last executing test programs: 3.539943226s ago: executing program 4 (id=1045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180100001f000000e9ce776abcd47cc7f6d1d0362f709fec339b474c000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000005a40)=[{{&(0x7f0000000000)={0xa, 0xfffc, 0x1, @private1={0xfc, 0x1, '\x00', 0xfd}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x89}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000340)="9ce41c7f", 0x4}], 0x1}}], 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000002000f0dd8cd4000000000000000000000092ad435e13ef3789ca6842a4c2140fb7df21183810306bf51c171956e932ed3c985e6f4d7008df401f08f7a4fc61a589e7857798a0f984cddc82c03dbcc7301102ae70d0ea743eeb9a3748d7d5c19f96ef5d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="e100000000000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3488ad7a", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000034000980080001000000000008000100000000000800010000000000080001000000000008000200000000000800010000000000680005803c000280080001000000000008000100000000000800030000000000080001000000000008000200000000000800030000000000080003000000000008000100657468001c000280080002000000000008000200000000000800040000000000040002801c0009800800020000000000080001000000000008000100000000004400078008000100000000000c00040000000000000000000c000300000000000000000008000200080000000c00030000000000000000000c0003000000000000000000240009800800010000000000080002000000000008000100000000000800020093000000"], 0x134}}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYRES64=r3], &(0x7f0000000040)=""/241, 0x46, 0xf1, 0x6, 0x7, 0x0, @void, @value}, 0x28) sendmsg$802154_raw(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)="4e6c54e8a2406a761ea66217e18c62be61779d50bddeedbbb653da6a414a8c3bc01e124b", 0x24}, 0x1, 0x0, 0x0, 0x60004095}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4621, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 3.254463558s ago: executing program 2 (id=1049): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000014a960e10000000000000000000000000500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2004c7f8, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a", 0x3, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000740)=""/4098, 0x1002}], 0x1, 0x0, 0x0, 0x407006}, 0x144) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000019500000000000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) (async) accept$alg(r0, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000014a960e10000000000000000000000000500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x2004c7f8, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) sendto$inet(r2, &(0x7f0000000700)="0c268a", 0x3, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000740)=""/4098, 0x1002}], 0x1, 0x0, 0x0, 0x407006}, 0x144) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x4, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000019500000000000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) 3.078263723s ago: executing program 4 (id=1051): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x360, 0x11, 0x148, 0x360, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x8, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000000000", @ANYRES8], 0x38}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000040), &(0x7f0000000200)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) syz_extract_tcp_res(0x0, 0x0, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xb000000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16e}}) 2.9776318s ago: executing program 3 (id=1052): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000a40)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x10, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x82, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) socketpair(0x2b, 0x4, 0xc, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4481, 0x701d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x0, 0x2, 0x4}, @IFLA_XFRM_LINK={0x0, 0x1, 0x7}]}}}, @IFLA_EVENT={0x6, 0x2c, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000271000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x9b1ef000) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x63660000) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0xc8ff, 0x100000001}) 2.405186737s ago: executing program 3 (id=1056): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x95) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 2.321751652s ago: executing program 4 (id=1057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xe}, &(0x7f0000000100)=0x8) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "9fcfb34bab6ccc4f", "bc0481f486479ef99f569c9ce26da9d7", "2f68dc6c", "415559ca07c12afe"}, 0x28) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1}) 2.167489935s ago: executing program 3 (id=1059): unshare(0x20040600) (async) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80088a02, &(0x7f0000000000)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 2.017493395s ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x20000400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000380)="4000000000220006908a00000400", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r2, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x8, 0x3, 0x81) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "cbb2fd3f672d14425aacb92be3da827479a24338a2c0c75226e9decabaa91898", "72400b87b3dd9c2f7dc0d06ece5e42cb179918de99d4391a3670a351bc61912c", "581f875d4403a678dda39f3057d5a0eb80bae57823a202367fd58181d4bad6ab", "0738a62146b4cc3da01d39a1b2c2fdd173ae57f65c2db93e41d8ddd021e1a8e0", "249b31d0dbbea85d1ffea921785f94479c58ec423779c41375cda3cc2bb127c4", "3244ac5a9adf601631fd6a43"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x64, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6}, {0x5}, {0x2, 0x11, 0xfffa}, {0x8, 0xb, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x48800) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xf40b, 0xe}}}]}, 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008842}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="14005a80040003800c0001a0"], 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast2, 0x80}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000006c0)={r11, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000780)=0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x2, 0x4}}}, 0x24}}, 0x0) getsockopt$packet_buf(r5, 0x107, 0x0, &(0x7f0000000380)=""/90, &(0x7f0000000140)=0x5a) socket$netlink(0x10, 0x3, 0x0) 2.012619466s ago: executing program 2 (id=1063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1, 0x0, 0xa}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x54}, 0x0) 1.907675487s ago: executing program 3 (id=1064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.880842318s ago: executing program 1 (id=1065): setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000140)={0x6}, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r3, 0x0) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x81000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x30000800) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000500)={&(0x7f0000000440)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x8, 0x7, "8eb133362b95ee2e145e0c6a303f524edb6e2328c4201662e164bd04cdf6d2ecfdd454ae05df62f110749bd829c3608c1202d230663e8b61535e427dcc6ae0", 0x33}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000680)="59f5859ea0a3359ada53e77bdc5b2c496f6b4b7ba3bebc6eee6ecfa9e579b776767dfd6103c6dd871801a9877f581546a0fa3c78afe0177d83ca2c7ea5b6e9f6f2f9db329d0c15a1e8caa43166bf9980990f0671baeb3ae8544b008e6dbecaf14da74019e109e8f278934535d6c230c9f9c50bdeed9bf2c98ed61163f1ad3b97ad1ef33d9a8ed3da6ca589cfd35c4943abcd4c0911ada4d8be93d976a3a5091cb0e054aacb6b38ebf6", 0xa9}, {&(0x7f0000000740)="87b85e71ed7e04145dcbd95d7550fbf929dfe74eafbf9cd0061ebaa1523888cbafb43c24d2aee1b6b4f408f1cfad48296a0f07f4798d747930ba916e66e7f96769448ddc0057e6c55f0285adfaf77d04f9e76eae1cb41197530aee32622e54ae75933231e85a34d36584f6dd923264ce857f06a6b8f88ccd8e8b893c37eafddb65bb08144cc2fbba4ac113c810a055b6afbfb6dcc38b104f36daa68b10649fe1337e38fd3dcba9e40326c8538ed7e5e6a33d705bf883cf20c4938fb46442beb4c87bcc6784865bc6d4d8d07b", 0xcc}], 0x2, &(0x7f0000000840)=[{0x20, 0x109, 0x2, "4bd394d8a0ee4b535609dd56"}, {0x68, 0x108, 0xffff, "7fad7f39846472ca680846651d4cc692dbb5d27db57d7da72120e3b4439e9dde291a17b2681e8088c8e7196dcb7d8fc6af348ce38fbda401075d53cfc715ef4169ddd8f56212d67cae34d080f7579160e5cbcaf410e366"}, {0x80, 0x116, 0x2, "932c62f4fe4a11b4ff35ec53754888239be362053ba048864019c8515d680c81fe62713ba80f4188adbafea89546324283d49d8ae489a1e3398f1b99db0d50009331d8ac4f0ebd1cf17a069b02a815f13c8246a4032537477cbe7554a613f0892792f3c36a4a8839c0"}, {0x110, 0x101, 0x93, "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"}, {0x58, 0x112, 0x8000, "497640d854118dfe68bd38681f10515f36953e05e03d321fa0797189d2a790ffdffac5dfc84d22e13eafd9bafde652113a3b8ac78016119f0edea1292af7471056"}, {0xe0, 0x10d, 0x6, "b38734755457ee0f6a16ddca83c546df9cbd871042c89c4e4e3c667fee68f90be60d0ab4358c8c68ec11b020ffd6eb3c7f3128c562d0f28cd1abafae27e23d738deacae69124fd047f400377134e5cfc55da60a3d64a1c57f75a67405e76fa219b3323296e0a3919fb73bfd833e520042b0e44787345b5979e1da87ffeafe50b4089870883631078b63ee6cd291f2b67025e72f884dd703f42304a32109da5862c4b9437d8587c3915fb6a50771bc51d13cabcdeb37138f8d9d2442d6052f3686deb55effa4f111a800c8b7b"}, {0x80, 0x114, 0x0, "5efd242e6010d7dc39cc2e4e31cb9e4a5fb185177cec39179837143cc9d23f3bb46ddcea8bf448f62894a8d4713312559840884bd378f49f306585b1723c0d7821446e6f3571cdc11242b6cfcb0056cedbee925fe13964df683f9a270229133adde8fa52be6aa55ca4ee"}, {0xe0, 0x104, 0x1, "23230e37d651504c31d6020db673f4fe7072b415953fa72ca7b8d6aa2de55150f0508ce92383c7dc9e47ae90922d7d54e1ba0e9ee69cb074c9f34a1b621da8ae6661a25a8a67b6a792e31e6f7585fe9d8b85f59991770a0134b5b687050391934d5750594376977f3df13c21d2f8a15cce6aa6b152c27f25cfd122e6c2d86feed4897f3f3087f12b5d04013d1afc8b04ad870c4022969999a4391eabe43deaee317cb7fa9749b956e5009a1d61b1868f5b542d828dd80f684d56d0a8f8edd5fcfbdc537f8b669a8911a453"}], 0x4b0}, 0xc080) 1.661775065s ago: executing program 2 (id=1066): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000580)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.631076732s ago: executing program 3 (id=1067): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x40000000, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x44}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet(0x2, 0x6, 0x8d) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x32, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000183a00fe8000000000000000000000000000bbff02000000000000cc000000000000000182029000"/72], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000200)="da350416451228ab9dd3c21a38b0e736d52ba7d83e07b19f269e69aa8f8dd8764aa91ad08c52783db6da9e468433cf72") (async) epoll_create1(0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 1.497650873s ago: executing program 2 (id=1068): sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r5 = socket(0x23, 0x800, 0x80004) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x88, r3, 0x4, 0x70bd28, 0x81, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x41}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7274dbac4e285e26a84f55e9994302bea30f0d5626cfa80b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "05adee4913b974cf112673e308007f735bd01e71afc55a66"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x88}, 0x1, 0x0, 0x0, 0x4000480}, 0x20000841) getsockopt$inet6_int(r5, 0x29, 0x19, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050008"], 0x58}}, 0x0) 1.433646342s ago: executing program 1 (id=1069): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x3, &(0x7f0000000040)=@framed={{0xc6, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x1a}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c11e8fc55a10a0015000600142603600e1208000f00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast2}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in6=@local, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@lifetime_val={0x24, 0x9, {0x4ddb3317, 0x3, 0x5, 0xfffffffffffffffa}}]}, 0x11c}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.432727705s ago: executing program 0 (id=1070): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x807e, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000000c0), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x411, 0x0, 0x0, {{{@in=@empty, @in6=@local}, {@in6=@local, 0x0, 0x6c}, @in, {}, {}, {}, 0x2}, 0x0, 0xffffff00}}, 0xf8}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@random="8bb863418935", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "0001000000e5"}, {0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) 1.425842935s ago: executing program 4 (id=1071): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100", 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180763dba6480b81f20000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="42000000e5c045a33b12ebec404d7b025c017a731a04ea0c261a8adde5e525c615054b26aa7ee1a17d7834c6371fe1f2702ba163e932428d12318693a9b98bb08995f35479a7dd1432bb7fe04ea5595f60e3d7cc1b2447ca3e088a7fcc3ffb3584b04a61ab1724b64b2a1745a4fca879bcac2d522d98ba5d00ecc396c2a9d17e317950ca2f2ab2b857ee256c21dc22b76e7d760fe304ca40c2c38e51dfc9a89d0f96f431dc24913f25c174c8c618bc30cc3a17cbbe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000005d000100000000c0a959c8caee2d7999", @ANYRES32=r6, @ANYBLOB="000000000000000020001a8018000280140001800400210000000000080000000000000804001c00"], 0x40}}, 0x0) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0x0, 0x2}, 0x6) bind$llc(r4, &(0x7f0000000000), 0x10) close(r4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000125bd7000fddbdf25120000000800060003000000080008000400000008000800016a000008000600040000000800077500ce47b940897bcd82210500070000000800070009000000080000"], 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x24080) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="399b0000", @ANYRES16=r3, @ANYBLOB="01000000000000000000070000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x409c}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_int(r8, &(0x7f00000006c0)=0x10000, 0x12) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02020009160000000000000000000000030006000000000002000000ffffffff000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa00000000000000000100150000000000010014000000000002000b00070000000000010000000000080019"], 0xb0}, 0x1, 0x7}, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x68, 0x24, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0x2}, {0xc, 0xffff}, {0x7, 0xb}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x16, 0x7fe, 0x4, 0x0, 0x2, 0xacf9, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5, 0x0, 0x3}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 1.06473314s ago: executing program 3 (id=1072): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) (async, rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@empty, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) (async, rerun: 64) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) (async, rerun: 32) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84acd015e352484c42fc29e5aea62fb7977813f7254fd6f62fec638abf292e6c33925b29"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r10 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r10, r9, 0x0, 0x0, 0x0}, 0x30) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 1.009686234s ago: executing program 0 (id=1073): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r0, 0xb701, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@setneightbl={0x20, 0x43, 0x10, 0x70bd27, 0x25dfdbfe, {0x2c}, [@NDTA_NAME={0x6, 0x1, '+\x00'}, @NDTA_PARMS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) 939.053335ms ago: executing program 1 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1c00}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xee10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040040}, 0x840) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000019000500050002000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0a983426d0a56a77", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000004000d80"], 0x18}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0xa, 0xff}, 0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0xab, 0xf, 0x14, @mcast2, @remote, 0x40, 0x1, 0x3fd, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x400c057) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) shutdown(r3, 0x0) close(r0) 930.765405ms ago: executing program 4 (id=1075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {}, {0x9, 0xc}}}, 0x24}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffff7}]}}}}}}}}, 0x0) 709.641147ms ago: executing program 2 (id=1076): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000000000008338863a0d8ce38f8c93ee", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000000000000001d0000000000000000fcffffffffffffff0000000000000000000000000000000800000000000000000000000000000000000000000000000000000000008000"], 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 707.028693ms ago: executing program 0 (id=1077): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000000000000000cf00000000000000278ff820bc4f3cce06870012a1510fb6c790475f6e302f5a1365d78b4fadf66a8a17cf3884125a1b9afc3c9dfc3593e3", @ANYRES32=0x0, @ANYRESDEC], 0x34}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xf}}}}}}}, 0x0) (async) syz_emit_ethernet(0x33, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="cbe66f1099d3a415fe"}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb0a010100000000001100000000000000000000000100000009000000000000001c00000000000000000000000700000001830b56ffffffffe00000020000000014000000000000000000000001000000feffffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aafeffe9ff00000000"], 0x90}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000380)=@full={0xb, @remote, @null, 0x0, [@bcast, @bcast, @netrom, @remote, @null, @default]}, &(0x7f0000000280)=0x40, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000200)=0x7ffffe, 0x4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "5142d7bc2a5e1d3e", "9a132ac2659dc5597c8cd617c4dbfe26", '(\x00', "0362000200"}, 0x28) setsockopt$inet6_tcp_int(r9, 0x11a, 0x4, &(0x7f0000000100)=0x2, 0xfffffffffffffefb) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r5, 0x0) 502.513504ms ago: executing program 2 (id=1078): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}}}, 0x24}}, 0x800) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc6, &(0x7f0000000380)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x26}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x37}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4c050) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r10, 0x6, 0x19, 0x0, 0x2000e803) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x40, r11, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x8850}, 0x4000800) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000180)="800037bbfa9ba1ce", 0x8, 0x488c0, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback, 0x9}, 0x1c) 466.161927ms ago: executing program 0 (id=1079): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x48, 0x0, &(0x7f00000003c0)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008015}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)={@broadcast, @local}, &(0x7f0000000180)=0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) close(0x3) 349.522791ms ago: executing program 1 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x2, 0x6}, {0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @multicast1}, &(0x7f0000000140)=0xc) sendto$packet(r3, &(0x7f00000000c0)="9ca804a44cd9ea7d7c96", 0xa, 0x4, &(0x7f0000000180)={0x11, 0xf5, r4, 0x1, 0x6, 0x6, @link_local}, 0x14) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="e3", 0x1}, {&(0x7f0000000140)="b7028d7289a1d9bfdb695ddc9d64f2453a5cb75176a5d19054ea56ef7a12fc122db35560019cab83115ebae4b9907b62cc5c7df6", 0x34}], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000700)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x4e24, 0x0, 0x4e21, 0x3, 0x0, 0x20, 0x80, 0x3f, r7, r8}, {0x1, 0x4, 0xf, 0x8, 0x8000000000000001, 0x1, 0xb9b4, 0x81}, {0x9, 0xe9c, 0x101, 0x3}, 0x6, 0x6e6bbf, 0x2, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d5, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x3505, 0x4, 0x0, 0xe, 0x10, 0x3d, 0x8001}}, 0xe8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0x900, 'syz0\x00', @bcast, 0x1, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x5, 0xd}}]}}]}, 0x3c}}, 0x44050) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380300000fe80100"/20, @ANYRES32=r1, @ANYBLOB="0000e5ffffff0000140016", @ANYRES64=0x0, @ANYRES16=r2, @ANYRES64=r1], 0x38}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x10) 241.103233ms ago: executing program 0 (id=1081): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000140), 0x0}, 0x20) sendmsg$netlink(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000000)={0x10}, 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) 208.945364ms ago: executing program 1 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001e0a0101000000000000000003000005"], 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 1.328272ms ago: executing program 1 (id=1083): r0 = socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100003063cb7a60000000064f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004800128044000100697036677265"], 0x74}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$AUDIT_USER(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x78, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbff, "8a06a271600c1563023c48f4c2656622cc7a56be41eb0125da317e59f92e8c6078a49233892a270ab127ffdbcd76d641384d7fed29e61bce5fce5abc0d0950a384196828cada4bf2f304ba22c0199e06ffb59a517198947dcd14bca8ffb32106b7f5bcb454e1", ["", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) (async) sendmsg$AUDIT_USER(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x78, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbff, "8a06a271600c1563023c48f4c2656622cc7a56be41eb0125da317e59f92e8c6078a49233892a270ab127ffdbcd76d641384d7fed29e61bce5fce5abc0d0950a384196828cada4bf2f304ba22c0199e06ffb59a517198947dcd14bca8ffb32106b7f5bcb454e1", ["", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x327}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x160, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x12c, 0x2, [@TCA_MATCHALL_ACT={0x128, 0x2, [@m_simple={0x124, 0x3, 0x0, 0x0, {{0xb}, {0xf8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\x8a\xad\\\x19f'}, @TCA_DEF_DATA={0xe7, 0x3, '\x00\x00\xfc\xff\xff\xff\xe4\x8d\xf5@>~asIU6e\xe1\x17/\xfaA\xbfYg\xc4\xb42\xfa\xc86\xa9,\x94\xc3\x83:.\xd6c\xfc\x18dJ?\x84\x9d\xa2\xb7\xf1|_\xf9\r\xe77\xbb\xd5>u\x0e\"\x11\xb6\x81\xe7\x86U\xaf\xad\x8f-S\xb5D\xbdD\x05\v\xfe\x03@\xbf\x1bS\xe4\xfdZ\xfcd\xce=J%\x8a\x00UmR\x06_\xb6\xf8\xcc\xae\xef2&\x7f\xc7d\x0f\xdft\x89\xa0\x92z%\xc9\xe3p\xe3\\\x8f\xb4S\xde\x97W\xd3N\x8a\xe6n\x99\xcd\x84\xa0 \xa9W\xb2Q\xf1\x04d\xf5\xc2[\x9a[\xccftF\x01\xee\xa0\xcb\xd4\xa7\xe8\xbaAw\x96f\xcf)\xfe\xf9^\xe80\xac\x15\xce\xd4\xc1\x91d74\x12\xd1c\xae1\xe8\xd5\x96\x95\x1a\x94\x04\xb1\xee\xc1\b\xcb\xd8\x03L\xa0\xe8\xd7\x83Y\xc8\x84\xdd\xb1\x90`/\xe4P\xd2R\xa7d\xe9\x89\"!'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x160}}, 0x801) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x28, 0xa, 0x7, &(0x7f00000002c0)) (async) socketpair(0x28, 0xa, 0x7, &(0x7f00000002c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r8) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r8) getpeername$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r13}, @IFLA_HSR_SLAVE2={0x8, 0x2, r15}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r13}, @IFLA_HSR_SLAVE2={0x8, 0x2, r15}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6_vti0\x00', r3, 0x6, 0x0, 0xf, 0xa, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private0, 0x20, 0x8000, 0xfd, 0xfffffff9}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000b80)={0x174, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000b80)={0x174, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) sendmmsg$inet6(r7, &(0x7f00000069c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x80}, 0x1c, 0x0}}, {{&(0x7f0000001840)={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4f}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000000002900000008"], 0x18}}], 0x2, 0x20002004) (async) sendmmsg$inet6(r7, &(0x7f00000069c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x80}, 0x1c, 0x0}}, {{&(0x7f0000001840)={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4f}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000000002900000008"], 0x18}}], 0x2, 0x20002004) 0s ago: executing program 0 (id=1084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x42, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0x21}, 0x1d, 0x6}}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=@ipv6_delrule={0x1c, 0x21, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x10, 0x80, 0x0, 0x10, 0x0, 0x0, 0x5, 0x1000b}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000150000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd636169663000000000000000e0ff000076657468315f746f5f7465616d00400073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c2004994f6d3000000000000e8000000e800000018010000697036000000000000000000000000000000000000000000000000000000000050000000000000e4f05cffa707a40cb664c67af36e139d00fe800000000000000000000000000000e06fb232b2421d9f8882ae3685100000000000000000ff00000000000000000000115e000000f90000001900000000004155444954000000000000000000080000000000001000"/424]}, 0x220) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 50.286387][ T5215] cgroup: Unknown subsys name 'net' [ 50.418987][ T5215] cgroup: Unknown subsys name 'cpuset' [ 50.426804][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.770431][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.787462][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.816280][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.825753][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.834283][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.837495][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.842413][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.849820][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.856560][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.865364][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.877532][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.885887][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.886287][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.895006][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.902054][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.915504][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.923142][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.923614][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.931764][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.937998][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.945737][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.952759][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.958905][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.973845][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.974061][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.989456][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.996787][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.004400][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.013754][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.023084][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.032318][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.347158][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 54.461644][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 54.531218][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.538576][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.546591][ T5235] bridge_slave_0: entered allmulticast mode [ 54.553210][ T5235] bridge_slave_0: entered promiscuous mode [ 54.564072][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.571230][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.579003][ T5235] bridge_slave_1: entered allmulticast mode [ 54.585940][ T5235] bridge_slave_1: entered promiscuous mode [ 54.617516][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 54.687478][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.700233][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.724594][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.732145][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.739452][ T5226] bridge_slave_0: entered allmulticast mode [ 54.746660][ T5226] bridge_slave_0: entered promiscuous mode [ 54.766041][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 54.779438][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.786980][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.794095][ T5226] bridge_slave_1: entered allmulticast mode [ 54.801125][ T5226] bridge_slave_1: entered promiscuous mode [ 54.813618][ T5235] team0: Port device team_slave_0 added [ 54.823473][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 54.851118][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.863863][ T5235] team0: Port device team_slave_1 added [ 54.886665][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.920096][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.927183][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.953272][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.009561][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.016774][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.042806][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.062115][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.069326][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.076923][ T5233] bridge_slave_0: entered allmulticast mode [ 55.083884][ T5233] bridge_slave_0: entered promiscuous mode [ 55.106794][ T5226] team0: Port device team_slave_0 added [ 55.113028][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.120261][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.127568][ T5233] bridge_slave_1: entered allmulticast mode [ 55.134250][ T5233] bridge_slave_1: entered promiscuous mode [ 55.180244][ T5226] team0: Port device team_slave_1 added [ 55.203817][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.211061][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.218558][ T5236] bridge_slave_0: entered allmulticast mode [ 55.225397][ T5236] bridge_slave_0: entered promiscuous mode [ 55.241420][ T5235] hsr_slave_0: entered promiscuous mode [ 55.248284][ T5235] hsr_slave_1: entered promiscuous mode [ 55.265722][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.272926][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.280272][ T5225] bridge_slave_0: entered allmulticast mode [ 55.287330][ T5225] bridge_slave_0: entered promiscuous mode [ 55.303986][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.311161][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.337148][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.350262][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.359698][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.367333][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.374508][ T5236] bridge_slave_1: entered allmulticast mode [ 55.381418][ T5236] bridge_slave_1: entered promiscuous mode [ 55.395939][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.403097][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.410454][ T5225] bridge_slave_1: entered allmulticast mode [ 55.417845][ T5225] bridge_slave_1: entered promiscuous mode [ 55.437924][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.445538][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.471711][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.484156][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.539201][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.551418][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.572086][ T5233] team0: Port device team_slave_0 added [ 55.601641][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.613515][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.624670][ T5233] team0: Port device team_slave_1 added [ 55.650203][ T5236] team0: Port device team_slave_0 added [ 55.658949][ T5236] team0: Port device team_slave_1 added [ 55.712303][ T5225] team0: Port device team_slave_0 added [ 55.718749][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.726211][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.752219][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.765469][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.772432][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.798554][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.821598][ T5226] hsr_slave_0: entered promiscuous mode [ 55.828103][ T5226] hsr_slave_1: entered promiscuous mode [ 55.834145][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.842053][ T5226] Cannot create hsr debugfs directory [ 55.865384][ T5225] team0: Port device team_slave_1 added [ 55.879255][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.886787][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.913485][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.950606][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.957695][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.983864][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.008010][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.015313][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.041653][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.054203][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.061211][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.088230][ T5246] Bluetooth: hci2: command tx timeout [ 56.088956][ T5230] Bluetooth: hci0: command tx timeout [ 56.093916][ T5246] Bluetooth: hci1: command tx timeout [ 56.103456][ T5230] Bluetooth: hci4: command tx timeout [ 56.105283][ T5246] Bluetooth: hci3: command tx timeout [ 56.110713][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.183899][ T5233] hsr_slave_0: entered promiscuous mode [ 56.190430][ T5233] hsr_slave_1: entered promiscuous mode [ 56.197105][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.204682][ T5233] Cannot create hsr debugfs directory [ 56.224026][ T5236] hsr_slave_0: entered promiscuous mode [ 56.230831][ T5236] hsr_slave_1: entered promiscuous mode [ 56.237483][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.245164][ T5236] Cannot create hsr debugfs directory [ 56.323376][ T5225] hsr_slave_0: entered promiscuous mode [ 56.330380][ T5225] hsr_slave_1: entered promiscuous mode [ 56.336978][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.344640][ T5225] Cannot create hsr debugfs directory [ 56.458679][ T5235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.472347][ T5235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.482847][ T5235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.523433][ T5235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.632752][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.642734][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.653329][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.662476][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.758339][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.772302][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.789784][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.797851][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.807163][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.851049][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.886862][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.909315][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.916565][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.926939][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.934037][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.951781][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.967664][ T5233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.980965][ T5233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.991030][ T5233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.023807][ T5233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.034252][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.041376][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.072114][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.079265][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.160500][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.174155][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.197656][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.213038][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.362121][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.377965][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.451890][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.490475][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.505284][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.512399][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.531515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.538645][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.556844][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.601416][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.622185][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.632492][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.672953][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.680053][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.689830][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.696967][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.712545][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.719693][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.759482][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.766678][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.878490][ T5226] veth0_vlan: entered promiscuous mode [ 57.926553][ T5226] veth1_vlan: entered promiscuous mode [ 58.054769][ T5235] veth0_vlan: entered promiscuous mode [ 58.071411][ T5226] veth0_macvtap: entered promiscuous mode [ 58.082173][ T5226] veth1_macvtap: entered promiscuous mode [ 58.122613][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.145382][ T5246] Bluetooth: hci3: command tx timeout [ 58.150855][ T5246] Bluetooth: hci2: command tx timeout [ 58.156606][ T4620] Bluetooth: hci4: command tx timeout [ 58.156710][ T5238] Bluetooth: hci0: command tx timeout [ 58.168151][ T5235] veth1_vlan: entered promiscuous mode [ 58.174663][ T5230] Bluetooth: hci1: command tx timeout [ 58.196455][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.229727][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.239429][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.248621][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.257480][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.269931][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.282486][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.351534][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.375445][ T5235] veth0_macvtap: entered promiscuous mode [ 58.423527][ T5235] veth1_macvtap: entered promiscuous mode [ 58.440699][ T5233] veth0_vlan: entered promiscuous mode [ 58.454044][ T5225] veth0_vlan: entered promiscuous mode [ 58.498982][ T5225] veth1_vlan: entered promiscuous mode [ 58.513329][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.516152][ T5233] veth1_vlan: entered promiscuous mode [ 58.522691][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.543112][ T5236] veth0_vlan: entered promiscuous mode [ 58.550262][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.562974][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.574405][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.591306][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.602112][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.613002][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.651247][ T5235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660438][ T5235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.669589][ T5235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.678656][ T5235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.701234][ T5236] veth1_vlan: entered promiscuous mode [ 58.720638][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.729299][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.776661][ T5233] veth0_macvtap: entered promiscuous mode [ 58.796386][ T5226] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.814478][ T5236] veth0_macvtap: entered promiscuous mode [ 58.843041][ T5236] veth1_macvtap: entered promiscuous mode [ 58.853231][ T5225] veth0_macvtap: entered promiscuous mode [ 58.879406][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.890923][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.902722][ T5233] veth1_macvtap: entered promiscuous mode [ 58.919685][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.941133][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.958436][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.970986][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.982921][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.004815][ T5225] veth1_macvtap: entered promiscuous mode [ 59.019509][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.031674][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.042353][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.063250][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.077194][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.096436][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.104652][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.107200][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.121753][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.122353][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 59.130664][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.148216][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.165665][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.176504][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.189654][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.200637][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.211452][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.222404][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.233468][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.256760][ T5313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 59.269256][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.280486][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.294777][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.306949][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.332419][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.343232][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.357074][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.417431][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.429730][ T5319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 59.441852][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.450645][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.459394][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.470658][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.481480][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.494877][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.506917][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.517780][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.528856][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.539223][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.550237][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.561641][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.648633][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.678402][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.704997][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.724880][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.735333][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.749600][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.771921][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.794967][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.804017][ T5329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.808042][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.838936][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.850039][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.859303][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.868208][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.960017][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.992025][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.048403][ T5335] netlink: 'syz.4.12': attribute type 29 has an invalid length. [ 60.060799][ T5335] netlink: 'syz.4.12': attribute type 29 has an invalid length. [ 60.068754][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.078306][ T2513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.079558][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.094431][ T2513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.110324][ T5337] netlink: 'syz.4.12': attribute type 29 has an invalid length. [ 60.131446][ T5334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.202933][ T2513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.224395][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.225123][ T2513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.241409][ T5230] Bluetooth: hci2: command tx timeout [ 60.246886][ T5230] Bluetooth: hci4: command tx timeout [ 60.252306][ T5230] Bluetooth: hci3: command tx timeout [ 60.260149][ T5238] Bluetooth: hci1: command tx timeout [ 60.265838][ T5238] Bluetooth: hci0: command tx timeout [ 60.316281][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.325104][ T2513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.333570][ T2513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.335003][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.550666][ T5349] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14'. [ 60.785916][ T5362] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17'. [ 61.302702][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 61.326278][ T5395] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 61.363291][ T5395] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 61.376715][ T5395] Zero length message leads to an empty skb [ 61.411112][ T5398] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 61.432304][ T5398] netlink: 88 bytes leftover after parsing attributes in process `syz.4.26'. [ 61.791793][ T5414] netlink: 'syz.0.30': attribute type 5 has an invalid length. [ 62.137347][ T5430] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 62.305745][ T5238] Bluetooth: hci3: command tx timeout [ 62.311431][ T5238] Bluetooth: hci0: command tx timeout [ 62.316984][ T55] Bluetooth: hci1: command tx timeout [ 62.317553][ T5238] Bluetooth: hci4: command tx timeout [ 62.322380][ T55] Bluetooth: hci2: command tx timeout [ 62.464027][ T5441] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 62.616338][ T5451] netlink: 'syz.1.40': attribute type 9 has an invalid length. [ 62.626597][ T5451] netlink: 129368 bytes leftover after parsing attributes in process `syz.1.40'. [ 62.630412][ T5453] netlink: 68 bytes leftover after parsing attributes in process `syz.2.41'. [ 62.707429][ T5453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.41'. [ 62.770786][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.004706][ T5469] tipc: Enabling of bearer rejected, failed to enable media [ 63.389664][ T5491] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.463974][ T5495] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 63.541276][ T5495] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 63.831973][ T5520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.891889][ T5523] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 64.140861][ T5536] __nla_validate_parse: 6 callbacks suppressed [ 64.140880][ T5536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 64.165304][ T5536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.63'. [ 64.185313][ T1173] IPVS: starting estimator thread 0... [ 64.335506][ T5547] IPVS: using max 20 ests per chain, 48000 per kthread [ 64.446852][ T5562] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 64.606204][ T5570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.72'. [ 64.772033][ T5577] warning: `syz.0.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.815919][ T5573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.71'. [ 64.837452][ T5565] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 65.184767][ T5600] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.388810][ T5606] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.82'. [ 65.427412][ T5606] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 65.546760][ T5611] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 65.578299][ T5611] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 65.605200][ T5611] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.672466][ T5620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.86'. [ 65.687013][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 65.881030][ T5631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 66.025037][ T5642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.106805][ T5646] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 66.121787][ T5639] netlink: 100 bytes leftover after parsing attributes in process `syz.3.93'. [ 66.160284][ T5639] pimreg: entered allmulticast mode [ 66.403139][ T5664] netlink: 'syz.3.97': attribute type 2 has an invalid length. [ 66.738381][ T5682] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 67.484987][ T5724] netlink: 'syz.0.103': attribute type 1 has an invalid length. [ 67.696259][ T5750] hsr_slave_0: left promiscuous mode [ 67.713788][ T5750] hsr_slave_1: left promiscuous mode [ 68.319608][ T5783] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 68.892930][ T5824] syz.4.126 uses obsolete (PF_INET,SOCK_PACKET) [ 69.178005][ T5850] __nla_validate_parse: 16 callbacks suppressed [ 69.178022][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 69.425705][ T5872] sctp: [Deprecated]: syz.4.143 (pid 5872) Use of int in max_burst socket option. [ 69.425705][ T5872] Use struct sctp_assoc_value instead [ 69.478659][ T5869] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 69.497648][ T5879] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 69.505907][ T5874] Unknown options in mask 1f4 [ 69.525443][ T5879] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.145'. [ 69.535563][ T5874] netlink: 'syz.3.144': attribute type 2 has an invalid length. [ 69.544019][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 69.571787][ T5879] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 69.584110][ T5879] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.145'. [ 69.629172][ T5884] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.147'. [ 69.630251][ T5879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.145'. [ 69.663126][ T5884] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 69.830635][ T5897] sctp: [Deprecated]: syz.1.151 (pid 5897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.830635][ T5897] Use struct sctp_sack_info instead [ 69.872033][ T5898] sctp: [Deprecated]: syz.1.151 (pid 5898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 69.872033][ T5898] Use struct sctp_sack_info instead [ 69.947050][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 70.283413][ T5923] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.438346][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 71.277809][ T5978] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 71.294035][ T5400] IPVS: starting estimator thread 0... [ 71.299015][ T5984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 71.405137][ T5989] IPVS: using max 26 ests per chain, 62400 per kthread [ 71.460659][ T5998] netlink: 404 bytes leftover after parsing attributes in process `syz.4.181'. [ 71.470627][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 71.581779][ T6004] IPv6: sit1: Disabled Multicast RS [ 71.607678][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.614100][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.126455][ T6019] netlink: 'syz.2.188': attribute type 30 has an invalid length. [ 72.250008][ T6018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.278123][ T6030] dccp_invalid_packet: P.Data Offset(100) too large [ 72.293834][ T6018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.799884][ T6074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.935791][ T6083] lo speed is unknown, defaulting to 1000 [ 72.968884][ T6083] lo speed is unknown, defaulting to 1000 [ 73.013868][ T6086] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.023437][ T6086] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.032802][ T6086] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.042010][ T6086] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.055104][ T6086] vxlan0: entered promiscuous mode [ 73.060476][ T6086] vxlan0: entered allmulticast mode [ 73.101117][ T6086] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.110511][ T6086] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.119746][ T6086] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.128793][ T6086] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.183100][ T6083] lo speed is unknown, defaulting to 1000 [ 73.209687][ T6083] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.243446][ T6083] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.335635][ T6083] lo speed is unknown, defaulting to 1000 [ 73.356072][ T6083] lo speed is unknown, defaulting to 1000 [ 73.387511][ T6083] lo speed is unknown, defaulting to 1000 [ 73.406503][ T6083] lo speed is unknown, defaulting to 1000 [ 73.423927][ T6083] lo speed is unknown, defaulting to 1000 [ 73.496336][ T6106] openvswitch: netlink: EtherType 0 is less than min 600 [ 73.671432][ T6112] macvtap0: entered promiscuous mode [ 73.677174][ T6112] macvtap0: entered allmulticast mode [ 73.682586][ T6112] veth0_macvtap: entered allmulticast mode [ 73.740410][ T6116] team0: Port device veth0_to_team added [ 73.967377][ T6128] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 74.125555][ T6145] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 74.176982][ T6145] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 74.266059][ T6145] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 74.266822][ T6151] __nla_validate_parse: 6 callbacks suppressed [ 74.266837][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 74.294765][ T6145] bond1 (unregistering): Released all slaves [ 74.324334][ T6153] netlink: 'syz.0.233': attribute type 12 has an invalid length. [ 74.340269][ T6153] netlink: 'syz.0.233': attribute type 29 has an invalid length. [ 74.375511][ T6153] netlink: 'syz.0.233': attribute type 2 has an invalid length. [ 74.435084][ T6153] netlink: 'syz.0.233': attribute type 2 has an invalid length. [ 74.442782][ T6153] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 74.472030][ T6153] netlink: 'syz.0.233': attribute type 37 has an invalid length. [ 74.481490][ T6153] netlink: 'syz.0.233': attribute type 2 has an invalid length. [ 74.502186][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.543851][ T6168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.551559][ T6168] IPv6: NLM_F_CREATE should be set when creating new route [ 74.558900][ T6168] IPv6: NLM_F_CREATE should be set when creating new route [ 74.577574][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 74.593509][ T6170] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 74.618957][ T6168] dummy0: entered promiscuous mode [ 74.730613][ T6181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.240'. [ 74.772537][ T6184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.240'. [ 74.829340][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.4.242'. [ 74.943410][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 74.974186][ T6196] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 74.986803][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 75.014916][ T6193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.245'. [ 75.089401][ T6198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.130493][ T5248] block nbd0: NBD_DISCONNECT [ 75.154046][ T5248] block nbd0: Send disconnect failed -32 [ 75.191719][ T55] block nbd0: Disconnected due to user request. [ 75.318680][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 75.334915][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 75.339036][ T6208] netlink: 'syz.1.252': attribute type 12 has an invalid length. [ 75.481981][ T6226] team0: Port device vlan2 added [ 75.638846][ T6224] syz_tun: entered promiscuous mode [ 75.652232][ T6224] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.879678][ T6256] ieee802154 phy0 wpan0: encryption failed: -90 [ 76.041736][ T6266] dccp_invalid_packet: pskb_may_pull failed [ 76.734277][ T8] cfg80211: failed to load regulatory.db [ 76.887344][ T6296] ebtables: ebtables: counters copy to user failed while replacing table [ 77.234335][ T6334] validate_nla: 7 callbacks suppressed [ 77.234353][ T6334] netlink: 'syz.4.292': attribute type 29 has an invalid length. [ 77.266013][ T6334] netlink: 'syz.4.292': attribute type 29 has an invalid length. [ 77.293199][ T6332] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 77.560674][ T5400] IPVS: starting estimator thread 0... [ 77.665000][ T6353] IPVS: using max 22 ests per chain, 52800 per kthread [ 77.779776][ T6363] team0: Device wg2 is of different type [ 77.869245][ T6374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.893827][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.901083][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.056934][ T6359] bridge0: port 3(ipvlan2) entered blocking state [ 78.129201][ T6359] bridge0: port 3(ipvlan2) entered disabled state [ 78.166887][ T6359] ipvlan2: entered allmulticast mode [ 78.194688][ T6359] bridge0: entered allmulticast mode [ 78.223296][ T6359] ipvlan2: left allmulticast mode [ 78.242065][ T6359] bridge0: left allmulticast mode [ 78.395905][ T6397] netlink: 'syz.4.310': attribute type 11 has an invalid length. [ 79.979721][ T6497] netlink: 'syz.3.339': attribute type 2 has an invalid length. [ 79.988178][ T6497] __nla_validate_parse: 18 callbacks suppressed [ 79.988193][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 80.009839][ T6501] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 80.094354][ T6507] Bluetooth: MGMT ver 1.23 [ 80.178165][ T6513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.341'. [ 80.180733][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 80.532529][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 80.542613][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 80.637179][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 80.770064][ T6552] netlink: 'syz.3.355': attribute type 2 has an invalid length. [ 80.863106][ T6558] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 80.871625][ T6558] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.357'. [ 80.881047][ T6558] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 80.901612][ T6558] netlink: 'syz.2.357': attribute type 2 has an invalid length. [ 81.016035][ T6566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.261947][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 81.284686][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 81.389843][ T6586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.367'. [ 81.922320][ T6613] ipt_REJECT: TCP_RESET invalid for non-tcp [ 82.123223][ T6620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.130564][ T6620] IPv6: NLM_F_CREATE should be set when creating new route [ 82.137891][ T6620] IPv6: NLM_F_CREATE should be set when creating new route [ 82.334451][ T6640] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 82.357919][ T6639] validate_nla: 4 callbacks suppressed [ 82.357940][ T6639] netlink: 'syz.3.386': attribute type 4 has an invalid length. [ 82.538886][ T6647] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.656102][ T6655] x_tables: duplicate underflow at hook 1 [ 82.671097][ T6656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.728881][ T6658] rdma_op ffff88807a75f9f0 conn xmit_rdma 0000000000000000 [ 82.874342][ T6670] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 83.009976][ T6680] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.149879][ T6689] 8021q: VLANs not supported on lo [ 83.327277][ T6701] tun0: tun_chr_ioctl cmd 1074025681 [ 83.403416][ T6706] netlink: 'syz.1.409': attribute type 3 has an invalid length. [ 83.871658][ T6726] syzkaller0: entered allmulticast mode [ 83.906732][ T6738] bond0: entered promiscuous mode [ 83.924734][ T6738] bond_slave_0: entered promiscuous mode [ 83.938019][ T6738] bond_slave_1: entered promiscuous mode [ 83.943924][ T6738] bond0: entered allmulticast mode [ 83.960912][ T6738] bond_slave_0: entered allmulticast mode [ 83.968388][ T6738] bond_slave_1: entered allmulticast mode [ 84.025129][ T6745] netlink: 'syz.2.420': attribute type 10 has an invalid length. [ 84.033876][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.135264][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.142487][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.185368][ T6745] bridge0: entered promiscuous mode [ 84.199707][ T6745] bridge0: entered allmulticast mode [ 84.208811][ T6745] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.221768][ T6765] sctp: [Deprecated]: syz.3.425 (pid 6765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.221768][ T6765] Use struct sctp_sack_info instead [ 85.871055][ T6752] lo speed is unknown, defaulting to 1000 [ 85.884788][ T6748] lo speed is unknown, defaulting to 1000 [ 86.013989][ T6787] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 86.023906][ T6787] __nla_validate_parse: 9 callbacks suppressed [ 86.023922][ T6787] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.430'. [ 86.268978][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 86.285044][ T6802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.435'. [ 86.294201][ T6802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 86.317632][ T6802] vlan3: entered allmulticast mode [ 86.709536][ T6831] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.444'. [ 86.884394][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 86.914130][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 87.071493][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 87.082202][ T6841] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.448'. [ 87.337650][ T6858] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.886482][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 87.918068][ T6893] netlink: 'syz.2.463': attribute type 4 has an invalid length. [ 87.941914][ T6891] macvlan2: entered promiscuous mode [ 87.951796][ T6891] macvlan2: entered allmulticast mode [ 88.085616][ T6906] netlink: 'syz.3.469': attribute type 7 has an invalid length. [ 88.187564][ T6911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.657095][ T6941] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 88.722598][ T6946] netlink: 'syz.2.482': attribute type 14 has an invalid length. [ 88.896006][ T6955] wg1: entered allmulticast mode [ 89.177112][ T6975] netlink: 'syz.3.494': attribute type 11 has an invalid length. [ 89.201517][ T6976] trusted_key: syz.2.492 sent an empty control message without MSG_MORE. [ 89.678944][ T7011] sock: sock_set_timeout: `syz.0.504' (pid 7011) tries to set negative timeout [ 89.781463][ T7015] netlink: 'syz.0.508': attribute type 9 has an invalid length. [ 90.006010][ T7029] xt_hashlimit: size too large, truncated to 1048576 [ 90.078455][ T7034] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 90.112299][ T7034] Bluetooth: MGMT ver 1.23 [ 90.300685][ T7044] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 90.364197][ T7044] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 90.730083][ T7067] netlink: 'syz.4.521': attribute type 8 has an invalid length. [ 91.238067][ T7090] netlink: 'syz.1.530': attribute type 142 has an invalid length. [ 91.385143][ T7094] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 144 [ 91.619535][ T7101] __nla_validate_parse: 9 callbacks suppressed [ 91.619556][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.532'. [ 91.731904][ T7101] netlink: 52 bytes leftover after parsing attributes in process `syz.3.532'. [ 92.146277][ T55] Bluetooth: hci0: command tx timeout [ 92.272572][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'. [ 92.286613][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 92.297799][ T7122] netlink: 25 bytes leftover after parsing attributes in process `syz.3.539'. [ 92.435219][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 92.458729][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 92.508651][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 92.693180][ T7148] netlink: 5296 bytes leftover after parsing attributes in process `syz.4.546'. [ 92.744017][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.756370][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 92.801212][ T7148] team0: Port device bond0 added [ 92.834213][ T7155] netlink: 'syz.4.546': attribute type 10 has an invalid length. [ 92.931871][ T7155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.015519][ T7162] netlink: 'syz.2.549': attribute type 2 has an invalid length. [ 93.055802][ T7162] netlink: 'syz.2.549': attribute type 8 has an invalid length. [ 93.883455][ T7220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.038031][ T7225] dccp_v6_rcv: dropped packet with invalid checksum [ 94.054050][ T7225] xt_hashlimit: size too large, truncated to 1048576 [ 94.335191][ T7239] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 94.365388][ T7239] openvswitch: netlink: Actions may not be safe on all matching packets [ 94.412955][ T7244] tipc: Invalid UDP bearer configuration [ 94.412996][ T7244] tipc: Enabling of bearer rejected, failed to enable media [ 94.779402][ T7253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.314773][ T7283] netlink: 'syz.2.584': attribute type 50 has an invalid length. [ 96.355549][ T7282] netlink: 'syz.2.584': attribute type 50 has an invalid length. [ 96.568339][ T7293] ip6t_srh: unknown srh invflags 5F00 [ 96.869843][ T7314] Bluetooth: MGMT ver 1.23 [ 96.920702][ T7309] __nla_validate_parse: 5 callbacks suppressed [ 96.920722][ T7309] netlink: 116 bytes leftover after parsing attributes in process `syz.2.593'. [ 97.243746][ T7325] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.597'. [ 97.283030][ T7325] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 97.285919][ T7328] lo speed is unknown, defaulting to 1000 [ 97.307081][ T7325] tipc: Failed to remove unknown binding: 66,1,1/0:1058660075/1058660077 [ 97.327032][ T7325] tipc: Failed to remove unknown binding: 66,1,1/0:1058660075/1058660077 [ 97.346641][ T7327] lo speed is unknown, defaulting to 1000 [ 97.516300][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'. [ 97.786283][ T7340] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 97.799904][ T7340] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.601'. [ 97.892191][ T7344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.602'. [ 97.925611][ T7342] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 97.927264][ T7344] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.933281][ T7342] netlink: 9380 bytes leftover after parsing attributes in process `syz.0.601'. [ 98.197207][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 98.247813][ T7353] netlink: 5240 bytes leftover after parsing attributes in process `syz.0.605'. [ 98.611929][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 98.632476][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 98.824052][ T7380] pim6reg527: entered allmulticast mode [ 99.146404][ T7406] xt_policy: output policy not valid in PREROUTING and INPUT [ 99.551003][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.631164][ T7433] netlink: 'syz.3.632': attribute type 5 has an invalid length. [ 100.188199][ T7468] netlink: zone id is out of range [ 100.226028][ T7468] netlink: zone id is out of range [ 100.247158][ T7468] netlink: zone id is out of range [ 100.296512][ T7473] netlink: 'syz.1.642': attribute type 19 has an invalid length. [ 100.297661][ T7474] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 100.339186][ T7468] netlink: set zone limit has 4 unknown bytes [ 100.376372][ T7480] netlink: 'syz.3.645': attribute type 29 has an invalid length. [ 100.743457][ T7502] netlink: 'syz.0.653': attribute type 8 has an invalid length. [ 101.114192][ T7524] xt_CT: No such helper "syz1" [ 101.433166][ T55] Bluetooth: hci4: command tx timeout [ 101.563392][ T7564] bridge_slave_1: left allmulticast mode [ 101.569482][ T7564] bridge_slave_1: left promiscuous mode [ 101.579782][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.638696][ T7564] bridge_slave_0: left allmulticast mode [ 101.644642][ T7564] bridge_slave_0: left promiscuous mode [ 101.656256][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.799261][ T7564] bond0: (slave bridge0): Releasing backup interface [ 101.816720][ T7564] bridge0 (unregistering): left promiscuous mode [ 101.829415][ T7564] bridge0 (unregistering): left allmulticast mode [ 101.872785][ T7586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.918399][ T7567] hsr_slave_1: entered allmulticast mode [ 102.220128][ T7602] __nla_validate_parse: 42 callbacks suppressed [ 102.220148][ T7602] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.686'. [ 102.236822][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.687'. [ 102.330758][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 102.460855][ T7613] netlink: 'syz.3.689': attribute type 9 has an invalid length. [ 102.499760][ T7599] netlink: 'syz.2.687': attribute type 3 has an invalid length. [ 102.794636][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 102.850529][ T7637] x_tables: duplicate underflow at hook 1 [ 103.181329][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.272066][ T7662] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 103.463607][ T7677] raw_sendmsg: syz.4.712 forgot to set AF_INET. Fix it! [ 103.485098][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 103.521911][ T7677] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 103.550818][ T7677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.712'. [ 103.568723][ T7681] netlink: 'syz.0.714': attribute type 21 has an invalid length. [ 103.615411][ T7681] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 103.681403][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 103.815824][ T7700] netlink: 156 bytes leftover after parsing attributes in process `syz.4.720'. [ 103.878040][ T7706] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 103.899367][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 103.921499][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 104.757029][ T7757] syzkaller0: entered promiscuous mode [ 104.762639][ T7757] syzkaller0: entered allmulticast mode [ 104.773198][ T7767] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 106.677755][ T7798] tap0: tun_chr_ioctl cmd 1074025677 [ 106.691515][ T7798] tap0: linktype set to 65534 [ 106.879219][ T7816] xfrm2: entered allmulticast mode [ 106.884087][ T7813] netlink: 'syz.0.751': attribute type 11 has an invalid length. [ 107.119704][ T7834] netlink: 'syz.3.758': attribute type 6 has an invalid length. [ 107.149196][ T7837] netlink: 'syz.1.759': attribute type 12 has an invalid length. [ 107.219403][ T7839] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 107.251575][ T7842] __nla_validate_parse: 12 callbacks suppressed [ 107.251594][ T7842] netlink: 156 bytes leftover after parsing attributes in process `syz.3.761'. [ 107.343783][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 107.354032][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 107.445553][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 107.461620][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 107.463826][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 107.593997][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 107.607457][ T7858] netlink: 'syz.0.766': attribute type 9 has an invalid length. [ 107.622308][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 107.628387][ T7858] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.766'. [ 107.636701][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 108.147670][ T7890] syz.3.778[7890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.148652][ T7888] syz.3.778[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.187699][ T7890] netlink: 'syz.3.778': attribute type 11 has an invalid length. [ 108.275832][ T7888] netlink: 'syz.3.778': attribute type 11 has an invalid length. [ 108.341656][ T7890] debugfs: Directory 'netdev:' with parent '.' already present! [ 108.533455][ T7917] netlink: 'syz.3.786': attribute type 9 has an invalid length. [ 108.552692][ T7920] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 108.614347][ T7920] tipc: Enabling of bearer rejected, media not registered [ 109.411421][ T7979] netlink: 'syz.0.806': attribute type 8 has an invalid length. [ 109.455257][ T7981] netlink: 'syz.1.807': attribute type 11 has an invalid length. [ 109.584786][ T7985] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 0, id = 0 [ 109.753571][ T7995] netlink: 'syz.1.811': attribute type 13 has an invalid length. [ 109.780561][ T7995] syz_tun: refused to change device tx_queue_len [ 109.798787][ T7995] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 109.955043][ T8009] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 110.165665][ T8015] ipvlan2: entered promiscuous mode [ 110.814588][ T8062] netlink: 'syz.1.831': attribute type 10 has an invalid length. [ 110.880236][ T8062] team0: Port device netdevsim0 added [ 111.502702][ T8123] sctp: [Deprecated]: syz.3.848 (pid 8123) Use of int in max_burst socket option. [ 111.502702][ T8123] Use struct sctp_assoc_value instead [ 111.561012][ T8127] netlink: 'syz.1.849': attribute type 8 has an invalid length. [ 111.639819][ T8112] sctp: [Deprecated]: syz.2.844 (pid 8112) Use of int in max_burst socket option deprecated. [ 111.639819][ T8112] Use struct sctp_assoc_value instead [ 112.429094][ T8164] __nla_validate_parse: 23 callbacks suppressed [ 112.429116][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 114.009541][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.0.855'. [ 114.311857][ T8196] syzkaller1: entered promiscuous mode [ 114.320109][ T8196] syzkaller1: entered allmulticast mode [ 115.595195][ T8267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'. [ 115.614006][ T8267] netlink: 43 bytes leftover after parsing attributes in process `syz.0.892'. [ 115.723643][ T8275] netlink: 2 bytes leftover after parsing attributes in process `syz.4.895'. [ 115.725954][ T8276] netlink: 76 bytes leftover after parsing attributes in process `syz.0.894'. [ 115.743693][ T8275] netlink: 88 bytes leftover after parsing attributes in process `syz.4.895'. [ 115.751733][ T8276] Êü: entered promiscuous mode [ 115.777225][ T8277] macvtap0: entered promiscuous mode [ 115.783730][ T8277] macvtap0: entered allmulticast mode [ 115.798614][ T8277] veth0_macvtap: entered allmulticast mode [ 115.809431][ T8277] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.896'. [ 115.982877][ T8287] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 115.997411][ T8287] netlink: 224 bytes leftover after parsing attributes in process `syz.0.901'. [ 116.097946][ T8294] netlink: 'syz.0.904': attribute type 7 has an invalid length. [ 116.121617][ T8294] Êü: entered promiscuous mode [ 116.251188][ T8302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 116.265902][ T8302] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 116.299444][ T8302] syz.4.907 (8302) used greatest stack depth: 18392 bytes left [ 116.431789][ T8321] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.663824][ T8340] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 116.673610][ T8342] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 116.744223][ T8345] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 117.173118][ T8377] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 117.244707][ T8377] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 117.262336][ T8377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.271360][ T3625] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.431235][ T8377] bond2 (unregistering): (slave bridge4): Removing an active aggregator [ 117.442031][ T8377] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 117.459687][ T8377] bond2 (unregistering): Released all slaves [ 117.564599][ T8392] __nla_validate_parse: 11 callbacks suppressed [ 117.564619][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 117.706689][ T8407] xt_nfacct: accounting object `syz1' does not exists [ 117.716838][ T8407] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 117.883081][ T8418] xt_HMARK: spi-set and port-set can't be combined [ 117.939800][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 118.011547][ T8428] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 118.020670][ T8428] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.946'. [ 118.068887][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 118.079074][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 118.312254][ T8451] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 118.356379][ T8451] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 118.364542][ T8451] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 118.380816][ T8451] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 118.393973][ T8451] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 118.432304][ T8451] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 118.491592][ T8453] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.520117][ T8455] netlink: 104 bytes leftover after parsing attributes in process `syz.1.954'. [ 118.689048][ T8470] netlink: 13 bytes leftover after parsing attributes in process `syz.4.959'. [ 118.721833][ T8470] pim6reg: entered allmulticast mode [ 118.734573][ T8474] : renamed from bond0 (while UP) [ 118.752300][ T8470] pim6reg: left allmulticast mode [ 118.788937][ T8473] veth0_to_hsr: entered promiscuous mode [ 118.794984][ T8473] veth0_to_hsr: entered allmulticast mode [ 118.944063][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 118.979165][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 118.988891][ T8482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.965'. [ 119.000520][ T8482] block nbd0: Unsupported socket: shutdown callout must be supported. [ 119.157319][ T8486] team0: Port device bond0 removed [ 119.166415][ T8486] bridge_slave_0: left allmulticast mode [ 119.172134][ T8486] bridge_slave_0: left promiscuous mode [ 119.179472][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.213183][ T8506] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 119.213662][ T8486] bridge_slave_1: left allmulticast mode [ 119.239304][ T8486] bridge_slave_1: left promiscuous mode [ 119.287490][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.333446][ T8486] bond0: (slave bond_slave_0): Releasing backup interface [ 119.369480][ T8517] xt_ecn: cannot match TCP bits for non-tcp packets [ 119.387243][ T8486] bond0: (slave bond_slave_1): Releasing backup interface [ 119.399318][ T8516] xt_ecn: cannot match TCP bits for non-tcp packets [ 119.453925][ T8486] team0: Port device team_slave_0 removed [ 119.535539][ T8486] team0: Port device team_slave_1 removed [ 119.544733][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.558983][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.569413][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.578582][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.592826][ T8486] bond0: (slave wlan1): Releasing backup interface [ 119.688270][ T8509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.734336][ T8512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.742272][ T8512] bond2: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 119.757737][ T8512] bond2: (slave ip6tnl2): Error -95 calling set_mac_address [ 119.800358][ T8535] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 119.810692][ T8536] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 119.891017][ T8540] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 120.713847][ T8598] delete_channel: no stack [ 120.977932][ T8614] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 121.002814][ T8612] syzkaller0: entered promiscuous mode [ 121.015592][ T8612] syzkaller0: entered allmulticast mode [ 121.024372][ T5727] syzkaller0: tun_net_xmit 48 [ 121.047240][ T8616] validate_nla: 61 callbacks suppressed [ 121.047259][ T8616] netlink: 'syz.0.1004': attribute type 11 has an invalid length. [ 121.070859][ T8612] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 121.086401][ T8612] syzkaller0: Linktype set failed because interface is up [ 123.802371][ T8657] __nla_validate_parse: 13 callbacks suppressed [ 123.802391][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 123.900237][ T8662] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 123.929118][ T8660] netlink: 'syz.1.1014': attribute type 2 has an invalid length. [ 124.037231][ T8669] openvswitch: netlink: Missing valid actions attribute. [ 124.044333][ T8669] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.074601][ T8676] openvswitch: netlink: Missing valid actions attribute. [ 124.098049][ T8676] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.139455][ T8672] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1023'. [ 124.171308][ T8675] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 124.266470][ T8687] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1027'. [ 124.501231][ T8702] x_tables: duplicate underflow at hook 1 [ 124.611483][ T8710] syz.1.1035 (8710) used greatest stack depth: 17520 bytes left [ 124.831558][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 125.228729][ T8735] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.391074][ T8744] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 125.437701][ T8744] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1049'. [ 125.577506][ T8752] SET target dimension over the limit! [ 125.735845][ T8755] sctp: [Deprecated]: syz.3.1052 (pid 8755) Use of int in maxseg socket option. [ 125.735845][ T8755] Use struct sctp_assoc_value instead [ 125.845781][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 125.921884][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 126.655987][ T8782] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 126.694437][ T8782] netlink: 9364 bytes leftover after parsing attributes in process `syz.0.1062'. [ 126.756537][ T8788] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1062'. [ 126.808330][ T8782] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 127.228381][ T8808] netlink: 'syz.2.1068': attribute type 11 has an invalid length. [ 127.256898][ T8807] netlink: 'syz.1.1069': attribute type 21 has an invalid length. [ 127.264789][ T8807] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1069'. [ 127.440702][ T8817] netlink: 'syz.2.1068': attribute type 11 has an invalid length. [ 127.526162][ T8817] debugfs: Directory 'netdev:' with parent 'phy8' already present! [ 127.828816][ T8831] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 129.985600][ T5230] Bluetooth: hci3: command 0x0405 tx timeout [ 133.029087][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036873][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284832][ C0] sched: DL replenish lagged too much [ 137.942123][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.952780][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.963796][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.972108][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.980188][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.988709][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.811607][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.826196][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.838280][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.857196][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.865756][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 139.873157][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.917547][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.929125][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.938757][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.949215][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.957798][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 139.965538][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.026768][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 140.037616][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 140.046880][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 140.056733][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 140.064430][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 140.072787][ T5238] Bluetooth: hci5: command tx timeout [ 140.080091][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 140.149113][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 140.165895][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 140.174207][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 140.183407][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 140.191724][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 140.200277][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 141.988346][ T55] Bluetooth: hci6: command tx timeout [ 142.066027][ T55] Bluetooth: hci7: command tx timeout [ 142.145647][ T5230] Bluetooth: hci5: command tx timeout [ 142.153759][ T55] Bluetooth: hci8: command tx timeout [ 142.225147][ T55] Bluetooth: hci9: command tx timeout [ 144.065581][ T55] Bluetooth: hci6: command tx timeout [ 144.145714][ T55] Bluetooth: hci7: command tx timeout [ 144.225801][ T55] Bluetooth: hci8: command tx timeout [ 144.231294][ T55] Bluetooth: hci5: command tx timeout [ 144.305586][ T55] Bluetooth: hci9: command tx timeout [ 146.145827][ T55] Bluetooth: hci6: command tx timeout [ 146.225300][ T55] Bluetooth: hci7: command tx timeout [ 146.305712][ T5230] Bluetooth: hci8: command tx timeout [ 146.312613][ T55] Bluetooth: hci5: command tx timeout [ 146.386913][ T55] Bluetooth: hci9: command tx timeout [ 148.230545][ T55] Bluetooth: hci6: command tx timeout [ 148.306191][ T55] Bluetooth: hci7: command tx timeout [ 148.385635][ T55] Bluetooth: hci8: command tx timeout [ 148.465054][ T55] Bluetooth: hci9: command tx timeout [ 181.203728][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 181.210479][ T5246] Bluetooth: hci4: command 0x0406 tx timeout [ 181.217465][ T5229] Bluetooth: hci3: command 0x0405 tx timeout [ 181.223516][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 194.470396][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477617][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.432890][ T5230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 199.448796][ T5230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 199.458013][ T5230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 199.481906][ T5230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 199.490410][ T5230] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 199.500944][ T5230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 200.526604][ T5230] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 200.544560][ T5230] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 200.557476][ T5230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 200.569008][ T5230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 200.578451][ T5230] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 200.586687][ T5230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 200.601577][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 200.613764][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 200.623385][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 200.633912][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 200.641781][ T55] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 200.649837][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 200.751009][ T5230] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 200.761401][ T5230] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 200.777903][ T5230] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 200.786750][ T5230] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 200.794624][ T5230] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 200.803229][ T5230] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 200.887691][ T5230] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 200.902525][ T5230] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 200.913741][ T5230] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 200.931948][ T5230] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 200.943422][ T5230] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 200.958385][ T5230] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 201.585866][ T5230] Bluetooth: hci10: command tx timeout [ 202.705619][ T5230] Bluetooth: hci11: command tx timeout [ 202.785908][ T5230] Bluetooth: hci12: command tx timeout [ 202.865662][ T5230] Bluetooth: hci13: command tx timeout [ 203.025811][ T5230] Bluetooth: hci14: command tx timeout [ 203.669808][ T5230] Bluetooth: hci10: command tx timeout [ 204.785952][ T5230] Bluetooth: hci11: command tx timeout [ 204.865716][ T5230] Bluetooth: hci12: command tx timeout [ 204.947257][ T5230] Bluetooth: hci13: command tx timeout [ 205.106384][ T5230] Bluetooth: hci14: command tx timeout [ 205.745615][ T5230] Bluetooth: hci10: command tx timeout [ 206.865784][ T5230] Bluetooth: hci11: command tx timeout [ 206.945667][ T5230] Bluetooth: hci12: command tx timeout [ 207.025620][ T5230] Bluetooth: hci13: command tx timeout [ 207.185484][ T5230] Bluetooth: hci14: command tx timeout [ 207.825735][ T5230] Bluetooth: hci10: command tx timeout [ 208.945495][ T5230] Bluetooth: hci11: command tx timeout [ 209.025932][ T5230] Bluetooth: hci12: command tx timeout [ 209.105586][ T5230] Bluetooth: hci13: command tx timeout [ 209.265735][ T5230] Bluetooth: hci14: command tx timeout [ 255.907671][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.914508][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.432414][ T55] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 260.443167][ T55] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 260.452618][ T55] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 260.461293][ T55] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 260.469761][ T55] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 260.479680][ T55] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 261.299450][ T5229] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 261.317306][ T5244] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 261.327400][ T5247] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 261.338724][ T5247] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 261.347828][ T5247] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 261.358214][ T5247] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 261.366230][ T5247] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 261.377954][ T5247] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 261.386906][ T5247] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 261.395533][ T5244] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 261.402721][ T5247] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 261.412064][ T5244] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 261.526433][ T5244] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 261.538958][ T5244] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 261.548663][ T5244] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 261.557737][ T5244] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 261.566530][ T5244] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 261.574001][ T5244] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 261.615896][ T5246] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 261.627674][ T5246] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 261.639774][ T5246] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 261.650006][ T5246] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 261.659046][ T5246] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 261.669468][ T5246] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 262.545601][ T5246] Bluetooth: hci15: command tx timeout [ 263.123613][ T5244] Bluetooth: hci6: command 0x0406 tx timeout [ 263.130067][ T5229] Bluetooth: hci7: command 0x0406 tx timeout [ 263.136314][ T5229] Bluetooth: hci8: command 0x0406 tx timeout [ 263.142361][ T5229] Bluetooth: hci9: command 0x0406 tx timeout [ 263.149112][ T5246] Bluetooth: hci5: command 0x0406 tx timeout [ 263.505904][ T5240] Bluetooth: hci17: command tx timeout [ 263.512234][ T5240] Bluetooth: hci16: command tx timeout [ 263.665841][ T5240] Bluetooth: hci18: command tx timeout [ 263.745595][ T5240] Bluetooth: hci19: command tx timeout [ 264.625433][ T5240] Bluetooth: hci15: command tx timeout [ 265.585572][ T5238] Bluetooth: hci17: command tx timeout [ 265.591963][ T5240] Bluetooth: hci16: command tx timeout [ 265.746788][ T5240] Bluetooth: hci18: command tx timeout [ 265.825633][ T5240] Bluetooth: hci19: command tx timeout [ 266.705763][ T5240] Bluetooth: hci15: command tx timeout [ 267.665458][ T5238] Bluetooth: hci17: command tx timeout [ 267.672071][ T5240] Bluetooth: hci16: command tx timeout [ 267.825456][ T5240] Bluetooth: hci18: command tx timeout [ 267.905601][ T5240] Bluetooth: hci19: command tx timeout [ 268.785666][ T5240] Bluetooth: hci15: command tx timeout [ 269.746759][ T5240] Bluetooth: hci16: command tx timeout [ 269.752403][ T5240] Bluetooth: hci17: command tx timeout [ 269.905218][ T5240] Bluetooth: hci18: command tx timeout [ 269.985783][ T5238] Bluetooth: hci19: command tx timeout [ 275.105918][ T30] INFO: task kworker/1:3:5241 blocked for more than 143 seconds. [ 275.113709][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.161218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.204579][ T30] task:kworker/1:3 state:D stack:21136 pid:5241 tgid:5241 ppid:2 flags:0x00004000 [ 275.305681][ T30] Workqueue: events cfg80211_destroy_iface_wk [ 275.311930][ T30] Call Trace: [ 275.395734][ T30] [ 275.398751][ T30] __schedule+0x1895/0x4b30 [ 275.403328][ T30] ? __pfx___schedule+0x10/0x10 [ 275.464937][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.471016][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.520969][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.537392][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 275.542678][ T30] ? schedule+0x90/0x320 [ 275.555533][ T30] schedule+0x14b/0x320 [ 275.559766][ T30] schedule_timeout+0xb0/0x310 [ 275.564567][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 275.576019][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.582098][ T30] ? wait_for_completion+0x2fe/0x620 [ 275.593787][ T30] ? wait_for_completion+0x2fe/0x620 [ 275.600117][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.614658][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 275.620892][ T30] ? wait_for_completion+0x2fe/0x620 [ 275.632851][ T30] wait_for_completion+0x355/0x620 [ 275.639381][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 275.651663][ T30] ? __flush_work+0xe7/0xc50 [ 275.659371][ T30] __flush_work+0xa37/0xc50 [ 275.663957][ T30] ? __flush_work+0xe7/0xc50 [ 275.676107][ T30] ? __pfx___flush_work+0x10/0x10 [ 275.684121][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 275.693968][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.703704][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 275.712649][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.728934][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 275.738691][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.751795][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.762263][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.771556][ T30] ? up_write+0x1a9/0x590 [ 275.780247][ T30] unregister_netdevice_queue+0x303/0x370 [ 275.790891][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.800350][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 275.810334][ T30] _cfg80211_unregister_wdev+0x162/0x560 [ 275.819464][ T30] ieee80211_if_remove+0x25d/0x3a0 [ 275.824671][ T30] ieee80211_del_iface+0x19/0x30 [ 275.837096][ T30] cfg80211_remove_virtual_intf+0x23f/0x410 [ 275.843066][ T30] cfg80211_destroy_ifaces+0x132/0x1c0 [ 275.855519][ T30] ? process_scheduled_works+0x976/0x1850 [ 275.861311][ T30] cfg80211_destroy_iface_wk+0x21/0x30 [ 275.873335][ T30] process_scheduled_works+0xa63/0x1850 [ 275.883431][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.895807][ T30] ? assign_work+0x364/0x3d0 [ 275.900477][ T30] worker_thread+0x870/0xd30 [ 275.911170][ T30] ? __kthread_parkme+0x169/0x1d0 [ 275.917204][ T30] ? __pfx_worker_thread+0x10/0x10 [ 275.922372][ T30] kthread+0x2f0/0x390 [ 275.934306][ T30] ? __pfx_worker_thread+0x10/0x10 [ 275.942055][ T30] ? __pfx_kthread+0x10/0x10 [ 275.952799][ T30] ret_from_fork+0x4b/0x80 [ 275.957750][ T30] ? __pfx_kthread+0x10/0x10 [ 275.962390][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.973512][ T30] [ 275.977640][ T30] INFO: task syz.3.1072:8821 blocked for more than 144 seconds. [ 275.993820][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 276.002353][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.017831][ T30] task:syz.3.1072 state:D stack:27392 pid:8821 tgid:8818 ppid:5225 flags:0x00000004 [ 276.035083][ T30] Call Trace: [ 276.038424][ T30] [ 276.041384][ T30] __schedule+0x1895/0x4b30 [ 276.056944][ T30] ? __pfx___schedule+0x10/0x10 [ 276.061879][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.075372][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 276.080927][ T30] ? schedule+0x90/0x320 [ 276.095340][ T30] schedule+0x14b/0x320 [ 276.099574][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.111583][ T30] __mutex_lock+0x6a7/0xd70 [ 276.117712][ T30] ? __mutex_lock+0x52a/0xd70 [ 276.122447][ T30] ? addrconf_add_ifaddr+0x1fc/0x340 [ 276.134371][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.140372][ T30] ? __might_fault+0xc6/0x120 [ 276.153393][ T30] addrconf_add_ifaddr+0x1fc/0x340 [ 276.160664][ T30] ? mark_lock+0x9a/0x360 [ 276.171316][ T30] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 276.178171][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 276.183897][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.195363][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 276.200655][ T30] inet6_ioctl+0x146/0x280 [ 276.212468][ T30] ? kfree+0x1a0/0x440 [ 276.217412][ T30] ? __pfx_inet6_ioctl+0x10/0x10 [ 276.222500][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 276.235145][ T30] sock_do_ioctl+0x158/0x460 [ 276.239827][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 276.252454][ T30] sock_ioctl+0x626/0x8e0 [ 276.257761][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 276.262667][ T30] ? __fget_files+0x29/0x470 [ 276.275347][ T30] ? __fget_files+0x3f3/0x470 [ 276.280106][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 276.291654][ T30] __se_sys_ioctl+0xf9/0x170 [ 276.297482][ T30] do_syscall_64+0xf3/0x230 [ 276.302046][ T30] ? clear_bhb_loop+0x35/0x90 [ 276.315370][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.321346][ T30] RIP: 0033:0x7fcae817dff9 [ 276.333375][ T30] RSP: 002b:00007fcae8efd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.343331][ T30] RAX: ffffffffffffffda RBX: 00007fcae8335f80 RCX: 00007fcae817dff9 [ 276.359926][ T30] RDX: 0000000020000100 RSI: 0000000000008916 RDI: 0000000000000004 [ 276.371225][ T30] RBP: 00007fcae81f0296 R08: 0000000000000000 R09: 0000000000000000 [ 276.387318][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.402157][ T30] R13: 0000000000000000 R14: 00007fcae8335f80 R15: 00007ffd6c751e88 [ 276.412271][ T30] [ 276.422045][ T30] INFO: task syz.4.1075:8828 blocked for more than 144 seconds. [ 276.430670][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 276.444344][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.454612][ T30] task:syz.4.1075 state:D stack:22352 pid:8828 tgid:8827 ppid:5235 flags:0x00000004 [ 276.472473][ T30] Call Trace: [ 276.476578][ T30] [ 276.479561][ T30] __schedule+0x1895/0x4b30 [ 276.484136][ T30] ? __pfx___schedule+0x10/0x10 [ 276.494872][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.502299][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 276.512448][ T30] ? schedule+0x90/0x320 [ 276.521024][ T30] schedule+0x14b/0x320 [ 276.529948][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.537792][ T30] __mutex_lock+0x6a7/0xd70 [ 276.542359][ T30] ? __mutex_lock+0x52a/0xd70 [ 276.552695][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 276.560734][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.573345][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 276.580356][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 276.590972][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.600805][ T30] ? ref_tracker_free+0x643/0x7e0 [ 276.611226][ T30] netlink_rcv_skb+0x1e3/0x430 [ 276.618094][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.623626][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.640963][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.648306][ T30] netlink_unicast+0x7f6/0x990 [ 276.653143][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 276.664112][ T30] ? __virt_addr_valid+0x183/0x530 [ 276.671749][ T30] ? __check_object_size+0x48e/0x900 [ 276.683930][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 276.690994][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.701325][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 276.717073][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.722435][ T30] __sock_sendmsg+0x221/0x270 [ 276.735235][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 276.740076][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.751685][ T30] __sys_sendmsg+0x292/0x380 [ 276.757274][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.762483][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.775937][ T30] ? do_syscall_64+0x100/0x230 [ 276.780798][ T30] ? do_syscall_64+0xb6/0x230 [ 276.794534][ T30] do_syscall_64+0xf3/0x230 [ 276.800058][ T30] ? clear_bhb_loop+0x35/0x90 [ 276.812042][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.820099][ T30] RIP: 0033:0x7fa1d297dff9 [ 276.824566][ T30] RSP: 002b:00007fa1d37bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.840476][ T30] RAX: ffffffffffffffda RBX: 00007fa1d2b35f80 RCX: 00007fa1d297dff9 [ 276.850579][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 276.865723][ T30] RBP: 00007fa1d29f0296 R08: 0000000000000000 R09: 0000000000000000 [ 276.874090][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.890015][ T30] R13: 0000000000000000 R14: 00007fa1d2b35f80 R15: 00007ffcb3c3bdf8 [ 276.902032][ T30] [ 276.911158][ T30] INFO: task syz.2.1078:8841 blocked for more than 145 seconds. [ 276.920849][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 276.936644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.950768][ T30] task:syz.2.1078 state:D stack:25984 pid:8841 tgid:8840 ppid:5236 flags:0x00000004 [ 276.964335][ T30] Call Trace: [ 276.973031][ T30] [ 276.977687][ T30] __schedule+0x1895/0x4b30 [ 276.982272][ T30] ? __pfx___schedule+0x10/0x10 [ 276.992536][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.999283][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 277.011663][ T30] ? schedule+0x90/0x320 [ 277.018289][ T30] schedule+0x14b/0x320 [ 277.022522][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.034312][ T30] __mutex_lock+0x6a7/0xd70 [ 277.043880][ T30] ? __mutex_lock+0x52a/0xd70 [ 277.054159][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 277.062419][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.073234][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 277.081864][ T30] ? __nla_parse+0x40/0x60 [ 277.091554][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 277.098384][ T30] genl_rcv_msg+0xaaa/0xec0 [ 277.102950][ T30] ? mark_lock+0x9a/0x360 [ 277.115598][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.120718][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 277.133302][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 277.140030][ T30] ? __pfx_nl80211_set_interface+0x10/0x10 [ 277.153413][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 277.159887][ T30] ? __pfx___might_resched+0x10/0x10 [ 277.171903][ T30] netlink_rcv_skb+0x1e3/0x430 [ 277.179564][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.184655][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.195628][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 277.201178][ T30] genl_rcv+0x28/0x40 [ 277.211463][ T30] netlink_unicast+0x7f6/0x990 [ 277.218208][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 277.223564][ T30] ? __virt_addr_valid+0x183/0x530 [ 277.237215][ T30] ? __check_object_size+0x48e/0x900 [ 277.242662][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 277.252475][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.260176][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 277.272532][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.278785][ T30] __sock_sendmsg+0x221/0x270 [ 277.283519][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 277.295345][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.300729][ T30] __sys_sendmsg+0x292/0x380 [ 277.311127][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.318313][ T30] ? __hrtimer_run_queues+0xcdc/0xd50 [ 277.323777][ T30] ? __pfx_sched_clock_cpu+0x10/0x10 [ 277.337568][ T30] ? hrtimer_interrupt+0x76f/0x990 [ 277.342760][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.358158][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.364563][ T30] ? __irq_exit_rcu+0x100/0x1c0 [ 277.373960][ T30] ? do_syscall_64+0xb6/0x230 [ 277.385471][ T30] do_syscall_64+0xf3/0x230 [ 277.390054][ T30] ? clear_bhb_loop+0x35/0x90 [ 277.401408][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.408593][ T30] RIP: 0033:0x7fcd53b7dff9 [ 277.413145][ T30] RSP: 002b:00007fcd549d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.429599][ T30] RAX: ffffffffffffffda RBX: 00007fcd53d35f80 RCX: 00007fcd53b7dff9 [ 277.441161][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 277.454627][ T30] RBP: 00007fcd53bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 277.471625][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.481561][ T30] R13: 0000000000000000 R14: 00007fcd53d35f80 R15: 00007ffd7a297998 [ 277.495099][ T30] [ 277.499418][ T30] INFO: task syz.2.1078:8847 blocked for more than 145 seconds. [ 277.512199][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 277.523424][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.536655][ T30] task:syz.2.1078 state:D stack:27056 pid:8847 tgid:8840 ppid:5236 flags:0x00000004 [ 277.552950][ T30] Call Trace: [ 277.559604][ T30] [ 277.562596][ T30] __schedule+0x1895/0x4b30 [ 277.571389][ T30] ? __pfx___schedule+0x10/0x10 [ 277.580247][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.591380][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 277.601240][ T30] ? schedule+0x90/0x320 [ 277.609820][ T30] schedule+0x14b/0x320 [ 277.614058][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.623764][ T30] __mutex_lock+0x6a7/0xd70 [ 277.632731][ T30] ? __mutex_lock+0x52a/0xd70 [ 277.640568][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 277.651385][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.659603][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 277.671137][ T30] ? __nla_parse+0x40/0x60 [ 277.678949][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 277.683781][ T30] genl_rcv_msg+0xaaa/0xec0 [ 277.693064][ T30] ? mark_lock+0x9a/0x360 [ 277.701743][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.712728][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 277.721026][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 277.731310][ T30] ? __pfx_nl80211_start_ap+0x10/0x10 [ 277.739734][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 277.749998][ T30] ? __pfx___might_resched+0x10/0x10 [ 277.759672][ T30] netlink_rcv_skb+0x1e3/0x430 [ 277.764502][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.774175][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.782624][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 277.792375][ T30] genl_rcv+0x28/0x40 [ 277.800147][ T30] netlink_unicast+0x7f6/0x990 [ 277.812840][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 277.821252][ T30] ? __virt_addr_valid+0x183/0x530 [ 277.832663][ T30] ? __check_object_size+0x48e/0x900 [ 277.841181][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 277.850176][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.860085][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 277.869543][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.878411][ T30] __sock_sendmsg+0x221/0x270 [ 277.883161][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 277.892588][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.901027][ T30] __sys_sendmsg+0x292/0x380 [ 277.914105][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.924014][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.935648][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.942046][ T30] ? exc_page_fault+0x590/0x8c0 [ 277.953645][ T30] ? do_syscall_64+0xb6/0x230 [ 277.960519][ T30] do_syscall_64+0xf3/0x230 [ 277.971376][ T30] ? clear_bhb_loop+0x35/0x90 [ 277.977244][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.983193][ T30] RIP: 0033:0x7fcd53b7dff9 [ 277.993981][ T30] RSP: 002b:00007fcd549b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.002911][ T30] RAX: ffffffffffffffda RBX: 00007fcd53d36058 RCX: 00007fcd53b7dff9 [ 278.018431][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 278.030856][ T30] RBP: 00007fcd53bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 278.044105][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.060399][ T30] R13: 0000000000000001 R14: 00007fcd53d36058 R15: 00007ffd7a297998 [ 278.070936][ T30] [ 278.074080][ T30] INFO: task syz.2.1078:8848 blocked for more than 146 seconds. [ 278.089669][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 278.100504][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.117738][ T30] task:syz.2.1078 state:D stack:27136 pid:8848 tgid:8840 ppid:5236 flags:0x00000004 [ 278.132950][ T30] Call Trace: [ 278.143299][ T30] [ 278.152600][ T30] __schedule+0x1895/0x4b30 [ 278.160560][ T30] ? __pfx___schedule+0x10/0x10 [ 278.170842][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.178982][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 278.184526][ T30] ? schedule+0x90/0x320 [ 278.193456][ T30] schedule+0x14b/0x320 [ 278.200770][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.210542][ T30] __mutex_lock+0x6a7/0xd70 [ 278.218682][ T30] ? __mutex_lock+0x52a/0xd70 [ 278.223431][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 278.234400][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 278.246395][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 278.251406][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 278.261676][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.268194][ T30] ? ref_tracker_free+0x643/0x7e0 [ 278.273291][ T30] netlink_rcv_skb+0x1e3/0x430 [ 278.285379][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.290920][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.302601][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.311204][ T30] netlink_unicast+0x7f6/0x990 [ 278.322460][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 278.328736][ T30] ? __virt_addr_valid+0x183/0x530 [ 278.333910][ T30] ? __check_object_size+0x48e/0x900 [ 278.349585][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 278.354446][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.363225][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 278.373823][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.381195][ T30] __sock_sendmsg+0x221/0x270 [ 278.393646][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 278.400771][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.411417][ T30] __sys_sendmsg+0x292/0x380 [ 278.418109][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.423319][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.437036][ T30] ? do_syscall_64+0x100/0x230 [ 278.443908][ T30] ? do_syscall_64+0xb6/0x230 [ 278.452979][ T30] do_syscall_64+0xf3/0x230 [ 278.461342][ T30] ? clear_bhb_loop+0x35/0x90 [ 278.473480][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.485350][ T30] RIP: 0033:0x7fcd53b7dff9 [ 278.489833][ T30] RSP: 002b:00007fcd54993038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.506280][ T30] RAX: ffffffffffffffda RBX: 00007fcd53d36130 RCX: 00007fcd53b7dff9 [ 278.514320][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 278.529358][ T30] RBP: 00007fcd53bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 278.540824][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.556828][ T30] R13: 0000000000000000 R14: 00007fcd53d36130 R15: 00007ffd7a297998 [ 278.569403][ T30] [ 278.572553][ T30] INFO: task syz.2.1078:8850 blocked for more than 146 seconds. [ 278.589225][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 278.600064][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.613153][ T30] task:syz.2.1078 state:D stack:26496 pid:8850 tgid:8840 ppid:5236 flags:0x00000004 [ 278.630526][ T30] Call Trace: [ 278.633861][ T30] [ 278.638125][ T30] __schedule+0x1895/0x4b30 [ 278.642716][ T30] ? __pfx___schedule+0x10/0x10 [ 278.655387][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.660491][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 278.672712][ T30] ? schedule+0x90/0x320 [ 278.678333][ T30] schedule+0x14b/0x320 [ 278.682551][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.696422][ T30] __mutex_lock+0x6a7/0xd70 [ 278.700994][ T30] ? __mutex_lock+0x52a/0xd70 [ 278.714093][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 278.721428][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 278.731985][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 278.739000][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 278.744176][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.755187][ T30] ? ref_tracker_free+0x643/0x7e0 [ 278.760296][ T30] netlink_rcv_skb+0x1e3/0x430 [ 278.772396][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.778834][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.784463][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.799611][ T30] netlink_unicast+0x7f6/0x990 [ 278.804472][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 278.814141][ T30] ? __virt_addr_valid+0x183/0x530 [ 278.827979][ T30] ? __check_object_size+0x48e/0x900 [ 278.833338][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 278.842533][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.851391][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 278.861195][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.872405][ T30] __sock_sendmsg+0x221/0x270 [ 278.882710][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 278.889570][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.900619][ T30] __sys_sendmmsg+0x3ab/0x730 [ 278.908857][ T30] ? __pfx___sys_sendmmsg+0x10/0x10 [ 278.914115][ T30] ? try_to_wake_up+0x9d9/0x1480 [ 278.927309][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.932423][ T30] ? wake_up_q+0xdc/0x120 [ 278.942476][ T30] ? futex_wake+0x523/0x5c0 [ 278.951410][ T30] ? __pfx_futex_wake+0x10/0x10 [ 278.962512][ T30] ? __sys_sendmsg+0x15f/0x380 [ 278.969866][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.981582][ T30] ? do_futex+0x392/0x560 [ 278.988120][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.994223][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.007724][ T30] ? do_syscall_64+0x100/0x230 [ 279.012578][ T30] __x64_sys_sendmmsg+0xa0/0xb0 [ 279.021555][ T30] do_syscall_64+0xf3/0x230 [ 279.032239][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.040136][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.050366][ T30] RIP: 0033:0x7fcd53b7dff9 [ 279.059054][ T30] RSP: 002b:00007fcd54972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.071902][ T30] RAX: ffffffffffffffda RBX: 00007fcd53d36208 RCX: 00007fcd53b7dff9 [ 279.085668][ T30] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000008 [ 279.093707][ T30] RBP: 00007fcd53bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 279.108163][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.121132][ T30] R13: 0000000000000000 R14: 00007fcd53d36208 R15: 00007ffd7a297998 [ 279.138770][ T30] [ 279.141937][ T30] INFO: task syz.0.1084:8863 blocked for more than 147 seconds. [ 279.153099][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 279.168308][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.180617][ T30] task:syz.0.1084 state:D stack:27392 pid:8863 tgid:8857 ppid:5233 flags:0x00000004 [ 279.195434][ T30] Call Trace: [ 279.198775][ T30] [ 279.201734][ T30] __schedule+0x1895/0x4b30 [ 279.212430][ T30] ? __pfx___schedule+0x10/0x10 [ 279.219896][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.231679][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.241525][ T30] ? schedule+0x90/0x320 [ 279.251841][ T30] schedule+0x14b/0x320 [ 279.256511][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.262785][ T30] __mutex_lock+0x6a7/0xd70 [ 279.273591][ T30] ? __mutex_lock+0x52a/0xd70 [ 279.279298][ T30] ? dev_ioctl+0x86e/0x1340 [ 279.283858][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.297850][ T30] ? dev_load+0x21/0x1f0 [ 279.302176][ T30] dev_ioctl+0x86e/0x1340 [ 279.311951][ T30] sock_ioctl+0x7ef/0x8e0 [ 279.318422][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 279.323337][ T30] ? __fget_files+0x3f3/0x470 [ 279.333677][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 279.341047][ T30] __se_sys_ioctl+0xf9/0x170 [ 279.354400][ T30] do_syscall_64+0xf3/0x230 [ 279.361405][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.372124][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.380251][ T30] RIP: 0033:0x7f29e7f7dff9 [ 279.384719][ T30] RSP: 002b:00007f29e79de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.402292][ T30] RAX: ffffffffffffffda RBX: 00007f29e8136058 RCX: 00007f29e7f7dff9 [ 279.417625][ T30] RDX: 0000000020000040 RSI: 00000000000089f9 RDI: 0000000000000007 [ 279.431170][ T30] RBP: 00007f29e7ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 279.442427][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.461530][ T30] R13: 0000000000000000 R14: 00007f29e8136058 R15: 00007ffff98e2d08 [ 279.471264][ T30] [ 279.474510][ T30] INFO: task syz.1.1083:8859 blocked for more than 147 seconds. [ 279.489540][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 279.498568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.514071][ T30] task:syz.1.1083 state:D stack:27136 pid:8859 tgid:8858 ppid:5226 flags:0x00000004 [ 279.525953][ T30] Call Trace: [ 279.529282][ T30] [ 279.532247][ T30] __schedule+0x1895/0x4b30 [ 279.542676][ T30] ? __pfx___schedule+0x10/0x10 [ 279.549616][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.561473][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.572996][ T30] ? schedule+0x90/0x320 [ 279.582844][ T30] schedule+0x14b/0x320 [ 279.592191][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.603394][ T30] __mutex_lock+0x6a7/0xd70 [ 279.612261][ T30] ? __mutex_lock+0x52a/0xd70 [ 279.621619][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.630220][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.639605][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.644608][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 279.652856][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.662856][ T30] ? ref_tracker_free+0x643/0x7e0 [ 279.673631][ T30] netlink_rcv_skb+0x1e3/0x430 [ 279.684464][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.693330][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.702959][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.711314][ T30] netlink_unicast+0x7f6/0x990 [ 279.721850][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 279.730225][ T30] ? __virt_addr_valid+0x183/0x530 [ 279.739627][ T30] ? __check_object_size+0x48e/0x900 [ 279.748316][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 279.753161][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.762562][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 279.770144][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.780466][ T30] __sock_sendmsg+0x221/0x270 [ 279.789844][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 279.794690][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.804429][ T30] __sys_sendmsg+0x292/0x380 [ 279.812365][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.822045][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.834681][ T30] ? do_syscall_64+0x100/0x230 [ 279.843970][ T30] ? do_syscall_64+0xb6/0x230 [ 279.851835][ T30] do_syscall_64+0xf3/0x230 [ 279.860699][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.868792][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.881334][ T30] RIP: 0033:0x7ffae8f7dff9 [ 279.888842][ T30] RSP: 002b:00007ffae9e61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.904532][ T30] RAX: ffffffffffffffda RBX: 00007ffae9135f80 RCX: 00007ffae8f7dff9 [ 279.920787][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 279.931018][ T30] RBP: 00007ffae8ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 279.946013][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.954049][ T30] R13: 0000000000000000 R14: 00007ffae9135f80 R15: 00007ffcebc261c8 [ 279.969539][ T30] [ 279.972704][ T30] INFO: task syz.1.1083:8860 blocked for more than 148 seconds. [ 279.985641][ T30] Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 279.992983][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.012524][ T30] task:syz.1.1083 state:D stack:25984 pid:8860 tgid:8858 ppid:5226 flags:0x00004004 [ 280.023423][ T30] Call Trace: [ 280.034297][ T30] [ 280.037704][ T30] __schedule+0x1895/0x4b30 [ 280.042282][ T30] ? __pfx___schedule+0x10/0x10 [ 280.053738][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.060150][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 280.072376][ T30] ? schedule+0x90/0x320 [ 280.077608][ T30] schedule+0x14b/0x320 [ 280.082578][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.096966][ T30] __mutex_lock+0x6a7/0xd70 [ 280.101541][ T30] ? __mutex_lock+0x52a/0xd70 [ 280.112705][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.120857][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.132732][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.138741][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 280.143922][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.158119][ T30] ? ref_tracker_free+0x643/0x7e0 [ 280.163232][ T30] netlink_rcv_skb+0x1e3/0x430 [ 280.171224][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.181213][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.190445][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.202017][ T30] netlink_unicast+0x7f6/0x990 [ 280.210150][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 280.220088][ T30] ? __virt_addr_valid+0x183/0x530 [ 280.235755][ T30] ? __check_object_size+0x48e/0x900 [ 280.241119][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 280.254533][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.260886][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 280.272272][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.278193][ T30] __sock_sendmsg+0x221/0x270 [ 280.282930][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 280.294574][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.301223][ T30] __sys_sendmmsg+0x3ab/0x730 [ 280.314006][ T30] ? __pfx___sys_sendmmsg+0x10/0x10 [ 280.320328][ T30] ? try_to_wake_up+0x9d9/0x1480 [ 280.332012][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.339913][ T30] ? wake_up_q+0xdc/0x120 [ 280.344311][ T30] ? futex_wake+0x523/0x5c0 [ 280.355725][ T30] ? __pfx_futex_wake+0x10/0x10 [ 280.360669][ T30] ? do_futex+0x392/0x560 [ 280.371229][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.378279][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.384682][ T30] ? do_syscall_64+0x100/0x230 [ 280.395415][ T30] __x64_sys_sendmmsg+0xa0/0xb0 [ 280.400358][ T30] do_syscall_64+0xf3/0x230 [ 280.412487][ T30] ? clear_bhb_loop+0x35/0x90 [ 280.418461][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.424417][ T30] RIP: 0033:0x7ffae8f7dff9 [ 280.435402][ T30] RSP: 002b:00007ffae9e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.443908][ T30] RAX: ffffffffffffffda RBX: 00007ffae9136058 RCX: 00007ffae8f7dff9 [ 280.461662][ T30] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000009 [ 280.473137][ T30] RBP: 00007ffae8ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 280.488683][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.500738][ T30] R13: 0000000000000000 R14: 00007ffae9136058 R15: 00007ffcebc261c8 [ 280.514622][ T30] [ 280.520689][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 280.533546][ T30] [ 280.533546][ T30] Showing all locks held in the system: [ 280.544385][ T30] 3 locks held by kworker/u8:1/12: [ 280.554248][ T30] #0: ffff88814b980148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.576800][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.598523][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 280.611244][ T30] 1 lock held by khungtaskd/30: [ 280.620303][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 280.640120][ T30] 2 locks held by getty/4995: [ 280.647947][ T30] #0: ffff88814bb270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 280.662216][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 280.679345][ T30] 5 locks held by kworker/1:3/5241: [ 280.684609][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.704095][ T30] #1: ffffc90003da7d00 ((work_completion)(&rdev->destroy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.723342][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_destroy_iface_wk+0x19/0x30 [ 280.736470][ T30] #3: ffff88805d0c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_destroy_ifaces+0x118/0x1c0 [ 280.753476][ T30] #4: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 280.772036][ T30] 3 locks held by kworker/1:4/5242: [ 280.778192][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.802538][ T30] #1: ffffc90003db7d00 ((check_lifetime_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.820676][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: check_lifetime+0x433/0x960 [ 280.830734][ T30] 3 locks held by kworker/0:3/5264: [ 280.843612][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.862707][ T30] #1: ffffc90003ee7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.877455][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 280.897042][ T30] 6 locks held by kworker/0:6/5400: [ 280.903392][ T30] 3 locks held by kworker/u8:15/5727: [ 280.914526][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.933139][ T30] #1: ffffc900154ffd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.953906][ T30] #2: ffff88805d0c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 280.971208][ T30] 1 lock held by syz.3.1072/8821: [ 280.977185][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_add_ifaddr+0x1fc/0x340 [ 280.994307][ T30] 1 lock held by syz.4.1075/8828: [ 281.000548][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.020622][ T30] 2 locks held by syz.2.1078/8841: [ 281.028962][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 281.044729][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 281.054703][ T30] 2 locks held by syz.2.1078/8847: [ 281.067356][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 281.079845][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 281.093797][ T30] 1 lock held by syz.2.1078/8848: [ 281.103191][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.122684][ T30] 1 lock held by syz.2.1078/8850: [ 281.128665][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.146080][ T30] 1 lock held by syz.0.1084/8863: [ 281.151178][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 281.165372][ T30] 1 lock held by syz.1.1083/8859: [ 281.170459][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.186341][ T30] 1 lock held by syz.1.1083/8860: [ 281.191427][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.210972][ T30] 1 lock held by syz-executor/8868: [ 281.219752][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.238334][ T30] 1 lock held by syz-executor/8874: [ 281.243602][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.258687][ T30] 1 lock held by syz-executor/8875: [ 281.263938][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.282980][ T30] 1 lock held by syz-executor/8878: [ 281.289248][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.305420][ T30] 1 lock held by syz-executor/8880: [ 281.313271][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.330428][ T30] 1 lock held by syz-executor/8884: [ 281.339108][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.355642][ T30] 1 lock held by syz-executor/8889: [ 281.360904][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.380784][ T30] 1 lock held by syz-executor/8890: [ 281.388107][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.402933][ T30] 1 lock held by syz-executor/8893: [ 281.412680][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.430433][ T30] 1 lock held by syz-executor/8895: [ 281.437664][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.454301][ T30] 1 lock held by syz-executor/8907: [ 281.462179][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.477172][ T30] 1 lock held by syz-executor/8909: [ 281.482424][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.498768][ T30] 1 lock held by syz-executor/8910: [ 281.504021][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.524701][ T30] 1 lock held by syz-executor/8913: [ 281.530888][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.547887][ T30] 1 lock held by syz-executor/8915: [ 281.553138][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.571504][ T30] [ 281.573887][ T30] ============================================= [ 281.573887][ T30] [ 281.591848][ T30] NMI backtrace for cpu 1 [ 281.596240][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 281.606429][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.616510][ T30] Call Trace: [ 281.619800][ T30] [ 281.622745][ T30] dump_stack_lvl+0x241/0x360 [ 281.627461][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.632729][ T30] ? __pfx__printk+0x10/0x10 [ 281.637363][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 281.642426][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.647913][ T30] ? _printk+0xd5/0x120 [ 281.652098][ T30] ? __pfx__printk+0x10/0x10 [ 281.656731][ T30] ? __wake_up_klogd+0xcc/0x110 [ 281.661616][ T30] ? __pfx__printk+0x10/0x10 [ 281.666242][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 281.671307][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.677328][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 281.683346][ T30] watchdog+0xff4/0x1040 [ 281.687724][ T30] ? watchdog+0x1ea/0x1040 [ 281.692182][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.696949][ T30] kthread+0x2f0/0x390 [ 281.701068][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.705781][ T30] ? __pfx_kthread+0x10/0x10 [ 281.710395][ T30] ret_from_fork+0x4b/0x80 [ 281.714848][ T30] ? __pfx_kthread+0x10/0x10 [ 281.719471][ T30] ret_from_fork_asm+0x1a/0x30 [ 281.724366][ T30] [ 281.728952][ T30] Sending NMI from CPU 1 to CPUs 0: [ 281.734318][ C0] NMI backtrace for cpu 0 [ 281.734333][ C0] CPU: 0 UID: 0 PID: 5400 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 281.734352][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.734363][ C0] Workqueue: events nsim_dev_trap_report_work [ 281.734387][ C0] RIP: 0010:__asan_memset+0x4/0x50 [ 281.734412][ C0] Code: ba 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba [ 281.734430][ C0] RSP: 0018:ffffc900000075e8 EFLAGS: 00000246 [ 281.734443][ C0] RAX: ffffc90000007aa0 RBX: ffffc900000076f8 RCX: 1ffff92000000ed8 [ 281.734455][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000007710 [ 281.734466][ C0] RBP: dffffc0000000000 R08: 000000000000000d R09: ffffc900000077b0 [ 281.734477][ C0] R10: ffffc90000007710 R11: ffffffff81806870 R12: ffffc90000008000 [ 281.734489][ C0] R13: ffffc900000076c0 R14: ffffffff81f25870 R15: ffffc90000007710 [ 281.734501][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 281.734514][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.734526][ C0] CR2: 0000555592b855c8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 281.734540][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.734549][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.734559][ C0] Call Trace: [ 281.734565][ C0] [ 281.734572][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 281.734590][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 281.734615][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.734632][ C0] ? nmi_handle+0x2a/0x5a0 [ 281.734654][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 281.734674][ C0] ? nmi_handle+0x14f/0x5a0 [ 281.734689][ C0] ? nmi_handle+0x2a/0x5a0 [ 281.734705][ C0] ? __asan_memset+0x4/0x50 [ 281.734725][ C0] ? default_do_nmi+0x63/0x160 [ 281.734746][ C0] ? exc_nmi+0x123/0x1f0 [ 281.734761][ C0] ? end_repeat_nmi+0xf/0x53 [ 281.734775][ C0] ? kfree+0x1a0/0x440 [ 281.734792][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.734811][ C0] ? __asan_memset+0x4/0x50 [ 281.734831][ C0] ? __asan_memset+0x4/0x50 [ 281.734852][ C0] ? __asan_memset+0x4/0x50 [ 281.734873][ C0] [ 281.734877][ C0] [ 281.734882][ C0] unwind_next_frame+0xcfb/0x22d0 [ 281.734908][ C0] ? __kasan_slab_free+0x59/0x70 [ 281.734927][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.734947][ C0] arch_stack_walk+0x11c/0x150 [ 281.734967][ C0] ? kfree+0x1a0/0x440 [ 281.734988][ C0] stack_trace_save+0x118/0x1d0 [ 281.735006][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 281.735025][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.735057][ C0] kasan_save_track+0x3f/0x80 [ 281.735071][ C0] ? kasan_save_track+0x3f/0x80 [ 281.735084][ C0] ? kasan_save_free_info+0x40/0x50 [ 281.735103][ C0] ? __kasan_slab_free+0x59/0x70 [ 281.735140][ C0] kasan_save_free_info+0x40/0x50 [ 281.735160][ C0] __kasan_slab_free+0x59/0x70 [ 281.735174][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 281.735197][ C0] kfree+0x1a0/0x440 [ 281.735214][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 281.735238][ C0] ref_tracker_free+0x4ef/0x7e0 [ 281.735261][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 281.735283][ C0] ? dst_destroy+0x171/0x460 [ 281.735296][ C0] ? rcu_core+0xaaa/0x17a0 [ 281.735310][ C0] ? handle_softirqs+0x2c5/0x980 [ 281.735329][ C0] ? do_softirq+0x11b/0x1e0 [ 281.735347][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 281.735365][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 281.735381][ C0] ? process_scheduled_works+0xa63/0x1850 [ 281.735401][ C0] ? worker_thread+0x870/0xd30 [ 281.735420][ C0] ? kthread+0x2f0/0x390 [ 281.735433][ C0] ? ret_from_fork+0x4b/0x80 [ 281.735454][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 281.735477][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 281.735498][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 281.735522][ C0] dst_destroy+0x171/0x460 [ 281.735536][ C0] ? rcu_core+0xa37/0x17a0 [ 281.735550][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 281.735573][ C0] rcu_core+0xaaa/0x17a0 [ 281.735594][ C0] ? __pfx_rcu_core+0x10/0x10 [ 281.735609][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.735632][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.735657][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 281.735678][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 281.735700][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.735721][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.735747][ C0] handle_softirqs+0x2c5/0x980 [ 281.735768][ C0] ? do_softirq+0x11b/0x1e0 [ 281.735788][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 281.735812][ C0] do_softirq+0x11b/0x1e0 [ 281.735830][ C0] [ 281.735835][ C0] [ 281.735841][ C0] ? __pfx_do_softirq+0x10/0x10 [ 281.735859][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 281.735882][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.735900][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 281.735920][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 281.735936][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 281.735956][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 281.735975][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 281.735994][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 281.736017][ C0] ? process_scheduled_works+0x976/0x1850 [ 281.736037][ C0] process_scheduled_works+0xa63/0x1850 [ 281.736074][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.736099][ C0] ? assign_work+0x364/0x3d0 [ 281.736120][ C0] worker_thread+0x870/0xd30 [ 281.736144][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.736167][ C0] ? __kthread_parkme+0x169/0x1d0 [ 281.736189][ C0] ? __pfx_worker_thread+0x10/0x10 [ 281.736210][ C0] kthread+0x2f0/0x390 [ 281.736223][ C0] ? __pfx_worker_thread+0x10/0x10 [ 281.736243][ C0] ? __pfx_kthread+0x10/0x10 [ 281.736257][ C0] ret_from_fork+0x4b/0x80 [ 281.736278][ C0] ? __pfx_kthread+0x10/0x10 [ 281.736291][ C0] ret_from_fork_asm+0x1a/0x30 [ 281.736319][ C0] [ 282.357308][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 282.364213][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11517-gc4a14f6d9d17 #0 [ 282.374398][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.384491][ T30] Call Trace: [ 282.387790][ T30] [ 282.390739][ T30] dump_stack_lvl+0x241/0x360 [ 282.395452][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.400680][ T30] ? __pfx__printk+0x10/0x10 [ 282.405648][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.411666][ T30] ? vscnprintf+0x5d/0x90 [ 282.416025][ T30] panic+0x349/0x880 [ 282.419952][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.426137][ T30] ? __pfx_panic+0x10/0x10 [ 282.430582][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 282.435985][ T30] ? __irq_work_queue_local+0x137/0x410 [ 282.441561][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 282.446963][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.453139][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 282.459412][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 282.465597][ T30] watchdog+0x1033/0x1040 [ 282.469963][ T30] ? watchdog+0x1ea/0x1040 [ 282.474497][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.479198][ T30] kthread+0x2f0/0x390 [ 282.483290][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.487992][ T30] ? __pfx_kthread+0x10/0x10 [ 282.492601][ T30] ret_from_fork+0x4b/0x80 [ 282.497043][ T30] ? __pfx_kthread+0x10/0x10 [ 282.501655][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.506457][ T30] [ 282.509739][ T30] Kernel Offset: disabled [ 282.514068][ T30] Rebooting in 86400 seconds..