last executing test programs: 41.291650559s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 41.048013104s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x4) 39.708181036s ago: executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)="b5", 0x1}], 0x1}, 0x0) 39.458260393s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 34.35375172s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611088000000000063012300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 34.201072254s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) 33.936396266s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0xfffffffc}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x73, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 33.819487494s ago: executing program 4: setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000001000)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x8, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}, {"c4f6ad54bd485a"}}}}}, 0x4d) 33.410793129s ago: executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 33.406624713s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000002d00)) 33.202238436s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000040)) 33.185805393s ago: executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0xfffffffc}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000480)={0x0, 'vxcan1\x00'}) 32.997312527s ago: executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)="b5", 0x1}], 0x1}, 0x0) 32.966678028s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 32.915885665s ago: executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x88f5}}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'wg2\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xffffffffffffff4f, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001500020c2dbd7000fbdbdf2502000400", @ANYRES32=0x0, @ANYBLOB="000008000400002f7464e0006272696467655f7374c9005a6c005f319c8948145a35f2b5000068ffe1bab226e777c0308f8d9da9ed9b3655e29c5cac092021f580d269b65f599f0ef1c9a1044975a20abb9e157e98ab0c84d36493339c8d3c859f3ad52bdd8fed65fae123736cd61d29a1bc7341dec9bcc9ea30d49d227ef76ab19d2cb6e602f5abb7"], 0x2c}, 0x1, 0x0, 0x0, 0x240000d0}, 0x20000081) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64410101}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)='s', 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000100)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_ZONE={0x6}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x70b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x43}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}, @CTA_ID={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x480}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}]}, 0xc8}}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x401) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}]}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 32.791948796s ago: executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 32.713232903s ago: executing program 4: setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000001000)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x8, 0x0, 0x0, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}, {"c4f6ad54bd485a"}}}}}, 0x4d) 32.589589157s ago: executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=0x1, r7, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, r7, 0x2f, 0x0, 0xffffffffffffffff, @prog_fd=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x80, 0x6, 0xffff, {{0x23, 0x4, 0x1, 0x6, 0x8c, 0x64, 0x0, 0x2d, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@cipso={0x86, 0x49, 0x1, [{0x1, 0x9, "c087a17e47f319"}, {0x1, 0x10, "60b84f7a0bcccf64a7b18fb7053e"}, {0x7, 0xb, "bd70d36e98629b2763"}, {0x7, 0x7, "8e16f30401"}, {0x1, 0xd, "fc28ec18513e56d4aa00ed"}, {0x2, 0xb, "188240124bb90259f5"}]}, @rr={0x7, 0x17, 0x2c, [@multicast1, @private=0xa010101, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x43}]}, @end, @rr={0x7, 0x17, 0x6e, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @multicast2]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca}, [@RTA_IIF={0x8, 0x3, r9}, @RTA_GATEWAY={0x14, 0x5, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448c9, 0x0) 32.562053232s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000021c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002080)=""/167, 0xa7, 0x0, 0x0}, &(0x7f0000002240)=0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x80fe, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaa50ab7bb127f1adbb0180c200050086dd6028010000a55d00fc00000000000000000000000000b500ff02000000000000000000000000000124208100000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000319560ce7ed773450008"], 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1f, [0x3, 0x80000000, 0x7, 0x7fffffffffffffff, 0x7fff, 0x5]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_int(r4, 0x29, 0x34, &(0x7f0000000080)=0x3, 0x4) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0xc0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a00)="f5", 0x1}], 0x1}}], 0x1, 0x4001) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000001a40)=""/4096, &(0x7f0000000300)=0x1000) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe80000000610320489e15c4150000bbff020000000000018900907800000000ff010000000000000000000000000001fc0100"/94], 0x0) recvfrom(r7, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002123, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r5, 0xd993000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000600)='ext4_es_lookup_extent_exit\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 31.357129184s ago: executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000540)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000580)="05", 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) 31.225048101s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0xfffffffc}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x73, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 30.890364459s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 30.290741448s ago: executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)="b5", 0x1}], 0x1}, 0x0) 30.151294616s ago: executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 30.024312935s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) 2.687739291s ago: executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="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", 0x581, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) 2.568126878s ago: executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 2.533617774s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000840)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2000000000000000840000000200000000000c"], 0x20}], 0x1, 0x0) 865.617441ms ago: executing program 3: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) close(r0) 0s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f|\xa2\x87\xbaC?2\x97\x9e\'(\x0f\xaf\xf1\"\xc4.\xe0\x01\xef,\f\xc1\xf7\t\xab\xb84\xd3\xfae<\xb7\xb0\x043\xd1\x9an\xe91fR(\x8b\xf7?Aev\xec-8\xf5\rwPV\xc1Cd\x90\xf0]J\x8c\bh\xadDO\xaf#\x99\xd1\xc0cn\r\xd8\xf8\xf4\x92\xc5#m\x11\xe3\x94J\x9a\xe1\xa7\xc8\v\x12\x97\xd1\x8f\xaakZ\xce\x9c\xbe\x9d\xf5\x9f\xaf\xc1\xab\xbf\x8dl*\x16\xca\x82K\xefN\xd9\t\x02\xc5\xf1Y8\xd4\xd9\xe6[{sa\xda\xa0\xf6\xa6m8\xc7\x8eg\x7f\xd8r\xce\x0fP?\xdc\x03\xcex\x0e\xee\x9b\xb0\xe1\xbd\x82t\xbd}\xb3\x16\x12\xe0P\xa6{\x8bj\xc9\xc8\v\xf46\xb3CX\xf0\xda\xa0KT\xac\xac\xb1\xd2wg\a\xc3}\xed\xa3\x8a\xb5\xf6T\x9a\n\f>A\xd8\xaf\xa6\xcb e'}, {0x20, 'pids.current\x00'}, {0x20, ':a'}, {}, {0x20, '\a\xa4\xb0\xd5\xf70\x00'}, {0x20, 'lo\x00'}, {0x20, '$\xc4'}]}, 0x10a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0], 0x20}}, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000706ff010000000000000000000000000500010006409e0ec907002e000000fae1e0b81b4cf6839f02ad2c9d597f8f70547eecd0532b52e09a1df8a86892b694b451d653c2231c1ff5f2724800b76e636038821ec7d2b7a9db14eb0160bc8d5e6b2d60f4e0b16bd4ab4136f2ba5b0e2e2517f6d26a26de3c6b"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. 2024/06/14 08:56:18 fuzzer started 2024/06/14 08:56:19 dialing manager at 10.128.0.169:30018 [ 68.255199][ T5089] cgroup: Unknown subsys name 'net' [ 68.413805][ T5089] cgroup: Unknown subsys name 'rlimit' 2024/06/14 08:56:20 starting 5 executor processes [ 69.814037][ T5090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.995203][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.003784][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.024249][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.031654][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.040886][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.062255][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.069531][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.071659][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.077182][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.084909][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.092468][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.099398][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.112211][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.118980][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.120333][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.127324][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.133827][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.148679][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.150629][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.156726][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.164216][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.172426][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.178635][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.184313][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.192163][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.205107][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.212547][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.220010][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.228845][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.248889][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.647263][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.654359][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.788868][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 71.963119][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 72.002927][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 72.035755][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 72.063096][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 72.093453][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.100669][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.108136][ T5110] bridge_slave_0: entered allmulticast mode [ 72.115435][ T5110] bridge_slave_0: entered promiscuous mode [ 72.130960][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.138379][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.145642][ T5110] bridge_slave_1: entered allmulticast mode [ 72.152867][ T5110] bridge_slave_1: entered promiscuous mode [ 72.279057][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.339339][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.366345][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.373809][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.380956][ T5114] bridge_slave_0: entered allmulticast mode [ 72.388481][ T5114] bridge_slave_0: entered promiscuous mode [ 72.432174][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.439385][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.451379][ T5114] bridge_slave_1: entered allmulticast mode [ 72.458401][ T5114] bridge_slave_1: entered promiscuous mode [ 72.518080][ T5110] team0: Port device team_slave_0 added [ 72.525059][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.532577][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.539723][ T5123] bridge_slave_0: entered allmulticast mode [ 72.546935][ T5123] bridge_slave_0: entered promiscuous mode [ 72.593191][ T5110] team0: Port device team_slave_1 added [ 72.613998][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.621136][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.628874][ T5123] bridge_slave_1: entered allmulticast mode [ 72.636076][ T5123] bridge_slave_1: entered promiscuous mode [ 72.657675][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.671594][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.680948][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.688261][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.696077][ T5112] bridge_slave_0: entered allmulticast mode [ 72.703711][ T5112] bridge_slave_0: entered promiscuous mode [ 72.712333][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.719568][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.726809][ T5112] bridge_slave_1: entered allmulticast mode [ 72.734176][ T5112] bridge_slave_1: entered promiscuous mode [ 72.741570][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.748867][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.756191][ T5117] bridge_slave_0: entered allmulticast mode [ 72.763377][ T5117] bridge_slave_0: entered promiscuous mode [ 72.826732][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.834169][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.842450][ T5117] bridge_slave_1: entered allmulticast mode [ 72.849456][ T5117] bridge_slave_1: entered promiscuous mode [ 72.857118][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.864363][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.890879][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.905414][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.918480][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.965321][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.972611][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.998806][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.029131][ T5114] team0: Port device team_slave_0 added [ 73.038154][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.052283][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.096228][ T5114] team0: Port device team_slave_1 added [ 73.105358][ T5123] team0: Port device team_slave_0 added [ 73.126793][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.139550][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.177190][ T5123] team0: Port device team_slave_1 added [ 73.221887][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.228878][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.242134][ T5116] Bluetooth: hci0: command tx timeout [ 73.260843][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.276713][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.283730][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.309700][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.321468][ T5116] Bluetooth: hci4: command tx timeout [ 73.327401][ T4490] Bluetooth: hci3: command tx timeout [ 73.331291][ T5128] Bluetooth: hci1: command tx timeout [ 73.333417][ T5116] Bluetooth: hci2: command tx timeout [ 73.350763][ T5112] team0: Port device team_slave_0 added [ 73.361066][ T5112] team0: Port device team_slave_1 added [ 73.428105][ T5110] hsr_slave_0: entered promiscuous mode [ 73.435210][ T5110] hsr_slave_1: entered promiscuous mode [ 73.458041][ T5117] team0: Port device team_slave_0 added [ 73.466896][ T5117] team0: Port device team_slave_1 added [ 73.488191][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.495183][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.521456][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.534050][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.541013][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.567614][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.639360][ T5114] hsr_slave_0: entered promiscuous mode [ 73.646403][ T5114] hsr_slave_1: entered promiscuous mode [ 73.653087][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.661084][ T5114] Cannot create hsr debugfs directory [ 73.687982][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.698892][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.725336][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.737746][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.744849][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.770933][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.794275][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.801402][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.827922][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.841858][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.848825][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.874875][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.954790][ T5123] hsr_slave_0: entered promiscuous mode [ 73.961568][ T5123] hsr_slave_1: entered promiscuous mode [ 73.968185][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.975974][ T5123] Cannot create hsr debugfs directory [ 74.139052][ T5117] hsr_slave_0: entered promiscuous mode [ 74.146152][ T5117] hsr_slave_1: entered promiscuous mode [ 74.153127][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.160694][ T5117] Cannot create hsr debugfs directory [ 74.173013][ T5112] hsr_slave_0: entered promiscuous mode [ 74.179447][ T5112] hsr_slave_1: entered promiscuous mode [ 74.186483][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.194143][ T5112] Cannot create hsr debugfs directory [ 74.497022][ T5110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.531965][ T5110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.569666][ T5110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.620479][ T5110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.685904][ T5114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.717499][ T5114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.732364][ T5114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.746284][ T5114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.820327][ T5123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.848256][ T5123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.864038][ T5123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.905314][ T5123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.978014][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.996283][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.029413][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.039868][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.096605][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.175268][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.190500][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.203499][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.226291][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.255649][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.283259][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.290556][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.308412][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.325972][ T5116] Bluetooth: hci0: command tx timeout [ 75.367894][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.375069][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.401997][ T4490] Bluetooth: hci3: command tx timeout [ 75.402025][ T5128] Bluetooth: hci1: command tx timeout [ 75.407503][ T4490] Bluetooth: hci4: command tx timeout [ 75.418892][ T5116] Bluetooth: hci2: command tx timeout [ 75.442602][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.467519][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.474789][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.513334][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.553030][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.560170][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.655854][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.686335][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.698337][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.705538][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.742021][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.749628][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.778260][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.920325][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.956735][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.991099][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.022918][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.030170][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.103202][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.110406][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.137067][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.144299][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.188002][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.233875][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.241049][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.430787][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.625492][ T5114] veth0_vlan: entered promiscuous mode [ 76.684845][ T5114] veth1_vlan: entered promiscuous mode [ 76.716974][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.817080][ T5110] veth0_vlan: entered promiscuous mode [ 76.870479][ T5114] veth0_macvtap: entered promiscuous mode [ 76.889328][ T5110] veth1_vlan: entered promiscuous mode [ 76.937777][ T5114] veth1_macvtap: entered promiscuous mode [ 76.979213][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.999983][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.019623][ T5110] veth0_macvtap: entered promiscuous mode [ 77.028691][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.039276][ T5123] veth0_vlan: entered promiscuous mode [ 77.059555][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.070152][ T5110] veth1_macvtap: entered promiscuous mode [ 77.080149][ T5114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.089616][ T5114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.098705][ T5114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.108346][ T5114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.210147][ T5123] veth1_vlan: entered promiscuous mode [ 77.238009][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.249697][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.262557][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.302088][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.312957][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.326068][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.350414][ T5117] veth0_vlan: entered promiscuous mode [ 77.373621][ T5110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.382874][ T5110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.392430][ T5110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.401198][ T5110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402226][ T5116] Bluetooth: hci0: command tx timeout [ 77.439224][ T5117] veth1_vlan: entered promiscuous mode [ 77.455673][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.466138][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.481927][ T5116] Bluetooth: hci2: command tx timeout [ 77.487368][ T5116] Bluetooth: hci4: command tx timeout [ 77.493502][ T4490] Bluetooth: hci1: command tx timeout [ 77.493595][ T5128] Bluetooth: hci3: command tx timeout [ 77.537342][ T5117] veth0_macvtap: entered promiscuous mode [ 77.549321][ T5123] veth0_macvtap: entered promiscuous mode [ 77.585983][ T5112] veth0_vlan: entered promiscuous mode [ 77.610323][ T5123] veth1_macvtap: entered promiscuous mode [ 77.629357][ T5117] veth1_macvtap: entered promiscuous mode [ 77.635706][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.652534][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.699353][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.712845][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.725422][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.735916][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.750306][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.787126][ T1260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.813038][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.823039][ T1260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.827663][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.843663][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.855038][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.866379][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.879105][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.892002][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.902575][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.913677][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.923634][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.935784][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.948179][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.013925][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.035840][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.047675][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.058188][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072542][ T5112] veth1_vlan: entered promiscuous mode [ 78.087261][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.095830][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.117237][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.138906][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.156375][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.178741][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.189003][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.199644][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.219145][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.232928][ T5123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.248653][ T5123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.268566][ T5123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.286698][ T5123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.400678][ T5112] veth0_macvtap: entered promiscuous mode [ 78.440349][ T5112] veth1_macvtap: entered promiscuous mode [ 78.569835][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.597440][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.609103][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.619871][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.630162][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.652013][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.683253][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.694903][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.707074][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.755793][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.789663][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.805483][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.816739][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.827554][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.838607][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.850044][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.860823][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.874188][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.895187][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.906977][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.916639][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.927677][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960287][ T1260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.987191][ T1260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.072639][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.103761][ T5206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.112799][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.145241][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.187209][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.288814][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.317054][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.335389][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.374494][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.482598][ T5128] Bluetooth: hci0: command tx timeout [ 79.517720][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.562547][ T5128] Bluetooth: hci3: command tx timeout [ 79.568075][ T5116] Bluetooth: hci4: command tx timeout [ 79.574136][ T4490] Bluetooth: hci1: command tx timeout [ 79.578791][ T5119] Bluetooth: hci2: command tx timeout [ 79.579650][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.848092][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.890640][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.931547][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.132462][ T5219] syzkaller0: entered promiscuous mode [ 80.149915][ T5219] syzkaller0: entered allmulticast mode [ 82.419643][ T5281] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.466299][ T5282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.207943][ T5306] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 83.778993][ T5326] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.456704][ T5290] syz-executor.3: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 85.496275][ T5290] CPU: 0 PID: 5290 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 85.506745][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.516878][ T5290] Call Trace: [ 85.520166][ T5290] [ 85.523102][ T5290] dump_stack_lvl+0x241/0x360 [ 85.527817][ T5290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.533026][ T5290] ? __pfx__printk+0x10/0x10 [ 85.537638][ T5290] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 85.544071][ T5290] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 85.550591][ T5290] warn_alloc+0x278/0x410 [ 85.554946][ T5290] ? __pfx_warn_alloc+0x10/0x10 [ 85.559819][ T5290] ? hash_netiface_create+0x356/0x1040 [ 85.565297][ T5290] ? __get_vm_area_node+0x23d/0x270 [ 85.570508][ T5290] __vmalloc_node_range_noprof+0x69f/0x1460 [ 85.576451][ T5290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.582797][ T5290] ? hash_netiface_create+0x356/0x1040 [ 85.588269][ T5290] ? __get_vm_area_node+0x23d/0x270 [ 85.593480][ T5290] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 85.599381][ T5290] ? hash_netiface_create+0x356/0x1040 [ 85.604873][ T5290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.611218][ T5290] ? rcu_is_watching+0x15/0xb0 [ 85.616252][ T5290] ? trace_kmalloc+0x1f/0xd0 [ 85.620931][ T5290] ? __kmalloc_node_noprof+0x247/0x440 [ 85.626394][ T5290] ? kvmalloc_node_noprof+0x72/0x190 [ 85.631692][ T5290] kvmalloc_node_noprof+0x142/0x190 [ 85.636899][ T5290] ? hash_netiface_create+0x356/0x1040 [ 85.642370][ T5290] hash_netiface_create+0x356/0x1040 [ 85.647674][ T5290] ? __pfx_hash_netiface_create+0x10/0x10 [ 85.653413][ T5290] ip_set_create+0xa5c/0x17d0 [ 85.658106][ T5290] ? ip_set_create+0x45e/0x17d0 [ 85.662980][ T5290] ? __pfx_ip_set_create+0x10/0x10 [ 85.668185][ T5290] ? trace_contention_end+0x3c/0x120 [ 85.673614][ T5290] ? nfnetlink_rcv_msg+0x225/0x1180 [ 85.678858][ T5290] nfnetlink_rcv_msg+0xbec/0x1180 [ 85.683982][ T5290] ? nfnetlink_rcv_msg+0x225/0x1180 [ 85.689304][ T5290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.694799][ T5290] ? kasan_save_track+0x51/0x80 [ 85.699654][ T5290] ? kasan_save_track+0x3f/0x80 [ 85.704514][ T5290] ? kasan_save_free_info+0x40/0x50 [ 85.709721][ T5290] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 85.714926][ T5290] ? __netlink_deliver_tap+0x54d/0x7c0 [ 85.720414][ T5290] ? netlink_deliver_tap+0x19d/0x1b0 [ 85.725720][ T5290] ? netlink_unicast+0x7b8/0x980 [ 85.730928][ T5290] ? netlink_sendmsg+0x8db/0xcb0 [ 85.735880][ T5290] ? ____sys_sendmsg+0x525/0x7d0 [ 85.740834][ T5290] netlink_rcv_skb+0x1e3/0x430 [ 85.745814][ T5290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.751295][ T5290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.756618][ T5290] ? apparmor_capable+0x138/0x1b0 [ 85.761670][ T5290] ? bpf_lsm_capable+0x9/0x10 [ 85.766357][ T5290] ? security_capable+0x90/0xb0 [ 85.771226][ T5290] nfnetlink_rcv+0x297/0x2a80 [ 85.775916][ T5290] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.782255][ T5290] ? __local_bh_enable_ip+0x168/0x200 [ 85.787654][ T5290] ? lockdep_hardirqs_on+0x99/0x150 [ 85.792873][ T5290] ? __local_bh_enable_ip+0x168/0x200 [ 85.798252][ T5290] ? dev_hard_start_xmit+0x773/0x7e0 [ 85.803544][ T5290] ? __dev_queue_xmit+0x2d2/0x3d30 [ 85.808683][ T5290] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 85.814426][ T5290] ? __dev_queue_xmit+0x2d2/0x3d30 [ 85.819555][ T5290] ? __dev_queue_xmit+0x16c9/0x3d30 [ 85.824771][ T5290] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 85.829920][ T5290] ? __dev_queue_xmit+0x2d2/0x3d30 [ 85.835057][ T5290] ? ref_tracker_free+0x643/0x7e0 [ 85.840098][ T5290] ? __asan_memcpy+0x40/0x70 [ 85.844702][ T5290] ? __pfx_ref_tracker_free+0x10/0x10 [ 85.850100][ T5290] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.855311][ T5290] ? skb_clone+0x240/0x390 [ 85.859741][ T5290] ? __pfx_lock_release+0x10/0x10 [ 85.864778][ T5290] ? __netlink_deliver_tap+0x77e/0x7c0 [ 85.870262][ T5290] ? netlink_deliver_tap+0x2e/0x1b0 [ 85.875564][ T5290] netlink_unicast+0x7ea/0x980 [ 85.880352][ T5290] ? __pfx_netlink_unicast+0x10/0x10 [ 85.885658][ T5290] ? __virt_addr_valid+0x183/0x520 [ 85.890785][ T5290] ? __check_object_size+0x49c/0x900 [ 85.896078][ T5290] ? bpf_lsm_netlink_send+0x9/0x10 [ 85.901219][ T5290] netlink_sendmsg+0x8db/0xcb0 [ 85.906024][ T5290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.911327][ T5290] ? __import_iovec+0x536/0x820 [ 85.916193][ T5290] ? aa_sock_msg_perm+0x91/0x160 [ 85.921143][ T5290] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 85.926446][ T5290] ? security_socket_sendmsg+0x87/0xb0 [ 85.931923][ T5290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.937222][ T5290] __sock_sendmsg+0x221/0x270 [ 85.941920][ T5290] ____sys_sendmsg+0x525/0x7d0 [ 85.946704][ T5290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.952025][ T5290] __sys_sendmsg+0x2b0/0x3a0 [ 85.956627][ T5290] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.961787][ T5290] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.968121][ T5290] ? do_syscall_64+0x100/0x230 [ 85.972893][ T5290] ? do_syscall_64+0xb6/0x230 [ 85.977577][ T5290] do_syscall_64+0xf3/0x230 [ 85.982084][ T5290] ? clear_bhb_loop+0x35/0x90 [ 85.986769][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.992682][ T5290] RIP: 0033:0x7f168fc7cea9 [ 85.997107][ T5290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.016728][ T5290] RSP: 002b:00007f16909ec0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.025171][ T5290] RAX: ffffffffffffffda RBX: 00007f168fdb3f80 RCX: 00007f168fc7cea9 [ 86.033162][ T5290] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 86.041146][ T5290] RBP: 00007f168fcebff4 R08: 0000000000000000 R09: 0000000000000000 [ 86.049131][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.057116][ T5290] R13: 000000000000000b R14: 00007f168fdb3f80 R15: 00007ffd8aa11de8 [ 86.065111][ T5290] [ 86.140093][ T5290] Mem-Info: [ 86.144845][ T5290] active_anon:17339 inactive_anon:0 isolated_anon:0 [ 86.144845][ T5290] active_file:0 inactive_file:46388 isolated_file:0 [ 86.144845][ T5290] unevictable:768 dirty:9084 writeback:0 [ 86.144845][ T5290] slab_reclaimable:9236 slab_unreclaimable:94549 [ 86.144845][ T5290] mapped:18415 shmem:1357 pagetables:714 [ 86.144845][ T5290] sec_pagetables:0 bounce:0 [ 86.144845][ T5290] kernel_misc_reclaimable:0 [ 86.144845][ T5290] free:1356008 free_pcp:1406 free_cma:0 [ 86.320020][ T5290] Node 0 active_anon:69172kB inactive_anon:0kB active_file:0kB inactive_file:185496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73660kB dirty:34052kB writeback:2300kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10348kB pagetables:2876kB sec_pagetables:0kB all_unreclaimable? no [ 86.370035][ T5290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 86.411538][ T5290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.439297][ T5290] lowmem_reserve[]: 0 2571 2571 0 0 [ 86.510345][ T5290] Node 0 DMA32 free:1467084kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:69432kB inactive_anon:0kB active_file:0kB inactive_file:185176kB unevictable:1536kB writepending:32452kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1560kB local_pcp:368kB free_cma:0kB [ 86.608700][ T5290] lowmem_reserve[]: 0 0 0 0 0 [ 86.671295][ T5290] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.771255][ T5290] lowmem_reserve[]: 0 0 0 0 0 [ 86.787346][ T5290] Node 1 Normal free:3941464kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4136kB local_pcp:4136kB free_cma:0kB [ 86.875819][ T5290] lowmem_reserve[]: 0 0 0 0 0 [ 86.880634][ T5290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.945534][ T5290] Node 0 DMA32: 134*4kB (UME) 95*8kB (UME) 103*16kB (UME) 49*32kB (UME) 25*64kB (UME) 13*128kB (UME) 8*256kB (ME) 6*512kB (UM) 4*1024kB (UM) 4*2048kB (UME) 352*4096kB (M) = 1466976kB [ 87.037175][ T5290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 87.058831][ T785] cfg80211: failed to load regulatory.db [ 87.071559][ T5290] Node 1 Normal: 2*4kB (U) 4*8kB (U) 5*16kB (U) 9*32kB (U) 6*64kB (UM) 3*128kB (U) 4*256kB (UM) 2*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 960*4096kB (M) = 3941528kB [ 87.091475][ T5290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.110474][ T5290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.162027][ T5290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.211330][ T5290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.236049][ T5290] 47758 total pagecache pages [ 87.244076][ T5404] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 87.256526][ T5290] 0 pages in swap cache [ 87.262147][ T5290] Free swap = 124996kB [ 87.275331][ T5290] Total swap = 124996kB [ 87.284185][ T5290] 2097051 pages RAM [ 87.292796][ T5290] 0 pages HighMem/MovableOnly [ 87.303134][ T5290] 400873 pages reserved [ 87.314510][ T5290] 0 pages cma reserved [ 88.491045][ T5444] veth0_vlan: entered allmulticast mode [ 89.372179][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.858454][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.877110][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.884880][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.892258][ T4490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.904973][ T4490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.912130][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.921524][ T4490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.928912][ T4490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.942961][ T4490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.950690][ T4490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.969621][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 119.978225][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.027430][ T5129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.047274][ T5129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.057253][ T5129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.070378][ T5129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.087512][ T5129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 120.095071][ T5129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.330858][ T4490] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 121.342264][ T4490] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 121.351736][ T4490] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 121.360471][ T4490] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 121.377001][ T4490] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 121.387490][ T4490] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 122.041346][ T4490] Bluetooth: hci6: command tx timeout [ 122.047285][ T4490] Bluetooth: hci5: command tx timeout [ 122.121321][ T4490] Bluetooth: hci7: command tx timeout [ 122.220847][ T5129] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 122.229688][ T5129] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 122.243037][ T5129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 122.257379][ T5129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 122.265561][ T5129] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 122.273102][ T5129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 123.401973][ T4490] Bluetooth: hci8: command tx timeout [ 124.121586][ T4490] Bluetooth: hci5: command tx timeout [ 124.121601][ T5129] Bluetooth: hci6: command tx timeout [ 124.201394][ T5129] Bluetooth: hci7: command tx timeout [ 124.371506][ T5129] Bluetooth: hci9: command tx timeout [ 125.481574][ T5129] Bluetooth: hci8: command tx timeout [ 126.201354][ T5129] Bluetooth: hci6: command tx timeout [ 126.204558][ T4490] Bluetooth: hci5: command tx timeout [ 126.281391][ T4490] Bluetooth: hci7: command tx timeout [ 126.441279][ T4490] Bluetooth: hci9: command tx timeout [ 127.561489][ T4490] Bluetooth: hci8: command tx timeout [ 128.281351][ T4490] Bluetooth: hci5: command tx timeout [ 128.294787][ T4490] Bluetooth: hci6: command tx timeout [ 128.364601][ T4490] Bluetooth: hci7: command tx timeout [ 128.521508][ T4490] Bluetooth: hci9: command tx timeout [ 129.641264][ T4490] Bluetooth: hci8: command tx timeout [ 130.601272][ T4490] Bluetooth: hci9: command tx timeout [ 133.087139][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.002135][ T5129] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 185.011790][ T5129] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 185.012969][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 185.029961][ T5119] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 185.037304][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 185.038023][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 185.045610][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 185.053872][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 185.070395][ T5119] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 185.071231][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 185.077976][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 185.086740][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 185.099466][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 185.121291][ T4490] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 185.132101][ T4490] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 185.155470][ T4490] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 185.163728][ T4490] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 185.181232][ T4490] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 186.337433][ T5129] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 186.346362][ T5129] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 186.355426][ T5129] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 186.365752][ T5129] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 186.378405][ T5129] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 186.390134][ T5129] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 187.162443][ T5129] Bluetooth: hci10: command tx timeout [ 187.168368][ T5129] Bluetooth: hci11: command tx timeout [ 187.177837][ T5129] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 187.187059][ T5129] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 187.200539][ T5129] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 187.208842][ T5129] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 187.220339][ T5129] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 187.228121][ T5129] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 187.241732][ T5129] Bluetooth: hci12: command tx timeout [ 188.443199][ T4490] Bluetooth: hci13: command tx timeout [ 189.241331][ T5129] Bluetooth: hci10: command tx timeout [ 189.241535][ T5119] Bluetooth: hci11: command tx timeout [ 189.248897][ T4490] Bluetooth: hci14: command tx timeout [ 189.331345][ T4490] Bluetooth: hci12: command tx timeout [ 190.521417][ T4490] Bluetooth: hci13: command tx timeout [ 191.329930][ T4490] Bluetooth: hci11: command tx timeout [ 191.335782][ T5119] Bluetooth: hci14: command tx timeout [ 191.341194][ T5129] Bluetooth: hci10: command tx timeout [ 191.407779][ T5129] Bluetooth: hci12: command tx timeout [ 192.601350][ T5129] Bluetooth: hci13: command tx timeout [ 193.401456][ T4490] Bluetooth: hci14: command tx timeout [ 193.407937][ T5129] Bluetooth: hci11: command tx timeout [ 193.413503][ T4490] Bluetooth: hci10: command tx timeout [ 193.481825][ T5129] Bluetooth: hci12: command tx timeout [ 194.529333][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.681380][ T5127] Bluetooth: hci13: command tx timeout [ 195.481345][ T5127] Bluetooth: hci14: command tx timeout [ 196.615222][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 196.621359][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 196.627395][ T5127] Bluetooth: hci1: command 0x0406 tx timeout [ 196.634167][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.634759][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 242.696429][ T4490] Bluetooth: hci7: command 0x0406 tx timeout [ 242.696842][ T5122] Bluetooth: hci6: command 0x0406 tx timeout [ 242.709297][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 247.801237][ T5129] Bluetooth: hci8: command 0x0406 tx timeout [ 247.807447][ T5113] Bluetooth: hci9: command 0x0406 tx timeout [ 250.150165][ T5113] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 250.170703][ T5113] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 250.179102][ T5113] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 250.187525][ T5113] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 250.197135][ T5129] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 250.211815][ T5113] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 250.220134][ T5113] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 250.227694][ T5122] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 250.231456][ T4490] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 250.249375][ T4490] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 250.249801][ T5113] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 250.268950][ T4490] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 250.277286][ T4490] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 250.281669][ T5113] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 250.285211][ T4490] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 250.301719][ T4490] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 250.311373][ T4490] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 250.327852][ T4490] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 251.420660][ T5129] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 251.429453][ T5129] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 251.437953][ T5129] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 251.446530][ T5129] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 251.454907][ T5129] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 251.462839][ T5129] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 252.132355][ T30] INFO: task kworker/u8:6:1260 blocked for more than 143 seconds. [ 252.140805][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 252.161124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.169825][ T30] task:kworker/u8:6 state:D stack:23320 pid:1260 tgid:1260 ppid:2 flags:0x00004000 2024/06/14 08:59:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 252.211408][ T30] Workqueue: netns cleanup_net [ 252.242985][ T30] Call Trace: [ 252.246340][ T30] [ 252.249302][ T30] __schedule+0x17e8/0x4a20 [ 252.281853][ T5129] Bluetooth: hci15: command tx timeout [ 252.288427][ T5129] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 252.296571][ T30] ? __pfx___schedule+0x10/0x10 [ 252.302417][ T5129] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 252.310137][ T5129] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 252.331409][ T30] ? __pfx_lock_release+0x10/0x10 [ 252.336613][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 252.336861][ T5129] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 252.350166][ T30] ? kthread_data+0x52/0xd0 [ 252.361348][ T5129] Bluetooth: hci17: command tx timeout [ 252.367385][ T5129] Bluetooth: hci16: command tx timeout [ 252.373940][ T30] ? schedule+0x90/0x320 [ 252.378228][ T30] ? wq_worker_sleeping+0x66/0x240 [ 252.381039][ T5128] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 252.383413][ T30] ? schedule+0x90/0x320 [ 252.390866][ T5128] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 252.395234][ T30] schedule+0x14b/0x320 [ 252.406643][ T30] schedule_preempt_disabled+0x13/0x30 [ 252.421226][ T30] __mutex_lock+0x6a4/0xd70 [ 252.425829][ T30] ? __mutex_lock+0x527/0xd70 [ 252.441197][ T30] ? gate_exit_net+0x30/0x100 [ 252.445928][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 252.451008][ T30] ? __pfx_call_rcu+0x10/0x10 [ 252.481142][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 252.486309][ T30] gate_exit_net+0x30/0x100 [ 252.490859][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 252.512252][ T30] cleanup_net+0x89d/0xcc0 [ 252.516813][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 252.522003][ T30] ? process_scheduled_works+0x945/0x1830 [ 252.527751][ T30] process_scheduled_works+0xa2c/0x1830 [ 252.533421][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.539427][ T30] ? assign_work+0x364/0x3d0 [ 252.546290][ T30] worker_thread+0x86d/0xd70 [ 252.550935][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 252.556994][ T30] ? __kthread_parkme+0x169/0x1d0 [ 252.565275][ T30] ? __pfx_worker_thread+0x10/0x10 [ 252.570427][ T30] kthread+0x2f0/0x390 [ 252.574613][ T30] ? __pfx_worker_thread+0x10/0x10 [ 252.579746][ T30] ? __pfx_kthread+0x10/0x10 [ 252.585424][ T30] ret_from_fork+0x4b/0x80 [ 252.589877][ T30] ? __pfx_kthread+0x10/0x10 [ 252.596801][ T30] ret_from_fork_asm+0x1a/0x30 [ 252.601800][ T30] [ 252.605216][ T30] INFO: task kworker/0:4:5162 blocked for more than 143 seconds. [ 252.613054][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 252.620797][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.648244][ T30] task:kworker/0:4 state:D stack:23808 pid:5162 tgid:5162 ppid:2 flags:0x00004000 [ 252.672240][ T30] Workqueue: events_power_efficient crda_timeout_work [ 252.679092][ T30] Call Trace: [ 252.704695][ T30] [ 252.707695][ T30] __schedule+0x17e8/0x4a20 [ 252.721227][ T30] ? __pfx___schedule+0x10/0x10 [ 252.726155][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.741189][ T30] ? __pfx_lock_release+0x10/0x10 [ 252.746274][ T30] ? kick_pool+0x1bd/0x620 [ 252.753862][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.759108][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 252.773236][ T30] ? schedule+0x90/0x320 [ 252.777539][ T30] schedule+0x14b/0x320 [ 252.782951][ T30] schedule_preempt_disabled+0x13/0x30 [ 252.788459][ T30] __mutex_lock+0x6a4/0xd70 [ 252.798859][ T30] ? __mutex_lock+0x527/0xd70 [ 252.803907][