last executing test programs: 11.398892657s ago: executing program 4 (id=301): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) socket(0x11, 0x800000003, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d08]}}]}}]}, 0x8c}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffe89}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000084) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$netrom(0xffffffffffffffff, &(0x7f0000000040)="b45438559944474f808cdb7d02f6a8b467e4c2885a72dfcd59f3443d3a8ce604091a9870fcc68c4614c0", 0x2a, 0xc000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0xa, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss, @mss={0x2, 0x9f3}, @sack_perm, @window, @window], 0x6) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@mss, @mss, @mss={0x2, 0x9f3}, @sack_perm, @window, @window], 0x6) pipe(&(0x7f0000000040)) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) 11.224238685s ago: executing program 4 (id=306): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x19, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x2b, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='afs_protocol_error\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003007767320000000000000000000000000008000a00", @ANYRES32, @ANYBLOB="59ee33468cc84aabf2068a2a636f18a2687f11b94e0010234af858c202537c"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 11.075928269s ago: executing program 4 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000012010000000900010073797a300000000040000000030a01020000010000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000003c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140004"], 0xc4}}, 0x0) 10.956950803s ago: executing program 4 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'dummy0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x2000000, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}}, 0x0) 10.928011799s ago: executing program 1 (id=314): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0xc, 0xc, 0x2, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) sendto$inet(r3, &(0x7f0000000300)="b2", 0x1, 0x8005, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "5ab3b7ccb150a4f8", "8b7e476094455a04734bd3fb730c41e0c041d250e01cac4ec428a91297175f10", "fa058e9c", "368e39a22013f3c2"}, 0x38) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x34, r9, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, r11, 0xc2ceef70f8d5bde5, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "6e572c73cbafadecc95d8074253a1c223c85dd0ecb50a7d732768c3bd5f0cff121befb1d6a70782f4472652f06424a00dbb222b0f9fd305c0aa768aed594f121370264e31ea5131a792cd59b28381749e41a3291e3b099fe93f3a8c1f641f42e5fcd2b440f55188c87bafb0282899e685c18d4eace0fe5c062091ea1e68d14693bd0223032c47fe7395d4cbe8f261c473cc35d53347d34d20c7973839fc763236173a461"}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24048804}, 0x20004881) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 10.739818708s ago: executing program 4 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0xa}, @nop]}}}}}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x9, 0x4) 7.258877995s ago: executing program 4 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socket$netlink(0x10, 0x3, 0x400000000000004) openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.io_service_bytes_recursive\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x108, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4189d866}}}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x70000000, 0x401, 0x1df, 0x6, 0x10001, 0x10, 0xff, 0x8, 0x8, 0xb4d1]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x89}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x170}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x451}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xea14}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1204"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETOFFLOAD(r7, 0x4010744d, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 6.721631303s ago: executing program 1 (id=329): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "1455e3495345bc02"}, 0x2}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "4c13bf04dd3419ac"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5a, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "23ba3b26618829db7ff0ea4b69ba651a04444ba4"}}]}, 0x164}}, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 6.338892284s ago: executing program 1 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'dummy0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x3000000, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}}, 0x0) 6.127781453s ago: executing program 1 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640), 0x300, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r7, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) listen(r4, 0x0) recvfrom(r4, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a300000000008000240000000012c000000030a03000000a7d07cd10000030000000900030073797a30000000000900010073797a30"], 0x9c}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0x2}}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 5.807625229s ago: executing program 2 (id=335): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) socket(0x1d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c000000000000000000ff010000000000000000000000000001"], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.639592028s ago: executing program 1 (id=336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x100}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8, 0x0, 0x11203}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0xfe80, 0x0, 0x800}, 0x0) 5.60494252s ago: executing program 0 (id=337): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x19, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003007767320000000000000000000000000008000a00", @ANYRES32, @ANYBLOB="59ee33468cc84aabf2068a2a636f18a2687f11b94e0010234af858c202537c"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 5.283942423s ago: executing program 0 (id=339): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) 5.1431172s ago: executing program 1 (id=341): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@broadcast, 0xffffaa7e}, {@local, 0x8001}]}, @generic={0x7, 0x4, "0990"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000086c0)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000088c0)=[{&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000008880)=""/29, 0x1d}], 0x2}, 0x6}, {{&(0x7f0000000400)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1, &(0x7f0000000500)=""/96, 0x60}, 0xffff}, {{&(0x7f0000000580)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/142, 0x8e}], 0x1, &(0x7f0000000700)=""/5, 0x5}, 0xffff}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/40, 0x28}, {&(0x7f00000008c0)=""/9, 0x9}, {&(0x7f0000000900)=""/105, 0x69}, {&(0x7f0000000980)=""/80, 0x50}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/14, 0xe}, {&(0x7f0000001a40)=""/20, 0x14}], 0x8, &(0x7f0000001b00)=""/241, 0xf1}, 0x4}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/146, 0x92}, {&(0x7f0000002cc0)=""/182, 0xb6}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/106, 0x6a}, {&(0x7f0000003e00)=""/124, 0x7c}], 0x6, &(0x7f0000003f00)=""/112, 0x70}, 0x3}, {{&(0x7f0000003f80)=@tipc, 0x80, &(0x7f0000006340)=[{&(0x7f0000004000)=""/195, 0xc3}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/178, 0xb2}, {&(0x7f00000051c0)=""/183, 0xb7}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/188, 0xbc}], 0x6, &(0x7f00000063c0)=""/4096, 0x1000}}, {{&(0x7f00000073c0)=@generic, 0x80, &(0x7f0000008640)=[{&(0x7f0000007440)=""/50, 0x32}, {&(0x7f0000007480)=""/165, 0xa5}, {&(0x7f0000007540)=""/236, 0xec}, {&(0x7f0000007640)=""/4096, 0x1000}], 0x4, &(0x7f0000008680)=""/17, 0x11}, 0x3}], 0x7, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80002005}) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000200)=[{r0, 0x110}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000003c0)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x40, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="9dfa5f8a"]}, @typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private1}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90d24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000089c0)=ANY=[@ANYBLOB="300000002c000100000000000000000008000000", @ANYRES32=r10, @ANYBLOB="0b000080976b6408686030000c00018008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}], 0x1}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008900)={0x0, 0x0, 0x0}, &(0x7f0000008940)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000008980)={r5, r10, r11}, 0xc) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x1, 0xbd62, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x20, 0x0, 0x10000}}) connect$packet(r12, &(0x7f0000000140)={0x11, 0xf7, r13, 0x1, 0x59, 0x6, @random="f8a27ce984a9"}, 0x14) 4.960629133s ago: executing program 0 (id=342): socket$inet(0xa, 0x801, 0x84) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x4, 0x7ec83d65, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd}, [@RTA_PREF={0x5, 0x14, 0x7f}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELRULE={0x78, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "df54fbb2e12970d8f3a7f879be9705ffb1549c22ad63c74fbb37960d7cc55810eb42422e3ff60094e77323d4e4f75ce3b19940ced003cf270eddac58c1676823c3ba7372796abc61c9b52f1d35a79e09bba6c682b2e5cbe70928d9f4b6"}]}], {0x14}}, 0xa0}}, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100)="315d933b02221a8956def8cdfe8dcfd41cfaf3dfc04889af606e1ecfab1bffa8fd01882483f8ebac47ffe971a9b5705ec608db0e6bcea187bfa36d66e501e93edcfba1330031a87eefec541d47159d1c3a231555fa5b0ad03f14036d022505160aabb0b9609a9d6dc4128b62491b7a46d5b23d310e720bffcb08f626656657759acbe3c3690adf0d06", 0x89, 0xc080, 0x0, 0x0) sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) r6 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000400) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.749457994s ago: executing program 2 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000001b010000000900010073797a300000000040000000030a01020000010000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000003c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140004"], 0xc4}}, 0x0) 4.445526372s ago: executing program 2 (id=345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x5}, 0x14}}, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev}}, 0x1e) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0b00000000000200000b03000000081401000000004030c21f51f657cffe8f8d32c6aa0a009b1e94b0d17fbc0f866390d3ba5072bdaa4837fe979ba46ceadc1848c970042666ba07c288c8e2504dbd4ef663998327181acbcabb1eaa29a75552b72ee6edc65f6581ed79bb7f8cdd3d9b79e10756b8377c83ca02e90a4e30341ff3ce7471a1b220c6f4287b5f684ec27c3ba1974d203840755b13632bd5be9e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) vmsplice(r4, &(0x7f0000000680), 0x10000000000000ef, 0x0) sendto$packet(r4, &(0x7f00000000c0)="57688b444ca1c0c9d804746f24b4caeba71c74b9d4c6d0cd4c0e2ece00aadd624a873a494ce90ee31fc7c93e6f0dbeec", 0x30, 0x20004000, &(0x7f0000000100)={0x11, 0xf5, 0x0, 0x1, 0x43, 0x6, @local}, 0x14) 4.363010786s ago: executing program 3 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket(0x10, 0x803, 0x74) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="54000000958f289054f8ec4ff5b25fdeafd0ca1c700ecff97c9d2f35883daaab70d13d016e8dcbdf4d00a8c0990cd6a4c5a7ea13f4233fdf38576afd155e49cc209792d21c16feabfdd57bc10c4f23af96d2d7b1d8a1091861356493cd5cadceb08338288c02ac", @ANYRES16, @ANYBLOB="000428bd7000fbdbdf250400000008000600", @ANYRES32=r5, @ANYBLOB="08002c000400000008002c000000010005002900010000000800320006000000080031"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000008, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000080000900020073797a30000000000800410073697700140033006c6f"], 0x38}}, 0x0) 4.159567746s ago: executing program 0 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640), 0x300, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r7, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) listen(r4, 0x0) recvfrom(r4, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a0b04000000000000000002000000cc00048024000180090001006d65746100000000140002800800024000000020080001400000000c940001800a00010072616e676500000084000280380004803400028008000340000000080900020073797a32000000000900020073797a300000000008000180fffffffb0800034000000007480004804400028008000180fffffffc0900020073797a300000000008000340000000040900020073797a310000000008000180ffffffff08000340000000010800018000000003100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x120}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a300000000008000240000000012c000000030a03000000a7d07cd10000030000000900030073797a30000000000900010073797a30"], 0x9c}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0x2}}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 4.062622932s ago: executing program 2 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'dummy0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x0, 0x148, 0x0, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x4000000, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}}, 0x0) 3.791914399s ago: executing program 0 (id=349): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x19, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003007767320000000000000000000000000008000a00", @ANYRES32, @ANYBLOB="59ee33468cc84aabf2068a2a636f18a2687f11b94e0010234af858c202537c"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3.659032543s ago: executing program 2 (id=350): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000800b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.603007534s ago: executing program 0 (id=351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.48954484s ago: executing program 2 (id=352): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000fdffffff03000000020000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="02030c65be4002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x38}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) 2.62303695s ago: executing program 3 (id=353): r0 = socket$inet6(0xa, 0x1, 0x1ff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r1, 0x3}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r3) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) accept4(r2, &(0x7f00000000c0)=@isdn, &(0x7f0000000040)=0x80, 0x80000) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 291.542437ms ago: executing program 3 (id=354): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x3, 0x5, 0xd8b7, 0x3}, 0x10) accept4$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "175d277c7a"}}}}}}, 0x0) r3 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x25, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 180.08161ms ago: executing program 3 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0008036d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 58.449476ms ago: executing program 3 (id=356): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x8, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000040)=""/107, 0x27, 0x6b, 0x0, 0x9e3, 0x0, @void, @value}, 0x28) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}]}, 0x1c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000000000000700"], 0x18}], 0x1}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x47}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=357): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket(0x1e, 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x104, 0xc, "bba15474b0f9620113dd0e18e1ba21b3ef374321c68b59cefefb6cfa877f833c2c662f93e0b22f7be4f870ced3099e018b41ce37b40eba4399c4bffeab9128568c57c7daa596bb6ac2f3f0a067a7e99b919b36e612bf50bb228d7090decf8f0b008dfa2ff6d1ddc59223782878adf0f3cce141452a68f5b0bb69bd4f1616aa81a226e8b1724a35f95ccd3aca8cac8e442dbc2c6fcec2088f4805417559e32fff43aa2e6a0634776837e798d4df78efe7bcc7367aaf9acf6274d591ec0f7a1e5dd5079c66709afb7057c1103977c15f459ce2475693a3ab3beb85c941dd41fa26b497a4b47f2a614e677b894fdafdc42c82e034d77494aa59fc38b360f86c2a34"}]}], {0x14}}, 0x198}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvfrom$packet(r1, &(0x7f0000000840)=""/4096, 0x1000, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000540), 0xc) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000000)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5900000002060108000000000000000000000000140007800800114000000000050015000d0000000500010026000000050005000a00000005000400000000000d000300686173683a6e6574000000000900020073797a3200"], 0x5c}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 65.522484][ T5216] cgroup: Unknown subsys name 'net' [ 65.669983][ T5216] cgroup: Unknown subsys name 'cpuset' [ 65.679265][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.226227][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.461780][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.490776][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.498979][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.514169][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.523120][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.530587][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.539156][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.547178][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.556687][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.564676][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.572716][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.587601][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.589189][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.609199][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.623086][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.626784][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.638544][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.642586][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.653461][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.662068][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.669887][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.677428][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.685659][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.685981][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.693925][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.707349][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.708944][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.722946][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.731932][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.740131][ T4622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.058375][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 70.119151][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 70.285839][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 70.305599][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.313937][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.321826][ T5231] bridge_slave_0: entered allmulticast mode [ 70.329161][ T5231] bridge_slave_0: entered promiscuous mode [ 70.339367][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.346804][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.354263][ T5231] bridge_slave_1: entered allmulticast mode [ 70.361258][ T5231] bridge_slave_1: entered promiscuous mode [ 70.440301][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 70.460381][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.469000][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.476262][ T5226] bridge_slave_0: entered allmulticast mode [ 70.486080][ T5226] bridge_slave_0: entered promiscuous mode [ 70.497729][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.512670][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.543202][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.551216][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.559005][ T5226] bridge_slave_1: entered allmulticast mode [ 70.565785][ T5226] bridge_slave_1: entered promiscuous mode [ 70.608085][ T5231] team0: Port device team_slave_0 added [ 70.632621][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.642037][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 70.654975][ T5231] team0: Port device team_slave_1 added [ 70.669145][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.676248][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.683970][ T5229] bridge_slave_0: entered allmulticast mode [ 70.690923][ T5229] bridge_slave_0: entered promiscuous mode [ 70.719934][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.749459][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.756854][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.764071][ T5229] bridge_slave_1: entered allmulticast mode [ 70.771289][ T5229] bridge_slave_1: entered promiscuous mode [ 70.797655][ T5226] team0: Port device team_slave_0 added [ 70.804641][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.811864][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.837984][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.851382][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.858428][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.884883][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.936212][ T5226] team0: Port device team_slave_1 added [ 70.980982][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.988679][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.995866][ T5233] bridge_slave_0: entered allmulticast mode [ 71.002974][ T5233] bridge_slave_0: entered promiscuous mode [ 71.035744][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.042883][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.069848][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.083459][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.095526][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.105034][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.113057][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.120671][ T5233] bridge_slave_1: entered allmulticast mode [ 71.128109][ T5233] bridge_slave_1: entered promiscuous mode [ 71.141690][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.148741][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.174838][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.245390][ T5231] hsr_slave_0: entered promiscuous mode [ 71.255375][ T5231] hsr_slave_1: entered promiscuous mode [ 71.265566][ T5229] team0: Port device team_slave_0 added [ 71.274417][ T5229] team0: Port device team_slave_1 added [ 71.335475][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.345312][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.356865][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.364099][ T5236] bridge_slave_0: entered allmulticast mode [ 71.371434][ T5236] bridge_slave_0: entered promiscuous mode [ 71.380744][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.388242][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.395501][ T5236] bridge_slave_1: entered allmulticast mode [ 71.402704][ T5236] bridge_slave_1: entered promiscuous mode [ 71.420828][ T5226] hsr_slave_0: entered promiscuous mode [ 71.428241][ T5226] hsr_slave_1: entered promiscuous mode [ 71.434501][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.442787][ T5226] Cannot create hsr debugfs directory [ 71.449067][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.456039][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.482776][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.496110][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.540397][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.547633][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.573819][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.599446][ T5230] Bluetooth: hci2: command tx timeout [ 71.633730][ T5233] team0: Port device team_slave_0 added [ 71.643712][ T5233] team0: Port device team_slave_1 added [ 71.651741][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.680334][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.690158][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.715282][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.742798][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.750566][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.776919][ T5230] Bluetooth: hci0: command tx timeout [ 71.782761][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.820766][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.831580][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.857981][ T5230] Bluetooth: hci4: command tx timeout [ 71.858248][ T5230] Bluetooth: hci1: command tx timeout [ 71.863832][ T4622] Bluetooth: hci3: command tx timeout [ 71.875071][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.929060][ T5229] hsr_slave_0: entered promiscuous mode [ 71.937776][ T5229] hsr_slave_1: entered promiscuous mode [ 71.943966][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.951897][ T5229] Cannot create hsr debugfs directory [ 71.970845][ T5236] team0: Port device team_slave_0 added [ 71.980183][ T5233] hsr_slave_0: entered promiscuous mode [ 71.987372][ T5233] hsr_slave_1: entered promiscuous mode [ 71.993580][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.001341][ T5233] Cannot create hsr debugfs directory [ 72.020654][ T5236] team0: Port device team_slave_1 added [ 72.099219][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.106213][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.133007][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.195167][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.202248][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.228711][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.342257][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.378235][ T5236] hsr_slave_0: entered promiscuous mode [ 72.384464][ T5236] hsr_slave_1: entered promiscuous mode [ 72.392855][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.400925][ T5236] Cannot create hsr debugfs directory [ 72.421024][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.450356][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.484445][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.574099][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.591098][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.612897][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.634389][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.660968][ T5233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.683278][ T5233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.696005][ T5233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.707210][ T5233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.773934][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.810893][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.824434][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.855407][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.925069][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.941085][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.954509][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.991450][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.010918][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.076498][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.110683][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.131851][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.152865][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.160254][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.200366][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.207531][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.228660][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.244792][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.261366][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.268535][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.301035][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.338227][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.345353][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.374251][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.404000][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.411212][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.430357][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.437524][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.450536][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.457734][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.470708][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.477901][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.498092][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.622410][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.650286][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.677076][ T4622] Bluetooth: hci2: command tx timeout [ 73.700835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.708033][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.721388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.728851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.766481][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.837005][ T4622] Bluetooth: hci0: command tx timeout [ 73.917451][ T4622] Bluetooth: hci3: command tx timeout [ 73.921979][ T5230] Bluetooth: hci4: command tx timeout [ 73.922886][ T5234] Bluetooth: hci1: command tx timeout [ 73.993824][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.164802][ T5226] veth0_vlan: entered promiscuous mode [ 74.211763][ T5226] veth1_vlan: entered promiscuous mode [ 74.230779][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.289825][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.338243][ T5226] veth0_macvtap: entered promiscuous mode [ 74.360906][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.381747][ T5226] veth1_macvtap: entered promiscuous mode [ 74.438998][ T5229] veth0_vlan: entered promiscuous mode [ 74.474509][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.520681][ T5236] veth0_vlan: entered promiscuous mode [ 74.540954][ T5231] veth0_vlan: entered promiscuous mode [ 74.548652][ T5229] veth1_vlan: entered promiscuous mode [ 74.561238][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.574669][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.584977][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.594466][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.604697][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.627335][ T5233] veth0_vlan: entered promiscuous mode [ 74.644243][ T5236] veth1_vlan: entered promiscuous mode [ 74.654797][ T5231] veth1_vlan: entered promiscuous mode [ 74.670245][ T5233] veth1_vlan: entered promiscuous mode [ 74.767077][ T5229] veth0_macvtap: entered promiscuous mode [ 74.807718][ T5231] veth0_macvtap: entered promiscuous mode [ 74.823010][ T5229] veth1_macvtap: entered promiscuous mode [ 74.838256][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.846330][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.847949][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.865412][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.878440][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.888206][ T5231] veth1_macvtap: entered promiscuous mode [ 74.921195][ T5236] veth0_macvtap: entered promiscuous mode [ 74.939592][ T5236] veth1_macvtap: entered promiscuous mode [ 74.950602][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.959123][ T5233] veth0_macvtap: entered promiscuous mode [ 74.966203][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.978835][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.981169][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.990751][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.018555][ T5233] veth1_macvtap: entered promiscuous mode [ 75.043424][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052452][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.062709][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071757][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.094820][ T5226] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.098888][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.123551][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.133556][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.144121][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.158781][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.174050][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.189158][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.199852][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.210857][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.220812][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.231403][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.242849][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.265574][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.295007][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.313894][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.324830][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.336401][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.345037][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.355927][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.367219][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.377856][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.388085][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.399245][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.409732][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.420456][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.434882][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.452614][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.463384][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.473294][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.483939][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.493861][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.504539][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.516190][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.532102][ T5311] bridge_slave_0: left allmulticast mode [ 75.538149][ T5311] bridge_slave_0: left promiscuous mode [ 75.544714][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.556115][ T5311] bridge_slave_1: left allmulticast mode [ 75.570315][ T5311] bridge_slave_1: left promiscuous mode [ 75.576160][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.592748][ T5311] bond0: (slave bond_slave_0): Releasing backup interface [ 75.604961][ T5311] bond0: (slave bond_slave_1): Releasing backup interface [ 75.627260][ T5311] team0: Port device team_slave_0 removed [ 75.640052][ T5311] team0: Port device team_slave_1 removed [ 75.646469][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.654247][ T5311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.663424][ T5311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.672065][ T5311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.692184][ T5312] wg2: entered promiscuous mode [ 75.714125][ T5312] team0: Port device wg2 added [ 75.735070][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.746032][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.755946][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.757972][ T4622] Bluetooth: hci2: command tx timeout [ 75.767102][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.781721][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.792244][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.804743][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.820180][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.833622][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.843090][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.852063][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.871884][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.884644][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.893591][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.904500][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.917629][ T4622] Bluetooth: hci0: command tx timeout [ 75.918146][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.939151][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.952729][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.961858][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.984036][ T5315] hsr0: entered promiscuous mode [ 76.000680][ T4622] Bluetooth: hci3: command tx timeout [ 76.006138][ T4622] Bluetooth: hci1: command tx timeout [ 76.007813][ T5234] Bluetooth: hci4: command tx timeout [ 76.062581][ T5317] netlink: 'syz.1.6': attribute type 9 has an invalid length. [ 76.155676][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.178405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.286154][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.319828][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.362701][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.371277][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.475616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.475717][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.486469][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.508620][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.578376][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.608506][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.627242][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.649713][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.738818][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.746762][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.977688][ T5334] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 77.074188][ T5334] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.093958][ T5333] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 77.140709][ T5333] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.255941][ T5347] Bluetooth: MGMT ver 1.23 [ 77.525792][ T5352] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.745268][ T5358] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 77.809061][ T5358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.839705][ T5234] Bluetooth: hci2: command tx timeout [ 77.972006][ T5368] hsr0: entered promiscuous mode [ 78.001926][ T5234] Bluetooth: hci0: command tx timeout [ 78.051502][ T5370] netlink: 'syz.0.13': attribute type 9 has an invalid length. [ 78.062624][ T5370] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.077211][ T5234] Bluetooth: hci1: command tx timeout [ 78.088508][ T5230] Bluetooth: hci3: command tx timeout [ 78.094681][ T5234] Bluetooth: hci4: command tx timeout [ 78.123281][ T5372] netlink: 'syz.2.12': attribute type 9 has an invalid length. [ 78.131855][ T5372] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.12'. [ 78.142485][ T5372] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 78.159547][ T5364] hsr0: entered promiscuous mode [ 78.301625][ T5374] netlink: 'syz.1.14': attribute type 9 has an invalid length. [ 78.328455][ T5374] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.14'. [ 78.950158][ T5396] Zero length message leads to an empty skb [ 79.243819][ T5380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 79.315845][ T5380] lo speed is unknown, defaulting to 1000 [ 79.386199][ T5380] lo speed is unknown, defaulting to 1000 [ 79.431300][ T5380] lo speed is unknown, defaulting to 1000 [ 79.506002][ T5380] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.530004][ T5380] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 79.580049][ T5380] lo speed is unknown, defaulting to 1000 [ 79.603028][ T5380] lo speed is unknown, defaulting to 1000 [ 79.620594][ T5380] lo speed is unknown, defaulting to 1000 [ 79.647356][ T5380] lo speed is unknown, defaulting to 1000 [ 79.666357][ T5380] lo speed is unknown, defaulting to 1000 [ 79.695910][ T5380] lo speed is unknown, defaulting to 1000 [ 79.718382][ T5380] lo speed is unknown, defaulting to 1000 [ 79.757717][ T5380] lo speed is unknown, defaulting to 1000 [ 79.769635][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.830618][ T5388] siw: device registration error -23 [ 79.884732][ T5412] lo speed is unknown, defaulting to 1000 [ 80.719623][ T5412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 80.795839][ T5412] lo speed is unknown, defaulting to 1000 [ 80.810426][ T5412] lo speed is unknown, defaulting to 1000 [ 81.103055][ T5412] lo speed is unknown, defaulting to 1000 [ 81.130334][ T5412] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 81.206228][ T5439] lo speed is unknown, defaulting to 1000 [ 81.223265][ T5412] lo speed is unknown, defaulting to 1000 [ 81.248634][ T5440] lo speed is unknown, defaulting to 1000 [ 81.331401][ T5444] lo speed is unknown, defaulting to 1000 [ 81.396184][ T5412] lo speed is unknown, defaulting to 1000 [ 81.432058][ T5412] lo speed is unknown, defaulting to 1000 [ 81.486195][ T5412] lo speed is unknown, defaulting to 1000 [ 81.514079][ T5412] lo speed is unknown, defaulting to 1000 [ 81.568820][ T5412] lo speed is unknown, defaulting to 1000 [ 81.575850][ T5412] lo speed is unknown, defaulting to 1000 [ 81.617765][ T5412] lo speed is unknown, defaulting to 1000 [ 81.730919][ T5451] hsr0: entered promiscuous mode [ 81.835749][ T5453] netlink: 'syz.3.30': attribute type 9 has an invalid length. [ 81.839187][ T5444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.29'. [ 81.854624][ T5453] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.931948][ T5444] siw: device registration error -23 [ 82.656918][ T5469] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 82.877115][ T5478] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 82.971391][ T5488] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.35'. [ 82.999364][ T5488] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 83.061794][ T5490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.127841][ T5487] bridge_slave_0: left allmulticast mode [ 83.139310][ T5487] bridge_slave_0: left promiscuous mode [ 83.159347][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.195357][ T5487] bridge_slave_1: left allmulticast mode [ 83.202064][ T5487] bridge_slave_1: left promiscuous mode [ 83.216311][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.231019][ T5487] bond0: (slave bond_slave_0): Releasing backup interface [ 83.244023][ T5487] bond0: (slave bond_slave_1): Releasing backup interface [ 83.289546][ T5487] team0: Port device team_slave_0 removed [ 83.302715][ T5492] netlink: 'syz.3.37': attribute type 3 has an invalid length. [ 83.317178][ T5487] team0: Port device team_slave_1 removed [ 83.323542][ T5492] netlink: 'syz.3.37': attribute type 11 has an invalid length. [ 83.335975][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.347410][ T5492] netlink: 107460 bytes leftover after parsing attributes in process `syz.3.37'. [ 83.364138][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.374982][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.390934][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.415925][ T5489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 83.471721][ T5495] lo speed is unknown, defaulting to 1000 [ 83.913101][ T5511] bond0: (slave dummy0): Releasing backup interface [ 83.931592][ T5511] bridge_slave_0: left allmulticast mode [ 83.937937][ T5511] bridge_slave_0: left promiscuous mode [ 83.944190][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.960105][ T5511] bridge_slave_1: left allmulticast mode [ 83.967476][ T5511] bridge_slave_1: left promiscuous mode [ 83.973795][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.990100][ T5511] bond0: (slave bond_slave_0): Releasing backup interface [ 84.005204][ T5511] bond0: (slave bond_slave_1): Releasing backup interface [ 84.048072][ T5511] team0: Port device team_slave_0 removed [ 84.065399][ T5511] team0: Port device team_slave_1 removed [ 84.072658][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.082085][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.091511][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.099553][ T5511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.119444][ T5513] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 84.168962][ T5516] wg2: entered promiscuous mode [ 84.193790][ T5516] team0: Port device wg2 added [ 84.202209][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 84.589289][ T5526] netlink: 'syz.4.44': attribute type 3 has an invalid length. [ 84.631409][ T5526] netlink: 'syz.4.44': attribute type 11 has an invalid length. [ 84.679803][ T5526] netlink: 107460 bytes leftover after parsing attributes in process `syz.4.44'. [ 84.775945][ T5534] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 84.855323][ T5534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.203244][ T5550] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 85.370199][ T5555] lo speed is unknown, defaulting to 1000 [ 85.719587][ T5563] lo speed is unknown, defaulting to 1000 [ 85.828233][ T5566] lo speed is unknown, defaulting to 1000 [ 86.084975][ T5574] hsr0: entered promiscuous mode [ 86.159122][ T5574] netlink: 'syz.4.55': attribute type 9 has an invalid length. [ 86.167323][ T5574] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.55'. [ 86.176645][ T5574] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 86.830596][ T5598] netlink: 'syz.2.57': attribute type 9 has an invalid length. [ 86.845659][ T5598] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.57'. [ 86.920082][ T5607] netlink: 'syz.4.58': attribute type 9 has an invalid length. [ 87.052517][ T8] cfg80211: failed to load regulatory.db [ 87.186823][ T5609] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 87.585120][ T5618] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 87.662071][ T5631] lo speed is unknown, defaulting to 1000 [ 87.906384][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 87.948163][ T5641] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 88.362043][ T5653] lo speed is unknown, defaulting to 1000 [ 89.028921][ T5681] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 89.081688][ T5681] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.115676][ T5653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 89.490076][ T5695] lo speed is unknown, defaulting to 1000 [ 89.740161][ T5701] lo speed is unknown, defaulting to 1000 [ 90.355880][ T5720] bond0: (slave dummy0): Releasing backup interface [ 90.390973][ T5720] bridge_slave_0: left allmulticast mode [ 90.397106][ T5720] bridge_slave_0: left promiscuous mode [ 90.403133][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.415049][ T5720] bridge_slave_1: left allmulticast mode [ 90.445321][ T5720] bridge_slave_1: left promiscuous mode [ 90.463183][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.507216][ T5720] bond0: (slave bond_slave_0): Releasing backup interface [ 90.524587][ T5720] bond0: (slave bond_slave_1): Releasing backup interface [ 90.574521][ T5720] team0: Port device team_slave_0 removed [ 90.594265][ T5720] team0: Port device team_slave_1 removed [ 90.601786][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.610464][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.620048][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.629161][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.672210][ T5724] wg2: entered promiscuous mode [ 90.710424][ T5724] team0: Port device wg2 added [ 91.021633][ T5738] netlink: 'syz.4.81': attribute type 10 has an invalid length. [ 91.066063][ T5731] lo speed is unknown, defaulting to 1000 [ 91.593018][ T5731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 91.834316][ T5755] lo speed is unknown, defaulting to 1000 [ 92.154191][ T5763] lo speed is unknown, defaulting to 1000 [ 92.599020][ T5755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 92.644180][ T5755] siw: device registration error -23 [ 92.682467][ T5778] lo speed is unknown, defaulting to 1000 [ 93.379450][ T5800] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 93.868386][ T5809] lo speed is unknown, defaulting to 1000 [ 94.043241][ T5811] lo speed is unknown, defaulting to 1000 [ 94.421890][ T5815] lo speed is unknown, defaulting to 1000 [ 94.469693][ T5818] lo speed is unknown, defaulting to 1000 [ 94.486682][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 94.741340][ T5812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'. [ 95.477634][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 95.489275][ T5851] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 95.836747][ T5853] lo speed is unknown, defaulting to 1000 [ 96.110159][ T5859] lo speed is unknown, defaulting to 1000 [ 96.217887][ T5865] lo speed is unknown, defaulting to 1000 [ 96.391642][ T5854] siw: device registration error -23 [ 96.562433][ T5867] netlink: 'syz.2.107': attribute type 10 has an invalid length. [ 96.584662][ T5867] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.635073][ T5853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.104'. [ 96.764194][ T5875] lo speed is unknown, defaulting to 1000 [ 96.836604][ T5877] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 96.950294][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.106'. [ 97.149461][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 97.191115][ T5865] siw: device registration error -23 [ 97.472748][ T5887] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 97.753813][ T5904] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 97.899432][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 98.210270][ T5909] netlink: 'syz.4.115': attribute type 10 has an invalid length. [ 98.237733][ T5919] team0: Port device wg2 removed [ 98.454900][ T5922] netlink: 120 bytes leftover after parsing attributes in process `syz.1.117'. [ 98.467650][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 98.483478][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 98.715672][ T5931] lo speed is unknown, defaulting to 1000 [ 99.139749][ T5945] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 99.215992][ T5958] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 99.735823][ T5971] netlink: 'syz.1.127': attribute type 10 has an invalid length. [ 99.974300][ T5974] lo speed is unknown, defaulting to 1000 [ 100.016292][ T5982] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 100.261717][ T5988] lo speed is unknown, defaulting to 1000 [ 100.478627][ T5992] lo speed is unknown, defaulting to 1000 [ 100.628048][ T5996] lo speed is unknown, defaulting to 1000 [ 100.912252][ T6002] lo speed is unknown, defaulting to 1000 [ 101.059223][ T5988] __nla_validate_parse: 1 callbacks suppressed [ 101.059247][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 101.124256][ T5988] siw: device registration error -23 [ 101.145457][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 101.218186][ T6002] siw: device registration error -23 [ 101.765016][ T6023] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 102.214730][ T6034] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 102.284137][ T6039] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 102.901757][ T6046] lo speed is unknown, defaulting to 1000 [ 102.908197][ T6049] netlink: 'syz.3.141': attribute type 15 has an invalid length. [ 103.084623][ T6058] lo speed is unknown, defaulting to 1000 [ 103.497764][ T6062] lo speed is unknown, defaulting to 1000 [ 103.701455][ T6064] lo speed is unknown, defaulting to 1000 [ 104.627791][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 104.639535][ T6096] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 104.705023][ T6096] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.721356][ T6096] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.837862][ T6100] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 104.859371][ T6100] bond0: (slave team0): Releasing backup interface [ 104.893230][ T6100] bridge0: port 3(team0) entered blocking state [ 104.912498][ T6100] bridge0: port 3(team0) entered disabled state [ 104.930964][ T6100] team0: entered allmulticast mode [ 104.936173][ T6100] team_slave_0: entered allmulticast mode [ 104.961622][ T6100] team_slave_1: entered allmulticast mode [ 104.972960][ T6100] team0: entered promiscuous mode [ 104.978322][ T6100] team_slave_0: entered promiscuous mode [ 104.985087][ T6100] team_slave_1: entered promiscuous mode [ 105.089748][ T6114] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 105.110961][ T6114] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.212176][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 105.263755][ T6116] lo speed is unknown, defaulting to 1000 [ 105.681629][ T6136] lo speed is unknown, defaulting to 1000 [ 105.759405][ T6139] lo speed is unknown, defaulting to 1000 [ 106.175918][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'. [ 106.204094][ T6154] netlink: 'syz.3.158': attribute type 9 has an invalid length. [ 106.227200][ T6154] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.158'. [ 106.930791][ T6172] lo speed is unknown, defaulting to 1000 [ 106.985469][ T6177] lo speed is unknown, defaulting to 1000 [ 107.210153][ T6180] lo speed is unknown, defaulting to 1000 [ 107.723214][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 107.889866][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 107.905600][ T6172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'. [ 107.937794][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 107.963513][ T6180] siw: device registration error -23 [ 108.566321][ T6209] netlink: 'syz.2.167': attribute type 10 has an invalid length. [ 108.586564][ T6210] netlink: 'syz.4.168': attribute type 10 has an invalid length. [ 108.673648][ T6216] lo speed is unknown, defaulting to 1000 [ 108.764067][ T6227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.797654][ T5234] Bluetooth: hci4: command tx timeout [ 108.818059][ T6226] netlink: 'syz.0.172': attribute type 9 has an invalid length. [ 108.838588][ T6226] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.172'. [ 108.931035][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 108.946074][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 109.245418][ T6247] lo speed is unknown, defaulting to 1000 [ 109.607125][ T6251] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 109.671418][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 109.733243][ T6253] lo speed is unknown, defaulting to 1000 [ 109.855602][ T6263] netlink: 'syz.4.183': attribute type 10 has an invalid length. [ 110.340897][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 110.421344][ T6284] FAULT_INJECTION: forcing a failure. [ 110.421344][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.459334][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.3.190 Not tainted 6.11.0-syzkaller-11516-g6b67e098c9c9 #0 [ 110.469677][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.479832][ T6284] Call Trace: [ 110.483168][ T6284] [ 110.486145][ T6284] dump_stack_lvl+0x241/0x360 [ 110.490902][ T6284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.496155][ T6284] ? __pfx__printk+0x10/0x10 [ 110.500801][ T6284] ? __pfx_lock_release+0x10/0x10 [ 110.505894][ T6284] should_fail_ex+0x3b0/0x4e0 [ 110.510628][ T6284] _copy_from_iter+0x1ed/0x1d60 [ 110.515521][ T6284] ? __virt_addr_valid+0x183/0x530 [ 110.520677][ T6284] ? __pfx_lock_release+0x10/0x10 [ 110.525779][ T6284] ? __alloc_skb+0x2d5/0x440 [ 110.530438][ T6284] ? __pfx__copy_from_iter+0x10/0x10 [ 110.535778][ T6284] ? __virt_addr_valid+0x183/0x530 [ 110.540940][ T6284] ? __virt_addr_valid+0x183/0x530 [ 110.546095][ T6284] ? __virt_addr_valid+0x45f/0x530 [ 110.551257][ T6284] ? __check_object_size+0x48e/0x900 [ 110.556608][ T6284] tipc_msg_build+0x488/0x1070 [ 110.561437][ T6284] ? net_generic+0x1f/0x240 [ 110.565986][ T6284] ? __pfx_lock_release+0x10/0x10 [ 110.571059][ T6284] ? __pfx_tipc_msg_build+0x10/0x10 [ 110.576277][ T6284] ? tipc_group_bc_cong+0x1d0/0x290 [ 110.581520][ T6284] tipc_send_group_bcast+0x889/0xbd0 [ 110.586861][ T6284] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 110.592695][ T6284] ? hlock_conflict+0x59/0x1e0 [ 110.597474][ T6284] ? __pfx_woken_wake_function+0x10/0x10 [ 110.603137][ T6284] __tipc_sendmsg+0x363/0x35f0 [ 110.607928][ T6284] ? check_path+0x21/0x40 [ 110.612268][ T6284] ? check_noncircular+0x259/0x4a0 [ 110.617396][ T6284] ? __pfx_check_noncircular+0x10/0x10 [ 110.622869][ T6284] ? __pfx___tipc_sendmsg+0x10/0x10 [ 110.628085][ T6284] ? lockdep_unlock+0x16a/0x300 [ 110.632955][ T6284] ? __pfx_lockdep_unlock+0x10/0x10 [ 110.638175][ T6284] ? __kernel_text_address+0xd/0x40 [ 110.643388][ T6284] ? unwind_get_return_address+0x4d/0x90 [ 110.649129][ T6284] ? __pfx_validate_chain+0x10/0x10 [ 110.654344][ T6284] ? mark_lock+0x9a/0x360 [ 110.658714][ T6284] ? __lock_acquire+0x1384/0x2050 [ 110.663776][ T6284] ? mark_lock+0x9a/0x360 [ 110.668119][ T6284] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.674122][ T6284] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.680475][ T6284] ? __local_bh_enable_ip+0x168/0x200 [ 110.685866][ T6284] ? tipc_sendmsg+0x47/0x70 [ 110.690387][ T6284] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 110.696121][ T6284] ? do_raw_spin_unlock+0x13c/0x8b0 [ 110.701341][ T6284] ? __pfx_tipc_sendmsg+0x10/0x10 [ 110.706462][ T6284] tipc_sendmsg+0x55/0x70 [ 110.710808][ T6284] __sock_sendmsg+0x221/0x270 [ 110.715505][ T6284] ____sys_sendmsg+0x52a/0x7e0 [ 110.720288][ T6284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.725693][ T6284] __sys_sendmmsg+0x3ab/0x730 [ 110.730391][ T6284] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.735615][ T6284] ? __pfx_lock_release+0x10/0x10 [ 110.740666][ T6284] ? kstrtouint_from_user+0x128/0x190 [ 110.746080][ T6284] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 110.751992][ T6284] ? ksys_write+0x229/0x2b0 [ 110.756519][ T6284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.762257][ T6284] ? __pfx_lock_release+0x10/0x10 [ 110.767306][ T6284] ? vfs_write+0x282/0xc90 [ 110.771747][ T6284] ? vfs_write+0x7bf/0xc90 [ 110.776182][ T6284] ? kmem_cache_free+0x1a2/0x420 [ 110.781168][ T6284] ? __mutex_unlock_slowpath+0x21d/0x750 [ 110.786821][ T6284] ? __fget_files+0x3f3/0x470 [ 110.791609][ T6284] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.797631][ T6284] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.804079][ T6284] ? do_syscall_64+0x100/0x230 [ 110.808959][ T6284] __x64_sys_sendmmsg+0xa0/0xb0 [ 110.813849][ T6284] do_syscall_64+0xf3/0x230 [ 110.818396][ T6284] ? clear_bhb_loop+0x35/0x90 [ 110.823091][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.829007][ T6284] RIP: 0033:0x7f78c957dff9 [ 110.833453][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.853102][ T6284] RSP: 002b:00007f78ca39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.861538][ T6284] RAX: ffffffffffffffda RBX: 00007f78c9735f80 RCX: 00007f78c957dff9 [ 110.869647][ T6284] RDX: 00000000000101d0 RSI: 00000000200030c0 RDI: 0000000000000003 [ 110.877634][ T6284] RBP: 00007f78ca39b090 R08: 0000000000000000 R09: 0000000000000000 [ 110.885638][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.893629][ T6284] R13: 0000000000000000 R14: 00007f78c9735f80 R15: 00007ffce7553bf8 [ 110.901639][ T6284] [ 111.399453][ T6312] __nla_validate_parse: 3 callbacks suppressed [ 111.399476][ T6312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.198'. [ 111.421540][ T6312] netlink: 'syz.4.198': attribute type 8 has an invalid length. [ 111.554133][ T6305] syzkaller0: entered promiscuous mode [ 111.566882][ T6305] syzkaller0: entered allmulticast mode [ 111.800044][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.204'. [ 113.341266][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.349613][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.368454][ T6334] netlink: 'syz.1.205': attribute type 10 has an invalid length. [ 113.376421][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 114.049508][ T6381] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 114.201848][ T6391] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 114.228200][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.235395][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.242972][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.250196][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.264273][ T6391] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.324993][ T6400] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.222'. [ 114.727379][ T6422] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 114.729103][ T6423] netlink: 156 bytes leftover after parsing attributes in process `syz.2.226'. [ 114.798705][ T6411] netlink: 'syz.2.226': attribute type 15 has an invalid length. [ 115.003369][ T6430] dccp_close: ABORT with 1 bytes unread [ 115.189916][ T6441] lo speed is unknown, defaulting to 1000 [ 115.299149][ T6448] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.236'. [ 115.429373][ T6453] lo speed is unknown, defaulting to 1000 [ 115.576301][ T6459] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 115.770895][ T6466] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 115.799802][ T6466] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 115.953515][ T6441] netlink: 236 bytes leftover after parsing attributes in process `syz.3.235'. [ 115.991215][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 116.020389][ T6441] siw: device registration error -23 [ 116.578745][ T6489] gre2: entered promiscuous mode [ 116.583945][ T6489] gre2: entered allmulticast mode [ 116.641044][ T6493] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.249'. [ 116.664772][ T6496] geneve2: entered promiscuous mode [ 116.689600][ T6496] geneve2: entered allmulticast mode [ 116.712450][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 116.915853][ T6511] pim6reg1: entered promiscuous mode [ 116.922426][ T6511] pim6reg1: entered allmulticast mode [ 116.983770][ T6509] lo speed is unknown, defaulting to 1000 [ 117.161045][ T6521] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.265'. [ 117.191098][ T6525] lo speed is unknown, defaulting to 1000 [ 117.344414][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'. [ 117.634668][ T6543] vlan2: entered allmulticast mode [ 117.664657][ T6543] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 117.972380][ T6525] netlink: 236 bytes leftover after parsing attributes in process `syz.4.256'. [ 117.981575][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 118.092986][ T6527] siw: device registration error -23 [ 118.140638][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.256'. [ 118.159566][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 118.327837][ T6568] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.269'. [ 118.888462][ T6597] netlink: 'syz.4.273': attribute type 10 has an invalid length. [ 118.976242][ T6603] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.036146][ T6610] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 119.083656][ T6610] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 119.235998][ T6625] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.282'. [ 119.718116][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.753582][ T6649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.788847][ T6658] xt_l2tp: invalid flags combination: 0 [ 119.950592][ T6656] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 120.064180][ T6678] vlan2: entered allmulticast mode [ 120.075561][ T6678] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 120.087558][ T6678] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 120.205430][ T6683] syz.4.301 uses obsolete (PF_INET,SOCK_PACKET) [ 120.262780][ T6688] dvmrp0: entered allmulticast mode [ 120.271552][ T6688] sctp: [Deprecated]: syz.1.303 (pid 6688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.271552][ T6688] Use struct sctp_sack_info instead [ 120.307858][ T6688] sctp: [Deprecated]: syz.1.303 (pid 6688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.307858][ T6688] Use struct sctp_sack_info instead [ 120.732040][ T6716] No such timeout policy "syz0" [ 120.849393][ T6719] lo speed is unknown, defaulting to 1000 [ 120.911657][ T6725] vlan2: entered allmulticast mode [ 120.958864][ T6725] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 121.075665][ T6725] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 125.071071][ T6765] batadv0: entered promiscuous mode [ 125.346060][ T6773] No such timeout policy "syz0" [ 125.993872][ T6788] netlink: 'syz.2.335': attribute type 3 has an invalid length. [ 126.043271][ T6788] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 126.113449][ T6788] __nla_validate_parse: 3 callbacks suppressed [ 126.113470][ T6788] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.335'. [ 126.416826][ T6792] can: request_module (can-proto-0) failed. [ 126.944104][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 127.055477][ T6816] xt_nfacct: accounting object `sy' does not exists [ 127.069981][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 127.335496][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 127.363772][ T6824] nbd: must specify a device to reconfigure [ 127.456386][ T6825] lo speed is unknown, defaulting to 1000 [ 127.752858][ T6834] No such timeout policy "syz0" [ 128.120322][ T6840] vlan2: entered allmulticast mode [ 128.145998][ T6840] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 128.188217][ T6840] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 128.321316][ T6846] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.352'. [ 128.555519][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 128.634732][ T6826] siw: device registration error -23 [ 128.982728][ T6851] pim6reg: entered allmulticast mode [ 128.996289][ T6850] pim6reg: left allmulticast mode [ 131.344757][ T6853] netlink: 'syz.3.354': attribute type 15 has an invalid length. [ 131.643270][ T6859] pim6reg: entered allmulticast mode [ 131.663773][ T6859] pim6reg: left allmulticast mode [ 133.120072][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132675][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.862519][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.877904][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.885957][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.894300][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.904909][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.912422][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.957730][ T5230] Bluetooth: hci5: command tx timeout [ 137.056515][ C0] sched: DL replenish lagged too much [ 137.403167][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.419263][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.428082][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.436352][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.445335][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.457433][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.036931][ T5230] Bluetooth: hci5: command tx timeout [ 139.127323][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.136161][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.147365][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.155701][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.164197][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 139.172997][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.218206][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 139.233373][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 139.242310][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 139.253758][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 139.263881][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 139.271520][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 139.517960][ T5230] Bluetooth: hci6: command tx timeout [ 141.116742][ T5230] Bluetooth: hci5: command tx timeout [ 141.197121][ T5230] Bluetooth: hci7: command tx timeout [ 141.358048][ T5230] Bluetooth: hci8: command tx timeout [ 141.596903][ T5230] Bluetooth: hci6: command tx timeout [ 142.799548][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 142.815007][ T5234] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 142.824143][ T5234] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 142.837682][ T5234] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 142.849572][ T5234] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 142.859373][ T5234] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 143.196840][ T5234] Bluetooth: hci5: command tx timeout [ 143.276910][ T5234] Bluetooth: hci7: command tx timeout [ 143.436834][ T5234] Bluetooth: hci8: command tx timeout [ 143.676750][ T5234] Bluetooth: hci6: command tx timeout [ 144.961522][ T5234] Bluetooth: hci9: command tx timeout [ 145.357180][ T5234] Bluetooth: hci7: command tx timeout [ 145.516774][ T5234] Bluetooth: hci8: command tx timeout [ 145.760161][ T5234] Bluetooth: hci6: command tx timeout [ 147.036721][ T5234] Bluetooth: hci9: command tx timeout [ 147.436886][ T5234] Bluetooth: hci7: command tx timeout [ 147.596717][ T5234] Bluetooth: hci8: command tx timeout [ 149.118087][ T5234] Bluetooth: hci9: command tx timeout [ 151.196800][ T5234] Bluetooth: hci9: command tx timeout [ 194.568094][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.600444][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.734990][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 196.741345][ T5244] Bluetooth: hci0: command 0x0406 tx timeout [ 196.748599][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 196.796588][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 198.237503][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 198.246914][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 198.255894][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 198.267440][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 198.277260][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 198.286175][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 198.603593][ T4622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 198.619666][ T4622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 198.628139][ T4622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 198.644752][ T4622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 198.652742][ T4622] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 198.669634][ T4622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 199.623082][ T5230] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 199.637426][ T5230] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 199.649052][ T5230] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 199.657498][ T5230] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 199.669353][ T5230] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 199.682627][ T5230] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 199.690633][ T5230] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 199.722807][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 199.740567][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 199.748971][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 199.757346][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 199.764811][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 200.316710][ T54] Bluetooth: hci10: command tx timeout [ 200.716912][ T54] Bluetooth: hci11: command tx timeout [ 201.756765][ T54] Bluetooth: hci12: command tx timeout [ 201.836773][ T54] Bluetooth: hci13: command tx timeout [ 202.396694][ T54] Bluetooth: hci10: command tx timeout [ 202.796781][ T54] Bluetooth: hci11: command tx timeout [ 203.826737][ T4622] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 203.836692][ T4622] Bluetooth: hci12: command tx timeout [ 203.851310][ T4622] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 203.865432][ T4622] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 203.874057][ T4622] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 203.882412][ T4622] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 203.890289][ T4622] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 203.921562][ T4622] Bluetooth: hci13: command tx timeout [ 204.482532][ T4622] Bluetooth: hci10: command tx timeout [ 204.876724][ T4622] Bluetooth: hci11: command tx timeout [ 205.916710][ T54] Bluetooth: hci12: command tx timeout [ 205.924310][ T4622] Bluetooth: hci14: command tx timeout [ 205.996661][ T4622] Bluetooth: hci13: command tx timeout [ 206.556739][ T4622] Bluetooth: hci10: command tx timeout [ 206.956814][ T4622] Bluetooth: hci11: command tx timeout [ 207.996872][ T54] Bluetooth: hci12: command tx timeout [ 208.002461][ T4622] Bluetooth: hci14: command tx timeout [ 208.076742][ T4622] Bluetooth: hci13: command tx timeout [ 210.076775][ T4622] Bluetooth: hci14: command tx timeout [ 212.156777][ T4622] Bluetooth: hci14: command tx timeout [ 232.486761][ T4622] Bluetooth: hci4: command 0x0406 tx timeout [ 255.998790][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.005351][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.003697][ T5230] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 258.019750][ T5230] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 258.033594][ T5230] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 258.044596][ T5230] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 258.055984][ T5230] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 258.066296][ T5230] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 258.078910][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 258.875495][ T4622] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 258.884908][ T4622] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 258.897113][ T4622] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 258.915945][ T4622] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 258.925029][ T4622] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 258.933064][ T4622] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 260.156786][ T4622] Bluetooth: hci15: command tx timeout [ 260.234183][ T5234] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 260.243246][ T5234] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 260.251762][ T5234] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 260.262783][ T5234] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 260.270774][ T5234] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 260.279477][ T5234] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 260.289049][ T5234] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 260.297389][ T5234] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 260.305564][ T5234] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 260.317789][ T5234] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 260.348077][ T5234] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 260.355654][ T5234] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 260.956704][ T5234] Bluetooth: hci16: command tx timeout [ 262.237915][ T5234] Bluetooth: hci15: command tx timeout [ 262.396810][ T5244] Bluetooth: hci18: command tx timeout [ 262.402975][ T5244] Bluetooth: hci17: command tx timeout [ 263.036763][ T5244] Bluetooth: hci16: command tx timeout [ 263.208009][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 263.214119][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 263.220354][ T5244] Bluetooth: hci8: command 0x0406 tx timeout [ 264.316740][ T54] Bluetooth: hci15: command tx timeout [ 264.480243][ T54] Bluetooth: hci17: command tx timeout [ 264.485816][ T54] Bluetooth: hci18: command tx timeout [ 264.845723][ T5230] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 264.864258][ T5230] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 264.872939][ T5230] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 264.887508][ T5230] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 264.895799][ T5230] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 264.903924][ T5230] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 265.116651][ T54] Bluetooth: hci16: command tx timeout [ 266.397080][ T54] Bluetooth: hci15: command tx timeout [ 266.556659][ T4622] Bluetooth: hci17: command tx timeout [ 266.563132][ T54] Bluetooth: hci18: command tx timeout [ 266.956623][ T54] Bluetooth: hci19: command tx timeout [ 267.197400][ T54] Bluetooth: hci16: command tx timeout [ 268.316733][ T54] Bluetooth: hci9: command 0x0406 tx timeout [ 268.636766][ T5230] Bluetooth: hci18: command tx timeout [ 268.642341][ T5230] Bluetooth: hci17: command tx timeout [ 269.040368][ T5230] Bluetooth: hci19: command tx timeout [ 270.076799][ T30] INFO: task syz.4.326:6751 blocked for more than 143 seconds. [ 270.084456][ T30] Not tainted 6.11.0-syzkaller-11516-g6b67e098c9c9 #0 [ 270.132506][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.167169][ T30] task:syz.4.326 state:D stack:23512 pid:6751 tgid:6750 ppid:5231 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.221294][ T30] Call Trace: [ 270.224657][ T30] [ 270.286749][ T30] __schedule+0x1895/0x4b30 [ 270.291367][ T30] ? __pfx___schedule+0x10/0x10 [ 270.345718][ T30] ? __pfx_lock_release+0x10/0x10 [ 270.362499][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 270.382669][ T30] ? schedule+0x90/0x320 [ 270.387853][ T30] schedule+0x14b/0x320 [ 270.392106][ T30] schedule_preempt_disabled+0x13/0x30 [ 270.404651][ T30] __mutex_lock+0x6a7/0xd70 [ 270.409668][ T30] ? __mutex_lock+0x52a/0xd70 [ 270.414411][ T30] ? ppp_ioctl+0x789/0x1cd0 [ 270.425308][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 270.432512][ T30] ? alloc_netdev_mqs+0xcda/0x1000 [ 270.443970][ T30] ppp_ioctl+0x789/0x1cd0 [ 270.448795][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 270.453645][ T30] ? __fget_files+0x3f3/0x470 [ 270.464704][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 270.470086][ T30] __se_sys_ioctl+0xf9/0x170 [ 270.476937][ T30] do_syscall_64+0xf3/0x230 [ 270.481509][ T30] ? clear_bhb_loop+0x35/0x90 [ 270.486319][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.501267][ T30] RIP: 0033:0x7f999237dff9 [ 270.505780][ T30] RSP: 002b:00007f9993107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.518505][ T30] RAX: ffffffffffffffda RBX: 00007f9992535f80 RCX: 00007f999237dff9 [ 270.530730][ T30] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000018 [ 270.541887][ T30] RBP: 00007f99923f0296 R08: 0000000000000000 R09: 0000000000000000 [ 270.555926][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.570863][ T30] R13: 0000000000000000 R14: 00007f9992535f80 R15: 00007ffc389ec778 [ 270.582397][ T30] [ 270.585551][ T30] INFO: task syz.4.326:6752 blocked for more than 143 seconds. [ 270.596923][ T30] Not tainted 6.11.0-syzkaller-11516-g6b67e098c9c9 #0 [ 270.604261][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.621447][ T30] task:syz.4.326 state:D stack:26936 pid:6752 tgid:6750 ppid:5231 flags:0x00000004 [ 270.634433][ T30] Call Trace: [ 270.642437][ T30] [ 270.645429][ T30] __schedule+0x1895/0x4b30 [ 270.655633][ T30] ? __pfx___schedule+0x10/0x10 [ 270.664391][ T30] ? __pfx_lock_release+0x10/0x10 [ 270.674110][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 270.685248][ T30] ? schedule+0x90/0x320 [ 270.692290][ T30] schedule+0x14b/0x320 [ 270.700340][ T30] schedule_preempt_disabled+0x13/0x30 [ 270.705887][ T30] __mutex_lock+0x6a7/0xd70 [ 270.713540][ T30] ? __mutex_lock+0x52a/0xd70 [ 270.723356][ T30] ? ppp_ioctl+0x112/0x1cd0 [ 270.732633][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 270.742475][ T30] ppp_ioctl+0x112/0x1cd0 [ 270.750011][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 270.754863][ T30] ? __fget_files+0x3f3/0x470 [ 270.763548][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 270.771142][ T30] __se_sys_ioctl+0xf9/0x170 [ 270.775823][ T30] do_syscall_64+0xf3/0x230 [ 270.786042][ T30] ? clear_bhb_loop+0x35/0x90 [ 270.795517][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.805716][ T30] RIP: 0033:0x7f999237dff9 [ 270.813039][ T30] RSP: 002b:00007f99930e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.825389][ T30] RAX: ffffffffffffffda RBX: 00007f9992536058 RCX: 00007f999237dff9 [ 270.840565][ T30] RDX: 0000000020000000 RSI: 000000004010744d RDI: 0000000000000018 [ 270.853078][ T30] RBP: 00007f99923f0296 R08: 0000000000000000 R09: 0000000000000000 [ 270.864997][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.875703][ T30] R13: 0000000000000000 R14: 00007f9992536058 R15: 00007ffc389ec778 [ 270.893866][ T30] [ 270.898573][ T30] [ 270.898573][ T30] Showing all locks held in the system: [ 270.906332][ T30] 9 locks held by kworker/0:0/8: [ 270.923431][ T30] 3 locks held by kworker/0:1/9: [ 270.931260][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 270.950485][ T30] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 270.963550][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 270.978710][ T30] 3 locks held by kworker/u8:1/12: [ 270.983875][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 271.003075][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 271.014687][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 271.030568][ T30] 1 lock held by khungtaskd/30: [ 271.035467][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 271.049280][ T30] 3 locks held by kworker/u8:4/63: [ 271.054445][ T30] #0: ffff88814bae7148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 271.072214][ T30] #1: ffffc900015e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 271.087203][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 271.105284][ T30] 3 locks held by kworker/0:2/937: [ 271.112027][ T30] 4 locks held by kworker/u8:7/2948: [ 271.117689][ T5230] Bluetooth: hci19: command tx timeout [ 271.129697][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 271.143432][ T30] #1: ffffc90009e87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 271.156768][ T30] #2: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 271.166297][ T30] #3: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 271.183117][ T30] 2 locks held by getty/4987: [ 271.191594][ T30] #0: ffff8880333a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 271.209160][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 271.224472][ T30] 2 locks held by syz.4.326/6751: [ 271.233496][ T30] #0: ffffffff8f4baae8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 271.245081][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x789/0x1cd0 [ 271.260433][ T30] 1 lock held by syz.4.326/6752: [ 271.265619][ T30] #0: ffffffff8f4baae8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 271.276141][ T30] 1 lock held by syz.1.341/6810: [ 271.288911][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: tc_new_tfilter+0x65e/0x1b70 [ 271.306696][ T30] 1 lock held by syz.0.351/6840: [ 271.311704][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 271.326976][ T30] 1 lock held by syz.2.352/6844: [ 271.331988][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: packet_mc_add+0x28/0x950 [ 271.352134][ T30] 1 lock held by syz.3.357/6860: [ 271.358512][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.374381][ T30] 1 lock held by syz-executor/6863: [ 271.380099][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.396619][ T30] 1 lock held by syz-executor/6866: [ 271.401885][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.420179][ T30] 1 lock held by syz-executor/6870: [ 271.425453][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.439182][ T30] 1 lock held by syz-executor/6872: [ 271.444526][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.460750][ T30] 1 lock held by syz-executor/6875: [ 271.466190][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.479355][ T30] 1 lock held by syz-executor/6879: [ 271.484625][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.499053][ T30] 1 lock held by syz-executor/6881: [ 271.504321][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.519435][ T30] 1 lock held by syz-executor/6885: [ 271.524700][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.539782][ T30] 1 lock held by syz-executor/6886: [ 271.545130][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.560278][ T30] 1 lock held by syz-executor/6890: [ 271.565636][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.578366][ T30] 1 lock held by syz-executor/6899: [ 271.583657][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.599132][ T30] 1 lock held by syz-executor/6902: [ 271.606201][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.619286][ T30] 1 lock held by syz-executor/6906: [ 271.624562][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.638396][ T30] 1 lock held by syz-executor/6907: [ 271.643648][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.659874][ T30] 1 lock held by syz-executor/6911: [ 271.665145][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 271.679975][ T30] [ 271.682361][ T30] ============================================= [ 271.682361][ T30] [ 271.692849][ T30] NMI backtrace for cpu 1 [ 271.697517][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11516-g6b67e098c9c9 #0 [ 271.707723][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.717819][ T30] Call Trace: [ 271.721129][ T30] [ 271.724092][ T30] dump_stack_lvl+0x241/0x360 [ 271.728828][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.734082][ T30] ? __pfx__printk+0x10/0x10 [ 271.738733][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 271.743720][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 271.749218][ T30] ? _printk+0xd5/0x120 [ 271.753421][ T30] ? __pfx__printk+0x10/0x10 [ 271.758056][ T30] ? __wake_up_klogd+0xcc/0x110 [ 271.762947][ T30] ? __pfx__printk+0x10/0x10 [ 271.767585][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 271.772657][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 271.778689][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 271.784724][ T30] watchdog+0xff4/0x1040 [ 271.789019][ T30] ? watchdog+0x1ea/0x1040 [ 271.793484][ T30] ? __pfx_watchdog+0x10/0x10 [ 271.798209][ T30] kthread+0x2f0/0x390 [ 271.802314][ T30] ? __pfx_watchdog+0x10/0x10 [ 271.807037][ T30] ? __pfx_kthread+0x10/0x10 [ 271.811665][ T30] ret_from_fork+0x4b/0x80 [ 271.816126][ T30] ? __pfx_kthread+0x10/0x10 [ 271.820767][ T30] ret_from_fork_asm+0x1a/0x30 [ 271.825597][ T30] [ 271.829605][ T30] Sending NMI from CPU 1 to CPUs 0: [ 271.834871][ C0] NMI backtrace for cpu 0 [ 271.834887][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-11516-g6b67e098c9c9 #0 [ 271.834907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.834919][ C0] Workqueue: events nsim_dev_trap_report_work [ 271.834943][ C0] RIP: 0010:__free_object+0x30a/0xa80 [ 271.834970][ C0] Code: 4d 8b 37 4d 85 f6 0f 84 5c 01 00 00 4c 89 64 24 18 4c 89 f3 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 f7 e8 19 17 3c fd 4d 8b 26 <49> 8d 7e 08 49 89 ff 49 c1 ef 03 43 80 3c 2f 00 48 89 7c 24 20 74 [ 271.834985][ C0] RSP: 0018:ffffc900000078a0 EFLAGS: 00000046 [ 271.834999][ C0] RAX: 1ffff110170c74e8 RBX: 1ffff1100fa7a0e7 RCX: dffffc0000000000 [ 271.835013][ C0] RDX: 0000000000000000 RSI: ffffffff8c6100c0 RDI: ffffc900000079e0 [ 271.835026][ C0] RBP: ffffc90000007a70 R08: ffffc900000079ff R09: 0000000000000000 [ 271.835038][ C0] R10: ffffc90000007980 R11: fffff52000000f40 R12: ffff888031a53038 [ 271.835051][ C0] R13: dffffc0000000000 R14: ffff88807d3d0738 R15: ffff8880b863a740 [ 271.835065][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 271.835079][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.835091][ C0] CR2: 00007f78ca39af98 CR3: 000000000e734000 CR4: 00000000003506f0 [ 271.835107][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.835117][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.835128][ C0] Call Trace: [ 271.835134][ C0] [ 271.835142][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 271.835163][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 271.835190][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 271.835210][ C0] ? nmi_handle+0x2a/0x5a0 [ 271.835234][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 271.835256][ C0] ? nmi_handle+0x14f/0x5a0 [ 271.835273][ C0] ? nmi_handle+0x2a/0x5a0 [ 271.835290][ C0] ? __free_object+0x30a/0xa80 [ 271.835313][ C0] ? default_do_nmi+0x63/0x160 [ 271.835334][ C0] ? exc_nmi+0x123/0x1f0 [ 271.835354][ C0] ? end_repeat_nmi+0xf/0x53 [ 271.835375][ C0] ? __free_object+0x30a/0xa80 [ 271.835398][ C0] ? __free_object+0x30a/0xa80 [ 271.835422][ C0] ? __free_object+0x30a/0xa80 [ 271.835445][ C0] [ 271.835451][ C0] [ 271.835461][ C0] ? __pfx___free_object+0x10/0x10 [ 271.835486][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 271.835517][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 271.835547][ C0] debug_check_no_obj_freed+0x293/0x580 [ 271.835573][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 271.835602][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 271.835628][ C0] ? rcu_core+0xaaa/0x17a0 [ 271.835644][ C0] ? handle_softirqs+0x2c5/0x980 [ 271.835666][ C0] ? do_softirq+0x11b/0x1e0 [ 271.835687][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 271.835705][ C0] ? process_scheduled_works+0xa63/0x1850 [ 271.835728][ C0] ? worker_thread+0x870/0xd30 [ 271.835756][ C0] ? ret_from_fork+0x4b/0x80 [ 271.835780][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 271.835807][ C0] ? dst_destroy+0x2ac/0x460 [ 271.835823][ C0] kmem_cache_free+0x11f/0x420 [ 271.835849][ C0] dst_destroy+0x2ac/0x460 [ 271.835865][ C0] ? rcu_core+0xa37/0x17a0 [ 271.835880][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 271.835907][ C0] rcu_core+0xaaa/0x17a0 [ 271.835930][ C0] ? __pfx_rcu_core+0x10/0x10 [ 271.835948][ C0] ? rcu_is_watching+0x15/0xb0 [ 271.835968][ C0] ? tasklet_action_common+0x420/0x4d0 [ 271.835995][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 271.836020][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.836050][ C0] handle_softirqs+0x2c5/0x980 [ 271.836075][ C0] ? do_softirq+0x11b/0x1e0 [ 271.836098][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 271.836124][ C0] do_softirq+0x11b/0x1e0 [ 271.836145][ C0] [ 271.836150][ C0] [ 271.836157][ C0] ? __pfx_do_softirq+0x10/0x10 [ 271.836178][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 271.836205][ C0] ? rcu_is_watching+0x15/0xb0 [ 271.836224][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 271.836247][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 271.836266][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 271.836288][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 271.836310][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 271.836331][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 271.836357][ C0] ? process_scheduled_works+0x976/0x1850 [ 271.836380][ C0] process_scheduled_works+0xa63/0x1850 [ 271.836421][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 271.836450][ C0] ? assign_work+0x364/0x3d0 [ 271.836477][ C0] worker_thread+0x870/0xd30 [ 271.836509][ C0] ? __kthread_parkme+0x169/0x1d0 [ 271.836538][ C0] ? __pfx_worker_thread+0x10/0x10 [ 271.836565][ C0] kthread+0x2f0/0x390 [ 271.836582][ C0] ? __pfx_worker_thread+0x10/0x10 [ 271.836607][ C0] ? __pfx_kthread+0x10/0x10 [ 271.836626][ C0] ret_from_fork+0x4b/0x80 [ 271.836653][ C0] ? __pfx_kthread+0x10/0x10 [ 271.836671][ C0] ret_from_fork_asm+0x1a/0x30 [ 271.836708][ C0] [ 272.373228][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 272.380140][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11516-g6b67e098c9c9 #0 [ 272.390345][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.400445][ T30] Call Trace: [ 272.403761][ T30] [ 272.406727][ T30] dump_stack_lvl+0x241/0x360 [ 272.411467][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.416716][ T30] ? __pfx__printk+0x10/0x10 [ 272.421355][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.427394][ T30] ? vscnprintf+0x5d/0x90 [ 272.431773][ T30] panic+0x349/0x880 [ 272.435717][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 272.442011][ T30] ? __pfx_panic+0x10/0x10 [ 272.446479][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 272.451902][ T30] ? __irq_work_queue_local+0x137/0x410 [ 272.457681][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 272.463104][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 272.469309][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 272.475554][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 272.481761][ T30] watchdog+0x1033/0x1040 [ 272.486146][ T30] ? watchdog+0x1ea/0x1040 [ 272.490619][ T30] ? __pfx_watchdog+0x10/0x10 [ 272.495342][ T30] kthread+0x2f0/0x390 [ 272.499454][ T30] ? __pfx_watchdog+0x10/0x10 [ 272.504175][ T30] ? __pfx_kthread+0x10/0x10 [ 272.508804][ T30] ret_from_fork+0x4b/0x80 [ 272.513275][ T30] ? __pfx_kthread+0x10/0x10 [ 272.517902][ T30] ret_from_fork_asm+0x1a/0x30 [ 272.522740][ T30] [ 272.526204][ T30] Kernel Offset: disabled [ 272.530545][ T30] Rebooting in 86400 seconds..