033:0x7f09e0b7fe8c [ 584.756089][ T30] RSP: 002b:00007fffe85138b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 584.772909][ T30] RAX: ffffffffffffffda RBX: 00007f09e1864620 RCX: 00007f09e0b7fe8c [ 584.784457][ T30] RDX: 0000000000000038 RSI: 00007f09e1864670 RDI: 0000000000000003 [ 584.796232][ T30] RBP: 0000000000000000 R08: 00007fffe8513904 R09: 000000000000000c [ 584.811515][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 584.824608][ T30] R13: 0000000000000000 R14: 00007f09e1864670 R15: 0000000000000000 [ 584.836184][ T30] [ 584.842761][ T30] INFO: task syz-executor:11087 blocked for more than 147 seconds. [ 584.855272][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 584.871707][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.888396][ T30] task:syz-executor state:D stack:24128 pid:11087 tgid:11087 ppid:1 flags:0x00004006 [ 584.905363][ T30] Call Trace: [ 584.909402][ T30] [ 584.912360][ T30] __schedule+0x1895/0x4b30 [ 584.916959][ T30] ? __pfx___schedule+0x10/0x10 [ 584.929789][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.934851][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 584.946524][ T30] ? schedule+0x90/0x320 [ 584.952216][ T30] schedule+0x14b/0x320 [ 584.956416][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.975722][ T30] __mutex_lock+0x6a7/0xd70 [ 584.981730][ T30] ? __mutex_lock+0x52a/0xd70 [ 584.986436][ T30] ? register_nexthop_notifier+0x84/0x290 [ 584.998383][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.003453][ T30] ? __asan_memset+0x23/0x50 [ 585.008068][ T30] register_nexthop_notifier+0x84/0x290 [ 585.021015][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 585.027063][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 585.038224][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 585.044430][ T30] ? __asan_memset+0x23/0x50 [ 585.058600][ T30] ops_init+0x31e/0x590 [ 585.062800][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 585.075347][ T30] setup_net+0x287/0x9e0 [ 585.081004][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 585.086585][ T30] ? __pfx_setup_net+0x10/0x10 [ 585.097111][ T30] copy_net_ns+0x33f/0x570 [ 585.103025][ T30] create_new_namespaces+0x425/0x7b0 [ 585.114094][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 585.122745][ T30] ksys_unshare+0x619/0xc10 [ 585.127296][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 585.138204][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 585.144242][ T30] ? do_syscall_64+0x100/0x230 [ 585.156430][ T30] __x64_sys_unshare+0x38/0x40 [ 585.162164][ T30] do_syscall_64+0xf3/0x230 [ 585.166704][ T30] ? clear_bhb_loop+0x35/0x90 [ 585.179121][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.185065][ T30] RIP: 0033:0x7faaaa97f7f7 [ 585.195652][ T30] RSP: 002b:00007fff8acce568 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 585.205040][ T30] RAX: ffffffffffffffda RBX: 00007faaaab35f40 RCX: 00007faaaa97f7f7 [ 585.218222][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 585.226228][ T30] RBP: 00007faaaab36a38 R08: 0000000000000000 R09: 0000000000000000 [ 585.241255][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 585.253609][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 585.266391][ T30] [ 585.273001][ T30] INFO: task syz-executor:11092 blocked for more than 147 seconds. [ 585.284668][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 585.296515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.308776][ T30] task:syz-executor state:D stack:24128 pid:11092 tgid:11092 ppid:1 flags:0x00004006 [ 585.324844][ T30] Call Trace: [ 585.329528][ T30] [ 585.332486][ T30] __schedule+0x1895/0x4b30 [ 585.337053][ T30] ? __pfx___schedule+0x10/0x10 [ 585.347957][ T30] ? __pfx_lock_release+0x10/0x10 [ 585.356634][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 585.370664][ T30] ? schedule+0x90/0x320 [ 585.375235][ T30] schedule+0x14b/0x320 [ 585.384162][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.392208][ T30] __mutex_lock+0x6a7/0xd70 [ 585.396743][ T30] ? __mutex_lock+0x52a/0xd70 [ 585.408172][ T30] ? register_nexthop_notifier+0x84/0x290 [ 585.413931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.424907][ T30] ? __asan_memset+0x23/0x50 [ 585.429903][ T30] register_nexthop_notifier+0x84/0x290 [ 585.435484][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 585.450152][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 585.456440][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 585.468200][ T30] ? __asan_memset+0x23/0x50 [ 585.472836][ T30] ops_init+0x31e/0x590 [ 585.477033][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 585.490375][ T30] setup_net+0x287/0x9e0 [ 585.494658][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 585.505984][ T30] ? __pfx_setup_net+0x10/0x10 [ 585.513231][ T30] copy_net_ns+0x33f/0x570 [ 585.517730][ T30] create_new_namespaces+0x425/0x7b0 [ 585.527886][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 585.536062][ T30] ksys_unshare+0x619/0xc10 [ 585.546549][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 585.554066][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 585.564218][ T30] ? do_syscall_64+0x100/0x230 [ 585.573122][ T30] __x64_sys_unshare+0x38/0x40 [ 585.577925][ T30] do_syscall_64+0xf3/0x230 [ 585.587364][ T30] ? clear_bhb_loop+0x35/0x90 [ 585.597030][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.606114][ T30] RIP: 0033:0x7fcc89f7f7f7 [ 585.615124][ T30] RSP: 002b:00007ffd995043d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 585.626142][ T30] RAX: ffffffffffffffda RBX: 00007fcc8a135f40 RCX: 00007fcc89f7f7f7 [ 585.638233][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 585.646233][ T30] RBP: 00007fcc8a136a38 R08: 0000000000000000 R09: 0000000000000000 [ 585.660943][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 585.674766][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 585.686635][ T30] [ 585.693261][ T30] INFO: task syz-executor:11096 blocked for more than 147 seconds. [ 585.705144][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 585.716006][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.732664][ T30] task:syz-executor state:D stack:24128 pid:11096 tgid:11096 ppid:1 flags:0x00000004 [ 585.746445][ T30] Call Trace: [ 585.753423][ T30] [ 585.756389][ T30] __schedule+0x1895/0x4b30 [ 585.766687][ T30] ? __pfx___schedule+0x10/0x10 [ 585.777516][ T30] ? __pfx_lock_release+0x10/0x10 [ 585.786088][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 585.795437][ T30] ? schedule+0x90/0x320 [ 585.803205][ T30] schedule+0x14b/0x320 [ 585.807450][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.816968][ T30] __mutex_lock+0x6a7/0xd70 [ 585.826211][ T30] ? __mutex_lock+0x52a/0xd70 [ 585.834502][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 585.843340][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.851929][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 585.856901][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 585.865619][ T30] ? __lock_acquire+0x1384/0x2050 [ 585.877755][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 585.886798][ T30] netlink_rcv_skb+0x1e3/0x430 [ 585.895311][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 585.904496][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.913384][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.928212][ T30] netlink_unicast+0x7f6/0x990 [ 585.933022][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 585.944378][ T30] ? __virt_addr_valid+0x183/0x530 [ 585.949822][ T30] ? __check_object_size+0x48e/0x900 [ 585.955147][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 585.966854][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.974963][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 585.986720][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.992585][ T30] __sock_sendmsg+0x221/0x270 [ 585.997302][ T30] __sys_sendto+0x39b/0x4f0 [ 586.008167][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 586.013265][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 586.027511][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 586.034594][ T30] __x64_sys_sendto+0xde/0x100 [ 586.046125][ T30] do_syscall_64+0xf3/0x230 [ 586.050923][ T30] ? clear_bhb_loop+0x35/0x90 [ 586.055630][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.068205][ T30] RIP: 0033:0x7faecf37fe8c [ 586.072655][ T30] RSP: 002b:00007ffd7a6084a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 586.088769][ T30] RAX: ffffffffffffffda RBX: 00007faed0064620 RCX: 00007faecf37fe8c [ 586.096944][ T30] RDX: 0000000000000028 RSI: 00007faed0064670 RDI: 0000000000000003 [ 586.113280][ T30] RBP: 0000000000000000 R08: 00007ffd7a6084f4 R09: 000000000000000c [ 586.123862][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 586.136633][ T30] R13: 0000000000000000 R14: 00007faed0064670 R15: 0000000000000000 [ 586.147496][ T30] [ 586.156872][ T30] INFO: task syz-executor:11106 blocked for more than 148 seconds. [ 586.167446][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 586.178942][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.187807][ T30] task:syz-executor state:D stack:24128 pid:11106 tgid:11106 ppid:1 flags:0x00000004 [ 586.206784][ T30] Call Trace: [ 586.210347][ T30] [ 586.213309][ T30] __schedule+0x1895/0x4b30 [ 586.217863][ T30] ? __pfx___schedule+0x10/0x10 [ 586.229866][ T30] ? __pfx_lock_release+0x10/0x10 [ 586.234942][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 586.246341][ T30] ? schedule+0x90/0x320 [ 586.255463][ T30] schedule+0x14b/0x320 [ 586.264299][ T30] schedule_preempt_disabled+0x13/0x30 [ 586.272261][ T30] __mutex_lock+0x6a7/0xd70 [ 586.276801][ T30] ? __mutex_lock+0x52a/0xd70 [ 586.287288][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 586.294963][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 586.306152][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 586.313619][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 586.323433][ T30] ? __lock_acquire+0x1384/0x2050 [ 586.330929][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.336436][ T30] netlink_rcv_skb+0x1e3/0x430 [ 586.346122][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.354030][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 586.365526][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.373190][ T30] netlink_unicast+0x7f6/0x990 [ 586.377996][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 586.388235][ T30] ? __virt_addr_valid+0x183/0x530 [ 586.393385][ T30] ? __check_object_size+0x48e/0x900 [ 586.406821][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 586.411971][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.417293][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 586.428511][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.433841][ T30] __sock_sendmsg+0x221/0x270 [ 586.446514][ T30] __sys_sendto+0x39b/0x4f0 [ 586.452681][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 586.457792][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 586.468559][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 586.474928][ T30] ? exc_page_fault+0x590/0x8c0 [ 586.487544][ T30] __x64_sys_sendto+0xde/0x100 [ 586.493700][ T30] do_syscall_64+0xf3/0x230 [ 586.505341][ T30] ? clear_bhb_loop+0x35/0x90 [ 586.510349][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.516276][ T30] RIP: 0033:0x7f91d4d7fe8c [ 586.527652][ T30] RSP: 002b:00007ffc373cfae0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 586.536898][ T30] RAX: ffffffffffffffda RBX: 00007f91d5a64620 RCX: 00007f91d4d7fe8c [ 586.552967][ T30] RDX: 0000000000000028 RSI: 00007f91d5a64670 RDI: 0000000000000003 [ 586.562510][ T30] RBP: 0000000000000000 R08: 00007ffc373cfb34 R09: 000000000000000c [ 586.576102][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 586.593810][ T30] R13: 0000000000000000 R14: 00007f91d5a64670 R15: 0000000000000000 [ 586.602133][ T30] [ 586.605237][ T30] INFO: task syz-executor:11111 blocked for more than 148 seconds. [ 586.618345][ T30] Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 586.625651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.643324][ T30] task:syz-executor state:D stack:24128 pid:11111 tgid:11111 ppid:1 flags:0x00000004 [ 586.657069][ T30] Call Trace: [ 586.663949][ T30] [ 586.666915][ T30] __schedule+0x1895/0x4b30 [ 586.675226][ T30] ? __pfx___schedule+0x10/0x10 [ 586.683640][ T30] ? __pfx_lock_release+0x10/0x10 [ 586.694989][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 586.704034][ T30] ? schedule+0x90/0x320 [ 586.712094][ T30] schedule+0x14b/0x320 [ 586.716288][ T30] schedule_preempt_disabled+0x13/0x30 [ 586.732250][ T30] __mutex_lock+0x6a7/0xd70 [ 586.736878][ T30] ? __mutex_lock+0x52a/0xd70 [ 586.748964][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 586.754123][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 586.766100][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 586.771368][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 586.776509][ T30] ? __lock_acquire+0x1384/0x2050 [ 586.788175][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.796322][ T30] netlink_rcv_skb+0x1e3/0x430 [ 586.808502][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.814003][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 586.826402][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.833977][ T30] netlink_unicast+0x7f6/0x990 [ 586.845572][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 586.851162][ T30] ? __virt_addr_valid+0x183/0x530 [ 586.856302][ T30] ? __check_object_size+0x48e/0x900 [ 586.868190][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 586.873008][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.889209][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 586.894191][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.907535][ T30] __sock_sendmsg+0x221/0x270 [ 586.912914][ T30] __sys_sendto+0x39b/0x4f0 [ 586.917461][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 586.931466][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 586.937487][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 586.950705][ T30] ? exc_page_fault+0x590/0x8c0 [ 586.955594][ T30] __x64_sys_sendto+0xde/0x100 [ 586.968278][ T30] do_syscall_64+0xf3/0x230 [ 586.972818][ T30] ? clear_bhb_loop+0x35/0x90 [ 586.977518][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.992075][ T30] RIP: 0033:0x7f425717fe8c [ 586.996530][ T30] RSP: 002b:00007ffc82354cf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 587.013041][ T30] RAX: ffffffffffffffda RBX: 00007f4257e64620 RCX: 00007f425717fe8c [ 587.025182][ T30] RDX: 0000000000000028 RSI: 00007f4257e64670 RDI: 0000000000000003 [ 587.038906][ T30] RBP: 0000000000000000 R08: 00007ffc82354d44 R09: 000000000000000c [ 587.046916][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 587.065215][ T30] R13: 0000000000000000 R14: 00007f4257e64670 R15: 0000000000000000 [ 587.074686][ T30] [ 587.077733][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 587.088291][ T30] [ 587.088291][ T30] Showing all locks held in the system: [ 587.096031][ T30] 3 locks held by kworker/u8:1/12: [ 587.108622][ T30] #0: ffff88814bdf9948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 587.127449][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 587.148391][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 587.157957][ T30] 1 lock held by khungtaskd/30: [ 587.170080][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 587.185834][ T30] 4 locks held by kworker/u8:8/3849: [ 587.192562][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 587.208178][ T30] #1: ffffc9000af57d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 587.226471][ T30] #2: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 587.236210][ T30] #3: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 587.252379][ T30] 2 locks held by dhcpcd/4898: [ 587.257171][ T30] #0: ffff88805adf76c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 587.271450][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 587.284989][ T30] 2 locks held by getty/4980: [ 587.292117][ T30] #0: ffff88814d2200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 587.307684][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 587.323054][ T30] 5 locks held by kworker/0:7/7799: [ 587.331714][ T30] 2 locks held by syz.3.1436/10831: [ 587.336933][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 587.348457][ T30] #1: ffffffff8ec1ad88 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 587.367351][ T30] 1 lock held by syz-executor/10986: [ 587.372925][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 587.388848][ T30] 3 locks held by syz-executor/11045: [ 587.394243][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.407379][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 587.422812][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 587.441931][ T30] 2 locks held by syz-executor/11053: [ 587.447330][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.466777][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 587.477542][ T30] 1 lock held by syz-executor/11058: [ 587.488206][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.497668][ T30] 1 lock held by syz-executor/11062: [ 587.511226][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.527277][ T30] 2 locks held by syz-executor/11087: [ 587.534141][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.549110][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 587.565015][ T30] 2 locks held by syz-executor/11092: [ 587.571113][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.588984][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 587.605870][ T30] 1 lock held by syz-executor/11096: [ 587.612576][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.627635][ T30] 1 lock held by syz-executor/11106: [ 587.635275][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.648253][ T30] 1 lock held by syz-executor/11111: [ 587.653560][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.669299][ T30] 1 lock held by syz-executor/11115: [ 587.674609][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.693120][ T30] 1 lock held by syz-executor/11120: [ 587.702028][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.716204][ T30] 1 lock held by syz-executor/11123: [ 587.725065][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.743431][ T30] 1 lock held by syz-executor/11127: [ 587.752300][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.765565][ T30] 1 lock held by syz-executor/11130: [ 587.775793][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.792200][ T30] 1 lock held by syz-executor/11134: [ 587.797507][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.814158][ T30] 1 lock held by syz-executor/11139: [ 587.821987][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.840712][ T30] 1 lock held by syz-executor/11142: [ 587.846107][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.861422][ T30] 1 lock held by syz-executor/11145: [ 587.866731][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.885143][ T30] 1 lock held by syz-executor/11150: [ 587.890828][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.907037][ T30] [ 587.909785][ T30] ============================================= [ 587.909785][ T30] [ 587.927910][ T30] NMI backtrace for cpu 1 [ 587.932268][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 587.942438][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 587.952506][ T30] Call Trace: [ 587.955799][ T30] [ 587.958742][ T30] dump_stack_lvl+0x241/0x360 [ 587.963446][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.968665][ T30] ? __pfx__printk+0x10/0x10 [ 587.973286][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 587.978245][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 587.983724][ T30] ? _printk+0xd5/0x120 [ 587.987917][ T30] ? __pfx__printk+0x10/0x10 [ 587.992528][ T30] ? __wake_up_klogd+0xcc/0x110 [ 587.997399][ T30] ? __pfx__printk+0x10/0x10 [ 588.002018][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 588.007071][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 588.013072][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 588.019080][ T30] watchdog+0xff4/0x1040 [ 588.023351][ T30] ? watchdog+0x1ea/0x1040 [ 588.027794][ T30] ? __pfx_watchdog+0x10/0x10 [ 588.032490][ T30] kthread+0x2f0/0x390 [ 588.036578][ T30] ? __pfx_watchdog+0x10/0x10 [ 588.041270][ T30] ? __pfx_kthread+0x10/0x10 [ 588.045883][ T30] ret_from_fork+0x4b/0x80 [ 588.050327][ T30] ? __pfx_kthread+0x10/0x10 [ 588.054934][ T30] ret_from_fork_asm+0x1a/0x30 [ 588.059736][ T30] [ 588.063669][ T30] Sending NMI from CPU 1 to CPUs 0: [ 588.069284][ C0] NMI backtrace for cpu 0 [ 588.069296][ C0] CPU: 0 UID: 0 PID: 7799 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 588.069316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.069326][ C0] Workqueue: events nsim_dev_trap_report_work [ 588.069346][ C0] RIP: 0010:deref_stack_reg+0x3/0x210 [ 588.069372][ C0] Code: e8 12 1b bd 00 e9 9d fe ff ff e8 68 b8 83 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 fe [ 588.069386][ C0] RSP: 0018:ffffc90000006a58 EFLAGS: 00000287 [ 588.069399][ C0] RAX: fffffffffffffff0 RBX: ffffffff90a39f20 RCX: 0000000000000000 [ 588.069411][ C0] RDX: ffffc90000006b80 RSI: ffffc90000007fe8 RDI: ffffc90000006b40 [ 588.069423][ C0] RBP: dffffc0000000000 R08: ffffc90000006b9f R09: 0000000000000000 [ 588.069435][ C0] R10: ffffc90000006b90 R11: fffff52000000d74 R12: ffffc90000008000 [ 588.069447][ C0] R13: ffffc90000006b40 R14: ffffffff815756db R15: ffffc90000006b90 [ 588.069460][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 588.069474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.069485][ C0] CR2: 0000000020001000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 588.069499][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.069509][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 588.069519][ C0] Call Trace: [ 588.069525][ C0] [ 588.069531][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 588.069550][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 588.069574][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 588.069592][ C0] ? nmi_handle+0x2a/0x5a0 [ 588.069615][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 588.069635][ C0] ? nmi_handle+0x14f/0x5a0 [ 588.069650][ C0] ? nmi_handle+0x2a/0x5a0 [ 588.069665][ C0] ? deref_stack_reg+0x3/0x210 [ 588.069687][ C0] ? default_do_nmi+0x63/0x160 [ 588.069706][ C0] ? exc_nmi+0x123/0x1f0 [ 588.069724][ C0] ? end_repeat_nmi+0xf/0x53 [ 588.069738][ C0] ? do_softirq+0x11b/0x1e0 [ 588.069762][ C0] ? deref_stack_reg+0x3/0x210 [ 588.069785][ C0] ? deref_stack_reg+0x3/0x210 [ 588.069808][ C0] ? deref_stack_reg+0x3/0x210 [ 588.069830][ C0] [ 588.069835][ C0] [ 588.069841][ C0] unwind_next_frame+0x1799/0x22d0 [ 588.069868][ C0] ? handle_softirqs+0x2c5/0x980 [ 588.069890][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.069908][ C0] arch_stack_walk+0x11c/0x150 [ 588.069932][ C0] ? do_softirq+0x11b/0x1e0 [ 588.069954][ C0] stack_trace_save+0x118/0x1d0 [ 588.069970][ C0] ? stack_trace_save+0x118/0x1d0 [ 588.069987][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 588.070006][ C0] ? __asan_memset+0x23/0x50 [ 588.070028][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 588.070054][ C0] kasan_save_track+0x3f/0x80 [ 588.070068][ C0] ? kasan_save_track+0x3f/0x80 [ 588.070081][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 588.070096][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 588.070116][ C0] ? __alloc_skb+0x1c3/0x440 [ 588.070138][ C0] ? synproxy_send_client_synack+0x1ba/0xf30 [ 588.070159][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 588.070181][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 588.070201][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 588.070222][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 588.070243][ C0] ? nf_hook_slow+0xc3/0x220 [ 588.070261][ C0] ? NF_HOOK+0x29e/0x450 [ 588.070277][ C0] ? NF_HOOK+0x3a4/0x450 [ 588.070292][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 588.070310][ C0] ? process_backlog+0x662/0x15b0 [ 588.070329][ C0] ? __napi_poll+0xcb/0x490 [ 588.070345][ C0] ? net_rx_action+0x89b/0x1240 [ 588.070363][ C0] ? handle_softirqs+0x2c5/0x980 [ 588.070402][ C0] __kasan_slab_alloc+0x66/0x80 [ 588.070417][ C0] ? __alloc_skb+0x1c3/0x440 [ 588.070439][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 588.070462][ C0] __alloc_skb+0x1c3/0x440 [ 588.070486][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 588.070513][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 588.070537][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 588.070559][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 588.070582][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 588.070605][ C0] ? synproxy_pernet+0x45/0x270 [ 588.070628][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 588.070653][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 588.070676][ C0] ? nf_ip_checksum+0x13a/0x500 [ 588.070700][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 588.070724][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 588.070748][ C0] ? __pfx_validate_chain+0x10/0x10 [ 588.070770][ C0] nft_do_chain+0x4ad/0x1da0 [ 588.070799][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 588.070820][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 588.070853][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 588.070879][ C0] nft_do_chain_inet+0x418/0x6b0 [ 588.070902][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 588.070927][ C0] ? ipt_do_table+0x312/0x1860 [ 588.070957][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 588.070977][ C0] nf_hook_slow+0xc3/0x220 [ 588.070997][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 588.071014][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 588.071031][ C0] NF_HOOK+0x29e/0x450 [ 588.071049][ C0] ? NF_HOOK+0x9a/0x450 [ 588.071065][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 588.071082][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 588.071103][ C0] ? ip_rcv_finish+0x406/0x560 [ 588.071121][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 588.071137][ C0] NF_HOOK+0x3a4/0x450 [ 588.071152][ C0] ? __lock_acquire+0x1384/0x2050 [ 588.071175][ C0] ? NF_HOOK+0x9a/0x450 [ 588.071190][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 588.071206][ C0] ? ip_rcv_core+0x801/0xd10 [ 588.071223][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 588.071243][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 588.071260][ C0] __netif_receive_skb+0x2bf/0x650 [ 588.071280][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 588.071302][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 588.071320][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.071342][ C0] ? __pfx_lock_release+0x10/0x10 [ 588.071365][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 588.071392][ C0] process_backlog+0x662/0x15b0 [ 588.071414][ C0] ? process_backlog+0x33b/0x15b0 [ 588.071437][ C0] ? __pfx_process_backlog+0x10/0x10 [ 588.071456][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.071480][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.071504][ C0] __napi_poll+0xcb/0x490 [ 588.071524][ C0] net_rx_action+0x89b/0x1240 [ 588.071553][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 588.071575][ C0] ? sched_clock+0x4a/0x70 [ 588.071601][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.071628][ C0] handle_softirqs+0x2c5/0x980 [ 588.071651][ C0] ? do_softirq+0x11b/0x1e0 [ 588.071672][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 588.071696][ C0] do_softirq+0x11b/0x1e0 [ 588.071715][ C0] [ 588.071720][ C0] [ 588.071726][ C0] ? __pfx_do_softirq+0x10/0x10 [ 588.071745][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 588.071769][ C0] ? rcu_is_watching+0x15/0xb0 [ 588.071787][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 588.071807][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 588.071824][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 588.071844][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 588.071864][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 588.071883][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 588.071907][ C0] ? process_scheduled_works+0x976/0x1850 [ 588.071932][ C0] process_scheduled_works+0xa63/0x1850 [ 588.071966][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 588.071991][ C0] ? assign_work+0x364/0x3d0 [ 588.072013][ C0] worker_thread+0x870/0xd30 [ 588.072038][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 588.072061][ C0] ? __kthread_parkme+0x169/0x1d0 [ 588.072084][ C0] ? __pfx_worker_thread+0x10/0x10 [ 588.072105][ C0] kthread+0x2f0/0x390 [ 588.072118][ C0] ? __pfx_worker_thread+0x10/0x10 [ 588.072138][ C0] ? __pfx_kthread+0x10/0x10 [ 588.072153][ C0] ret_from_fork+0x4b/0x80 [ 588.072173][ C0] ? __pfx_kthread+0x10/0x10 [ 588.072187][ C0] ret_from_fork_asm+0x1a/0x30 [ 588.072217][ C0] [ 588.920990][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 588.927894][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 588.938067][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.948136][ T30] Call Trace: [ 588.951427][ T30] [ 588.954365][ T30] dump_stack_lvl+0x241/0x360 [ 588.959066][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.964285][ T30] ? __pfx__printk+0x10/0x10 [ 588.968905][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.974911][ T30] ? vscnprintf+0x5d/0x90 [ 588.979258][ T30] panic+0x349/0x880 [ 588.983173][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 588.989344][ T30] ? __pfx_panic+0x10/0x10 [ 588.993777][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 588.999164][ T30] ? __irq_work_queue_local+0x137/0x410 [ 589.004730][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 589.010124][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 589.016301][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 589.022476][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 589.028654][ T30] watchdog+0x1033/0x1040 [ 589.033006][ T30] ? watchdog+0x1ea/0x1040 [ 589.037451][ T30] ? __pfx_watchdog+0x10/0x10 [ 589.042149][ T30] kthread+0x2f0/0x390 [ 589.046230][ T30] ? __pfx_watchdog+0x10/0x10 [ 589.050925][ T30] ? __pfx_kthread+0x10/0x10 [ 589.055538][ T30] ret_from_fork+0x4b/0x80 [ 589.060026][ T30] ? __pfx_kthread+0x10/0x10 [ 589.064722][ T30] ret_from_fork_asm+0x1a/0x30 [ 589.069522][ T30] [ 589.072784][ T30] Kernel Offset: disabled [ 589.077107][ T30] Rebooting in 86400 seconds..