last executing test programs: 54.911147434s ago: executing program 3 (id=663): socket(0x28, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @void, {@llc={0x4, {@llc={0xfc, 0x0, "2181", "dd"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/61, 0x4}, 0x20) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0) 46.29378479s ago: executing program 3 (id=663): socket(0x28, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @void, {@llc={0x4, {@llc={0xfc, 0x0, "2181", "dd"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/61, 0x4}, 0x20) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0) 39.507967141s ago: executing program 3 (id=663): socket(0x28, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @void, {@llc={0x4, {@llc={0xfc, 0x0, "2181", "dd"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/61, 0x4}, 0x20) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0) 36.695643617s ago: executing program 4 (id=1849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vxcan1\x00', 0x10) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000180)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff0600000000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x7001, 0x1, 0x0, [0x7b, 0x4, 0x4, 0x8000, 0x0, 0xb], 0x0, 0x0, 0x0}, 0x1e8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x38, &(0x7f00000000c0)=0xfffffffa, 0x4) 36.576064569s ago: executing program 4 (id=1853): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4076, 0xfec}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f0000000140)=""/53, 0x35}], 0x3}}], 0x1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x80}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18, &(0x7f0000000140)={&(0x7f0000000100)="1ce534cafcb9baca73", 0x9}}, 0xc0010) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xbe3) (async) socket$kcm(0x29, 0x5, 0x0) 36.347964498s ago: executing program 4 (id=1861): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1}, 0x20040851) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xffe0, 0x10}}}, 0x24}}, 0x480d0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xdd13, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e21, @remote}}, [0x3, 0x3, 0x6, 0x1800000000, 0x8, 0x6, 0xd, 0xce, 0x971, 0x84, 0xffffffffffffffff, 0x5, 0x1000, 0x6, 0x6]}, &(0x7f0000000100)=0x100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$unix(0x1, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000b40)=0x81, 0x4) sendto$inet6(r10, &(0x7f0000000b80)="fda51450a25677", 0x7, 0x48851, &(0x7f0000000c80)={0xa, 0x4e23, 0x5, @private1, 0x8}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x65}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}}, 0x44050) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x6d}, @jmp={0x5, 0x1, 0xb, 0xa, 0xb, 0x100, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0xa, 0x8, 0xa, 0x1, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x370c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x3, 0x2, 0xa62}, 0x10, 0xd7f8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0xc, 0x5}, {0x1, 0x3, 0xb, 0x8}], 0x10, 0x6, @void, @value}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r12, 0x8008f513, &(0x7f0000000580)) 32.573167513s ago: executing program 3 (id=663): socket(0x28, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @void, {@llc={0x4, {@llc={0xfc, 0x0, "2181", "dd"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/61, 0x4}, 0x20) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0) 31.720339923s ago: executing program 4 (id=1861): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1}, 0x20040851) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xffe0, 0x10}}}, 0x24}}, 0x480d0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xdd13, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e21, @remote}}, [0x3, 0x3, 0x6, 0x1800000000, 0x8, 0x6, 0xd, 0xce, 0x971, 0x84, 0xffffffffffffffff, 0x5, 0x1000, 0x6, 0x6]}, &(0x7f0000000100)=0x100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$unix(0x1, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000b40)=0x81, 0x4) sendto$inet6(r10, &(0x7f0000000b80)="fda51450a25677", 0x7, 0x48851, &(0x7f0000000c80)={0xa, 0x4e23, 0x5, @private1, 0x8}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x65}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}}, 0x44050) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x6d}, @jmp={0x5, 0x1, 0xb, 0xa, 0xb, 0x100, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0xa, 0x8, 0xa, 0x1, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x370c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x3, 0x2, 0xa62}, 0x10, 0xd7f8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0xc, 0x5}, {0x1, 0x3, 0xb, 0x8}], 0x10, 0x6, @void, @value}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r12, 0x8008f513, &(0x7f0000000580)) 25.421997929s ago: executing program 4 (id=1861): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1}, 0x20040851) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xffe0, 0x10}}}, 0x24}}, 0x480d0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xdd13, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e21, @remote}}, [0x3, 0x3, 0x6, 0x1800000000, 0x8, 0x6, 0xd, 0xce, 0x971, 0x84, 0xffffffffffffffff, 0x5, 0x1000, 0x6, 0x6]}, &(0x7f0000000100)=0x100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$unix(0x1, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000b40)=0x81, 0x4) sendto$inet6(r10, &(0x7f0000000b80)="fda51450a25677", 0x7, 0x48851, &(0x7f0000000c80)={0xa, 0x4e23, 0x5, @private1, 0x8}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x65}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}}, 0x44050) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x6d}, @jmp={0x5, 0x1, 0xb, 0xa, 0xb, 0x100, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0xa, 0x8, 0xa, 0x1, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x370c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x3, 0x2, 0xa62}, 0x10, 0xd7f8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0xc, 0x5}, {0x1, 0x3, 0xb, 0x8}], 0x10, 0x6, @void, @value}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r12, 0x8008f513, &(0x7f0000000580)) 25.110062295s ago: executing program 3 (id=663): socket(0x28, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @void, {@llc={0x4, {@llc={0xfc, 0x0, "2181", "dd"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/61, 0x4}, 0x20) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0) 19.014859126s ago: executing program 4 (id=1861): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b3", 0xa3}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1}, 0x20040851) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xffe0, 0x10}}}, 0x24}}, 0x480d0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xdd13, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e21, @remote}}, [0x3, 0x3, 0x6, 0x1800000000, 0x8, 0x6, 0xd, 0xce, 0x971, 0x84, 0xffffffffffffffff, 0x5, 0x1000, 0x6, 0x6]}, &(0x7f0000000100)=0x100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$unix(0x1, 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000b40)=0x81, 0x4) sendto$inet6(r10, &(0x7f0000000b80)="fda51450a25677", 0x7, 0x48851, &(0x7f0000000c80)={0xa, 0x4e23, 0x5, @private1, 0x8}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x65}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}}, 0x44050) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x6d}, @jmp={0x5, 0x1, 0xb, 0xa, 0xb, 0x100, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0xa, 0x8, 0xa, 0x1, 0x10}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x370c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x3, 0x2, 0xa62}, 0x10, 0xd7f8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0xc, 0x5}, {0x1, 0x3, 0xb, 0x8}], 0x10, 0x6, @void, @value}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r12, 0x8008f513, &(0x7f0000000580)) 18.196145417s ago: executing program 1 (id=2140): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000e15172d90200000028000480240001800b000100736f636b65740000140002800800024000000000080001"], 0x7c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001080000000000000000050003000800000008000500", @ANYRES32=r1], 0x50}}, 0x0) 18.170087208s ago: executing program 2 (id=2141): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7f}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) close(r2) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x48}}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x2000}, [@IFLA_GROUP={0x8, 0x1b, 0x7ff}, @IFLA_IFALIASn={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x63, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) recvmmsg(r7, &(0x7f0000000000), 0x0, 0x100, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 18.16020092s ago: executing program 1 (id=2142): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.072128399s ago: executing program 1 (id=2143): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = socket(0x2, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x84, 0x80, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) 18.06632583s ago: executing program 0 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048085) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207b18546de4363587000ffdbdf25"], 0x10}}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x11, 0x484, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x7, 0xf7}}]}, 0x38}}, 0x4) 18.032158173s ago: executing program 0 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) (rerun: 32) 17.973345188s ago: executing program 1 (id=2146): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x100000) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x32}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000140), 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000300)={0x3a, 0x14, 0x0, 0x3, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @loopback, @private1, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0xa8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001900007289a4a4d52e47b1c50c7303e982339e4a840d9842bb46fcd867aba64e18cc7a25f3da6c516fb156e47bf536e26d724f10a43e84b0ec17cb32c0055f4b5163562e75f67b13a604cdb4d124e2f7e2e66d233349bdbf88"], 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r12, 0x2) recvmsg(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) 17.908103014s ago: executing program 2 (id=2147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) close(r3) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe56d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) 17.89962829s ago: executing program 3 (id=663): socket(0x28, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x13, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @void, {@llc={0x4, {@llc={0xfc, 0x0, "2181", "dd"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)=""/61, 0x4}, 0x20) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8}, @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}}, 0x0) 17.868513045s ago: executing program 2 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@local, 0x11}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000100)="473241f412d159ac5544a31a05a0550f420cbf84b3ca1d3acf7250c5d7d7843a3b9c65bb41462f1ea4458e215a25b268c7fbe0e170d7db622971e1df04ade191d57eccc8a701f80494a7673a27ab77996dc08ca37ace993a342671df112cdb5253f3786077c81b1ce5bb59fec8a37c4282756e335bd2e9cefb3d495f99eb8629bf601c7e414dc6faddeeae18c873fae74d658f6a9f2059f88b39b66b172c68bb00b73f88447954d6c1ffafb555487f6412f7af2b") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [""]}, 0x14}}, 0x400c000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, r5, 0x144, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r9, 0x2) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/27, 0x1b}, {&(0x7f0000000740)=""/47, 0x2f}, {&(0x7f0000000780)=""/36, 0x24}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/67, 0x43}], 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2200, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=@deltclass={0x64, 0x29, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0x4}, {0xc, 0x6}, {0xc, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7f}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @tclass_kind_options=@c_cake={0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20048080) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r11, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) connect$tipc(r8, &(0x7f0000000d00)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x3}}, 0x10) read(r9, &(0x7f0000000d40)=""/37, 0x25) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r12, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="63dbeda1ce96"}, @NL80211_ATTR_SSID={0x7, 0x34, @random="e41f1e"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20008011) socketpair(0x11, 0x6, 0x800, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r14, 0x114, 0x8, &(0x7f0000000f40)=0x2, 0x4) ioctl$sock_ax25_SIOCADDRT(r13, 0x890b, &(0x7f0000000f80)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) socket$netlink(0x10, 0x3, 0x0) 16.241004441s ago: executing program 0 (id=2149): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close(r0) 16.240094305s ago: executing program 1 (id=2150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x38, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) r3 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r3, 0x65, 0x8, 0x0, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff00"/15, @ANYRES16=r5, @ANYBLOB="01072cbd7000fedbdf2506000000"], 0x14}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000002780)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001000)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000014c0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=ANY=[@ANYBLOB="8000000010001ffff9d004000000000000000000", @ANYRES32=0x0, @ANYBLOB="2085060044000100580012800b000100697036746e6c0000480002800600100096b700000800070000800040040013001400030000000000000000000000000000000000090008001e000000140002000000000000000000000000000000000108000a00", @ANYRES32], 0x80}}, 0x4040) 16.226321973s ago: executing program 2 (id=2151): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket(0x25, 0xa, 0x0) getsockname$packet(r1, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000000080), 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 16.088208412s ago: executing program 2 (id=2152): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'ip6tnl0\x00', 0x544a}) ioctl(r0, 0x8b27, &(0x7f0000000040)) 16.087409697s ago: executing program 0 (id=2153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000a04ad5a6d7000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) unshare(0xc020400) socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newtfilter={0x32f4, 0x2c, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {0x5, 0x10}, {0x10, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x32b8, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x3290, 0x2, [@m_ctinfo={0x110, 0x19, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x80, 0x20000000, 0x8, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x768}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7f}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf, 0x9, 0x1, 0x8ec, 0xcc13}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x435}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x200}]}, {0x84, 0x6, "7b807f214dd4f3024df7348670ea562901495ad087ef43d493cff5e4106a77aa85a5490c157ec8a1e99c6223fb44a83993ef8f3c712b222a010f0f3014ac7f79746a1093862679e695a01181f125948d8e649356aadbc16d4d531c2a2c68b5ab34fd4b9184499088a7330ef27961101fde331ff136e155aabb4ee6d353d5caa5"}, {0xc, 0x7, {0x0, 0xdc946d6c1bfd707b}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0xd4, 0x16, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4f48, 0x9, 0x2, 0x3, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9c1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x712}]}, {0x6c, 0x6, "e5908307e8771507a5617626326aec772f84bb5b50821e6ec097095e455f541e0384882506f5db81c5c09808d107eb4eb06316554b03668f2a5558ca0ace13f59a244e6646fd193f651cd859df9380188b1fc662a0a4e251dc5a4868f84d2696a50c18d6b9b1c0f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x2158, 0x13, 0x0, 0x0, {{0x7}, {0x1130, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x73, 0x6, {0x5, 'nat\x00', 0xef, 0x2, "b58fa3f0eb13e009d57ce81af5af57d26804e371b7afe5209153e49b0a48a1bc75576170f3d18af4326acb25628aa9d5012f0a6aa12da33c4c279678b782d4feef983b7a3b261ca5bb"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x413}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x102a, 0x6, {0x8001, 'security\x00', 0x2, 0x1, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xe98, 0x12, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3, 0x6, 0x20000000, 0xa155, 0x3fdd}, 0x4, 0x0, [{0x3780786c, 0x9, 0x7ff, 0x2, 0xfffffffe, 0x3}, {0xc, 0xfffffffc, 0x4, 0x7, 0xffffffff, 0x9}]}, [{0x7, 0x81, 0x200, 0xfff, 0x1, 0x7}, {0x14ca, 0x400, 0x4, 0x10000, 0xb3, 0x3}, {0x8, 0x7, 0x7, 0x240000, 0x6e, 0x4a}, {0x0, 0x6, 0x5, 0x80000000, 0x8, 0x6}, {0x8000, 0xd7d, 0x8f48, 0x0, 0x7, 0x401}, {0x1, 0x6, 0x10, 0x9, 0x9, 0x7}, {0xfffffffd, 0x7, 0x0, 0x5, 0x7, 0x7f}, {0xf, 0x40, 0x7, 0x8}, {0x6, 0x0, 0x8, 0x7, 0x7f, 0x100}, {0xa7f, 0x58e, 0xfff, 0x8, 0x4, 0x6}, {0x3, 0xe, 0x54a, 0xb, 0x100, 0xaa}, {0x7, 0x4, 0xb, 0x8001, 0x1, 0x79f0}, {0x7, 0x7, 0xfffff844, 0x5, 0xf8a, 0x36c}, {0x6, 0x2, 0x83c0, 0x6, 0xe1f6, 0x4ff}, {0x9, 0x2, 0x1, 0x1ff, 0x9, 0x2}, {0x100, 0x54b, 0xa, 0xfffffffd, 0xcb217692, 0x47a}, {0x7, 0x0, 0x2b1, 0x5, 0x6, 0x9}, {0x2b5, 0x5, 0x5, 0x4, 0xffffffff, 0xffff}, {0x9, 0x8, 0x0, 0xa34, 0x9, 0x81}, {0x0, 0x2730, 0xfff, 0x40, 0x5, 0x9}, {0x0, 0xffffff80, 0xa3, 0x2, 0x67fc181a, 0x400}, {0x0, 0x1, 0x3, 0x4a, 0x3, 0xd4}, {0xfffffffd, 0x7fffffff, 0x9, 0x8, 0x80}, {0x1e0, 0x2, 0x4, 0x7fffffff, 0x1, 0x4}, {0x13, 0x8, 0x1, 0xe, 0x2, 0x1}, {0x4, 0x9, 0x9, 0x3, 0x7}, {0x30e, 0x2, 0x7, 0x0, 0x4, 0x6}, {0x10, 0x1, 0x8, 0x3df, 0x7fffffff, 0x8001}, {0x3, 0xdb89, 0x25, 0x6, 0x9, 0x7}, {0x50, 0x80000001, 0x7fffffff, 0x3, 0xfffffff4, 0x4}, {0xf, 0x800, 0x47b6, 0x8, 0x1ff, 0x8}, {0x8, 0x4, 0xe, 0x4, 0xfc, 0x7f}, {0x6, 0x1, 0x7f, 0x843, 0x84c, 0x3ff}, {0x3, 0x400, 0x3, 0x3a, 0x66e9, 0x43}, {0x1, 0x10000, 0x4, 0x0, 0x7, 0x5}, {0xab, 0x0, 0x4, 0xfffffeff, 0x7, 0x9}, {0x7, 0x2, 0x8000, 0x7, 0x3, 0xfff}, {0x4, 0x7fffffff, 0x200, 0x7fff, 0x80000000, 0x40}, {0x7fffffff, 0xffc2, 0x1, 0xfffffffb, 0x4, 0x9}, {0x4, 0x0, 0x9, 0x3, 0x100, 0x3a}, {0x2, 0xff, 0x8, 0x90, 0x1b1, 0x7}, {0x7f, 0x2, 0xd5, 0x5, 0x80000000, 0x400}, {0x3, 0x10, 0x7, 0x3, 0x6}, {0x6, 0x1, 0x8000, 0x4, 0x8, 0x7fff}, {0x1, 0x86, 0x8, 0x2, 0xff, 0x10}, {0xfffffff9, 0x1, 0x2, 0x3ff, 0x5, 0xf}, {0x4, 0x0, 0xba12, 0x3, 0x2, 0x5}, {0x8, 0x5, 0x5, 0x506c, 0x2, 0xdb52000}, {0xc7, 0x4, 0x3, 0xfffffff9, 0x2, 0x401}, {0xffff, 0x1, 0xffff, 0x2, 0x4, 0xffffff38}, {0xee9a, 0x7ff, 0x2, 0xf1f6, 0x2f1, 0x1}, {0x8d, 0x8, 0x1, 0xd, 0xd, 0xfffffffa}, {0x3df38390, 0x7, 0x19d, 0x6, 0x6, 0xdf}, {0x80000001, 0x3, 0x1ff, 0xb, 0xeb, 0xe4f}, {0x8, 0x85f, 0x8, 0x8, 0x5, 0x1}, {0x5f1, 0xea0e, 0xffffff9d, 0x7, 0x100, 0x80000000}, {0x1, 0x1c, 0x3, 0x4, 0x2, 0x9}, {0x81, 0x7fff, 0x6, 0x2, 0x0, 0x2}, {0xba74, 0x1000, 0xc, 0xffffffaa, 0x7, 0x40}, {0x2, 0x5, 0x43cc926, 0x8, 0x7429, 0x7}, {0x81, 0x81, 0x7, 0x3, 0x7, 0xb95}, {0x7fffffff, 0x1, 0x3b9c000, 0x1, 0x10, 0xe30}, {0x9, 0x4, 0x3, 0x7, 0x37, 0x1}, {0x6, 0x9, 0x7, 0x9, 0x3, 0xffffffff}, {0x200, 0xf, 0x0, 0x1, 0x2a, 0x1}, {0x4, 0x1, 0x7, 0x3, 0x1000, 0x9}, {0xec, 0x0, 0x7, 0x10001, 0x7, 0x8}, {0x7, 0x2, 0x7, 0x2, 0x0, 0x4}, {0x1, 0x4, 0x6, 0x4, 0x6b2, 0xad}, {0x4, 0x101, 0x9, 0x4, 0x0, 0x4}, {0x2, 0x0, 0x3, 0x6f3, 0x1000, 0x1}, {0x1, 0xffffb58b, 0x9, 0x0, 0x50, 0x2}, {0xad3b, 0x3, 0x7fffffff, 0x10, 0xa5f2, 0x7}, {0x8, 0x0, 0x4, 0x2, 0x0, 0x519}, {0x0, 0x4, 0xffff, 0xffffffff, 0x7, 0x8000}, {0x6, 0x3, 0x7, 0x12, 0xa6a0, 0x9}, {0xb, 0xe, 0x4b12, 0x4, 0x42f, 0x2}, {0x9, 0x2ea2367a, 0x2, 0xda0000, 0x2, 0x8}, {0xa9, 0x8, 0x0, 0xff, 0x3, 0x8}, {0x10000, 0x401, 0x0, 0x2, 0x6, 0x8000}, {0x1, 0x3d75, 0x65e4, 0x3, 0xfffff80a, 0x2}, {0x100, 0x9, 0x4, 0x8, 0x1, 0x8}, {0x3, 0x2, 0x9, 0x0, 0x5, 0x8b0d}, {0x1000, 0x1bc0a000, 0x8001, 0x3, 0xfffffff8, 0x7fff}, {0xfffffffc, 0x3, 0x3, 0x771, 0x4, 0x4}, {0xd, 0xf3, 0x2, 0x7, 0x81, 0x6924d9fc}, {0xb8, 0xffffffff, 0x401, 0x1, 0x6, 0x7}, {0x6, 0xffffffff, 0x2, 0x5, 0x0, 0x9}, {0x10, 0x6, 0x2, 0xcde, 0x2, 0x3}, {0x3, 0xfffffc00, 0xff, 0x4, 0x6, 0x3b36b520}, {0x1, 0x1, 0xb, 0x0, 0x1, 0x196ed59d}, {0x80, 0x7, 0x9, 0x3, 0x4, 0x8}, {0x4, 0x6, 0x4, 0x446, 0x42, 0x10000}, {0x10000, 0x7, 0x4, 0x1, 0x8000, 0x8}, {0x62b, 0x0, 0x8001, 0x3, 0x3, 0x8e7}, {0x4, 0xfffff8d9, 0x3ff, 0x7, 0x6, 0x2}, {0x7fffffff, 0xfff, 0x3ff, 0x6, 0x8, 0x2}, {0x5, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x2, 0xc, 0x20e9, 0x3, 0x0, 0x9}, {0x8001, 0xd9f1, 0x7, 0x1, 0x9, 0x4}, {0x1, 0x9, 0x1, 0x3a3, 0x80000000, 0x2}, {0x6, 0x42, 0x7, 0x4, 0x5, 0x2}, {0x5, 0x6, 0x7fffffff, 0x6, 0xffffff01, 0x7a89}, {0x80000001, 0x8000000, 0x1, 0x5, 0xe8e, 0x1}, {0x40, 0x8, 0x81, 0xb353, 0x10000, 0x7}, {0x1, 0x1, 0x4, 0x8001, 0x7, 0x2}, {0x1, 0x3, 0xffffffff, 0x0, 0x7465dd3a, 0x8}, {0x401, 0x7f, 0x2, 0x0, 0x7, 0xff}, {0x995, 0x1, 0x3a, 0xffffff80, 0x9, 0x7}, {0x9, 0x80, 0x4, 0x7fff, 0x1, 0xb5}, {0xc34, 0x3, 0x8, 0x6, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x401, 0x6, 0x5, 0x447, 0x8001, 0xff}, {0x357, 0x9, 0x200, 0x8, 0x8, 0x3}, {0x3, 0x6, 0xf, 0x0, 0x7fff, 0xf79a}, {0x7, 0x4, 0x4, 0xedba, 0x8000}, {0x6, 0x7f, 0x3, 0x400, 0x2, 0x81}, {0x7fff, 0xffffff5b, 0x81, 0x10000, 0x5140000, 0x8}, {0x1, 0x0, 0x9, 0x3, 0x6, 0x2a8}, {0x3, 0x4, 0x1, 0x8, 0x6, 0x5}, {0x9, 0x9, 0x3, 0x4, 0x2, 0x101}, {0x5, 0x1ff, 0x8, 0x2c3, 0x8000, 0x5}, {0xfffffff7, 0x8000, 0x1, 0x4, 0x9, 0x8}, {0x80000000, 0xf, 0x4, 0x3, 0x80, 0xfffffffa}, {0x100, 0x1c, 0x3, 0xffffffff, 0x9, 0xfc}, {0x5, 0xffffffff, 0xac, 0x0, 0x5, 0x2}, {0x0, 0x7, 0x8001, 0x7, 0x1}, {0x1c00000, 0xfffffff2, 0x80000000, 0x7, 0x12, 0x8f05}], [{0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x1}, {}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x1c, 0x6, "deff0ac4f2acadd5223ba018f2030d0cf3f3a4909e748edb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_skbmod={0xb8, 0x1b, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xde, 0x2, 0x6, 0x2}, 0x7}}]}, {0x68, 0x6, "0fd0c23b8d60da5384588633d2ede5a893650a4a24c2bb63a2de589120f804385f3b72235563bbd855555543f52baa88247ccf3d7e6dd29c225f984b6eddd5864070e31dd21640d735a4a57cda6bc896eccf6ead573b5d5d4a4c63964b2038d5b261b063"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4e, 0x6}}]}, 0x32f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.986982778s ago: executing program 0 (id=2154): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b08000140000000120800024000000018080003400000001184b9191249a43c32e916a22d12663333"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002609000000000000002308c437e51a11fd41d4756ca2080003004c3f347792244113ac27fabe0fa9ae2c3ae7b3c46bd31423dc71150f52722d468a1b", @ANYRES32=r6, @ANYBLOB="08006b00f0000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x48}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r11, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f0000000000)=0xb) accept(r11, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, &(0x7f0000000080)) 15.87975255s ago: executing program 1 (id=2155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r3, @ANYRES16=r2], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a30000000001c0008"], 0xa0}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @random="2ac7fd5d244d", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f00e7", 0x18, 0x2c, 0x0, @local, @mcast2, {[], {0x0, 0xfffd, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x7}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fedbdf250a00000008000300", @ANYRES32=r12, @ANYBLOB="180050800400050008000880ffffffff050002"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r11, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0x1a6d, 0x6d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 15.823910278s ago: executing program 2 (id=2156): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, 0x0, "4e095e63e601b2d1065ef56a8ca89d409711ae7fc8cf7867e14945628906a541", 0x4, 0x8001, 0x2, 0x1}, 0x3c) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) (async) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2400c000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@enum64={0xf, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x8, 0xffffffff, 0x1}, {0xd, 0x100, 0xfffffffc}, {0xc, 0x6, 0x8}, {0x8, 0x3, 0x5}, {0x8, 0xaf48, 0x9}]}, @fwd={0x9}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0xd, 0x6}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000280)=""/107, 0x80, 0x6b, 0x1, 0x7, 0x0, @void, @value}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x20040850) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c4c0}, 0x40000) (async) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000740)=r2) (async) ioctl$sock_SIOCGSKNS(r13, 0x894c, &(0x7f0000000780)=0x4) (async) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f00000007c0)=0x16220, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r15) r16 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r16, 0x0, 0xcc, &(0x7f0000000840)={@multicast2, @multicast1, 0x0, "63d3c6745d89d76b09eb5a93c23ca2078fc01100d139c9521eaab8afd1f1a41f", 0x6, 0x6, 0x8000, 0x80}, 0x3c) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000000880)={0x1, 0xf, @status={[0x6, 0x6, 0x7, 0x7, 0x5]}, [0xf, 0x864, 0x8, 0x8, 0xd, 0x100, 0xb, 0x5, 0xc0, 0x2, 0x87, 0x1000, 0xfffffffffffffffc, 0x0, 0x1, 0xb9c5, 0x1, 0x9, 0x7, 0x7ff000000, 0x400, 0x5, 0xb5b, 0x2, 0xb765, 0x6, 0xfbcc, 0x9, 0x3, 0x601, 0x9, 0x8000, 0x8, 0x8, 0x5a, 0x80, 0x7d, 0xc, 0x4, 0x0, 0x3, 0x0, 0x7, 0xa, 0x560, 0xd2, 0x8, 0x5, 0x10000, 0x0, 0x81, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xcf, 0x9, 0xebdf, 0x0, 0x100, 0x1, 0x4, 0x2, 0x101]}) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r17 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt(r17, 0x5, 0x4, &(0x7f00000012c0)=""/16, &(0x7f0000001300)=0x10) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r15, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7c}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8001) 15.089210195s ago: executing program 0 (id=2157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00i'], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c000000000000000000000000000000069869f9b4a0074586c9f0c522844c65014127e4651d085a89043138706e79a415b0b0d126c51c1215cfe34997eddd2b4a8256b525b5c15b219daa9ce4cca864a73d9c49ae2771bb70203ebd653200a0d37a0c028cb33b28c7532f384febe039d54537e6952f92cc821c13f34a5426d1532ddd442827bd8dae047fac4b17d711520cd27e961b3719609ab712940ecf8144bddecefbabf2f18e909822089ac4fcedea2b8ec7e90d0456d07b3770b6700009000000000000000000000000000000072a9590a604c03a1efaa205b95ad3fe1e977c3d1d1408ae17ab1ff9118f13db566222a1e12c010521a70c445d97d0cba145ba79178a6d3bbaf70f226652e625fada31ca89eb8c925dd4508fcd45487d3c7adbd913b169777e4af51b9946246bba4c4738a0c7eddb08f69d74199764d908782652867dcd1da4aae000000000000e0000000000000000000000000000000187ab360a4694eb57bbe6342b5dda581327297f3380b94699ac0c4df81a9904c6b5b40886799172be834dbee1691a0b86881e701b7411036b9d70173dcfe9af0e46c8b97f7a94c1cb39e3ff9ffb5ead3394e9aa03d9a841b579823964df8643ed6ce4a33534bd8f71d23cf382643573c2b096540e8b3015e71ab7ab18d7b0365f8a57e46b31177feadae2f9ba08c35dc719f7dfe28f5aac4213806b82bfc2390dc42727cc56d3bbf03700c77441d5e788d6ef2656c82c6b151c4180dbf2b21d7e7f8e824eb8e2c6ab2000000400000001800000000000000100100000d0000004ecbeb07"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 58.852073ms ago: executing program 32 (id=2157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00i'], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c000000000000000000000000000000069869f9b4a0074586c9f0c522844c65014127e4651d085a89043138706e79a415b0b0d126c51c1215cfe34997eddd2b4a8256b525b5c15b219daa9ce4cca864a73d9c49ae2771bb70203ebd653200a0d37a0c028cb33b28c7532f384febe039d54537e6952f92cc821c13f34a5426d1532ddd442827bd8dae047fac4b17d711520cd27e961b3719609ab712940ecf8144bddecefbabf2f18e909822089ac4fcedea2b8ec7e90d0456d07b3770b6700009000000000000000000000000000000072a9590a604c03a1efaa205b95ad3fe1e977c3d1d1408ae17ab1ff9118f13db566222a1e12c010521a70c445d97d0cba145ba79178a6d3bbaf70f226652e625fada31ca89eb8c925dd4508fcd45487d3c7adbd913b169777e4af51b9946246bba4c4738a0c7eddb08f69d74199764d908782652867dcd1da4aae000000000000e0000000000000000000000000000000187ab360a4694eb57bbe6342b5dda581327297f3380b94699ac0c4df81a9904c6b5b40886799172be834dbee1691a0b86881e701b7411036b9d70173dcfe9af0e46c8b97f7a94c1cb39e3ff9ffb5ead3394e9aa03d9a841b579823964df8643ed6ce4a33534bd8f71d23cf382643573c2b096540e8b3015e71ab7ab18d7b0365f8a57e46b31177feadae2f9ba08c35dc719f7dfe28f5aac4213806b82bfc2390dc42727cc56d3bbf03700c77441d5e788d6ef2656c82c6b151c4180dbf2b21d7e7f8e824eb8e2c6ab2000000400000001800000000000000100100000d0000004ecbeb07"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 42.830734ms ago: executing program 33 (id=2155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES32=r3, @ANYRES16=r2], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a30000000001c0008"], 0xa0}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @random="2ac7fd5d244d", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f00e7", 0x18, 0x2c, 0x0, @local, @mcast2, {[], {0x0, 0xfffd, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x7}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fedbdf250a00000008000300", @ANYRES32=r12, @ANYBLOB="180050800400050008000880ffffffff050002"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r11, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0x1a6d, 0x6d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 0s ago: executing program 34 (id=2156): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, 0x0, "4e095e63e601b2d1065ef56a8ca89d409711ae7fc8cf7867e14945628906a541", 0x4, 0x8001, 0x2, 0x1}, 0x3c) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) (async) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2400c000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@enum64={0xf, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x8, 0xffffffff, 0x1}, {0xd, 0x100, 0xfffffffc}, {0xc, 0x6, 0x8}, {0x8, 0x3, 0x5}, {0x8, 0xaf48, 0x9}]}, @fwd={0x9}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0xd, 0x6}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000280)=""/107, 0x80, 0x6b, 0x1, 0x7, 0x0, @void, @value}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x8080}, 0x20040850) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c4c0}, 0x40000) (async) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000740)=r2) (async) ioctl$sock_SIOCGSKNS(r13, 0x894c, &(0x7f0000000780)=0x4) (async) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f00000007c0)=0x16220, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r15) r16 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r16, 0x0, 0xcc, &(0x7f0000000840)={@multicast2, @multicast1, 0x0, "63d3c6745d89d76b09eb5a93c23ca2078fc01100d139c9521eaab8afd1f1a41f", 0x6, 0x6, 0x8000, 0x80}, 0x3c) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000000880)={0x1, 0xf, @status={[0x6, 0x6, 0x7, 0x7, 0x5]}, [0xf, 0x864, 0x8, 0x8, 0xd, 0x100, 0xb, 0x5, 0xc0, 0x2, 0x87, 0x1000, 0xfffffffffffffffc, 0x0, 0x1, 0xb9c5, 0x1, 0x9, 0x7, 0x7ff000000, 0x400, 0x5, 0xb5b, 0x2, 0xb765, 0x6, 0xfbcc, 0x9, 0x3, 0x601, 0x9, 0x8000, 0x8, 0x8, 0x5a, 0x80, 0x7d, 0xc, 0x4, 0x0, 0x3, 0x0, 0x7, 0xa, 0x560, 0xd2, 0x8, 0x5, 0x10000, 0x0, 0x81, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0xcf, 0x9, 0xebdf, 0x0, 0x100, 0x1, 0x4, 0x2, 0x101]}) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r17 = socket$caif_stream(0x25, 0x1, 0x5) getsockopt(r17, 0x5, 0x4, &(0x7f00000012c0)=""/16, &(0x7f0000001300)=0x10) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r15, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7c}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8001) kernel console output (not intermixed with test programs): (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.838007][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.862129][ T1165] bond0 (unregistering): Released all slaves [ 128.871844][T10674] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 128.981038][T10689] netlink: 'syz.2.1348': attribute type 3 has an invalid length. [ 129.005720][T10689] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1348'. [ 129.032680][ T5832] Bluetooth: hci4: command tx timeout [ 129.109665][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 129.126683][ T974] net_ratelimit: 6 callbacks suppressed [ 129.126701][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.237495][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 129.246532][T10716] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.335492][T10717] xt_TCPMSS: Only works on TCP SYN packets [ 129.382677][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.438116][T10551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.495256][T10551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.524738][T10551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.538386][T10551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.665511][ T1165] hsr_slave_0: left promiscuous mode [ 129.671967][ T1165] hsr_slave_1: left promiscuous mode [ 129.678558][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.687214][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.695589][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.704828][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.714690][ T1165] veth1_macvtap: left promiscuous mode [ 129.720267][ T1165] veth0_macvtap: left promiscuous mode [ 129.730168][ T1165] veth1_vlan: left promiscuous mode [ 129.735729][ T1165] veth0_vlan: left promiscuous mode [ 129.780228][T10750] can: request_module (can-proto-4) failed. [ 129.870151][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 129.882061][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 129.969186][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.010546][T10551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.030860][T10551] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.072349][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.079506][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.092189][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.099321][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.117790][T10765] xfrm1: entered allmulticast mode [ 130.156433][T10551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.416485][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.522990][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.525250][T10551] veth0_vlan: entered promiscuous mode [ 130.571736][T10551] veth1_vlan: entered promiscuous mode [ 130.654833][T10551] veth0_macvtap: entered promiscuous mode [ 130.716100][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.720336][T10551] veth1_macvtap: entered promiscuous mode [ 130.730799][T10820] __nla_validate_parse: 4 callbacks suppressed [ 130.730813][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 130.752030][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 130.793766][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.832231][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.844467][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.864920][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.893516][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.931260][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.963023][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.975646][T10551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.982647][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.987580][T10551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.020681][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.081034][T10551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.112658][ T5832] Bluetooth: hci4: command tx timeout [ 131.114694][T10551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.142344][T10551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.151365][T10551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.194357][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1387'. [ 131.299431][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 131.309159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.331422][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.416445][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.449710][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.718387][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.864432][T10935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1399'. [ 132.050365][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.172374][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.257617][T10979] netlink: 'syz.4.1411': attribute type 2 has an invalid length. [ 132.280661][T10979] netlink: 'syz.4.1411': attribute type 9 has an invalid length. [ 132.306474][T10979] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1411'. [ 132.346393][ T3428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.794654][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076008][ T3428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.365596][T11010] netlink: 'syz.0.1413': attribute type 39 has an invalid length. [ 133.498939][T11012] tls_set_device_offload_rx: netdev not found [ 133.553947][ T3428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.589519][T11015] netlink: 'syz.2.1419': attribute type 8 has an invalid length. [ 133.597436][T11015] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 133.605432][T11015] netlink: 'syz.2.1419': attribute type 7 has an invalid length. [ 133.614870][T11015] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1419'. [ 133.632867][T11020] syz_tun: entered promiscuous mode [ 133.636582][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.645564][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.653218][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.662617][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.670088][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.677739][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.694632][T11023] syz_tun: left promiscuous mode [ 133.760307][ T3428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.779438][T11031] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1421'. [ 133.936332][T11043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 133.957217][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1426'. [ 134.058544][ T3428] bridge_slave_1: left allmulticast mode [ 134.081715][ T3428] bridge_slave_1: left promiscuous mode [ 134.118357][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.154707][ T3428] bridge_slave_0: left allmulticast mode [ 134.163130][ T3428] bridge_slave_0: left promiscuous mode [ 134.168823][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.320229][T11019] chnl_net:caif_netlink_parms(): no params data found [ 134.477646][ T3428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.487680][ T3428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.503344][ T3428] bond0 (unregistering): Released all slaves [ 134.553871][ T5876] net_ratelimit: 3 callbacks suppressed [ 134.553886][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.660547][T11109] netlink: 'syz.0.1440': attribute type 24 has an invalid length. [ 134.708646][T11121] netlink: 'syz.2.1439': attribute type 4 has an invalid length. [ 134.734540][T11121] netlink: 'syz.2.1439': attribute type 4 has an invalid length. [ 134.789716][T11019] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.809569][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.812760][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.822719][T11019] bridge_slave_0: entered allmulticast mode [ 134.846468][T11019] bridge_slave_0: entered promiscuous mode [ 134.864833][T11019] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.871979][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.905423][T11019] bridge_slave_1: entered allmulticast mode [ 134.928648][T11019] bridge_slave_1: entered promiscuous mode [ 134.958513][T11141] tipc: Failed to remove unknown binding: 66,1,1/0:3728022013/3728022015 [ 134.971837][T11141] tipc: Failed to remove unknown binding: 66,1,1/0:3728022013/3728022015 [ 135.004812][T11019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.032457][T11019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.094582][T11154] SET target dimension over the limit! [ 135.154883][T11019] team0: Port device team_slave_0 added [ 135.181601][T11164] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 135.199304][T11019] team0: Port device team_slave_1 added [ 135.210798][T11165] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 135.248096][T11164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.339415][T11179] gre0: Master is either lo or non-ether device [ 135.358067][T11019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.378018][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.404300][T11019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.436147][ T3428] hsr_slave_0: left promiscuous mode [ 135.462827][ T3428] hsr_slave_1: left promiscuous mode [ 135.468616][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.480510][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.493189][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.501422][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.521296][ T3428] veth1_macvtap: left promiscuous mode [ 135.529632][ T3428] veth0_macvtap: left promiscuous mode [ 135.539915][ T3428] veth1_vlan: left promiscuous mode [ 135.545407][ T3428] veth0_vlan: left promiscuous mode [ 135.631398][ T29] audit: type=1800 audit(1738257081.073:4): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1459" name="cgroup.controllers" dev="tmpfs" ino=1749 res=0 errno=0 [ 135.645877][T11019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.660748][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.688690][T11019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.703632][T11188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 135.753173][ T5835] Bluetooth: hci4: command tx timeout [ 135.837830][ T3428] team0 (unregistering): Port device team_slave_1 removed [ 135.868786][ T3428] team0 (unregistering): Port device team_slave_0 removed [ 135.919092][T11208] __nla_validate_parse: 8 callbacks suppressed [ 135.919104][T11208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1460'. [ 135.972972][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.050251][T11019] hsr_slave_0: entered promiscuous mode [ 136.082014][T11019] hsr_slave_1: entered promiscuous mode [ 136.109877][T11019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.126170][T11019] Cannot create hsr debugfs directory [ 136.240913][T11254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1473'. [ 136.625443][T11285] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.654166][T11285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.661406][T11285] IPv6: NLM_F_CREATE should be set when creating new route [ 136.668664][T11285] IPv6: NLM_F_CREATE should be set when creating new route [ 136.675972][T11285] IPv6: NLM_F_CREATE should be set when creating new route [ 136.684327][T11291] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1480'. [ 136.771442][T11019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.791599][T11294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.791698][T11019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.840157][T11019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.849097][T11294] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1483'. [ 136.885044][T11019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.952770][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.017344][T11019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.044224][T11019] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.066495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.073633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.098509][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.105758][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.127767][T11319] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1490'. [ 137.434768][T11019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.493781][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.571420][T11019] veth0_vlan: entered promiscuous mode [ 137.598431][T11019] veth1_vlan: entered promiscuous mode [ 137.651137][T11019] veth0_macvtap: entered promiscuous mode [ 137.681279][T11019] veth1_macvtap: entered promiscuous mode [ 137.702142][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.727951][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.751438][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.774247][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.776455][T11375] validate_nla: 5 callbacks suppressed [ 137.776474][T11375] netlink: 'syz.0.1503': attribute type 10 has an invalid length. [ 137.794970][T11019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.810116][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.830228][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.841396][ T5835] Bluetooth: hci4: command tx timeout [ 137.848556][T11019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.862048][T11019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.874530][T11019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.889495][T11375] bridge0: port 4(team0) entered blocking state [ 137.898011][T11375] bridge0: port 4(team0) entered disabled state [ 137.905496][T11375] team0: entered allmulticast mode [ 137.910716][T11375] team_slave_0: entered allmulticast mode [ 137.917599][T11375] team_slave_1: entered allmulticast mode [ 137.924839][T11375] team0: entered promiscuous mode [ 137.929961][T11375] team_slave_0: entered promiscuous mode [ 137.938542][T11375] team_slave_1: entered promiscuous mode [ 137.949689][T11019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.958765][T11019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.968650][T11019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.979117][T11019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.050460][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.078910][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.103505][T11398] IPv6: addrconf: prefix option has invalid lifetime [ 138.115275][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.131716][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 138.131972][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.233309][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.292918][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.561902][T11438] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 138.638373][T11438] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.756187][T11456] FAULT_INJECTION: forcing a failure. [ 138.756187][T11456] name failslab, interval 1, probability 0, space 0, times 1 [ 138.769775][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.1.1518 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 138.769798][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.769809][T11456] Call Trace: [ 138.769815][T11456] [ 138.769822][T11456] dump_stack_lvl+0x241/0x360 [ 138.769865][T11456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.769891][T11456] ? __pfx__printk+0x10/0x10 [ 138.769918][T11456] ? __pfx___might_resched+0x10/0x10 [ 138.769939][T11456] should_fail_ex+0x3b0/0x4e0 [ 138.769959][T11456] should_failslab+0xac/0x100 [ 138.769984][T11456] kmem_cache_alloc_node_noprof+0x77/0x380 [ 138.770011][T11456] ? __alloc_skb+0x1c3/0x440 [ 138.770031][T11456] __alloc_skb+0x1c3/0x440 [ 138.770048][T11456] ? __pfx___netlink_lookup+0x10/0x10 [ 138.770071][T11456] ? __pfx___alloc_skb+0x10/0x10 [ 138.770090][T11456] ? netlink_autobind+0xd6/0x2f0 [ 138.770110][T11456] ? netlink_autobind+0x2b0/0x2f0 [ 138.770133][T11456] netlink_sendmsg+0x638/0xcb0 [ 138.770160][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.770182][T11456] ? aa_sock_msg_perm+0x91/0x160 [ 138.770204][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.770224][T11456] __sock_sendmsg+0x221/0x270 [ 138.770251][T11456] ____sys_sendmsg+0x52a/0x7e0 [ 138.770275][T11456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.770294][T11456] ? __fget_files+0x2a/0x410 [ 138.770321][T11456] ? __fget_files+0x2a/0x410 [ 138.770350][T11456] __sys_sendmsg+0x269/0x350 [ 138.770370][T11456] ? bpf_lsm_file_permission+0x9/0x10 [ 138.770390][T11456] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.770416][T11456] ? do_sys_openat2+0x17a/0x1d0 [ 138.770454][T11456] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.770478][T11456] ? rcu_is_watching+0x15/0xb0 [ 138.770505][T11456] ? rcu_is_watching+0x15/0xb0 [ 138.770532][T11456] do_syscall_64+0xf3/0x230 [ 138.770550][T11456] ? clear_bhb_loop+0x35/0x90 [ 138.770572][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.770591][T11456] RIP: 0033:0x7fdded78cda9 [ 138.770611][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.770627][T11456] RSP: 002b:00007fddee614038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.770653][T11456] RAX: ffffffffffffffda RBX: 00007fdded9a5fa0 RCX: 00007fdded78cda9 [ 138.770666][T11456] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 138.770677][T11456] RBP: 00007fddee614090 R08: 0000000000000000 R09: 0000000000000000 [ 138.770688][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.770698][T11456] R13: 0000000000000000 R14: 00007fdded9a5fa0 R15: 00007ffda2cab108 [ 138.770718][T11456] [ 139.167462][T11476] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 139.175181][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.284652][T11490] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 139.292443][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 139.328903][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 139.345676][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 139.368582][T11495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 139.386248][T11495] gretap1: entered promiscuous mode [ 139.405560][T11502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'. [ 139.415218][T11495] gretap1: entered allmulticast mode [ 139.559607][T11524] sctp: [Deprecated]: syz.1.1534 (pid 11524) Use of int in max_burst socket option. [ 139.559607][T11524] Use struct sctp_assoc_value instead [ 139.685747][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.829975][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.928984][T11564] __nla_validate_parse: 68 callbacks suppressed [ 140.929001][T11564] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1549'. [ 140.949980][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.975380][T11564] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1549'. [ 141.057115][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'. [ 141.073900][T11575] FAULT_INJECTION: forcing a failure. [ 141.073900][T11575] name failslab, interval 1, probability 0, space 0, times 0 [ 141.103995][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 141.132103][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.139525][T11575] CPU: 0 UID: 0 PID: 11575 Comm: syz.2.1552 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 141.139549][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.139561][T11575] Call Trace: [ 141.139568][T11575] [ 141.139575][T11575] dump_stack_lvl+0x241/0x360 [ 141.139608][T11575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.139634][T11575] ? __pfx__printk+0x10/0x10 [ 141.139657][T11575] ? lock_release+0xbf/0xa30 [ 141.139687][T11575] should_fail_ex+0x3b0/0x4e0 [ 141.139708][T11575] should_failslab+0xac/0x100 [ 141.139735][T11575] ? skb_clone+0x20c/0x390 [ 141.139757][T11575] kmem_cache_alloc_noprof+0x70/0x380 [ 141.139787][T11575] skb_clone+0x20c/0x390 [ 141.139811][T11575] __netlink_deliver_tap+0x3cc/0x7f0 [ 141.139838][T11575] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.139858][T11575] netlink_deliver_tap+0x19d/0x1b0 [ 141.139880][T11575] netlink_unicast+0x7c4/0x990 [ 141.139901][T11575] ? __pfx_netlink_unicast+0x10/0x10 [ 141.139918][T11575] ? __virt_addr_valid+0x45f/0x530 [ 141.139943][T11575] ? __phys_addr_symbol+0x2f/0x70 [ 141.139966][T11575] ? __check_object_size+0x47a/0x730 [ 141.139994][T11575] netlink_sendmsg+0x8e4/0xcb0 [ 141.140020][T11575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.140044][T11575] ? aa_sock_msg_perm+0x91/0x160 [ 141.140067][T11575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.140087][T11575] __sock_sendmsg+0x221/0x270 [ 141.140116][T11575] ____sys_sendmsg+0x52a/0x7e0 [ 141.140141][T11575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.140162][T11575] ? __fget_files+0x2a/0x410 [ 141.140190][T11575] ? __fget_files+0x2a/0x410 [ 141.140219][T11575] __sys_sendmsg+0x269/0x350 [ 141.140251][T11575] ? bpf_lsm_file_permission+0x9/0x10 [ 141.140272][T11575] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.140298][T11575] ? do_sys_openat2+0x17a/0x1d0 [ 141.140338][T11575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.140363][T11575] ? rcu_is_watching+0x15/0xb0 [ 141.140392][T11575] ? rcu_is_watching+0x15/0xb0 [ 141.140421][T11575] do_syscall_64+0xf3/0x230 [ 141.140440][T11575] ? clear_bhb_loop+0x35/0x90 [ 141.140463][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.140483][T11575] RIP: 0033:0x7fc81878cda9 [ 141.140499][T11575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.140515][T11575] RSP: 002b:00007fc8165f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.140536][T11575] RAX: ffffffffffffffda RBX: 00007fc8189a5fa0 RCX: 00007fc81878cda9 [ 141.140549][T11575] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 141.140561][T11575] RBP: 00007fc8165f6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.140573][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.140584][T11575] R13: 0000000000000000 R14: 00007fc8189a5fa0 R15: 00007ffc1a6a2558 [ 141.140605][T11575] [ 141.141054][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.282083][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1554'. [ 141.296194][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.451364][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.459274][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.466917][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.077493][T11564] 1·: left promiscuous mode [ 142.271206][T11564] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.282109][T11564] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.291365][T11564] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.300507][T11564] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.317259][T11564] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 142.376699][T11564] xfrm1: left allmulticast mode [ 142.406829][T11585] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1554'. [ 142.497805][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.747008][T11618] netlink: 'syz.0.1564': attribute type 9 has an invalid length. [ 142.756179][T11618] netlink: 'syz.0.1564': attribute type 6 has an invalid length. [ 142.764874][T11618] netlink: 'syz.0.1564': attribute type 9 has an invalid length. [ 142.772863][T11618] netlink: 'syz.0.1564': attribute type 6 has an invalid length. [ 142.969320][ T35] bridge_slave_1: left allmulticast mode [ 142.982309][ T35] bridge_slave_1: left promiscuous mode [ 142.991573][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.004028][ T35] bridge_slave_0: left allmulticast mode [ 143.009683][ T35] bridge_slave_0: left promiscuous mode [ 143.020375][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.198692][T11646] netlink: 'syz.0.1570': attribute type 61 has an invalid length. [ 143.216405][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 143.242521][T11648] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1571'. [ 143.390066][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.420012][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.435257][ T35] bond0 (unregistering): Released all slaves [ 143.523009][ T5835] Bluetooth: hci4: command tx timeout [ 143.583981][T11577] chnl_net:caif_netlink_parms(): no params data found [ 143.790742][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.804826][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.814723][T11577] bridge_slave_0: entered allmulticast mode [ 143.838309][T11577] bridge_slave_0: entered promiscuous mode [ 143.847008][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.854217][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.863565][T11577] bridge_slave_1: entered allmulticast mode [ 143.870916][T11577] bridge_slave_1: entered promiscuous mode [ 143.919934][ T35] hsr_slave_0: left promiscuous mode [ 143.929730][ T35] hsr_slave_1: left promiscuous mode [ 143.941559][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.955688][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.964721][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.973228][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.992123][ T35] veth1_macvtap: left promiscuous mode [ 144.004330][ T35] veth0_macvtap: left promiscuous mode [ 144.010509][ T35] veth1_vlan: left promiscuous mode [ 144.017331][ T35] veth0_vlan: left promiscuous mode [ 144.068297][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.079588][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.089269][T11714] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1585'. [ 144.174840][ T35] team0 (unregistering): Port device team_slave_1 removed [ 144.185669][ T35] team0 (unregistering): Port device team_slave_0 removed [ 144.256925][T11577] team0: Port device team_slave_0 added [ 144.272366][T11577] team0: Port device team_slave_1 added [ 144.327829][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.340796][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.370336][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.398016][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.424715][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.485540][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.494246][T11742] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 144.517671][T11742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1594'. [ 144.590661][T11745] nbd: socks must be embedded in a SOCK_ITEM attr [ 144.655885][T11577] hsr_slave_0: entered promiscuous mode [ 144.688107][T11577] hsr_slave_1: entered promiscuous mode [ 144.695018][T11577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.703126][T11577] Cannot create hsr debugfs directory [ 144.729775][T11753] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 145.130880][T11805] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 145.285683][T11821] net_ratelimit: 1 callbacks suppressed [ 145.285703][T11821] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.438067][T11841] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 145.503394][T11577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.539276][T11577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.566399][T11577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.592717][ T5835] Bluetooth: hci4: command tx timeout [ 145.603692][T11577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.784845][T11577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.807048][T11577] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.822547][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.829655][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.883440][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.890541][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.072488][T11887] netlink: 'syz.2.1628': attribute type 5 has an invalid length. [ 146.091536][T11894] __nla_validate_parse: 5 callbacks suppressed [ 146.091552][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 146.119591][T11897] SET target dimension over the limit! [ 146.179470][T11897] syzkaller0: entered promiscuous mode [ 146.205524][T11897] syzkaller0: entered allmulticast mode [ 146.314363][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.406749][T11577] veth0_vlan: entered promiscuous mode [ 146.419139][T11577] veth1_vlan: entered promiscuous mode [ 146.425175][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 146.437557][T11921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1636'. [ 146.448028][T11577] veth0_macvtap: entered promiscuous mode [ 146.471218][T11577] veth1_macvtap: entered promiscuous mode [ 146.520769][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.543101][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.561032][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.572388][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.585616][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.595930][T11935] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 146.608048][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.633867][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.653661][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.671615][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.683398][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.692892][T11577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.701644][T11577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.712344][T11577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.721443][T11577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.815581][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.835383][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.847437][T11959] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1641'. [ 146.866532][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.874764][ T62] wlan0: Trigger new scan to find an IBSS to join [ 146.875302][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.905080][T11958] tc_dump_action: action bad kind [ 147.067725][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 147.261586][T11991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.298967][T11991] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 147.333819][T11993] x_tables: duplicate underflow at hook 1 [ 147.337854][T11991] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 147.516145][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 147.602259][T12026] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1659'. [ 147.935645][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 147.980867][T12066] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1672'. [ 148.008391][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1673'. [ 148.265819][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.272655][ T5835] Bluetooth: hci0: command tx timeout [ 149.412164][T12102] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 149.479833][T12098] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 149.679048][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.686581][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.695032][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.703490][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.707415][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.711594][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.728958][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.818618][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.900866][T12146] sch_fq: defrate 0 ignored. [ 149.921928][ T1165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.054136][T12123] chnl_net:caif_netlink_parms(): no params data found [ 150.130922][ T1165] bridge_slave_1: left allmulticast mode [ 150.145520][ T1165] bridge_slave_1: left promiscuous mode [ 150.161409][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.178409][ T1165] bridge_slave_0: left allmulticast mode [ 150.195279][ T1165] bridge_slave_0: left promiscuous mode [ 150.200954][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.408649][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.418859][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.428809][ T1165] bond0 (unregistering): Released all slaves [ 150.458608][T12178] xt_bpf: check failed: parse error [ 150.492014][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.499769][T12123] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.508887][T12123] bridge_slave_0: entered allmulticast mode [ 150.516349][T12123] bridge_slave_0: entered promiscuous mode [ 150.528420][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.536901][T12123] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.545888][T12123] bridge_slave_1: entered allmulticast mode [ 150.552863][T12123] bridge_slave_1: entered promiscuous mode [ 150.627323][T12123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.650726][T12123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.677679][T12192] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 150.728920][T12194] Cannot find del_set index 4 as target [ 150.738769][T12194] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.751950][T12123] team0: Port device team_slave_0 added [ 150.760885][T12123] team0: Port device team_slave_1 added [ 150.771487][ T1165] hsr_slave_0: left promiscuous mode [ 150.778689][ T1165] hsr_slave_1: left promiscuous mode [ 150.788114][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.795983][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.804512][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.811905][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.821535][ T1165] veth1_macvtap: left promiscuous mode [ 150.827268][ T1165] veth0_macvtap: left promiscuous mode [ 150.833113][ T1165] veth1_vlan: left promiscuous mode [ 150.838375][ T1165] veth0_vlan: left promiscuous mode [ 150.948772][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 150.960592][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 151.031359][T12123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.052834][T12123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.081379][T12123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.094759][T12123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.110146][T12123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.138973][T12123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.151038][T12209] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 151.210814][T12123] hsr_slave_0: entered promiscuous mode [ 151.224749][T12123] hsr_slave_1: entered promiscuous mode [ 151.244583][T12123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.254752][T12123] Cannot create hsr debugfs directory [ 151.260709][T12212] nft_compat: unsupported protocol 0 [ 151.388070][T12230] __nla_validate_parse: 31 callbacks suppressed [ 151.388094][T12230] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1723'. [ 151.426870][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 151.701221][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 151.731970][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 151.742463][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 151.753074][ T5835] Bluetooth: hci4: command tx timeout [ 151.834882][ T52] wlan0: Trigger new scan to find an IBSS to join [ 151.839793][T12123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.859852][T12123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.871302][T12123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.888916][T12123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.010069][T12123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.036029][T12123] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.055420][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.062556][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.099545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.106687][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.126162][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 152.160370][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'. [ 152.201985][T12310] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.210826][T12310] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.319454][T12123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.335216][T12323] netlink: 'syz.0.1750': attribute type 12 has an invalid length. [ 152.380484][T12123] veth0_vlan: entered promiscuous mode [ 152.400633][T12123] veth1_vlan: entered promiscuous mode [ 152.441819][T12123] veth0_macvtap: entered promiscuous mode [ 152.455699][T12123] veth1_macvtap: entered promiscuous mode [ 152.469790][T12123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.481772][T12123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.494786][T12330] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 152.503273][T12123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.514381][T12123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.529189][T12123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.549328][T12330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.577682][T12123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.602890][T12123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.617031][T12123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.627889][T12123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.638950][T12123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.649333][T12123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.658462][T12123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.667514][T12123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.677131][T12123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.740372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.758464][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.766976][T12226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.806974][T12226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.816284][T12348] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.824109][T12226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.831675][T12348] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.840290][T12348] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.848268][T12348] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.856396][T12348] Dead loop on virtual device ip6_vti0, fix it urgently! [ 152.864386][T12348] Dead loop on virtual device ip6_vti0, fix it urgently! [ 153.014009][T12362] netlink: 'syz.2.1765': attribute type 39 has an invalid length. [ 153.048303][T12362] veth0_macvtap: left promiscuous mode [ 153.079395][T12371] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 153.214130][T12386] tipc: Enabled bearer , priority 0 [ 153.227466][T12386] syzkaller0: entered promiscuous mode [ 153.245029][T12386] syzkaller0: entered allmulticast mode [ 153.264218][T12386] tipc: Resetting bearer [ 153.271323][T12383] tipc: Resetting bearer [ 153.287837][T12383] tipc: Disabling bearer [ 153.417775][T12406] pim6reg527: entered allmulticast mode [ 153.558236][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 153.833337][ T5145] Bluetooth: hci4: command 0x041b tx timeout [ 154.396135][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 154.406121][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'. [ 155.051547][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.513178][ T5145] Bluetooth: hci3: command 0x0405 tx timeout [ 155.906171][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.946870][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.996229][ T1165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.077357][ T1165] bridge_slave_1: left allmulticast mode [ 156.083374][ T1165] bridge_slave_1: left promiscuous mode [ 156.089016][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.097787][ T1165] bridge_slave_0: left allmulticast mode [ 156.104827][ T1165] bridge_slave_0: left promiscuous mode [ 156.110453][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.189686][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.200189][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.209606][ T1165] bond0 (unregistering): Released all slaves [ 156.578968][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.588478][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.601675][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.609709][ T1165] hsr_slave_0: left promiscuous mode [ 156.621148][ T1165] hsr_slave_1: left promiscuous mode [ 156.621374][T12544] __nla_validate_parse: 1 callbacks suppressed [ 156.621389][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 156.633322][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.633350][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.661201][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.671975][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.680265][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.687057][T12554] netlink: 'syz.0.1822': attribute type 4 has an invalid length. [ 156.696078][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.704085][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.711151][T12553] netlink: 'syz.0.1822': attribute type 4 has an invalid length. [ 156.729008][ T1165] veth1_macvtap: left promiscuous mode [ 156.734576][ T1165] veth0_macvtap: left promiscuous mode [ 156.740092][ T1165] veth1_vlan: left promiscuous mode [ 156.745796][ T1165] veth0_vlan: left promiscuous mode [ 156.921642][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 156.934142][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 157.194984][T12536] chnl_net:caif_netlink_parms(): no params data found [ 157.262165][T12536] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.278181][T12536] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.294326][T12536] bridge_slave_0: entered allmulticast mode [ 157.307630][T12536] bridge_slave_0: entered promiscuous mode [ 157.321962][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.330049][T12536] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.337529][T12536] bridge_slave_1: entered allmulticast mode [ 157.344634][T12536] bridge_slave_1: entered promiscuous mode [ 157.355197][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.361847][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.414634][T12536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.420146][T12612] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 157.430749][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.437788][T12612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1838'. [ 157.454165][T12536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.462011][T12607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.480927][T12616] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 157.508266][T12616] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1838'. [ 157.524103][T12536] team0: Port device team_slave_0 added [ 157.535037][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.543300][T12536] team0: Port device team_slave_1 added [ 157.554211][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.577405][T12624] sit0: entered promiscuous mode [ 157.601382][T12624] netlink: 'syz.4.1842': attribute type 1 has an invalid length. [ 157.624757][T12624] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1842'. [ 157.635104][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.644482][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 157.656368][T12536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.664082][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.691949][T12536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.704560][T12630] team0: Device is already in use. [ 157.709848][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.723498][T12536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.735077][T12536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.762477][T12536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.775987][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.795567][T12607] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.860287][T12536] hsr_slave_0: entered promiscuous mode [ 157.867178][T12536] hsr_slave_1: entered promiscuous mode [ 157.874386][T12536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.881942][T12536] Cannot create hsr debugfs directory [ 158.174634][T12668] pim6reg: entered allmulticast mode [ 158.180786][T12668] pim6reg: left allmulticast mode [ 158.299313][T12536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.310250][T12536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.319950][T12536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.330844][T12673] Bluetooth: MGMT ver 1.23 [ 158.331029][T12536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.350245][T12673] sit3: entered promiscuous mode [ 158.355834][T12673] sit3: entered allmulticast mode [ 158.456278][T12536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.497233][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1865'. [ 158.508653][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.516652][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.517655][T12536] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.531579][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.539277][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.547997][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.555318][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.565513][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.572630][T12226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.585910][T12684] netlink: 'syz.1.1866': attribute type 3 has an invalid length. [ 158.596110][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.603221][T12226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.647729][T12680] virt_wifi0 speed is unknown, defaulting to 1000 [ 158.749142][T12696] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1869'. [ 158.785546][T12696] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1869'. [ 158.786994][T12680] chnl_net:caif_netlink_parms(): no params data found [ 158.795713][ T5835] Bluetooth: hci4: command tx timeout [ 158.864095][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.871355][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.882260][T12680] bridge_slave_0: entered allmulticast mode [ 158.889901][T12680] bridge_slave_0: entered promiscuous mode [ 158.898797][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.906696][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.914383][T12680] bridge_slave_1: entered allmulticast mode [ 158.921222][T12680] bridge_slave_1: entered promiscuous mode [ 158.971227][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.983777][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.024361][T12680] team0: Port device team_slave_0 added [ 159.032404][T12680] team0: Port device team_slave_1 added [ 159.033968][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1873'. [ 159.050109][T12536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.050134][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 159.059518][T12715] openvswitch: netlink: Key type 34 is out of range max 32 [ 159.076841][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.084393][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.111090][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.124423][T12713] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 159.144454][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.151420][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.179802][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.243355][T12680] hsr_slave_0: entered promiscuous mode [ 159.251451][T12680] hsr_slave_1: entered promiscuous mode [ 159.259841][T12680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.267756][T12680] Cannot create hsr debugfs directory [ 159.345641][T12536] veth0_vlan: entered promiscuous mode [ 159.421228][T12732] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 159.437837][T12732] netlink: 'syz.2.1878': attribute type 4 has an invalid length. [ 159.454098][T12680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.478281][T12536] veth1_vlan: entered promiscuous mode [ 159.530305][T12680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.567657][T12740] syzkaller1: entered promiscuous mode [ 159.573634][T12740] syzkaller1: entered allmulticast mode [ 159.608861][T12680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.620113][T12729] ebt_among: src integrity fail: 300 [ 159.636767][T12536] veth0_macvtap: entered promiscuous mode [ 159.646627][T12536] veth1_macvtap: entered promiscuous mode [ 159.680535][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.699814][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.711608][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.748162][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.759812][T12536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.788712][T12680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.814209][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.829508][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.849904][T12536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.861187][T12536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.873693][T12536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.901019][T12536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.918453][T12536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.932127][T12536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.943708][T12536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.058253][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.081082][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.146162][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.146162][T12680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.167760][T12680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.173474][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.190342][T12784] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20003 [ 160.192107][T12680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.215854][T12680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.334765][T12793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.352118][T12794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.408807][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.436152][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.460685][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.467793][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.497041][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.504231][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.540884][T12680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.633114][ T5835] Bluetooth: hci0: command tx timeout [ 160.777387][T12838] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 160.814569][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.874296][ T5835] Bluetooth: hci4: command 0x041b tx timeout [ 160.910317][T12857] netlink: 'syz.0.1912': attribute type 7 has an invalid length. [ 161.228308][T12680] veth0_vlan: entered promiscuous mode [ 161.238560][T12890] macsec1: entered promiscuous mode [ 161.244845][T12890] macsec1: entered allmulticast mode [ 161.250162][T12890] veth1_macvtap: entered allmulticast mode [ 161.257339][T12890] veth1_macvtap: left allmulticast mode [ 161.271738][T12680] veth1_vlan: entered promiscuous mode [ 161.293213][T12680] veth0_macvtap: entered promiscuous mode [ 161.301244][T12680] veth1_macvtap: entered promiscuous mode [ 161.317421][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.328551][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.338457][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.354573][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.365170][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.376249][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.388402][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.405913][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.417371][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.430436][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.441714][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.453816][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.464425][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.475705][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.495506][T12680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.504933][T12680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.517423][T12680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.526687][T12680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.602164][ T9017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.619627][ T9017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.648899][ T9017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.658408][ T9017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.002064][ T9019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.656944][ T9019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.706952][ T9019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.767523][ T9019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.891742][T12946] tipc: Enabling of bearer rejected, failed to enable media [ 162.904965][ T9019] bridge_slave_1: left allmulticast mode [ 162.910628][ T9019] bridge_slave_1: left promiscuous mode [ 162.932191][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.975799][ T9019] bridge_slave_0: left allmulticast mode [ 162.981478][ T9019] bridge_slave_0: left promiscuous mode [ 162.991914][T12951] netlink: 'syz.1.1940': attribute type 32 has an invalid length. [ 162.993357][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.095805][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.105280][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.112449][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.121578][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.137105][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.137845][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.146461][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.152100][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.169598][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.177713][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.185623][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.193528][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.206694][ T9019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.217021][ T9019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.226676][ T9019] bond0 (unregistering): Released all slaves [ 163.261529][T12955] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.275508][T12953] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.451614][T12971] __nla_validate_parse: 8 callbacks suppressed [ 163.451631][T12971] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1944'. [ 163.455397][T12955] chnl_net:caif_netlink_parms(): no params data found [ 163.499565][ T9019] hsr_slave_0: left promiscuous mode [ 163.507542][ T9019] hsr_slave_1: left promiscuous mode [ 163.516359][ T9019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.525448][ T9019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.537009][ T9019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.545770][ T9019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.556039][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.556171][ T9019] veth1_macvtap: left promiscuous mode [ 163.571029][ T9019] veth0_macvtap: left promiscuous mode [ 163.576861][ T9019] veth1_vlan: left promiscuous mode [ 163.582110][ T9019] veth0_vlan: left promiscuous mode [ 163.636873][T12953] chnl_net:caif_netlink_parms(): no params data found [ 163.651277][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.728990][ T9019] team0 (unregistering): Port device team_slave_1 removed [ 163.744550][ T9019] team0 (unregistering): Port device team_slave_0 removed [ 163.802035][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.836345][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.861820][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.887312][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.899485][T12953] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.907965][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.915845][T12953] bridge_slave_0: entered allmulticast mode [ 163.925619][T12953] bridge_slave_0: entered promiscuous mode [ 163.932454][T12955] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.947173][T12955] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.954620][T12955] bridge_slave_0: entered allmulticast mode [ 163.961657][T12955] bridge_slave_0: entered promiscuous mode [ 163.971963][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 163.972071][T12953] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.989370][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.997583][T12953] bridge_slave_1: entered allmulticast mode [ 164.004575][T12953] bridge_slave_1: entered promiscuous mode [ 164.010852][T12955] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.018575][T12955] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.026186][T12955] bridge_slave_1: entered allmulticast mode [ 164.033802][T12955] bridge_slave_1: entered promiscuous mode [ 164.034301][T12997] x_tables: duplicate underflow at hook 3 [ 164.050140][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 164.066773][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1946'. [ 164.078383][T12955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.089772][T12955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.101550][T12953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.121096][T12953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.213399][T13002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.241147][T13000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.252061][T13000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.262059][T13000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.273692][T13000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.285106][T13000] geneve3: entered promiscuous mode [ 164.290477][T13000] geneve3: entered allmulticast mode [ 164.298191][T13000] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.307816][T13000] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.317767][T13000] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.327402][T13000] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.351747][T12953] team0: Port device team_slave_0 added [ 164.359295][T12955] team0: Port device team_slave_0 added [ 164.369246][T12955] team0: Port device team_slave_1 added [ 164.390332][T12953] team0: Port device team_slave_1 added [ 164.474916][T12953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.490059][T12953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.517995][T12953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.532038][T12955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.539928][T13028] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 164.540113][T12955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.576166][T12955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.592340][T12953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.600063][T12953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.626851][T12953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.668683][T13028] bond3: entered promiscuous mode [ 164.674416][T13028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.688804][T12955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.696507][T12955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.725264][T12955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.740106][T13029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.747845][T13029] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 164.758320][T13029] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 164.769671][T13029] bond3: (slave ip6gre1): making interface the new active one [ 164.777282][T13029] ip6gre1: entered promiscuous mode [ 164.783716][T13029] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 164.819313][T12953] hsr_slave_0: entered promiscuous mode [ 164.827847][T12953] hsr_slave_1: entered promiscuous mode [ 164.834049][T12953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.842007][T12953] Cannot create hsr debugfs directory [ 164.868130][T13042] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 164.902284][T13047] macvlan2: entered promiscuous mode [ 164.907701][T13047] macvlan2: entered allmulticast mode [ 164.923155][T12955] hsr_slave_0: entered promiscuous mode [ 164.933077][T12955] hsr_slave_1: entered promiscuous mode [ 164.939283][T12955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.947203][T12955] Cannot create hsr debugfs directory [ 164.964679][T13049] netlink: 'syz.2.1966': attribute type 6 has an invalid length. [ 164.989184][ T9019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.105232][ T9019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.157313][ T9019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.193219][ T5843] Bluetooth: hci0: command tx timeout [ 165.237569][ T9019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.279659][ T5843] Bluetooth: hci4: command tx timeout [ 165.327086][T13070] netlink: 'syz.2.1976': attribute type 11 has an invalid length. [ 165.335602][ T9019] bridge_slave_1: left allmulticast mode [ 165.341329][ T9019] bridge_slave_1: left promiscuous mode [ 165.347680][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.357379][ T9019] bridge_slave_0: left allmulticast mode [ 165.363535][ T9019] bridge_slave_0: left promiscuous mode [ 165.369229][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.495873][ T9019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.505871][ T9019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.515829][ T9019] bond0 (unregistering): Released all slaves [ 165.599800][T13079] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 165.810485][T13102] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 165.827111][ T9019] hsr_slave_0: left promiscuous mode [ 165.842014][T13104] xt_hashlimit: invalid interval [ 165.857469][ T9019] hsr_slave_1: left promiscuous mode [ 165.870786][ T9019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.891706][ T9019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.914459][ T9019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.921974][ T9019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.958303][ T9019] veth1_macvtap: left promiscuous mode [ 165.968935][T13114] syz.2.1988[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.969015][T13114] syz.2.1988[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.975409][ T9019] veth0_macvtap: left promiscuous mode [ 165.994052][T13114] syz.2.1988[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.005814][ T9019] veth1_vlan: left promiscuous mode [ 166.022928][ T9019] veth0_vlan: left promiscuous mode [ 166.177828][ T9019] team0 (unregistering): Port device team_slave_1 removed [ 166.189043][ T9019] team0 (unregistering): Port device team_slave_0 removed [ 166.275647][T12955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.295477][T12955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.315718][T12955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.329296][T12955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.430148][T13138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.445994][T12955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.471146][T12955] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.481039][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.488160][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.524052][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.531143][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.569429][ T29] audit: type=1800 audit(1738257112.013:5): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1998" name="memory.events" dev="tmpfs" ino=2397 res=0 errno=0 [ 166.632367][ T29] audit: type=1804 audit(1738257112.013:6): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1998" name="/newroot/469/memory.events" dev="tmpfs" ino=2397 res=1 errno=0 [ 166.668511][ T29] audit: type=1804 audit(1738257112.013:7): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1998" name="/newroot/469/memory.events" dev="tmpfs" ino=2397 res=1 errno=0 [ 166.679151][T12953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.697784][ T29] audit: type=1800 audit(1738257112.013:8): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1998" name="memory.events" dev="tmpfs" ino=2397 res=0 errno=0 [ 166.729652][T13158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.738163][T12955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.751835][T13159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.755255][T12955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.771638][ T29] audit: type=1804 audit(1738257112.013:9): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1998" name="/newroot/469/memory.events" dev="tmpfs" ino=2397 res=1 errno=0 [ 166.784546][T13163] netlink: 'syz.2.2003': attribute type 7 has an invalid length. [ 166.812158][T13163] netlink: 'syz.2.2003': attribute type 8 has an invalid length. [ 166.829551][T12953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.864836][T12953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.891014][T12953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.998477][T12955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.056646][T12953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.099642][T12953] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.123709][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.130819][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.169297][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.176464][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.274095][ T5843] Bluetooth: hci0: command tx timeout [ 167.353040][ T5843] Bluetooth: hci4: command tx timeout [ 167.360423][T12955] veth0_vlan: entered promiscuous mode [ 167.386732][T12955] veth1_vlan: entered promiscuous mode [ 167.454988][T12955] veth0_macvtap: entered promiscuous mode [ 167.473949][T12955] veth1_macvtap: entered promiscuous mode [ 167.487583][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.501625][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.512374][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.523432][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.534601][T12955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.554377][T12953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.565661][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.576652][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.587688][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.598405][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.611425][T12955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.636503][T13230] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 167.636754][T12955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.656176][T12955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.665111][T12955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.674365][T12955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.750994][T12953] veth0_vlan: entered promiscuous mode [ 167.787538][T12953] veth1_vlan: entered promiscuous mode [ 167.841412][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.859902][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.892915][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.902661][T12953] veth0_macvtap: entered promiscuous mode [ 167.910740][T12953] veth1_macvtap: entered promiscuous mode [ 167.923398][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.956185][T13258] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 167.957737][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.978046][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.989857][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.002330][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.013834][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.024663][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.036633][T12953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.057371][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.068936][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.078958][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.090719][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.100719][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.111289][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.122163][T12953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.135917][T12953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.145571][T12953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.155352][T12953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.164757][T12953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.212603][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.220742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.247907][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.248481][T13265] ip6t_REJECT: ECHOREPLY is not supported [ 168.256075][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.621348][T13270] __nla_validate_parse: 77 callbacks suppressed [ 168.621363][T13270] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2032'. [ 168.695931][T13274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2034'. [ 168.705082][T13274] openvswitch: netlink: Flow key attr not present in new flow. [ 168.897629][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 168.937012][T13295] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.2040'. [ 168.947679][T13295] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 169.099176][T13310] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.179931][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.429705][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.440789][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.449622][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.459824][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.467910][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.483148][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.514779][T13326] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.617651][T13326] chnl_net:caif_netlink_parms(): no params data found [ 169.657205][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.664809][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.671905][T13326] bridge_slave_0: entered allmulticast mode [ 169.679169][T13326] bridge_slave_0: entered promiscuous mode [ 169.688505][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.695724][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.703425][T13326] bridge_slave_1: entered allmulticast mode [ 169.709902][T13326] bridge_slave_1: entered promiscuous mode [ 169.728632][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.739502][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.761891][T13326] team0: Port device team_slave_0 added [ 169.769384][T13326] team0: Port device team_slave_1 added [ 169.790186][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.797305][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.823810][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.838879][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.846245][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.872845][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.900988][T13326] hsr_slave_0: entered promiscuous mode [ 169.907600][T13326] hsr_slave_1: entered promiscuous mode [ 169.914696][T13326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.922244][T13326] Cannot create hsr debugfs directory [ 170.557709][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.796601][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.846651][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.901125][ T11] bridge_slave_1: left allmulticast mode [ 170.907473][ T11] bridge_slave_1: left promiscuous mode [ 170.931296][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.956488][ T11] bridge_slave_0: left allmulticast mode [ 170.974775][ T11] bridge_slave_0: left promiscuous mode [ 170.980481][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.002675][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 171.069701][T13340] tipc: Enabled bearer , priority 0 [ 171.185612][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.196232][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.207003][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.210277][T13341] can: request_module (can-proto-0) failed. [ 171.215238][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.229417][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.237379][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.247003][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.260218][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.270374][ T11] bond0 (unregistering): Released all slaves [ 171.282391][T13348] v: renamed from veth1_virt_wifi (while UP) [ 171.295022][T13341] ebt_among: src integrity fail: 300 [ 171.304776][T13353] virt_wifi0 speed is unknown, defaulting to 1000 [ 171.510885][T13353] chnl_net:caif_netlink_parms(): no params data found [ 171.513585][ T5843] Bluetooth: hci0: command tx timeout [ 171.682176][ T11] hsr_slave_0: left promiscuous mode [ 171.688499][ T11] hsr_slave_1: left promiscuous mode [ 171.695970][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.704084][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.711628][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.719497][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.730751][ T11] veth1_macvtap: left promiscuous mode [ 171.736872][ T11] veth0_macvtap: left promiscuous mode [ 171.742395][ T11] veth1_vlan: left promiscuous mode [ 171.748163][ T11] veth0_vlan: left promiscuous mode [ 171.797589][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.810727][T13353] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.818465][T13353] bridge_slave_0: entered allmulticast mode [ 171.827243][T13353] bridge_slave_0: entered promiscuous mode [ 171.838781][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.847478][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.854851][T13353] bridge_slave_1: entered allmulticast mode [ 171.861490][T13353] bridge_slave_1: entered promiscuous mode [ 171.956754][ T11] team0 (unregistering): Port device team_slave_1 removed [ 171.968478][ T11] team0 (unregistering): Port device team_slave_0 removed [ 172.118859][T13326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.158624][T13326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.184782][T13353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.197800][T13353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.206851][ T874] tipc: Node number set to 2886997162 [ 172.220462][T13326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.256893][T13326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.270184][T13353] team0: Port device team_slave_0 added [ 172.281039][T13353] team0: Port device team_slave_1 added [ 172.299571][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 172.317954][T13353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.324995][T13417] xt_hashlimit: size too large, truncated to 1048576 [ 172.325098][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 172.341369][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.370882][T13353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.382971][T13353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.389985][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.421334][T13353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.501767][T13353] hsr_slave_0: entered promiscuous mode [ 172.514420][T13353] hsr_slave_1: entered promiscuous mode [ 172.531437][T13353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.540815][T13353] Cannot create hsr debugfs directory [ 172.680619][T13440] Bluetooth: MGMT ver 1.23 [ 172.689522][T13353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.735725][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.759456][T13353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.786054][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.798411][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.805534][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.828565][T13353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.867632][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.874751][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.937474][T13353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.015261][ T11] bridge_slave_1: left allmulticast mode [ 173.020934][ T11] bridge_slave_1: left promiscuous mode [ 173.044573][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.059819][ T11] bridge_slave_0: left allmulticast mode [ 173.070165][ T11] bridge_slave_0: left promiscuous mode [ 173.078009][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.218092][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.228825][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.239160][ T11] bond0 (unregistering): Released all slaves [ 173.250706][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.274710][ T5843] Bluetooth: hci4: command tx timeout [ 173.280851][T13353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.298141][T13353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.308314][T13353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.319082][T13353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.388289][T13353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.419785][T13353] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.431194][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.438327][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.451513][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.458612][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.487870][ T11] hsr_slave_0: left promiscuous mode [ 173.495117][ T11] hsr_slave_1: left promiscuous mode [ 173.500981][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.509292][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.520310][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.529740][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.541321][ T11] veth1_macvtap: left promiscuous mode [ 173.548144][ T11] veth0_macvtap: left promiscuous mode [ 173.556756][ T11] veth1_vlan: left promiscuous mode [ 173.564050][ T11] veth0_vlan: left promiscuous mode [ 173.593706][ T5843] Bluetooth: hci0: command tx timeout [ 173.607466][T13500] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 173.616922][T13500] netlink: 'syz.1.2092': attribute type 10 has an invalid length. [ 173.627500][T13500] netlink: 'syz.1.2092': attribute type 4 has an invalid length. [ 173.640992][T13500] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2092'. [ 173.649850][T13326] veth0_vlan: entered promiscuous mode [ 173.715728][ T11] team0 (unregistering): Port device team_slave_1 removed [ 173.726754][ T11] team0 (unregistering): Port device team_slave_0 removed [ 173.790294][T13326] veth1_vlan: entered promiscuous mode [ 173.837524][T13326] veth0_macvtap: entered promiscuous mode [ 173.854520][T13326] veth1_macvtap: entered promiscuous mode [ 173.876226][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.897615][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.918213][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.942513][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.958699][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.968989][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.980571][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.992041][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.004035][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.015252][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.026519][T13326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.036746][T13326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.050513][T13326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.059816][T13326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.168326][T13353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.185205][T13523] openvswitch: netlink: Unknown nsh attribute 0 [ 174.191745][T13523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.293743][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.307919][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.331627][T13536] netlink: 'syz.1.2101': attribute type 21 has an invalid length. [ 174.382719][T13353] veth0_vlan: entered promiscuous mode [ 174.398802][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.424387][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.431935][T13353] veth1_vlan: entered promiscuous mode [ 174.504527][T13353] veth0_macvtap: entered promiscuous mode [ 174.534018][T13353] veth1_macvtap: entered promiscuous mode [ 174.549692][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.579409][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.604951][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.618949][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.626260][T13568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2109'. [ 174.633711][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.649039][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.661415][T13353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.704062][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.721109][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.732447][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.746655][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.759692][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.772478][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.787002][T13353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.796262][T13577] bridge_slave_0: default FDB implementation only supports local addresses [ 174.835991][T13353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.846798][T13353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.859076][T13353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.866816][T13584] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 174.868572][T13353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.895253][T13584] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.904240][T13584] bond0: (slave team0): Enslaving as an active interface with an up link [ 175.003424][T13596] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.035823][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.045514][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.082350][T13600] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 175.110346][T13605] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2120'. [ 175.124596][T13600] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 175.140513][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.149561][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2121'. [ 175.166756][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.360781][T13631] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 175.410383][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 175.500348][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 175.510665][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2130'. [ 175.567075][T12226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.156120][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 176.205782][T13657] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2135'. [ 176.216673][T12226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.249764][T13663] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 176.261606][T13663] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 176.271104][T13663] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2137'. [ 176.359509][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.370218][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.379566][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.397793][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.405835][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.416156][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.460304][T13673] virt_wifi0 speed is unknown, defaulting to 1000 [ 176.534583][T13686] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 176.613139][T12226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.631058][T13673] chnl_net:caif_netlink_parms(): no params data found [ 176.712417][T12226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.766409][T13673] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.783805][T13673] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.800098][T13673] bridge_slave_0: entered allmulticast mode [ 176.809263][T13673] bridge_slave_0: entered promiscuous mode [ 176.817592][T13673] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.825230][T13673] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.832428][T13673] bridge_slave_1: entered allmulticast mode [ 176.839817][T13673] bridge_slave_1: entered promiscuous mode [ 176.889324][T13673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.902434][T13673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.930260][T12226] bridge_slave_1: left allmulticast mode [ 176.936588][T12226] bridge_slave_1: left promiscuous mode [ 176.942263][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.950409][T12226] bridge_slave_0: left allmulticast mode [ 176.957090][T12226] bridge_slave_0: left promiscuous mode [ 176.962948][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.991901][T13673] team0: Port device team_slave_0 added [ 176.999789][T13673] team0: Port device team_slave_1 added [ 177.061357][T12226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.072281][T12226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.082335][T12226] bond0 (unregistering): Released all slaves [ 177.105321][T13673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.112281][T13673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.138644][T13673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.150748][T13673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.158634][T13673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.184983][T13673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.212019][T13673] hsr_slave_0: entered promiscuous mode [ 177.218677][T13673] hsr_slave_1: entered promiscuous mode [ 177.224954][T13673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.233070][T13673] Cannot create hsr debugfs directory [ 177.319202][T12226] hsr_slave_0: left promiscuous mode [ 177.325519][T12226] hsr_slave_1: left promiscuous mode [ 177.331165][T12226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.338666][T12226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.346750][T12226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.356194][T12226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.365926][T12226] veth1_macvtap: left promiscuous mode [ 177.371409][T12226] veth0_macvtap: left promiscuous mode [ 177.377395][T12226] veth1_vlan: left promiscuous mode [ 177.383233][T12226] veth0_vlan: left promiscuous mode [ 177.478680][T12226] team0 (unregistering): Port device team_slave_1 removed [ 177.491373][T12226] team0 (unregistering): Port device team_slave_0 removed [ 177.699697][T13673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.708638][T13673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.717223][T13673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.727523][T13673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.768721][T13673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.785448][T13673] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.794882][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.801966][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.815504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.822597][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.899510][T12226] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.927098][T13673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.939063][T12226] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.980136][T12226] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.037358][T12226] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.058640][T13673] veth0_vlan: entered promiscuous mode [ 178.068592][T13673] veth1_vlan: entered promiscuous mode [ 178.095060][T13673] veth0_macvtap: entered promiscuous mode [ 178.107065][T12226] bridge_slave_1: left allmulticast mode [ 178.114109][T12226] bridge_slave_1: left promiscuous mode [ 178.119805][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.128418][T12226] bridge_slave_0: left allmulticast mode [ 178.135193][T12226] bridge_slave_0: left promiscuous mode [ 178.140824][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.229758][T12226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.240577][T12226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.250551][T12226] bond0 (unregistering): Released all slaves [ 178.259296][T13673] veth1_macvtap: entered promiscuous mode [ 178.274067][T13673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.285291][T13673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.296088][T13673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.306752][T13673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.348519][T13673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.364832][T13673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.382845][T13722] nbd: device at index 1 is going down [ 178.398020][T13722] netlink: 'syz.1.2150': attribute type 8 has an invalid length. [ 178.407407][T13673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.465745][T13673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.476869][ T5145] Bluetooth: hci0: command tx timeout [ 178.492461][T13673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.507239][T13673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.517845][T13673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.528022][T13673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.538842][T13673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.549810][T13673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.565132][T13673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.573966][T13673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.582743][T13673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.585396][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.595325][T13673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.608180][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.617430][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.625722][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.643219][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.650407][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.700426][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.729432][T13743] __nla_validate_parse: 4 callbacks suppressed [ 178.729448][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 178.731358][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.553284][ T5843] Bluetooth: hci0: command tx timeout [ 180.712630][ T5843] Bluetooth: hci4: command tx timeout [ 182.633136][ T5843] Bluetooth: hci0: command tx timeout [ 182.793064][ T5843] Bluetooth: hci4: command tx timeout [ 183.992834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.712848][ T5832] Bluetooth: hci0: command tx timeout [ 184.873124][ T5832] Bluetooth: hci4: command tx timeout [ 185.273101][ T52] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 186.073062][ T5835] Bluetooth: hci1: command 0x0401 tx timeout [ 186.073650][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 186.952901][ T5145] Bluetooth: hci4: command tx timeout [ 194.235959][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.714462][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.721669][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.729479][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.738514][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.745895][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.753301][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.760679][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 194.768602][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.776895][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.788417][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.790033][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.796081][ T5835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 194.805477][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.816659][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.818768][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.831390][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.839466][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 194.846969][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.792661][ T5843] Bluetooth: hci5: command tx timeout [ 196.872854][ T5843] Bluetooth: hci7: command tx timeout [ 196.873192][ T5145] Bluetooth: hci6: command tx timeout [ 198.873017][ T5145] Bluetooth: hci5: command tx timeout [ 198.955033][ T5145] Bluetooth: hci7: command tx timeout [ 198.955036][ T5843] Bluetooth: hci6: command tx timeout [ 200.952920][ T5843] Bluetooth: hci5: command tx timeout [ 201.032603][ T5843] Bluetooth: hci6: command tx timeout [ 201.033102][ T5145] Bluetooth: hci7: command tx timeout [ 203.032807][ T5145] Bluetooth: hci5: command tx timeout [ 203.114147][ T5145] Bluetooth: hci6: command tx timeout [ 203.115342][ T5843] Bluetooth: hci7: command tx timeout [ 204.474319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.272757][ T52] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 237.470132][ T5145] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 237.477778][ T5145] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 237.485081][ T5145] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 237.493406][ T5145] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 237.500885][ T5145] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 237.508250][ T5145] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 239.593088][ T5145] Bluetooth: hci8: command tx timeout [ 239.983148][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 239.990361][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 239.998249][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 240.006564][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 240.014430][ T5843] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 240.021616][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 241.672852][ T5843] Bluetooth: hci8: command tx timeout [ 242.072774][ T5843] Bluetooth: hci9: command tx timeout [ 243.752599][ T5843] Bluetooth: hci8: command tx timeout [ 244.153722][ T5843] Bluetooth: hci9: command tx timeout [ 245.833875][ T5843] Bluetooth: hci8: command tx timeout [ 246.232892][ T5843] Bluetooth: hci9: command tx timeout [ 248.312665][ T5843] Bluetooth: hci9: command tx timeout [ 249.273167][ T9017] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.146870][ T5145] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 255.153914][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 255.154117][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 255.170670][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 255.178137][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 255.186030][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 255.193766][ T5835] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 255.201151][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 255.201871][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 255.214683][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 255.218002][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 255.223744][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 255.230167][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 255.237912][ T5835] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 255.246690][ T5847] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 255.252139][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 255.259281][ T5847] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 255.275761][ T5847] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 255.674688][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.272953][ T5847] Bluetooth: hci11: command tx timeout [ 257.272970][ T5145] Bluetooth: hci10: command tx timeout [ 257.352665][ T5847] Bluetooth: hci12: command tx timeout [ 259.352824][ T5847] Bluetooth: hci11: command tx timeout [ 259.355135][ T5145] Bluetooth: hci10: command tx timeout [ 259.433067][ T5145] Bluetooth: hci12: command tx timeout [ 261.432698][ T5145] Bluetooth: hci11: command tx timeout [ 261.432703][ T5847] Bluetooth: hci10: command tx timeout [ 261.512986][ T5145] Bluetooth: hci12: command tx timeout [ 263.513285][ T5145] Bluetooth: hci10: command tx timeout [ 263.513704][ T5847] Bluetooth: hci11: command tx timeout [ 263.592698][ T5847] Bluetooth: hci12: command tx timeout [ 281.273702][ T52] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.713969][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 298.720068][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 298.736694][ T5847] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 298.744102][ T5847] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 298.751352][ T5847] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 298.759261][ T5847] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 298.767096][ T5847] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 298.774471][ T5847] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 300.793057][ T5847] Bluetooth: hci13: command tx timeout [ 301.753489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.351297][ T5145] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 302.359117][ T5145] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 302.366867][ T5145] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 302.375082][ T5145] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 302.383078][ T5145] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 302.390362][ T5145] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 302.872980][ T5145] Bluetooth: hci13: command tx timeout [ 303.832611][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 304.472610][ T5835] Bluetooth: hci14: command tx timeout [ 304.952820][ T5835] Bluetooth: hci13: command tx timeout [ 306.552640][ T5835] Bluetooth: hci14: command tx timeout [ 307.032637][ T5835] Bluetooth: hci13: command tx timeout [ 308.633203][ T5835] Bluetooth: hci14: command tx timeout [ 310.713023][ T5835] Bluetooth: hci14: command tx timeout [ 313.272649][ T3428] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.532937][ T5145] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 315.534455][ T5832] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 315.540230][ T5145] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 315.548001][ T5832] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 315.556969][ T5145] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 315.562150][ T5832] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 315.569893][ T5145] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 315.577775][ T5832] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 315.586593][ T5145] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 315.591769][ T5832] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 315.598943][ T5145] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 315.607123][ T5832] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 315.630011][ T5832] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 315.637578][ T5832] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 315.644964][ T5832] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 315.653289][ T5832] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 315.660795][ T5832] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 315.668828][ T5832] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 317.115200][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.672588][ T5843] Bluetooth: hci16: command tx timeout [ 317.675335][ T54] Bluetooth: hci15: command tx timeout [ 317.763017][ T54] Bluetooth: hci17: command tx timeout [ 319.193044][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 319.202999][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 319.203025][ T5847] Bluetooth: hci7: command 0x0406 tx timeout [ 319.752568][ T5835] Bluetooth: hci15: command tx timeout [ 319.753067][ T5832] Bluetooth: hci16: command tx timeout [ 319.833041][ T5832] Bluetooth: hci17: command tx timeout [ 321.833068][ T5832] Bluetooth: hci16: command tx timeout [ 321.833072][ T5835] Bluetooth: hci15: command tx timeout [ 321.913065][ T5835] Bluetooth: hci17: command tx timeout [ 323.912986][ T5835] Bluetooth: hci15: command tx timeout [ 323.913016][ T5832] Bluetooth: hci16: command tx timeout [ 323.992576][ T5832] Bluetooth: hci17: command tx timeout [ 324.153051][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 324.160845][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 324.168623][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.177649][ T30] task:kworker/u8:0 state:D stack:22360 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 324.187896][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 324.193973][ T30] Call Trace: [ 324.197287][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.200232][ T30] __schedule+0x186c/0x4be0 [ 324.205400][ T30] ? schedule+0x90/0x320 [ 324.209687][ T30] ? schedule+0x90/0x320 [ 324.214475][ T30] ? __pfx___schedule+0x10/0x10 [ 324.241560][ T30] ? __pfx_lock_release+0x10/0x10 [ 324.255454][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.260256][ T30] ? kthread_data+0x52/0xd0 [ 324.264993][ T30] ? schedule+0x90/0x320 [ 324.269229][ T30] ? wq_worker_sleeping+0x66/0x240 [ 324.274379][ T30] ? schedule+0x90/0x320 [ 324.278628][ T30] schedule+0x14b/0x320 [ 324.282835][ T30] schedule_preempt_disabled+0x13/0x30 [ 324.288311][ T30] __mutex_lock+0x817/0x1010 [ 324.293181][ T30] ? __mutex_lock+0x602/0x1010 [ 324.297931][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 324.303141][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 324.308329][ T30] addrconf_dad_work+0x10e/0x16a0 [ 324.313459][ T30] ? __pfx_lock_release+0x10/0x10 [ 324.318504][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 324.324257][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.330597][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.335377][ T30] ? process_scheduled_works+0x976/0x1840 [ 324.341084][ T30] process_scheduled_works+0xa66/0x1840 [ 324.346681][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.352934][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 324.358486][ T30] ? assign_work+0x364/0x3d0 [ 324.363222][ T30] worker_thread+0x870/0xd30 [ 324.367826][ T30] ? __kthread_parkme+0x169/0x1d0 [ 324.372884][ T30] ? __pfx_worker_thread+0x10/0x10 [ 324.377996][ T30] kthread+0x7a9/0x920 [ 324.382052][ T30] ? __pfx_kthread+0x10/0x10 [ 324.386863][ T30] ? __pfx_worker_thread+0x10/0x10 [ 324.391967][ T30] ? __pfx_kthread+0x10/0x10 [ 324.396624][ T30] ? __pfx_kthread+0x10/0x10 [ 324.401227][ T30] ? __pfx_kthread+0x10/0x10 [ 324.405834][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.411202][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 324.416652][ T30] ? __pfx_kthread+0x10/0x10 [ 324.421239][ T30] ret_from_fork+0x4b/0x80 [ 324.425664][ T30] ? __pfx_kthread+0x10/0x10 [ 324.430242][ T30] ret_from_fork_asm+0x1a/0x30 [ 324.435045][ T30] [ 324.438114][ T30] INFO: task kworker/u8:7:1165 blocked for more than 143 seconds. [ 324.446127][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 324.453415][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.462064][ T30] task:kworker/u8:7 state:D stack:21616 pid:1165 tgid:1165 ppid:2 flags:0x00004000 [ 324.472232][ T30] Workqueue: events_unbound linkwatch_event [ 324.478322][ T30] Call Trace: [ 324.481584][ T30] [ 324.484542][ T30] __schedule+0x186c/0x4be0 [ 324.489079][ T30] ? schedule+0x90/0x320 [ 324.493333][ T30] ? schedule+0x90/0x320 [ 324.497565][ T30] ? __pfx___schedule+0x10/0x10 [ 324.502401][ T30] ? __pfx_lock_release+0x10/0x10 [ 324.507611][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.512615][ T30] ? kthread_data+0x52/0xd0 [ 324.517133][ T30] ? schedule+0x90/0x320 [ 324.521368][ T30] ? wq_worker_sleeping+0x66/0x240 [ 324.526533][ T30] ? schedule+0x90/0x320 [ 324.530792][ T30] schedule+0x14b/0x320 [ 324.535138][ T30] schedule_preempt_disabled+0x13/0x30 [ 324.540586][ T30] __mutex_lock+0x817/0x1010 [ 324.545220][ T30] ? __mutex_lock+0x602/0x1010 [ 324.549980][ T30] ? linkwatch_event+0xe/0x60 [ 324.554666][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 324.559673][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 324.565847][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.570605][ T30] ? process_scheduled_works+0x976/0x1840 [ 324.576330][ T30] linkwatch_event+0xe/0x60 [ 324.580824][ T30] process_scheduled_works+0xa66/0x1840 [ 324.586409][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.592385][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 324.598115][ T30] ? assign_work+0x364/0x3d0 [ 324.602731][ T30] worker_thread+0x870/0xd30 [ 324.607346][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 324.613534][ T30] ? __kthread_parkme+0x169/0x1d0 [ 324.618580][ T30] ? __pfx_worker_thread+0x10/0x10 [ 324.624050][ T30] kthread+0x7a9/0x920 [ 324.628138][ T30] ? __pfx_kthread+0x10/0x10 [ 324.632799][ T30] ? __pfx_worker_thread+0x10/0x10 [ 324.637924][ T30] ? __pfx_kthread+0x10/0x10 [ 324.642547][ T30] ? __pfx_kthread+0x10/0x10 [ 324.647149][ T30] ? __pfx_kthread+0x10/0x10 [ 324.651748][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.657295][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 324.662531][ T30] ? __pfx_kthread+0x10/0x10 [ 324.667153][ T30] ret_from_fork+0x4b/0x80 [ 324.671560][ T30] ? __pfx_kthread+0x10/0x10 [ 324.676159][ T30] ret_from_fork_asm+0x1a/0x30 [ 324.680920][ T30] [ 324.684320][ T30] INFO: task kworker/u8:12:12226 blocked for more than 143 seconds. [ 324.692292][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 324.699728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.708402][ T30] task:kworker/u8:12 state:D stack:22896 pid:12226 tgid:12226 ppid:2 flags:0x00004000 [ 324.719015][ T30] Workqueue: netns cleanup_net [ 324.723848][ T30] Call Trace: [ 324.727130][ T30] [ 324.730050][ T30] __schedule+0x186c/0x4be0 [ 324.734603][ T30] ? schedule+0x90/0x320 [ 324.738840][ T30] ? schedule+0x90/0x320 [ 324.743355][ T30] ? __pfx___schedule+0x10/0x10 [ 324.748239][ T30] ? __pfx_lock_release+0x10/0x10 [ 324.753324][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.758122][ T30] ? kthread_data+0x52/0xd0 [ 324.762647][ T30] ? schedule+0x90/0x320 [ 324.766906][ T30] ? wq_worker_sleeping+0x66/0x240 [ 324.772019][ T30] ? schedule+0x90/0x320 [ 324.776528][ T30] schedule+0x14b/0x320 [ 324.780686][ T30] schedule_preempt_disabled+0x13/0x30 [ 324.786160][ T30] __mutex_lock+0x817/0x1010 [ 324.790739][ T30] ? __mutex_lock+0x602/0x1010 [ 324.797438][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 324.804335][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 324.809352][ T30] ? __pfx___might_resched+0x10/0x10 [ 324.814658][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 324.821320][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.826158][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 324.832942][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 324.839282][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.844097][ T30] ? lock_release+0xbf/0xa30 [ 324.848679][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.855040][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 324.861814][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.866846][ T30] ? __pfx_lock_release+0x10/0x10 [ 324.871875][ T30] unregister_netdevice_queue+0x303/0x370 [ 324.877715][ T30] ? __pfx_up_write+0x10/0x10 [ 324.882401][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 324.888681][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 324.894692][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 324.900352][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 324.906183][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 324.912548][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.917329][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 324.923050][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 324.928609][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 324.934689][ T30] hwsim_exit_net+0x5c1/0x670 [ 324.939354][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 324.944556][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 324.950354][ T30] cleanup_net+0x812/0xd60 [ 324.954974][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 324.959899][ T30] ? rcu_is_watching+0x15/0xb0 [ 324.964673][ T30] ? process_scheduled_works+0x976/0x1840 [ 324.970377][ T30] process_scheduled_works+0xa66/0x1840 [ 324.975938][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.981905][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 324.987719][ T30] ? assign_work+0x364/0x3d0 [ 324.992322][ T30] worker_thread+0x870/0xd30 [ 324.996960][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.002904][ T30] ? __kthread_parkme+0x169/0x1d0 [ 325.007953][ T30] ? __pfx_worker_thread+0x10/0x10 [ 325.013343][ T30] kthread+0x7a9/0x920 [ 325.017421][ T30] ? __pfx_worker_thread+0x10/0x10 [ 325.022766][ T30] ? __pfx_kthread+0x10/0x10 [ 325.027372][ T30] ? __pfx_kthread+0x10/0x10 [ 325.031957][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.036758][ T30] ? __pfx_kthread+0x10/0x10 [ 325.041366][ T30] ? __pfx_kthread+0x10/0x10 [ 325.046190][ T30] ret_from_fork+0x4b/0x80 [ 325.050601][ T30] ? __pfx_kthread+0x10/0x10 [ 325.055202][ T30] ret_from_fork_asm+0x1a/0x30 [ 325.059962][ T30] [ 325.063012][ T30] INFO: task syz-executor:13673 blocked for more than 144 seconds. [ 325.070896][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 325.079029][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.087727][ T30] task:syz-executor state:D stack:21264 pid:13673 tgid:13673 ppid:1 flags:0x00004004 [ 325.097918][ T30] Call Trace: [ 325.101205][ T30] [ 325.104382][ T30] __schedule+0x186c/0x4be0 [ 325.108894][ T30] ? schedule+0x90/0x320 [ 325.113156][ T30] ? schedule+0x90/0x320 [ 325.117419][ T30] ? __pfx___schedule+0x10/0x10 [ 325.122281][ T30] ? __pfx_lock_release+0x10/0x10 [ 325.127477][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.132256][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.138342][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.144679][ T30] ? schedule+0x90/0x320 [ 325.148923][ T30] schedule+0x14b/0x320 [ 325.153105][ T30] schedule_preempt_disabled+0x13/0x30 [ 325.158571][ T30] __mutex_lock+0x817/0x1010 [ 325.163385][ T30] ? __mutex_lock+0x602/0x1010 [ 325.168147][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 325.174338][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 325.179362][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.185345][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 325.191318][ T30] wiphy_register+0x1be5/0x27b0 [ 325.196591][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 325.201810][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 325.206946][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 325.213049][ T30] ieee80211_register_hw+0x354e/0x4240 [ 325.218512][ T30] ? ieee80211_register_hw+0x15b1/0x4240 [ 325.224379][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 325.230396][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 325.236253][ T30] ? __asan_memset+0x23/0x50 [ 325.240837][ T30] ? __hrtimer_init+0x170/0x250 [ 325.245695][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 325.251412][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 325.257733][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 325.262910][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 325.268659][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.274478][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 325.280833][ T30] genl_rcv_msg+0xb14/0xec0 [ 325.285536][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.290549][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 325.295762][ T30] ? kasan_save_track+0x51/0x80 [ 325.300625][ T30] ? __sys_sendto+0x363/0x4c0 [ 325.305309][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 325.310330][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.316098][ T30] ? __pfx___might_resched+0x10/0x10 [ 325.321380][ T30] netlink_rcv_skb+0x1e3/0x430 [ 325.326158][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.331340][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.336681][ T30] ? lock_release+0xbf/0xa30 [ 325.341289][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 325.346983][ T30] genl_rcv+0x28/0x40 [ 325.350961][ T30] netlink_unicast+0x7f6/0x990 [ 325.355757][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 325.361050][ T30] ? __virt_addr_valid+0x45f/0x530 [ 325.366208][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 325.371250][ T30] ? __check_object_size+0x47a/0x730 [ 325.376779][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 325.381543][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.386839][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 325.391787][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.397087][ T30] __sock_sendmsg+0x221/0x270 [ 325.401768][ T30] __sys_sendto+0x363/0x4c0 [ 325.406492][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 325.411518][ T30] ? xfd_validate_state+0x6e/0x150 [ 325.416655][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.423011][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.427802][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.434631][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.439413][ T30] __x64_sys_sendto+0xde/0x100 [ 325.444182][ T30] do_syscall_64+0xf3/0x230 [ 325.448671][ T30] ? clear_bhb_loop+0x35/0x90 [ 325.453385][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.459300][ T30] RIP: 0033:0x7ff7e858ec3c [ 325.463912][ T30] RSP: 002b:00007ffd0d9dd4a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 325.472325][ T30] RAX: ffffffffffffffda RBX: 00007ff7e92d4620 RCX: 00007ff7e858ec3c [ 325.480346][ T30] RDX: 0000000000000024 RSI: 00007ff7e92d4670 RDI: 0000000000000003 [ 325.488341][ T30] RBP: 0000000000000000 R08: 00007ffd0d9dd4f4 R09: 000000000000000c [ 325.496562][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 325.504573][ T30] R13: 0000000000000000 R14: 00007ff7e92d4670 R15: 0000000000000000 [ 325.512584][ T30] [ 325.515635][ T30] INFO: task syz-executor:13733 blocked for more than 144 seconds. [ 325.523749][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 325.531013][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.539871][ T30] task:syz-executor state:D stack:25648 pid:13733 tgid:13733 ppid:1 flags:0x00004004 [ 325.550070][ T30] Call Trace: [ 325.553624][ T30] [ 325.556580][ T30] __schedule+0x186c/0x4be0 [ 325.561088][ T30] ? schedule+0x90/0x320 [ 325.565351][ T30] ? schedule+0x90/0x320 [ 325.569598][ T30] ? __pfx___schedule+0x10/0x10 [ 325.574475][ T30] ? __pfx_lock_release+0x10/0x10 [ 325.579517][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.584499][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.590389][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.596778][ T30] ? schedule+0x90/0x320 [ 325.601040][ T30] schedule+0x14b/0x320 [ 325.605214][ T30] schedule_preempt_disabled+0x13/0x30 [ 325.610665][ T30] __mutex_lock+0x817/0x1010 [ 325.615439][ T30] ? __mutex_lock+0x602/0x1010 [ 325.620190][ T30] ? register_nexthop_notifier+0x84/0x290 [ 325.625921][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 325.630941][ T30] ? net_generic+0x1f/0x240 [ 325.635822][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.640628][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.645617][ T30] ? __asan_memset+0x23/0x50 [ 325.650200][ T30] register_nexthop_notifier+0x84/0x290 [ 325.655875][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 325.661685][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 325.667961][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 325.674453][ T30] ? __asan_memset+0x23/0x50 [ 325.679055][ T30] ops_init+0x31e/0x590 [ 325.683244][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 325.688613][ T30] setup_net+0x287/0x9e0 [ 325.692884][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 325.698434][ T30] ? __pfx_setup_net+0x10/0x10 [ 325.703401][ T30] copy_net_ns+0x33f/0x570 [ 325.707811][ T30] create_new_namespaces+0x425/0x7b0 [ 325.713124][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 325.718852][ T30] ksys_unshare+0x57d/0xa70 [ 325.723367][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 325.728381][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.735005][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.739930][ T30] __x64_sys_unshare+0x38/0x40 [ 325.744757][ T30] do_syscall_64+0xf3/0x230 [ 325.749273][ T30] ? clear_bhb_loop+0x35/0x90 [ 325.754031][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.759968][ T30] RIP: 0033:0x7fe1a518e5a7 [ 325.764572][ T30] RSP: 002b:00007ffe9bfaca38 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 325.773010][ T30] RAX: ffffffffffffffda RBX: 00007fe1a53a5f40 RCX: 00007fe1a518e5a7 [ 325.780984][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 325.788955][ T30] RBP: 00007fe1a53a6738 R08: 0000000000000000 R09: 0000000000000000 [ 325.797152][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 325.805136][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 325.813129][ T30] [ 325.816161][ T30] INFO: task syz.2.2156:13739 blocked for more than 145 seconds. [ 325.824105][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 325.831374][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.840479][ T30] task:syz.2.2156 state:D stack:27824 pid:13739 tgid:13738 ppid:5837 flags:0x00000004 [ 325.851188][ T30] Call Trace: [ 325.854806][ T30] [ 325.857737][ T30] __schedule+0x186c/0x4be0 [ 325.862236][ T30] ? schedule+0x90/0x320 [ 325.866521][ T30] ? schedule+0x90/0x320 [ 325.870779][ T30] ? __pfx___schedule+0x10/0x10 [ 325.875652][ T30] ? __pfx_lock_release+0x10/0x10 [ 325.880668][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.885634][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.891565][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.897915][ T30] ? schedule+0x90/0x320 [ 325.902149][ T30] schedule+0x14b/0x320 [ 325.906325][ T30] schedule_preempt_disabled+0x13/0x30 [ 325.911779][ T30] __mutex_lock+0x817/0x1010 [ 325.916632][ T30] ? __mutex_lock+0x602/0x1010 [ 325.921394][ T30] ? genl_rcv_msg+0x121/0xec0 [ 325.926099][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 325.931113][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.935898][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.942216][ T30] ? lock_release+0xbf/0xa30 [ 325.947196][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.952005][ T30] ? radix_tree_lookup+0x238/0x290 [ 325.957137][ T30] genl_rcv_msg+0x121/0xec0 [ 325.961641][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 325.966763][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.971800][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 325.977227][ T30] ? kasan_save_track+0x51/0x80 [ 325.982076][ T30] ? __sys_sendto+0x363/0x4c0 [ 325.986763][ T30] ? rcu_is_watching+0x15/0xb0 [ 325.991524][ T30] ? lock_acquire+0xe3/0x550 [ 325.996184][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 326.001569][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 326.006836][ T30] ? __pfx___might_resched+0x10/0x10 [ 326.012116][ T30] netlink_rcv_skb+0x1e3/0x430 [ 326.016895][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.021918][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.027234][ T30] ? lock_release+0xbf/0xa30 [ 326.031860][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 326.037525][ T30] genl_rcv+0x28/0x40 [ 326.041499][ T30] netlink_unicast+0x7f6/0x990 [ 326.046481][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 326.051798][ T30] ? __virt_addr_valid+0x45f/0x530 [ 326.056931][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 326.061955][ T30] ? __check_object_size+0x47a/0x730 [ 326.067459][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 326.072214][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.077666][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 326.082650][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.087945][ T30] __sock_sendmsg+0x221/0x270 [ 326.092903][ T30] __sys_sendto+0x363/0x4c0 [ 326.097409][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 326.102419][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 326.107481][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.113834][ T30] ? __pfx___up_read+0x10/0x10 [ 326.118596][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.125128][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.129916][ T30] __x64_sys_sendto+0xde/0x100 [ 326.134719][ T30] do_syscall_64+0xf3/0x230 [ 326.139297][ T30] ? clear_bhb_loop+0x35/0x90 [ 326.143997][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.150023][ T30] RIP: 0033:0x7fc81878ec3c [ 326.154747][ T30] RSP: 002b:00007fc8165f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 326.163177][ T30] RAX: ffffffffffffffda RBX: 00007fc8165f4fc0 RCX: 00007fc81878ec3c [ 326.171137][ T30] RDX: 0000000000000024 RSI: 00007fc8165f5010 RDI: 0000000000000004 [ 326.179157][ T30] RBP: 0000000000000000 R08: 00007fc8165f4f14 R09: 000000000000000c [ 326.187378][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 326.195365][ T30] R13: 00007fc8165f4f68 R14: 00007fc8165f5010 R15: 0000000000000000 [ 326.203345][ T30] [ 326.206367][ T30] INFO: task syz.2.2156:13740 blocked for more than 145 seconds. [ 326.214406][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 326.221689][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.230351][ T30] task:syz.2.2156 state:D stack:27824 pid:13740 tgid:13738 ppid:5837 flags:0x00000004 [ 326.240535][ T30] Call Trace: [ 326.243990][ T30] [ 326.246912][ T30] __schedule+0x186c/0x4be0 [ 326.251558][ T30] ? schedule+0x90/0x320 [ 326.255835][ T30] ? schedule+0x90/0x320 [ 326.260070][ T30] ? __pfx___schedule+0x10/0x10 [ 326.264947][ T30] ? __pfx_lock_release+0x10/0x10 [ 326.269962][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.274913][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 326.280799][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.287156][ T30] ? schedule+0x90/0x320 [ 326.291427][ T30] schedule+0x14b/0x320 [ 326.295670][ T30] schedule_preempt_disabled+0x13/0x30 [ 326.301162][ T30] __mutex_lock+0x817/0x1010 [ 326.305970][ T30] ? __mutex_lock+0x602/0x1010 [ 326.310728][ T30] ? genl_rcv_msg+0x121/0xec0 [ 326.315488][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 326.320516][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.325415][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.331744][ T30] ? lock_release+0xbf/0xa30 [ 326.336569][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.341334][ T30] ? radix_tree_lookup+0x238/0x290 [ 326.346473][ T30] genl_rcv_msg+0x121/0xec0 [ 326.350978][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 326.356327][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.361404][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 326.366847][ T30] ? kasan_save_track+0x51/0x80 [ 326.371714][ T30] ? __sys_sendto+0x363/0x4c0 [ 326.376462][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.381228][ T30] ? lock_acquire+0xe3/0x550 [ 326.385831][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 326.391199][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 326.396622][ T30] ? __pfx___might_resched+0x10/0x10 [ 326.401936][ T30] netlink_rcv_skb+0x1e3/0x430 [ 326.406732][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.411776][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.417097][ T30] ? lock_release+0xbf/0xa30 [ 326.421705][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 326.427388][ T30] genl_rcv+0x28/0x40 [ 326.431370][ T30] netlink_unicast+0x7f6/0x990 [ 326.436164][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 326.441443][ T30] ? __virt_addr_valid+0x45f/0x530 [ 326.446563][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 326.451600][ T30] ? __check_object_size+0x47a/0x730 [ 326.457331][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 326.462108][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.467413][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 326.472362][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.477677][ T30] __sock_sendmsg+0x221/0x270 [ 326.482347][ T30] __sys_sendto+0x363/0x4c0 [ 326.487066][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 326.492112][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.498452][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.504783][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.509642][ T30] __x64_sys_sendto+0xde/0x100 [ 326.514718][ T30] do_syscall_64+0xf3/0x230 [ 326.519224][ T30] ? clear_bhb_loop+0x35/0x90 [ 326.523920][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.529826][ T30] RIP: 0033:0x7fc81878ec3c [ 326.534280][ T30] RSP: 002b:00007fc8165d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 326.542991][ T30] RAX: ffffffffffffffda RBX: 00007fc8165d3fc0 RCX: 00007fc81878ec3c [ 326.550955][ T30] RDX: 000000000000001c RSI: 00007fc8165d4010 RDI: 0000000000000005 [ 326.559177][ T30] RBP: 0000000000000000 R08: 00007fc8165d3f14 R09: 000000000000000c [ 326.567179][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 326.575370][ T30] R13: 00007fc8165d3f68 R14: 00007fc8165d4010 R15: 0000000000000000 [ 326.583365][ T30] [ 326.586389][ T30] INFO: task syz.1.2155:13743 blocked for more than 145 seconds. [ 326.594150][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 326.601448][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.610345][ T30] task:syz.1.2155 state:D stack:23920 pid:13743 tgid:13742 ppid:5840 flags:0x00000004 [ 326.620607][ T30] Call Trace: [ 326.623921][ T30] [ 326.626872][ T30] __schedule+0x186c/0x4be0 [ 326.631381][ T30] ? schedule+0x90/0x320 [ 326.635842][ T30] ? schedule+0x90/0x320 [ 326.640086][ T30] ? __pfx___schedule+0x10/0x10 [ 326.644969][ T30] ? __pfx_lock_release+0x10/0x10 [ 326.650000][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.654799][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 326.661019][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.667572][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.672347][ T30] ? schedule+0x90/0x320 [ 326.676614][ T30] schedule+0x14b/0x320 [ 326.680772][ T30] schedule_preempt_disabled+0x13/0x30 [ 326.686241][ T30] __mutex_lock+0x817/0x1010 [ 326.690837][ T30] ? __mutex_lock+0x602/0x1010 [ 326.695794][ T30] ? genl_rcv_msg+0x121/0xec0 [ 326.700474][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 326.705507][ T30] ? 0xffffffffa00007d4 [ 326.709670][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.715961][ T30] ? kernel_text_address+0xa7/0xe0 [ 326.721139][ T30] ? __kernel_text_address+0xd/0x40 [ 326.726565][ T30] ? radix_tree_lookup+0x238/0x290 [ 326.731677][ T30] genl_rcv_msg+0x121/0xec0 [ 326.736225][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.741253][ T30] ? stack_trace_save+0x118/0x1d0 [ 326.746299][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 326.751687][ T30] ? stack_depot_save_flags+0x37/0x940 [ 326.757381][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.762314][ T30] ? lock_acquire+0xe3/0x550 [ 326.766959][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 326.771998][ T30] ? __pfx___might_resched+0x10/0x10 [ 326.777316][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.782099][ T30] ? lock_acquire+0xe3/0x550 [ 326.786940][ T30] netlink_rcv_skb+0x1e3/0x430 [ 326.791703][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.796836][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.802148][ T30] ? lock_release+0xbf/0xa30 [ 326.806820][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 326.812198][ T30] ? net_generic+0x1f/0x240 [ 326.816936][ T30] genl_rcv+0x28/0x40 [ 326.820920][ T30] netlink_unicast+0x7f6/0x990 [ 326.825687][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 326.830957][ T30] ? __virt_addr_valid+0x45f/0x530 [ 326.836078][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 326.841120][ T30] ? __check_object_size+0x47a/0x730 [ 326.846656][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 326.851421][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.856734][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 326.861694][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.867168][ T30] __sock_sendmsg+0x221/0x270 [ 326.871882][ T30] __sys_sendto+0x363/0x4c0 [ 326.878494][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 326.883737][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 326.888759][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.895098][ T30] ? __pfx___up_read+0x10/0x10 [ 326.899862][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.906457][ T30] ? rcu_is_watching+0x15/0xb0 [ 326.911225][ T30] __x64_sys_sendto+0xde/0x100 [ 326.916011][ T30] do_syscall_64+0xf3/0x230 [ 326.920566][ T30] ? clear_bhb_loop+0x35/0x90 [ 326.925250][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.931132][ T30] RIP: 0033:0x7fdded78ec3c [ 326.935882][ T30] RSP: 002b:00007fddee612ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 326.944328][ T30] RAX: ffffffffffffffda RBX: 00007fddee612fc0 RCX: 00007fdded78ec3c [ 326.952284][ T30] RDX: 0000000000000024 RSI: 00007fddee613010 RDI: 000000000000000b [ 326.960264][ T30] RBP: 0000000000000000 R08: 00007fddee612f14 R09: 000000000000000c [ 326.968554][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 326.976552][ T30] R13: 00007fddee612f68 R14: 00007fddee613010 R15: 0000000000000000 [ 326.984536][ T30] [ 326.987550][ T30] INFO: task syz.1.2155:13745 blocked for more than 146 seconds. [ 326.995555][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 327.002849][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.011510][ T30] task:syz.1.2155 state:D stack:26064 pid:13745 tgid:13742 ppid:5840 flags:0x00000004 [ 327.021691][ T30] Call Trace: [ 327.025143][ T30] [ 327.028077][ T30] __schedule+0x186c/0x4be0 [ 327.032644][ T30] ? schedule+0x90/0x320 [ 327.036898][ T30] ? schedule+0x90/0x320 [ 327.041149][ T30] ? __pfx___schedule+0x10/0x10 [ 327.046033][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.051060][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.056129][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 327.062044][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.068397][ T30] ? schedule+0x90/0x320 [ 327.072850][ T30] schedule+0x14b/0x320 [ 327.077020][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.082748][ T30] __mutex_lock+0x817/0x1010 [ 327.087338][ T30] ? __mutex_lock+0x602/0x1010 [ 327.092086][ T30] ? rtnl_newlink+0xce2/0x2210 [ 327.096868][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 327.101890][ T30] ? ns_capable+0x8a/0xf0 [ 327.106226][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 327.112047][ T30] rtnl_newlink+0xce2/0x2210 [ 327.116920][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.121946][ T30] ? __set_page_owner+0x671/0x800 [ 327.127005][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.132030][ T30] ? page_ext_get+0x20/0x2a0 [ 327.136679][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.141444][ T30] ? lock_release+0xbf/0xa30 [ 327.146263][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 327.151279][ T30] ? lock_release+0xbf/0xa30 [ 327.155894][ T30] ? deref_stack_reg+0x17c/0x210 [ 327.160819][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.165895][ T30] ? stack_trace_save+0x118/0x1d0 [ 327.170933][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 327.176821][ T30] ? deref_stack_reg+0x17c/0x210 [ 327.181783][ T30] ? preempt_count_add+0x93/0x190 [ 327.186821][ T30] ? 0xffffffffa00007d4 [ 327.190982][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 327.196291][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 327.201485][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.207810][ T30] ? kernel_text_address+0xa7/0xe0 [ 327.212947][ T30] ? __kernel_text_address+0xd/0x40 [ 327.218152][ T30] ? unwind_get_return_address+0x4d/0x90 [ 327.223797][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.228572][ T30] ? lock_release+0xbf/0xa30 [ 327.233475][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.238517][ T30] ? apparmor_capable+0x13b/0x1b0 [ 327.243571][ T30] ? bpf_lsm_capable+0x9/0x10 [ 327.248240][ T30] ? security_capable+0x7e/0x2d0 [ 327.253211][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.258250][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 327.263393][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 327.268530][ T30] ? lock_release+0xbf/0xa30 [ 327.273188][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.278879][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 327.283955][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.288743][ T30] ? lock_acquire+0xe3/0x550 [ 327.293635][ T30] netlink_rcv_skb+0x1e3/0x430 [ 327.298417][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.303909][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.309191][ T30] ? net_generic+0x1f/0x240 [ 327.313724][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.318924][ T30] netlink_unicast+0x7f6/0x990 [ 327.323866][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 327.329152][ T30] ? __virt_addr_valid+0x45f/0x530 [ 327.334291][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 327.339322][ T30] ? __check_object_size+0x47a/0x730 [ 327.344628][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 327.349381][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.356330][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 327.361303][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.366626][ T30] __sock_sendmsg+0x221/0x270 [ 327.371326][ T30] __sys_sendto+0x363/0x4c0 [ 327.375875][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 327.381117][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 327.386503][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.392889][ T30] ? __pfx___up_read+0x10/0x10 [ 327.397665][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.404056][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.408846][ T30] __x64_sys_sendto+0xde/0x100 [ 327.414164][ T30] do_syscall_64+0xf3/0x230 [ 327.418683][ T30] ? clear_bhb_loop+0x35/0x90 [ 327.423405][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.429331][ T30] RIP: 0033:0x7fdded78ec3c [ 327.433792][ T30] RSP: 002b:00007fddee5f1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 327.442227][ T30] RAX: ffffffffffffffda RBX: 00007fddee5f1fc0 RCX: 00007fdded78ec3c [ 327.450484][ T30] RDX: 0000000000000020 RSI: 00007fddee5f2010 RDI: 0000000000000003 [ 327.458488][ T30] RBP: 0000000000000000 R08: 00007fddee5f1f14 R09: 000000000000000c [ 327.466504][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 327.474780][ T30] R13: 00007fddee5f1f68 R14: 00007fddee5f2010 R15: 0000000000000000 [ 327.483010][ T30] [ 327.486058][ T30] INFO: task syz.1.2155:13746 blocked for more than 146 seconds. [ 327.493838][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 327.501118][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.510108][ T30] task:syz.1.2155 state:D stack:27824 pid:13746 tgid:13742 ppid:5840 flags:0x00000004 [ 327.520337][ T30] Call Trace: [ 327.523642][ T30] [ 327.526591][ T30] __schedule+0x186c/0x4be0 [ 327.531127][ T30] ? schedule+0x90/0x320 [ 327.535693][ T30] ? schedule+0x90/0x320 [ 327.539955][ T30] ? __pfx___schedule+0x10/0x10 [ 327.544840][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.549891][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.554791][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 327.560691][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.567248][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.572033][ T30] ? schedule+0x90/0x320 [ 327.576293][ T30] schedule+0x14b/0x320 [ 327.580448][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.586184][ T30] __mutex_lock+0x817/0x1010 [ 327.590798][ T30] ? __mutex_lock+0x602/0x1010 [ 327.595777][ T30] ? genl_rcv_msg+0x121/0xec0 [ 327.600449][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 327.605482][ T30] ? 0xffffffffa00007d4 [ 327.609640][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.615806][ T30] ? kernel_text_address+0xa7/0xe0 [ 327.620930][ T30] ? __kernel_text_address+0xd/0x40 [ 327.626368][ T30] ? radix_tree_lookup+0x238/0x290 [ 327.631492][ T30] genl_rcv_msg+0x121/0xec0 [ 327.636031][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.641057][ T30] ? stack_trace_save+0x118/0x1d0 [ 327.646117][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 327.651527][ T30] ? stack_depot_save_flags+0x37/0x940 [ 327.657346][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.662106][ T30] ? lock_acquire+0xe3/0x550 [ 327.666729][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 327.671755][ T30] ? __pfx___might_resched+0x10/0x10 [ 327.677073][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.681842][ T30] ? lock_acquire+0xe3/0x550 [ 327.686875][ T30] netlink_rcv_skb+0x1e3/0x430 [ 327.691664][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.696747][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.702040][ T30] ? lock_release+0xbf/0xa30 [ 327.706655][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 327.712038][ T30] ? net_generic+0x1f/0x240 [ 327.716833][ T30] genl_rcv+0x28/0x40 [ 327.720818][ T30] netlink_unicast+0x7f6/0x990 [ 327.725587][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 327.730854][ T30] ? __virt_addr_valid+0x45f/0x530 [ 327.735989][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 327.741010][ T30] ? __check_object_size+0x47a/0x730 [ 327.746627][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 327.751416][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.756732][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 327.761664][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.766956][ T30] __sock_sendmsg+0x221/0x270 [ 327.771630][ T30] __sys_sendto+0x363/0x4c0 [ 327.776380][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 327.781407][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.787875][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.794247][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.799018][ T30] __x64_sys_sendto+0xde/0x100 [ 327.804097][ T30] do_syscall_64+0xf3/0x230 [ 327.808612][ T30] ? clear_bhb_loop+0x35/0x90 [ 327.813311][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.819193][ T30] RIP: 0033:0x7fdded78ec3c [ 327.823624][ T30] RSP: 002b:00007fddee5d0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 327.832050][ T30] RAX: ffffffffffffffda RBX: 00007fddee5d0fc0 RCX: 00007fdded78ec3c [ 327.840503][ T30] RDX: 0000000000000020 RSI: 00007fddee5d1010 RDI: 000000000000000d [ 327.848499][ T30] RBP: 0000000000000000 R08: 00007fddee5d0f14 R09: 000000000000000c [ 327.856489][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 327.864718][ T30] R13: 00007fddee5d0f68 R14: 00007fddee5d1010 R15: 0000000000000000 [ 327.872714][ T30] [ 327.875734][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 327.884785][ T30] INFO: task syz.1.2155:13747 blocked for more than 147 seconds. [ 327.892970][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 327.900249][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.908914][ T30] task:syz.1.2155 state:D stack:27720 pid:13747 tgid:13742 ppid:5840 flags:0x00000004 [ 327.919414][ T30] Call Trace: [ 327.922992][ T30] [ 327.925946][ T30] __schedule+0x186c/0x4be0 [ 327.930444][ T30] ? schedule+0x90/0x320 [ 327.934753][ T30] ? schedule+0x90/0x320 [ 327.938993][ T30] ? __pfx___schedule+0x10/0x10 [ 327.943999][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.949047][ T30] ? rcu_is_watching+0x15/0xb0 [ 327.954401][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 327.960324][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.967223][ T30] ? schedule+0x90/0x320 [ 327.971498][ T30] schedule+0x14b/0x320 [ 327.975775][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.981268][ T30] __mutex_lock+0x817/0x1010 [ 327.986081][ T30] ? __mutex_lock+0x602/0x1010 [ 327.991024][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 327.996387][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 328.001431][ T30] ? __pfx___futex_wait+0x10/0x10 [ 328.006497][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 328.011799][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 328.017093][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 328.022504][ T30] ? aa_sk_perm+0x96d/0xab0 [ 328.027020][ T30] ? rcu_is_watching+0x15/0xb0 [ 328.031780][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 328.036652][ T30] ? lock_release+0xbf/0xa30 [ 328.041259][ T30] ip_setsockopt+0x63/0x100 [ 328.045957][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 328.051843][ T30] do_sock_setsockopt+0x3af/0x720 [ 328.056947][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 328.062569][ T30] ? __fget_files+0x395/0x410 [ 328.067300][ T30] ? __fget_files+0x2a/0x410 [ 328.071920][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 328.077391][ T30] do_syscall_64+0xf3/0x230 [ 328.081886][ T30] ? clear_bhb_loop+0x35/0x90 [ 328.086578][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.092508][ T30] RIP: 0033:0x7fdded78cda9 [ 328.097175][ T30] RSP: 002b:00007fddee5b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.105823][ T30] RAX: ffffffffffffffda RBX: 00007fdded9a6240 RCX: 00007fdded78cda9 [ 328.113820][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000009 [ 328.121788][ T30] RBP: 00007fdded80e2a0 R08: 000000000000000c R09: 0000000000000000 [ 328.129766][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 328.137932][ T30] R13: 0000000000000000 R14: 00007fdded9a6240 R15: 00007ffda2cab108 [ 328.145913][ T30] [ 328.148918][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 328.157987][ T30] INFO: task syz.1.2155:13750 blocked for more than 147 seconds. [ 328.166020][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 328.173351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.182015][ T30] task:syz.1.2155 state:D stack:27184 pid:13750 tgid:13742 ppid:5840 flags:0x00000004 [ 328.192195][ T30] Call Trace: [ 328.195908][ T30] [ 328.198871][ T30] __schedule+0x186c/0x4be0 [ 328.203425][ T30] ? schedule+0x90/0x320 [ 328.207681][ T30] ? schedule+0x90/0x320 [ 328.211912][ T30] ? __pfx___schedule+0x10/0x10 [ 328.216788][ T30] ? __pfx_lock_release+0x10/0x10 [ 328.221808][ T30] ? rcu_is_watching+0x15/0xb0 [ 328.226790][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 328.232713][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.239055][ T30] ? schedule+0x90/0x320 [ 328.243330][ T30] schedule+0x14b/0x320 [ 328.247499][ T30] schedule_preempt_disabled+0x13/0x30 [ 328.253243][ T30] __mutex_lock+0x817/0x1010 [ 328.257848][ T30] ? __mutex_lock+0x602/0x1010 [ 328.262624][ T30] ? rtnl_dumpit+0x99/0x200 [ 328.267153][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 328.272169][ T30] ? __build_skb_around+0x245/0x3d0 [ 328.277408][ T30] ? __alloc_skb+0x28f/0x440 [ 328.282012][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 328.287168][ T30] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 328.292280][ T30] rtnl_dumpit+0x99/0x200 [ 328.296633][ T30] netlink_dump+0x64d/0xe10 [ 328.301283][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 328.306351][ T30] ? __netlink_lookup+0x780/0x890 [ 328.311376][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 328.316629][ T30] ? stack_trace_save+0x118/0x1d0 [ 328.321648][ T30] __netlink_dump_start+0x5a2/0x790 [ 328.326859][ T30] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 328.331995][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 328.336962][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 328.342417][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 328.347630][ T30] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 328.352763][ T30] ? lock_acquire+0xe3/0x550 [ 328.357375][ T30] netlink_rcv_skb+0x1e3/0x430 [ 328.362123][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 328.367607][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.373159][ T30] ? net_generic+0x1f/0x240 [ 328.377672][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.382883][ T30] netlink_unicast+0x7f6/0x990 [ 328.387682][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 328.393095][ T30] ? __virt_addr_valid+0x45f/0x530 [ 328.398238][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 328.403921][ T30] ? __check_object_size+0x47a/0x730 [ 328.409235][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 328.414525][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.419827][ T30] ? __pfx_aa_file_perm+0x10/0x10 [ 328.425018][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 328.429947][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.435370][ T30] __sock_sendmsg+0x221/0x270 [ 328.440066][ T30] sock_write_iter+0x2d7/0x3f0 [ 328.444918][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 328.450219][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 328.455992][ T30] ? security_file_permission+0x74/0x280 [ 328.461647][ T30] vfs_write+0xaeb/0xd30 [ 328.466358][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 328.471662][ T30] ? __pfx_vfs_write+0x10/0x10 [ 328.477222][ T30] ? __fget_files+0x2a/0x410 [ 328.481845][ T30] ? __fget_files+0x2a/0x410 [ 328.486931][ T30] ksys_write+0x18f/0x2b0 [ 328.491271][ T30] ? __pfx_ksys_write+0x10/0x10 [ 328.496625][ T30] ? rcu_is_watching+0x15/0xb0 [ 328.501393][ T30] ? rcu_is_watching+0x15/0xb0 [ 328.506913][ T30] do_syscall_64+0xf3/0x230 [ 328.511453][ T30] ? clear_bhb_loop+0x35/0x90 [ 328.516581][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.523068][ T30] RIP: 0033:0x7fdded78cda9 [ 328.527496][ T30] RSP: 002b:00007fddee590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.536344][ T30] RAX: ffffffffffffffda RBX: 00007fdded9a6320 RCX: 00007fdded78cda9 [ 328.544773][ T30] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000003 [ 328.553385][ T30] RBP: 00007fdded80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.561371][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.569760][ T30] R13: 0000000000000000 R14: 00007fdded9a6320 R15: 00007ffda2cab108 [ 328.578117][ T30] [ 328.581122][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 328.590538][ T30] INFO: task syz.0.2157:13752 blocked for more than 147 seconds. [ 328.598686][ T30] Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 328.606695][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.615784][ T30] task:syz.0.2157 state:D stack:25104 pid:13752 tgid:13751 ppid:5830 flags:0x00000004 [ 328.626450][ T30] Call Trace: [ 328.629731][ T30] [ 328.633298][ T30] __schedule+0x186c/0x4be0 [ 328.637826][ T30] ? schedule+0x90/0x320 [ 328.642059][ T30] ? schedule+0x90/0x320 [ 328.646762][ T30] ? __pfx___schedule+0x10/0x10 [ 328.651616][ T30] ? __pfx_lock_release+0x10/0x10 [ 328.657071][ T30] ? rcu_is_watching+0x15/0xb0 [ 328.661841][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 328.668124][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.674577][ T30] ? schedule+0x90/0x320 [ 328.678811][ T30] schedule+0x14b/0x320 [ 328.683039][ T30] schedule_preempt_disabled+0x13/0x30 [ 328.688511][ T30] __mutex_lock+0x817/0x1010 [ 328.693131][ T30] ? __mutex_lock+0x602/0x1010 [ 328.697882][ T30] ? wext_ioctl_dispatch+0x102/0x530 [ 328.703548][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 328.708747][ T30] ? lock_acquire+0xe3/0x550 [ 328.714009][ T30] ? full_name_hash+0x93/0xe0 [ 328.718702][ T30] ? dev_load+0x21/0x1f0 [ 328.723357][ T30] wext_ioctl_dispatch+0x102/0x530 [ 328.728464][ T30] ? __pfx_ioctl_standard_call+0x10/0x10 [ 328.734461][ T30] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 328.740084][ T30] ? __might_fault+0xaa/0x120 [ 328.745142][ T30] wext_handle_ioctl+0x166/0x280 [ 328.750073][ T30] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 328.755910][ T30] sock_ioctl+0x17c/0x8e0 [ 328.760232][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 328.765487][ T30] ? __fget_files+0x2a/0x410 [ 328.770074][ T30] ? __fget_files+0x2a/0x410 [ 328.775074][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 328.779926][ T30] __se_sys_ioctl+0xf5/0x170 [ 328.784968][ T30] do_syscall_64+0xf3/0x230 [ 328.789491][ T30] ? clear_bhb_loop+0x35/0x90 [ 328.794729][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.800633][ T30] RIP: 0033:0x7f7a1998cda9 [ 328.805436][ T30] RSP: 002b:00007f7a1a8d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.814405][ T30] RAX: ffffffffffffffda RBX: 00007f7a19ba5fa0 RCX: 00007f7a1998cda9 [ 328.822393][ T30] RDX: 0000000020000000 RSI: 0000000000008b04 RDI: 0000000000000005 [ 328.831004][ T30] RBP: 00007f7a19a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.839387][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.847802][ T30] R13: 0000000000000000 R14: 00007f7a19ba5fa0 R15: 00007fffcad2ea58 [ 328.856220][ T30] [ 328.859229][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 328.868738][ T30] INFO: lockdep is turned off. [ 328.874090][ T30] NMI backtrace for cpu 1 [ 328.874102][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 328.874120][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.874131][ T30] Call Trace: [ 328.874137][ T30] [ 328.874144][ T30] dump_stack_lvl+0x241/0x360 [ 328.874174][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.874200][ T30] ? __pfx__printk+0x10/0x10 [ 328.874223][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 328.874244][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 328.874263][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 328.874279][ T30] ? _printk+0xd5/0x120 [ 328.874294][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 328.874311][ T30] ? __pfx__printk+0x10/0x10 [ 328.874328][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.874342][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 328.874361][ T30] watchdog+0xff6/0x1040 [ 328.874382][ T30] ? watchdog+0x1ea/0x1040 [ 328.874399][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.874413][ T30] kthread+0x7a9/0x920 [ 328.874429][ T30] ? __pfx_kthread+0x10/0x10 [ 328.874445][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.874460][ T30] ? __pfx_kthread+0x10/0x10 [ 328.874475][ T30] ? __pfx_kthread+0x10/0x10 [ 328.874492][ T30] ? __pfx_kthread+0x10/0x10 [ 328.874507][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.874525][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 328.874543][ T30] ? __pfx_kthread+0x10/0x10 [ 328.874559][ T30] ret_from_fork+0x4b/0x80 [ 328.874573][ T30] ? __pfx_kthread+0x10/0x10 [ 328.874589][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.874606][ T30] [ 328.874611][ T30] Sending NMI from CPU 1 to CPUs 0: [ 329.047366][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 329.048507][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 329.063481][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 329.073619][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 329.083661][ T30] Call Trace: [ 329.086930][ T30] [ 329.089852][ T30] dump_stack_lvl+0x241/0x360 [ 329.094530][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.099729][ T30] ? __pfx__printk+0x10/0x10 [ 329.104321][ T30] ? vscnprintf+0x5d/0x90 [ 329.108659][ T30] panic+0x349/0x880 [ 329.112559][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 329.118735][ T30] ? __pfx_panic+0x10/0x10 [ 329.123146][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 329.128514][ T30] ? __irq_work_queue_local+0x137/0x410 [ 329.134055][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 329.139428][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 329.145576][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 329.151727][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 329.157872][ T30] watchdog+0x1035/0x1040 [ 329.162191][ T30] ? watchdog+0x1ea/0x1040 [ 329.166606][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.171278][ T30] kthread+0x7a9/0x920 [ 329.175511][ T30] ? __pfx_kthread+0x10/0x10 [ 329.180091][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.184760][ T30] ? __pfx_kthread+0x10/0x10 [ 329.189338][ T30] ? __pfx_kthread+0x10/0x10 [ 329.193935][ T30] ? __pfx_kthread+0x10/0x10 [ 329.198517][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.203711][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 329.208900][ T30] ? __pfx_kthread+0x10/0x10 [ 329.213480][ T30] ret_from_fork+0x4b/0x80 [ 329.217882][ T30] ? __pfx_kthread+0x10/0x10 [ 329.222471][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.227278][ T30] [ 329.230650][ T30] Kernel Offset: disabled [ 329.234972][ T30] Rebooting in 86400 seconds..