last executing test programs: 5.713687947s ago: executing program 1 (id=617): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113900000000008510000002000000850000000a00000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x5, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x6, 0x0, r3}, {0x7, 0x9, 0x0, 0x8000000000000000, 0x9, 0x6, 0x9, 0x3}, {0x3ff, 0x3, 0x1, 0x10000}, 0xd6, 0x6e6bb2, 0x2, 0x1, 0x3}, {{@in=@remote, 0x4d3, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x2, 0x7, 0x2, 0xa17, 0x8}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x800) 4.796928604s ago: executing program 1 (id=644): getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x24014000) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x6) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0xa01, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x3, 0x0, [0xfc1, 0x8, 0x8, 0x1, 0x4, 0xfff], 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380)}, &(0x7f0000000440)=0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000580), &(0x7f00000005c0)=0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x36a0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000900)={@broadcast, @loopback, 0x0}, &(0x7f0000000940)=0xc) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x1a, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd0}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x17, '\x00', r8, @sk_skb=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0xa, 0x4653, 0x599}, 0x10, 0x0, r9, 0x3, &(0x7f0000000a00)=[0xffffffffffffffff], &(0x7f0000000a40)=[{0x5, 0x3, 0xd, 0xb}, {0x0, 0x3, 0x1, 0x8}, {0x8, 0x2, 0xb, 0x6}], 0x10, 0x8, @void, @value}, 0x94) r11 = accept$inet(r0, &(0x7f0000000b40)={0x2, 0x0, @multicast1}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f0000000bc0)=0x4194, 0x4) socket$inet(0x2, 0x80000, 0x6) sendmsg$nl_route(r0, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@getstats={0x1c, 0x5e, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x2}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000d00)=0x1, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000dc0)={0x0, 0x74, &(0x7f0000000d40)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0xa0, @remote, 0x596}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, @in6={0xa, 0x4e22, 0x5a72, @private0, 0xf}]}, &(0x7f0000000e00)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000e40)={0x8a88, 0xaf4, 0x5, 0x5c7e, 0x4, 0x10001, 0x2, 0x0, r12}, &(0x7f0000000e80)=0x20) socket$packet(0x11, 0x2, 0x300) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000f00)=@generic={&(0x7f0000000ec0)='./file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='jbd2_update_log_tail\x00', r10, 0x0, 0x1d2}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) 4.597364083s ago: executing program 1 (id=648): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'bond0\x00', @random="575b030a55ba"}) unshare(0x24020400) openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000009001f0070687930000000000500200005000000"], 0x28}}, 0x20048840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040000000000000008300000028000e800c00"], 0x3c}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="00000080"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000a58000000160a0200000000000000000002000000090002007379d57749c8c087cd4d7d800900010073797a30000000002c000380080001400000000008000240000000001800038014000100733ecf5f5c756e00000000000000000014747286b57841886433d24ca61cce00000011000100"/127], 0x80}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000129bd700090a25804d62ce1de3f84a284c977f7fddbdf250100000008000c0004000000"], 0x1c}}, 0x20000004) socket$netlink(0x10, 0x3, 0x12) accept(r5, &(0x7f00000003c0)=@nfc, &(0x7f0000000200)=0x80) connect$rose(r2, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 4.436780303s ago: executing program 1 (id=651): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0xd0, 0xffffff80, 0x178, 0x0, 0x178, 0x1b0, 0x258, 0x230, 0x1b0, 0x258, 0x2034, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xff000000, 0xffffff00, 0xff], [0x0, 0xffffffff, 0x0, 0x658e34a55f986c58], 'xfrm0\x00', 'batadv0\x00', {0xff}, {}, 0x33, 0xff, 0x1, 0x48}, 0x1d, 0xa8, 0xd0, 0x340, {0x1e0002a8, 0x7203000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x1, 0x2}, {0x4, 0x0, 0x4}, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) r0 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, &(0x7f0000000100)=0x2, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000003700)={0x77359400}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x140, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_STAB={0x104, 0x2, "7eb65595342f55669052c812bed7c03fc41ef4ea1affa5cc9c652d8ab458595146dc7732f8c27f0f8aad473a13afe33c5aafbcec4969652fee85465fd8ccd9b8fd14e034d3821c5f437c3216faf0b6dc227c7cd24b99b65554fe8ccb250c130ed8f68356380323b95cdb793f61038663b52c9eecb89ce2486bc8baf3a8c69f35169da0869e217e719979228eb8fe4fecf1de8bbc198891e4f7833da60f340be6a077b07f542783ada7ae29275797048bd6f5e03218996034c8c0f8dd8f9323086152feb1351b66da24c74971e03d883bf4856dc0fa50431bbed573be77fb8556d80714f2af556f55c46fefdf504e57cd03dbd30335a675cd94e0f6cbe50d685a"}]}}]}, 0x140}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c8}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="436317f062ecf2bf127c", 0xa}], 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) unshare(0x20000400) r8 = socket$inet6(0xa, 0xa, 0x8) ppoll(&(0x7f0000000d40)=[{r8}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050021000000580012800e00010069703665727370616e00000044000280140006002001000000000000000000000000000208000d000300000014000700fc020000000000000000000000000000040012000400120008000100", @ANYRES32, @ANYBLOB="1b9e923a2c6abe5c9b5ea6d01774f8b1ff6ab48f8ebc5c572b6d65518c80bb6beaa4b14207a27625ac1813fa32d3dfaaa633ec1d560eb4d801d4a799725acc7526a3aad1b38affb51f0c511dc8fef375acac2a7555683a365bb217d7665608c1155bef72e7baa2e2"], 0x78}}, 0x880) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r10, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x15}, @TCA_FLOW_MASK={0x8, 0x6, 0x2}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x54}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x7) sendmmsg(r11, &(0x7f00000002c0), 0x0, 0x48050) 4.043826482s ago: executing program 1 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x1, 0x8001}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x9) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x2, 0x961}, 0x8) epoll_create1(0x0) 3.809672843s ago: executing program 1 (id=665): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff64f000020100000009000000000000000a010101ffffffffe0000002ac1414aa0a01010100000000ac1414bbac141431"], 0x34) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d80)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x8, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendto$inet6(r8, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x4, 0x5}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x1, 0x7, 0xa, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000003c0)={r10, 0x7f, 0x5b, "a8604b1e3edd181b197e456941d9c684ed70e77e5f8e273fde66357cc9aa8149532b40ff283a604ebfeaea6276368ffe6e0ef6f1e77deba453f793c275412d625b5823495a8c5b2323fede77a16ee8ee693065eb21b1d55a7d8195"}, 0x63) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) 2.619205966s ago: executing program 4 (id=677): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 2.476155172s ago: executing program 4 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002040), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x10c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sudo_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x34}, 0x4004000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4010) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000680)={&(0x7f0000000300), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x28}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', r9, 0x40, 0x7800, 0x8, 0x2, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@end]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='l\xc6f\x8bx\xc1\x0f\x04\x02\xb7\x84\x94\x13\x96\x00'}]}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r10], 0x24}}, 0x0) 2.287482943s ago: executing program 3 (id=682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0x1a1, 0x8}, 0x8) 2.278375493s ago: executing program 0 (id=683): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0), 0xe) listen(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061198400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.213473885s ago: executing program 4 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000206010818be0000000000000000fffc14000780080011401c0001000500150005000000050001000600000005000400000c00030068612e683a6970000900020073797a320000000097d18eb7309f8dd3d509062f91e1d54206bacbea46d3bc2deca084a1d3c3ca52a28e5b4369935cacc7dede2c9cbfb5cdd17c8a7afc70d8193787cab9576d069f0a9cb25e46671853aedc66b21ac61572496775c49f889155c062c554dfdba969b280fd27baf39f82"], 0x50}, 0x1, 0x0, 0x0, 0x21}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1c000000030a010800000000000000000200000808000a400000000020000000090a010200000000000000000a0000080c001040000000000000000414000000110001000000001a0000001f0100000a"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x220, 0x110, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @multicast2, @multicast1, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfffffd14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0000000200"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@typedef={0x5}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000380)=""/9, 0x8a, 0x9, 0x1, 0x3, 0x0, @void, @value}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000003e0007010000000000000000017c00000400000010000180", @ANYRES64], 0x28}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000100)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ffffffffffff60000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000908100000000000070400", 0x57}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3100}, [@RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, @multicast2}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000000000000000001000000040000000c000180cafc000005470000080002000000"], 0x78}}, 0x0) 1.996151011s ago: executing program 0 (id=686): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x0, 0x11000000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) 1.37901101s ago: executing program 0 (id=689): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x18}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2000000, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.343836332s ago: executing program 2 (id=690): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x5, 0x9, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x94, 0x6, "45f2398a"}, @ra={0x94, 0x4}, @cipso={0x86, 0x35, 0x0, [{0x5, 0x7, "a1fcb76b51"}, {0x0, 0x3, "17"}, {0x7, 0xc, "d7b58a4533c4bb96746e"}, {0x6, 0xf, "b3635a86861a68817f2d5a5aa7"}, {0x0, 0xa, "ba8e3a4763b01956"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000009c0)={'syztnl0\x00', r2, 0x8000, 0x1, 0x6, 0x1, {{0x22, 0x4, 0x3, 0x5, 0x88, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @empty, {[@noop, @timestamp_addr={0x44, 0x44, 0x69, 0x1, 0x8, [{@remote, 0x2}, {@local, 0x5}, {@empty, 0x3}, {@private=0xa010100, 0xffff}, {@empty, 0xfffffffd}, {@private=0xa010100, 0x5}, {@private=0x8a010100, 0x7}, {@broadcast, 0x7ff}]}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0xb, [{@empty, 0x5078}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0xf9, 0x0, 0xf, [0x6, 0x7, 0x9, 0x5, 0x635]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) nanosleep(&(0x7f0000000900)={0x0, 0x3938700}, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r1, &(0x7f0000000780)="5a0501d69a33e726faf92c327b2264ad37009a584b2cf5cfc28cdfa73350d57a436a31752619fce4cc59", &(0x7f00000007c0)=""/237}, 0x20) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000740), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x8}, 0x8) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x0, 0x61, 0x4f, &(0x7f0000000200)="926e09dd6006200a09dbe815aac2df355f3caa30b8561038ce53376cc74cbf3b336c80b509484974adcffa9327f9e370f9b250175525682fff2613b4be9bd1eacd3e81f8d69e09998f8df553596ec268c000556265e79a7fc27dae419ee8724e60", &(0x7f0000000280)=""/79, 0x18a, 0x0, 0x12, 0x9f, &(0x7f0000000340)="04ffae27c3d9204eb3db2cd794706b89488c", &(0x7f0000000400)="be37deeb92d218edbd74bcd3ce949ecf40c24474847d01ffac2e15d4f740abe59d42667d1587050bc677036b2a98d6326a64d6f4c9c511ddbaf476f198e8a336fbf62a114ce301a6a1a64f14197ea57bccd1d7d4e3e0c08ed79c62919ebb875fdbc650bc889f3d721999289e8cd471665335984981a309f07c03550761f739b7a4450c27dd2261a0ef9e1491466720c4b1e39bb5419b9ca320d44b15375d05", 0xa, 0x0, 0x3}, 0x50) sendmmsg$unix(r9, &(0x7f000000dac0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000980)='n', 0x1}, {&(0x7f0000000b80)="a59f770f", 0x4}], 0x2}}], 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r6, @ANYBLOB="080068ea090000cf08009f003873ec0343ca107800010000000800000000000000"], 0x34}}, 0x40000) 1.342937732s ago: executing program 3 (id=691): readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x90}], 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1.225314858s ago: executing program 3 (id=692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) unshare(0x20040600) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000500160004"], 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002100), 0xffffffffffffffff) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bind$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) accept$alg(r5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r6, 0x0, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000980)={@empty, @initdev}, &(0x7f00000009c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.181787184s ago: executing program 0 (id=693): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690a00cfb81fbb66ec", 0xff49}], 0x1, 0xd) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0500530000000000"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000152b4303f0e72c32c0d20cbdad73cff2fff66273492b78cc3ea79b395a6ca31debb122ce620696249b1f229f14d9ec3a09a092e04579f65d787acb0b7ee92594abd68c7840240f7d16d8754ac00cd2bcd8bc8516a8801436191bcf87481edae226c65aa1e73b8d4a255508e0079021f4db7"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x20040080) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x45c, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x1, 0xfffa}, {0x1c, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x42c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x112}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffe}, @TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5f3a, 0x6, 0x7, 0xcf69, 0x1d, 0x5953761a, 0x6, 0x5, 0x6, 0x7, 0x0, 0xc554, 0x1, 0x1, 0x4, 0x81, 0xf, 0x8000, 0x0, 0x7, 0x1, 0x16b, 0xc228, 0x1, 0x1, 0x7, 0x8, 0x5, 0x1, 0x0, 0x5, 0xc5d, 0x3, 0x80000000, 0xd5b, 0x10000, 0x33d5cd08, 0x7ff, 0x4, 0x2, 0x7, 0x5, 0xffff, 0xfa84, 0x3, 0x7, 0x5, 0x8fe0, 0x4, 0x81, 0x7, 0xfffffff7, 0x7, 0x1000, 0xfffffff2, 0x401, 0x6, 0x6, 0x3, 0x1000, 0x7, 0x0, 0x7, 0x5, 0x7, 0x8, 0x2ab731bc, 0x7, 0x8, 0x1ff, 0x22, 0x1, 0x6, 0x7f, 0x1, 0xfffffffb, 0x360c, 0x5, 0x400002, 0x7, 0x83c, 0x2, 0x9, 0x7ff, 0x1, 0xffff, 0x0, 0x2, 0x4002, 0xa0000, 0x2, 0x6, 0x6, 0x7, 0x8, 0x1, 0x9, 0x3, 0x5c, 0x1, 0x2, 0x13, 0x9, 0xdbb, 0x80000001, 0x6, 0xffff, 0x9, 0xffffffff, 0x5, 0x1ff, 0xb5, 0x9, 0x80000001, 0x9, 0xfffffffb, 0x5, 0x9c, 0x3, 0x100, 0x7, 0x0, 0x96, 0x1, 0x9, 0x7, 0x10000000, 0xfffffdf4, 0x1, 0xfffff344, 0xa, 0x200, 0x1, 0x10, 0x6c5f, 0x4, 0x1, 0x4, 0x401, 0xe25, 0x8, 0x0, 0x920, 0x9, 0x7, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0x5d3, 0x6, 0x1, 0x8, 0x689, 0x1, 0x8, 0xf44, 0x800000, 0x8, 0xd, 0xfffffff8, 0xea2, 0x3, 0x4, 0xb, 0x3, 0x4, 0x598, 0x6, 0xb, 0xff, 0x0, 0x5, 0x9415, 0x1e3, 0x9, 0x5, 0x1, 0x70, 0x0, 0xffffff03, 0x3b, 0x87a8, 0x2, 0x6, 0x4, 0x9, 0x100, 0x5d8a3068, 0x3, 0x2, 0x7, 0x5, 0x137f, 0x1ed, 0x2, 0xf, 0x320, 0x1, 0x9, 0x5, 0x81, 0x3ff, 0xb, 0x7, 0x2, 0xf, 0xcaa, 0xf, 0x190f, 0x7fffffff, 0x9, 0x59d2, 0xc6, 0x40, 0x8001, 0x9, 0x1000, 0x7, 0x2, 0x4a, 0x4, 0x2d96, 0x3332, 0x9, 0xf33c, 0x800, 0xc9a6, 0x9, 0x9, 0x2, 0xbd3e, 0x9, 0x1, 0x10000, 0x9, 0x6, 0x9, 0x7, 0xffffffa6, 0xb9, 0x2, 0xe3bb, 0x7, 0x0, 0xa, 0x1, 0xfff, 0x3, 0x0, 0x8, 0x80, 0xfffff3ce]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b798}, @TCA_FLOW_MODE={0x8}]}}]}, 0x45c}}, 0x10801) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0xfffffffffffffde7, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b0000000200000014000000000a00"/54], 0x3c}}, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000580)={'filter\x00', 0x0, 0x4000003, 0xe, [0x6, 0x7fffffff, 0x9, 0x4, 0x4, 0x5], 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/14}, &(0x7f0000000540)=0x78) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x2, 0x89, 0x45}) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) 1.17890856s ago: executing program 4 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010004b04000000070000000000000000", @ANYRES32=r2, @ANYBLOB="00400000000000001c0012800b00010062726964676500000c00028005002c0002"], 0x3c}}, 0x0) 1.089599886s ago: executing program 2 (id=695): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000000000002d5"], 0x4e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0901010000000000000032dd449e00"], 0x14}}, 0x0) recvmmsg(r7, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000180)) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1.010443721s ago: executing program 4 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000060000000000ae000000fb000000000000000000000000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, &(0x7f0000000140)={[0x2]}, 0x8) 889.918407ms ago: executing program 0 (id=697): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 817.429547ms ago: executing program 3 (id=698): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f000004bfe4)={0xa, 0xffff, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000022}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x400000002000001}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) r8 = openat$ppp(0xffffff9c, &(0x7f0000000300), 0x201, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000040) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) 746.645359ms ago: executing program 0 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) r2 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) bind$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) connect$rxrpc(r2, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) 715.946655ms ago: executing program 3 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000080000000200088b2f01000846", @ANYRES64], 0xfdef) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x48001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 684.278739ms ago: executing program 2 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x1a, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x48}}, 0x0) 561.897042ms ago: executing program 2 (id=702): readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 544.752648ms ago: executing program 2 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004f00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r3, &(0x7f0000000dc0)=""/134, 0x86) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x1a, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) write$bt_hci(r3, &(0x7f0000000180)={0x1, @reject_sync_conn_req={{0x42a, 0x7}}}, 0xb) 422.214968ms ago: executing program 2 (id=704): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote}}}}}}, 0x0) (async) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3310", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r4, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/242, 0xf2}], 0x1, &(0x7f00000004c0)=""/75, 0x4b}}], 0x400000000000133, 0x2000, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000640)="a733c30c5c5287d40c0fa55ac782b2e851", 0x11}], 0x1}, 0x0) (async) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) (async) socket(0x5, 0x805, 0x0) 286.96058ms ago: executing program 3 (id=705): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x6) (async) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0xf8e0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="14"], 0x18, 0x40091}, 0x40448c1) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x521142, 0x0) (async) r4 = socket(0x10, 0x5, 0x7) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae"], 0x1c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x34, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="8b6965d1fad02d8b"}, @chandef_params, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x401, 0x74}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2000c040) 0s ago: executing program 4 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d003f0001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x5}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x6, 0x0, {0xd7d9, 0x2, 0x0, 0x3f9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x1ec394fa}}, @NL80211_ATTR_IE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x1, 0x0, 0x0, {0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x40, 0x4}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24044004}, 0x20000000) kernel console output (not intermixed with test programs): 3e) already exists on: batadv_slave_0 [ 56.719890][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.732471][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.771559][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.785994][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.797564][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.831293][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841510][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.850810][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860783][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.878703][ T5239] veth0_macvtap: entered promiscuous mode [ 56.887455][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.895736][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.926129][ T5239] veth1_macvtap: entered promiscuous mode [ 56.971616][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.980356][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.980940][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.001233][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.011861][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.022705][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.034408][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.048125][ T5236] veth0_macvtap: entered promiscuous mode [ 57.081148][ T5240] veth0_vlan: entered promiscuous mode [ 57.098380][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.112197][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.122535][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.133369][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.148718][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.164006][ T5236] veth1_macvtap: entered promiscuous mode [ 57.185057][ T5235] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.196836][ T5239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.214130][ T5239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.223758][ T5239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.238301][ T5239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.260227][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.272500][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.285998][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.299392][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.309643][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.320177][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.330316][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.342454][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.361420][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.396300][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.406934][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.416847][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.427629][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.437554][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.448061][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.459335][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.470038][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.478928][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.487696][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.496513][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.511584][ T5240] veth1_vlan: entered promiscuous mode [ 57.525981][ T5313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.542592][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.551455][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.700941][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.724915][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.757003][ T5240] veth0_macvtap: entered promiscuous mode [ 57.831171][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.839159][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.860203][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.868507][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.878515][ T5240] veth1_macvtap: entered promiscuous mode [ 57.916609][ T5315] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 57.981178][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.000662][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.002481][ T5317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.030837][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.039318][ T5317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.052414][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.058443][ T5317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.064070][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.082785][ T5317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 58.094198][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.110153][ T5246] Bluetooth: hci0: command tx timeout [ 58.115759][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.131680][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.142447][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.157559][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.169576][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.218521][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.230349][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.242579][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.254136][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.268931][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.280310][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.290321][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.303324][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.328194][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.344961][ T5246] Bluetooth: hci2: command tx timeout [ 58.350458][ T5243] Bluetooth: hci1: command tx timeout [ 58.387804][ T5240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.425006][ T5243] Bluetooth: hci4: command tx timeout [ 58.425801][ T5240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.431462][ T5246] Bluetooth: hci3: command tx timeout [ 58.464712][ T5240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.474758][ T5240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.726375][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.910423][ T5339] Bluetooth: MGMT ver 1.23 [ 58.922673][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.934253][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.056341][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.092032][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.476704][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.617176][ T5350] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 59.629105][ T5357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.702962][ T5360] netlink: 'syz.1.12': attribute type 3 has an invalid length. [ 59.721947][ T5360] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 59.768077][ T5360] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12'. [ 59.915797][ T5357] can: request_module (can-proto-0) failed. [ 59.952885][ T5365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.986251][ T5365] Cannot find del_set index 4 as target [ 60.131131][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.185662][ T5246] Bluetooth: hci0: command tx timeout [ 60.280600][ T5377] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.414256][ T5373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.426488][ T5246] Bluetooth: hci1: command tx timeout [ 60.433412][ T5246] Bluetooth: hci2: command tx timeout [ 60.505637][ T5246] Bluetooth: hci3: command tx timeout [ 60.511639][ T5243] Bluetooth: hci4: command tx timeout [ 60.766977][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 60.820345][ T5390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21'. [ 60.864747][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 60.925958][ T5373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.104970][ T5373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.186896][ T5373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.522031][ T5373] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.574496][ T5373] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.648552][ T5373] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.748127][ T5373] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.064841][ T5243] Bluetooth: hci4: command 0x0405 tx timeout [ 63.223244][ T5458] __nla_validate_parse: 2 callbacks suppressed [ 63.223264][ T5458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.38'. [ 63.501711][ T5467] openvswitch: netlink: Message has 8 unknown bytes. [ 63.628457][ T5462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 63.664299][ T5462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 63.730557][ T5462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 63.799886][ T5478] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 63.818594][ T5462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 64.942130][ T5505] Zero length message leads to an empty skb [ 66.406178][ T5538] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 66.551099][ T5542] tipc: Started in network mode [ 66.569418][ T5542] tipc: Node identity ac1414aa, cluster identity 4711 [ 66.619882][ T5542] tipc: Enabled bearer , priority 10 [ 66.832364][ T5552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.843257][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.643635][ T5571] netlink: 'syz.2.68': attribute type 9 has an invalid length. [ 67.676165][ T5571] bond0: entered promiscuous mode [ 67.687799][ T5571] bond_slave_0: entered promiscuous mode [ 67.694081][ T5571] bond_slave_1: entered promiscuous mode [ 67.720388][ T5571] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.736040][ T5320] tipc: Node number set to 2886997162 [ 67.787715][ T5571] bond0: left promiscuous mode [ 67.794625][ T5571] bond_slave_0: left promiscuous mode [ 67.808962][ T5571] bond_slave_1: left promiscuous mode [ 67.851507][ T5574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'. [ 67.886752][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 67.898198][ T5574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'. [ 67.922798][ T5574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'. [ 68.257500][ T5579] tipc: Started in network mode [ 68.262559][ T5579] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.297309][ T5579] tipc: Enabled bearer , priority 10 [ 68.444876][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 68.642240][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 68.774420][ T5597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.914872][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 68.982978][ T5604] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.989942][ T5604] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 69.111768][ T5604] hsr_slave_0: left promiscuous mode [ 69.139492][ T5604] hsr_slave_1: left promiscuous mode [ 69.429872][ T5320] tipc: Node number set to 2886997162 [ 69.466917][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 69.492539][ T5614] netlink: 4232 bytes leftover after parsing attributes in process `syz.2.80'. [ 69.606903][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 69.667563][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 69.678836][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 69.688465][ T5623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 69.712263][ T5625] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 69.720496][ T5625] netlink: 224 bytes leftover after parsing attributes in process `syz.4.85'. [ 70.059507][ T5638] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.230938][ T5638] syzkaller0: entered promiscuous mode [ 70.274742][ T5638] syzkaller0: entered allmulticast mode [ 71.835529][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.447145][ T8] cfg80211: failed to load regulatory.db [ 133.151422][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.134781][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 188.140903][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 188.147172][ T5234] Bluetooth: hci4: command 0x0405 tx timeout [ 188.153283][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 188.159414][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 206.715111][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.985280][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.025947][ T4622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.038383][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.052266][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.064191][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.074453][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.099350][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.108882][ T4622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.151088][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.168020][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.171397][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.189703][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 217.198899][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.211650][ T5248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.220768][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 217.230195][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 217.241243][ T5245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.242855][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.248504][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.257875][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 217.264876][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.270206][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 217.276945][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.284483][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.298840][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 217.302556][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.316427][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.317090][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.331327][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.338748][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.638220][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.755516][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.818778][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.930850][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.113343][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 219.218968][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 219.281157][ T5667] chnl_net:caif_netlink_parms(): no params data found [ 219.303969][ T5670] chnl_net:caif_netlink_parms(): no params data found [ 219.375174][ T35] bridge_slave_1: left allmulticast mode [ 219.381175][ T35] bridge_slave_1: left promiscuous mode [ 219.387981][ T54] Bluetooth: hci6: command tx timeout [ 219.388312][ T4622] Bluetooth: hci7: command tx timeout [ 219.394521][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.399761][ T54] Bluetooth: hci8: command tx timeout [ 219.408112][ T5243] Bluetooth: hci2: command tx timeout [ 219.412460][ T54] Bluetooth: hci5: command tx timeout [ 219.426656][ T35] bridge_slave_0: left allmulticast mode [ 219.432334][ T35] bridge_slave_0: left promiscuous mode [ 219.438114][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.839315][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.855748][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.872097][ T35] bond0 (unregistering): Released all slaves [ 220.119295][ T5662] chnl_net:caif_netlink_parms(): no params data found [ 220.163259][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.171315][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.181878][ T5664] bridge_slave_0: entered allmulticast mode [ 220.189347][ T5664] bridge_slave_0: entered promiscuous mode [ 220.197141][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.204269][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.211833][ T5668] bridge_slave_0: entered allmulticast mode [ 220.219202][ T5668] bridge_slave_0: entered promiscuous mode [ 220.227624][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.235124][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.242384][ T5668] bridge_slave_1: entered allmulticast mode [ 220.249339][ T5668] bridge_slave_1: entered promiscuous mode [ 220.283050][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.291281][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.299598][ T5667] bridge_slave_0: entered allmulticast mode [ 220.307023][ T5667] bridge_slave_0: entered promiscuous mode [ 220.314951][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.322054][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.329723][ T5664] bridge_slave_1: entered allmulticast mode [ 220.336685][ T5664] bridge_slave_1: entered promiscuous mode [ 220.409594][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.417176][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.424981][ T5667] bridge_slave_1: entered allmulticast mode [ 220.431584][ T5667] bridge_slave_1: entered promiscuous mode [ 220.525688][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.569711][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.664471][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.679208][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.688613][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.723956][ T35] veth1_macvtap: left promiscuous mode [ 220.742181][ T35] veth0_macvtap: left promiscuous mode [ 220.763468][ T35] veth1_vlan: left promiscuous mode [ 220.769529][ T35] veth0_vlan: left promiscuous mode [ 221.200563][ T35] team0 (unregistering): Port device team_slave_1 removed [ 221.240756][ T35] team0 (unregistering): Port device team_slave_0 removed [ 221.466342][ T54] Bluetooth: hci5: command tx timeout [ 221.471879][ T54] Bluetooth: hci7: command tx timeout [ 221.477891][ T4622] Bluetooth: hci6: command tx timeout [ 221.478034][ T5243] Bluetooth: hci2: command tx timeout [ 221.483501][ T4622] Bluetooth: hci8: command tx timeout [ 221.630215][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.641710][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.653182][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.662573][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.673557][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.683291][ T5670] bridge_slave_0: entered allmulticast mode [ 221.690681][ T5670] bridge_slave_0: entered promiscuous mode [ 221.739938][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.838110][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.857335][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.864578][ T5670] bridge_slave_1: entered allmulticast mode [ 221.882908][ T5670] bridge_slave_1: entered promiscuous mode [ 221.912915][ T5664] team0: Port device team_slave_0 added [ 221.935939][ T5668] team0: Port device team_slave_0 added [ 222.004223][ T5667] team0: Port device team_slave_0 added [ 222.013249][ T5667] team0: Port device team_slave_1 added [ 222.021848][ T5664] team0: Port device team_slave_1 added [ 222.036706][ T5668] team0: Port device team_slave_1 added [ 222.046911][ T5670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.062987][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.071695][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.079566][ T5662] bridge_slave_0: entered allmulticast mode [ 222.086925][ T5662] bridge_slave_0: entered promiscuous mode [ 222.120193][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.127735][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.156870][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.182008][ T5670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.192537][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.203789][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.221583][ T5662] bridge_slave_1: entered allmulticast mode [ 222.229534][ T5662] bridge_slave_1: entered promiscuous mode [ 222.246476][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.253471][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.281997][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.366690][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.373682][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.401168][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.416536][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.423596][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.464118][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.498086][ T5670] team0: Port device team_slave_0 added [ 222.530122][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.553618][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.560886][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.592728][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.615228][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.622741][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.659815][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.694270][ T5670] team0: Port device team_slave_1 added [ 222.703322][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.742965][ T5664] hsr_slave_0: entered promiscuous mode [ 222.750437][ T5664] hsr_slave_1: entered promiscuous mode [ 222.801586][ T5662] team0: Port device team_slave_0 added [ 222.810535][ T5662] team0: Port device team_slave_1 added [ 222.871573][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.879172][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.906103][ T5670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.919174][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.926389][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.953617][ T5670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.985418][ T5667] hsr_slave_0: entered promiscuous mode [ 222.991680][ T5667] hsr_slave_1: entered promiscuous mode [ 223.011143][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.019361][ T5667] Cannot create hsr debugfs directory [ 223.081175][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.088299][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.115594][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.133238][ T5668] hsr_slave_0: entered promiscuous mode [ 223.139856][ T5668] hsr_slave_1: entered promiscuous mode [ 223.150402][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.158314][ T5668] Cannot create hsr debugfs directory [ 223.205244][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.212236][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.249144][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.300135][ T5670] hsr_slave_0: entered promiscuous mode [ 223.306743][ T5670] hsr_slave_1: entered promiscuous mode [ 223.313367][ T5670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.322009][ T5670] Cannot create hsr debugfs directory [ 223.545022][ T54] Bluetooth: hci7: command tx timeout [ 223.545060][ T4622] Bluetooth: hci8: command tx timeout [ 223.550469][ T5246] Bluetooth: hci6: command tx timeout [ 223.556768][ T4622] Bluetooth: hci5: command tx timeout [ 223.562470][ T5243] Bluetooth: hci2: command tx timeout [ 223.657407][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.689034][ T5662] hsr_slave_0: entered promiscuous mode [ 223.699849][ T5662] hsr_slave_1: entered promiscuous mode [ 223.716002][ T5662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.723616][ T5662] Cannot create hsr debugfs directory [ 223.813015][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.922811][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.010080][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.308984][ T35] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.399177][ T35] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.479695][ T35] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.551353][ T35] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.737917][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.824569][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.949723][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.043176][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.248911][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.338894][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.444007][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.528965][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.624999][ T54] Bluetooth: hci5: command tx timeout [ 225.630460][ T54] Bluetooth: hci7: command tx timeout [ 225.637277][ T5243] Bluetooth: hci2: command tx timeout [ 225.638524][ T4622] Bluetooth: hci6: command tx timeout [ 225.642687][ T5243] Bluetooth: hci8: command tx timeout [ 225.706712][ T35] bridge_slave_1: left allmulticast mode [ 225.712427][ T35] bridge_slave_1: left promiscuous mode [ 225.720111][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.729546][ T35] bridge_slave_0: left allmulticast mode [ 225.744865][ T35] bridge_slave_0: left promiscuous mode [ 225.750637][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.761702][ T35] bridge_slave_1: left allmulticast mode [ 225.768292][ T35] bridge_slave_1: left promiscuous mode [ 225.773990][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.783405][ T35] bridge_slave_0: left allmulticast mode [ 225.789735][ T35] bridge_slave_0: left promiscuous mode [ 225.795848][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.807865][ T35] bridge_slave_1: left allmulticast mode [ 225.813537][ T35] bridge_slave_1: left promiscuous mode [ 225.819842][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.829500][ T35] bridge_slave_0: left allmulticast mode [ 225.835577][ T35] bridge_slave_0: left promiscuous mode [ 225.841821][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.851662][ T35] bridge_slave_1: left allmulticast mode [ 225.857545][ T35] bridge_slave_1: left promiscuous mode [ 225.863243][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.871920][ T35] bridge_slave_0: left allmulticast mode [ 225.877952][ T35] bridge_slave_0: left promiscuous mode [ 225.883618][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.780410][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.791379][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.803014][ T35] bond0 (unregistering): Released all slaves [ 226.898735][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.910489][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.921856][ T35] bond0 (unregistering): Released all slaves [ 227.012325][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.023009][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.042842][ T35] bond0 (unregistering): Released all slaves [ 227.145058][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.164169][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.174426][ T35] bond0 (unregistering): Released all slaves [ 227.284425][ T35] tipc: Disabling bearer [ 227.290873][ T35] tipc: Left network mode [ 227.313821][ T35] tipc: Disabling bearer [ 227.326242][ T35] tipc: Left network mode [ 227.670129][ T5670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.706116][ T5670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.776034][ T5670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.786441][ T5670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.112429][ T5670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.146158][ T5670] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.205855][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.213007][ T5741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.225539][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.232708][ T5741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.312020][ T5662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.375037][ T5662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.388642][ T5662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.424506][ T5662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.587943][ T5667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.608617][ T5667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.676835][ T5667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.751646][ T35] hsr_slave_0: left promiscuous mode [ 228.772771][ T35] hsr_slave_1: left promiscuous mode [ 228.788265][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.803680][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.811858][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.825438][ T35] hsr_slave_0: left promiscuous mode [ 228.845437][ T35] hsr_slave_1: left promiscuous mode [ 228.851608][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.863592][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.872730][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.882834][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.894456][ T35] hsr_slave_0: left promiscuous mode [ 228.919768][ T35] hsr_slave_1: left promiscuous mode [ 228.931974][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.944057][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.962031][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.972223][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.999930][ T35] hsr_slave_0: left promiscuous mode [ 229.011797][ T35] hsr_slave_1: left promiscuous mode [ 229.022296][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.036125][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.043605][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.150349][ T35] veth1_macvtap: left promiscuous mode [ 229.165207][ T35] veth0_macvtap: left promiscuous mode [ 229.170854][ T35] veth1_vlan: left promiscuous mode [ 229.184836][ T35] veth0_vlan: left promiscuous mode [ 229.193008][ T35] veth1_macvtap: left promiscuous mode [ 229.204828][ T35] veth0_macvtap: left promiscuous mode [ 229.210478][ T35] veth1_vlan: left promiscuous mode [ 229.216544][ T35] veth0_vlan: left promiscuous mode [ 229.223227][ T35] veth1_macvtap: left promiscuous mode [ 229.228979][ T35] veth0_macvtap: left promiscuous mode [ 229.235731][ T35] veth1_vlan: left promiscuous mode [ 229.241049][ T35] veth0_vlan: left promiscuous mode [ 229.252972][ T35] veth1_macvtap: left promiscuous mode [ 229.258676][ T35] veth0_macvtap: left promiscuous mode [ 229.264229][ T35] veth1_vlan: left promiscuous mode [ 229.269728][ T35] veth0_vlan: left promiscuous mode [ 229.822901][ T35] team0 (unregistering): Port device team_slave_1 removed [ 229.858834][ T35] team0 (unregistering): Port device team_slave_0 removed [ 230.467687][ T35] team0 (unregistering): Port device team_slave_1 removed [ 230.501703][ T35] team0 (unregistering): Port device team_slave_0 removed [ 231.094627][ T35] team0 (unregistering): Port device team_slave_1 removed [ 231.131044][ T35] team0 (unregistering): Port device team_slave_0 removed [ 231.791883][ T35] team0 (unregistering): Port device team_slave_1 removed [ 231.831305][ T35] team0 (unregistering): Port device team_slave_0 removed [ 232.177579][ T5667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.194818][ T5664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.260601][ T5664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.289944][ T5664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.355478][ T5664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.439506][ T5670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.466921][ T5668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.516288][ T5668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.529425][ T5668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.550510][ T5668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.708395][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.772469][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.822525][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.835300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.842437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.870235][ T5670] veth0_vlan: entered promiscuous mode [ 232.919238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.926438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.991785][ T5670] veth1_vlan: entered promiscuous mode [ 233.108876][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.137884][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.224187][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.231402][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.254186][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.261383][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.321454][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.367346][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.406069][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.413192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.497881][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.522927][ T5670] veth0_macvtap: entered promiscuous mode [ 233.539256][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.546441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.587058][ T5670] veth1_macvtap: entered promiscuous mode [ 233.645981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.653136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.712198][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.730928][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.772668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.779862][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.824151][ T5668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.841166][ T5668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.857748][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.916334][ T5670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.931536][ T5670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.940779][ T5670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.950362][ T5670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.050197][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.152319][ T5662] veth0_vlan: entered promiscuous mode [ 234.255988][ T5662] veth1_vlan: entered promiscuous mode [ 234.287810][ T5667] veth0_vlan: entered promiscuous mode [ 234.302778][ T5667] veth1_vlan: entered promiscuous mode [ 234.308714][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.319395][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.400918][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.412783][ T5662] veth0_macvtap: entered promiscuous mode [ 234.420661][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.472759][ T5662] veth1_macvtap: entered promiscuous mode [ 234.500174][ T5667] veth0_macvtap: entered promiscuous mode [ 234.532891][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.551829][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.585258][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.596939][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.609498][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.620924][ T5918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.97'. [ 234.637992][ T5667] veth1_macvtap: entered promiscuous mode [ 234.659562][ T5662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.684819][ T5662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.700384][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.747374][ T5662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.759944][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 234.770203][ T5662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.779592][ T5662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.788811][ T5662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.804575][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.819334][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.830120][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.841494][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.852608][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.894597][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.915045][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.935110][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.954743][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.969119][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.018744][ T5667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.045288][ T5667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.054043][ T5667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.065374][ T5667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.087464][ T5664] veth0_vlan: entered promiscuous mode [ 235.098964][ T5664] veth1_vlan: entered promiscuous mode [ 235.125777][ T5664] veth0_macvtap: entered promiscuous mode [ 235.136737][ T5664] veth1_macvtap: entered promiscuous mode [ 235.153950][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.164495][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.174604][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.186369][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.196274][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.206793][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.218552][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.239852][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.252709][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.263160][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.274317][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.290890][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.301943][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.319979][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.345807][ T5664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.354563][ T5664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.374783][ T5664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.383914][ T5664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.476113][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.484062][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.528686][ T5741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.539480][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.554377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.563337][ T5741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.565732][ T5668] veth0_vlan: entered promiscuous mode [ 235.644440][ T5668] veth1_vlan: entered promiscuous mode [ 235.689769][ T5668] veth0_macvtap: entered promiscuous mode [ 235.699243][ T5668] veth1_macvtap: entered promiscuous mode [ 235.716388][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.727147][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.737130][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.747666][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.757569][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.768099][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.778026][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.788591][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.799775][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.812279][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.822809][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.832712][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.843242][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.853623][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.864401][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.874708][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.885288][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.896332][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.920120][ T5668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.930996][ T5668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.940874][ T5668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.950072][ T5668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.052292][ T5741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.054827][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.068169][ T5741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.078135][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.163588][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.201922][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.257971][ T5951] bond0: Unable to set up delay as MII monitoring is disabled [ 236.278875][ T5741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.308991][ T5741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.383377][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.386135][ T5956] xt_HMARK: spi-set and port-set can't be combined [ 236.410428][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.637965][ T5959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.725308][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 236.761210][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 236.832818][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 236.868035][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.005450][ T5959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.203107][ T5959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.380586][ T5988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.446965][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 237.459575][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 237.530539][ T5959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.563809][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 237.584057][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 237.667048][ T5988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.914588][ T5988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.057013][ T5988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.091537][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.229112][ T5988] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.283224][ T5988] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.330527][ T5988] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.348998][ T5988] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.457558][ T6035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.127'. [ 240.535922][ T6128] __nla_validate_parse: 14 callbacks suppressed [ 240.535944][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 240.564419][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 240.599570][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 240.764918][ T6139] openvswitch: netlink: Message has 8 unknown bytes. [ 240.880610][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'. [ 240.909309][ T6149] netlink: 108 bytes leftover after parsing attributes in process `syz.4.171'. [ 240.944577][ T6155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 241.412763][ T5959] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.461337][ T5959] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.565581][ T5959] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.611392][ T6191] openvswitch: netlink: Message has 8 unknown bytes. [ 241.618766][ T5959] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.668615][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 241.724308][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 241.793226][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 241.821170][ T6203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.262089][ T6229] sch_fq: defrate 0 ignored. [ 242.301601][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 242.519829][ T6241] openvswitch: netlink: Message has 8 unknown bytes. [ 242.845833][ T6253] IPVS: Error connecting to the multicast addr [ 242.940503][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.087775][ T6263] FAULT_INJECTION: forcing a failure. [ 243.087775][ T6263] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 243.105202][ T6266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.106464][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.3.215 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 243.124843][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.134924][ T6263] Call Trace: [ 243.138236][ T6263] [ 243.141183][ T6263] dump_stack_lvl+0x241/0x360 [ 243.145893][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.151105][ T6263] ? __pfx__printk+0x10/0x10 [ 243.155708][ T6263] should_fail_ex+0x3b0/0x4e0 [ 243.160395][ T6263] prepare_alloc_pages+0x1da/0x5d0 [ 243.165512][ T6263] __alloc_pages_noprof+0x166/0x6c0 [ 243.170731][ T6263] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 243.176468][ T6263] ? _copy_from_iter+0x257/0x1d60 [ 243.181502][ T6263] ? rcu_is_watching+0x15/0xb0 [ 243.186267][ T6263] ? __mutex_lock+0x2ef/0xd70 [ 243.190947][ T6263] alloc_pages_mpol_noprof+0x3e8/0x680 [ 243.196412][ T6263] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 243.202387][ T6263] ? page_copy_sane+0x46/0x260 [ 243.207154][ T6263] ? alloc_pages_noprof+0xef/0x170 [ 243.212266][ T6263] pipe_write+0x652/0x1a30 [ 243.216685][ T6263] ? mark_lock+0x9a/0x360 [ 243.221029][ T6263] ? __pfx_pipe_write+0x10/0x10 [ 243.225878][ T6263] ? common_file_perm+0x1a6/0x210 [ 243.230904][ T6263] ? bpf_lsm_file_permission+0x9/0x10 [ 243.236279][ T6263] ? security_file_permission+0x74/0x280 [ 243.241942][ T6263] vfs_write+0xa6d/0xc90 [ 243.246312][ T6263] ? __pfx_pipe_write+0x10/0x10 [ 243.251174][ T6263] ? __pfx_vfs_write+0x10/0x10 [ 243.255957][ T6263] ? fdget_pos+0x19a/0x320 [ 243.260374][ T6263] ksys_write+0x183/0x2b0 [ 243.264708][ T6263] ? __pfx_ksys_write+0x10/0x10 [ 243.269777][ T6263] ? do_syscall_64+0x100/0x230 [ 243.274555][ T6263] ? do_syscall_64+0xb6/0x230 [ 243.279262][ T6263] do_syscall_64+0xf3/0x230 [ 243.283803][ T6263] ? clear_bhb_loop+0x35/0x90 [ 243.288484][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.294381][ T6263] RIP: 0033:0x7f1a8a17dff9 [ 243.298829][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.318460][ T6263] RSP: 002b:00007f1a8aeea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.326896][ T6263] RAX: ffffffffffffffda RBX: 00007f1a8a335f80 RCX: 00007f1a8a17dff9 [ 243.334866][ T6263] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 243.342833][ T6263] RBP: 00007f1a8aeea090 R08: 0000000000000000 R09: 0000000000000000 [ 243.350801][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.358794][ T6263] R13: 0000000000000000 R14: 00007f1a8a335f80 R15: 00007ffca3f0dca8 [ 243.366792][ T6263] [ 243.645521][ T6274] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 243.663214][ T6274] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 243.781578][ T6281] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 243.846024][ T6288] tipc: Started in network mode [ 243.851864][ T6288] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 243.904407][ T6288] tipc: Enabling of bearer rejected, failed to enable media [ 243.971012][ T6295] nbd: must specify a device to reconfigure [ 244.004088][ T6295] xt_cgroup: invalid path, errno=-2 [ 244.224185][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.367830][ T6316] netlink: 'syz.0.234': attribute type 15 has an invalid length. [ 244.737809][ T6337] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.810316][ T6338] bridge1: entered promiscuous mode [ 244.864752][ T6338] bridge1: entered allmulticast mode [ 245.655623][ T6379] openvswitch: netlink: Duplicate or invalid key (type 0). [ 245.675366][ T6379] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.734787][ T6388] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 245.905400][ T6392] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 245.948754][ T6392] team0: Port device netdevsim0 added [ 246.394104][ T6423] netlink: 'syz.1.269': attribute type 7 has an invalid length. [ 246.403187][ T6423] __nla_validate_parse: 15 callbacks suppressed [ 246.403206][ T6423] netlink: 15 bytes leftover after parsing attributes in process `syz.1.269'. [ 246.419425][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.269'. [ 246.433657][ T6423] netlink: 872 bytes leftover after parsing attributes in process `syz.1.269'. [ 246.449786][ T6423] netlink: 'syz.1.269': attribute type 7 has an invalid length. [ 246.461307][ T6423] netlink: 15 bytes leftover after parsing attributes in process `syz.1.269'. [ 246.474342][ T6425] netlink: 76 bytes leftover after parsing attributes in process `syz.1.269'. [ 246.483734][ T6425] netlink: 76 bytes leftover after parsing attributes in process `syz.1.269'. [ 246.562049][ T6427] FAULT_INJECTION: forcing a failure. [ 246.562049][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 246.575406][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.0.270 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 246.585695][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.595779][ T6427] Call Trace: [ 246.599085][ T6427] [ 246.602041][ T6427] dump_stack_lvl+0x241/0x360 [ 246.606766][ T6427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.612040][ T6427] ? __pfx__printk+0x10/0x10 [ 246.616672][ T6427] ? __kmalloc_noprof+0xb0/0x400 [ 246.621652][ T6427] ? __pfx___might_resched+0x10/0x10 [ 246.626981][ T6427] should_fail_ex+0x3b0/0x4e0 [ 246.631719][ T6427] ? bpf_test_init+0xe1/0x180 [ 246.636413][ T6427] should_failslab+0xac/0x100 [ 246.641098][ T6427] ? bpf_test_init+0xe1/0x180 [ 246.645783][ T6427] __kmalloc_noprof+0xd8/0x400 [ 246.650553][ T6427] bpf_test_init+0xe1/0x180 [ 246.655060][ T6427] bpf_prog_test_run_skb+0x2bb/0x1820 [ 246.660440][ T6427] ? __pfx_lock_release+0x10/0x10 [ 246.665478][ T6427] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.671287][ T6427] ? fput+0x1a8/0x230 [ 246.675263][ T6427] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 246.681125][ T6427] bpf_prog_test_run+0x2e4/0x360 [ 246.686069][ T6427] __sys_bpf+0x48d/0x810 [ 246.690310][ T6427] ? __pfx___sys_bpf+0x10/0x10 [ 246.695125][ T6427] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.701106][ T6427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.707434][ T6427] ? do_syscall_64+0x100/0x230 [ 246.712195][ T6427] __x64_sys_bpf+0x7c/0x90 [ 246.716610][ T6427] do_syscall_64+0xf3/0x230 [ 246.721110][ T6427] ? clear_bhb_loop+0x35/0x90 [ 246.725780][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.731676][ T6427] RIP: 0033:0x7fe32e97dff9 [ 246.736087][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.755687][ T6427] RSP: 002b:00007fe32f7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.764107][ T6427] RAX: ffffffffffffffda RBX: 00007fe32eb35f80 RCX: 00007fe32e97dff9 [ 246.772075][ T6427] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 246.780039][ T6427] RBP: 00007fe32f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.788005][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.795971][ T6427] R13: 0000000000000000 R14: 00007fe32eb35f80 R15: 00007ffcdf292a58 [ 246.803956][ T6427] [ 246.837160][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 246.874863][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 247.694079][ T6477] netlink: 'syz.3.284': attribute type 4 has an invalid length. [ 248.222429][ T6500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.416179][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 248.489727][ T6508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.496321][ T6508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.583004][ T6508] hsr_slave_0: left promiscuous mode [ 248.603472][ T6508] hsr_slave_1: left promiscuous mode [ 248.712514][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.737897][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 249.269173][ T6543] FAULT_INJECTION: forcing a failure. [ 249.269173][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 249.313436][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.1.306 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 249.323745][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.333919][ T6543] Call Trace: [ 249.337224][ T6543] [ 249.340169][ T6543] dump_stack_lvl+0x241/0x360 [ 249.344881][ T6543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.350119][ T6543] ? __pfx__printk+0x10/0x10 [ 249.354745][ T6543] ? __pfx_lock_release+0x10/0x10 [ 249.359809][ T6543] ? percpu_ref_get_many+0x19/0x140 [ 249.365045][ T6543] should_fail_ex+0x3b0/0x4e0 [ 249.369766][ T6543] _copy_from_iter+0x1ed/0x1d60 [ 249.374636][ T6543] ? rcu_is_watching+0x15/0xb0 [ 249.379418][ T6543] ? __mutex_lock+0x2ef/0xd70 [ 249.384116][ T6543] ? __pfx__copy_from_iter+0x10/0x10 [ 249.389425][ T6543] ? alloc_pages_mpol_noprof+0x417/0x680 [ 249.395089][ T6543] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 249.401095][ T6543] ? page_copy_sane+0x46/0x260 [ 249.405886][ T6543] copy_page_from_iter+0x7a/0x100 [ 249.410950][ T6543] pipe_write+0x7f5/0x1a30 [ 249.415389][ T6543] ? mark_lock+0x9a/0x360 [ 249.419756][ T6543] ? __pfx_pipe_write+0x10/0x10 [ 249.424620][ T6543] ? common_file_perm+0x1a6/0x210 [ 249.429662][ T6543] ? bpf_lsm_file_permission+0x9/0x10 [ 249.435053][ T6543] ? security_file_permission+0x74/0x280 [ 249.440722][ T6543] vfs_write+0xa6d/0xc90 [ 249.444998][ T6543] ? __pfx_pipe_write+0x10/0x10 [ 249.449873][ T6543] ? __pfx_vfs_write+0x10/0x10 [ 249.454684][ T6543] ? fdget_pos+0x19a/0x320 [ 249.459122][ T6543] ksys_write+0x183/0x2b0 [ 249.463484][ T6543] ? __pfx_ksys_write+0x10/0x10 [ 249.468371][ T6543] ? do_syscall_64+0x100/0x230 [ 249.473164][ T6543] ? do_syscall_64+0xb6/0x230 [ 249.477867][ T6543] do_syscall_64+0xf3/0x230 [ 249.482396][ T6543] ? clear_bhb_loop+0x35/0x90 [ 249.487097][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.493024][ T6543] RIP: 0033:0x7f8f5357dff9 [ 249.497472][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.517111][ T6543] RSP: 002b:00007f8f543ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.525560][ T6543] RAX: ffffffffffffffda RBX: 00007f8f53735f80 RCX: 00007f8f5357dff9 [ 249.533566][ T6543] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 249.541568][ T6543] RBP: 00007f8f543ab090 R08: 0000000000000000 R09: 0000000000000000 [ 249.549560][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.557526][ T6543] R13: 0000000000000000 R14: 00007f8f53735f80 R15: 00007ffcdd200418 [ 249.565525][ T6543] [ 250.068194][ T6580] FAULT_INJECTION: forcing a failure. [ 250.068194][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 250.091075][ T6580] CPU: 1 UID: 0 PID: 6580 Comm: syz.0.316 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 250.101384][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.111444][ T6580] Call Trace: [ 250.114780][ T6580] [ 250.117721][ T6580] dump_stack_lvl+0x241/0x360 [ 250.122422][ T6580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.127625][ T6580] ? __pfx__printk+0x10/0x10 [ 250.132214][ T6580] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 250.138194][ T6580] ? __pfx___might_resched+0x10/0x10 [ 250.143481][ T6580] should_fail_ex+0x3b0/0x4e0 [ 250.148161][ T6580] should_failslab+0xac/0x100 [ 250.152839][ T6580] ? __alloc_skb+0x1c3/0x440 [ 250.157434][ T6580] kmem_cache_alloc_node_noprof+0x71/0x320 [ 250.163240][ T6580] __alloc_skb+0x1c3/0x440 [ 250.167662][ T6580] ? validate_chain+0x11e/0x5920 [ 250.172624][ T6580] ? __pfx___alloc_skb+0x10/0x10 [ 250.177563][ T6580] ? reacquire_held_locks+0x600/0x690 [ 250.182941][ T6580] ? mark_lock+0x9a/0x360 [ 250.187270][ T6580] alloc_skb_with_frags+0xc3/0x820 [ 250.192384][ T6580] ? aa_label_sk_perm+0x4f3/0x6c0 [ 250.197420][ T6580] sock_alloc_send_pskb+0x91a/0xa60 [ 250.202629][ T6580] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 250.208355][ T6580] hci_sock_sendmsg+0x22b/0x11c0 [ 250.213300][ T6580] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.218152][ T6580] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 250.223962][ T6580] ? __pfx_aa_file_perm+0x10/0x10 [ 250.228983][ T6580] ? aa_sock_msg_perm+0x91/0x160 [ 250.233967][ T6580] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 250.239334][ T6580] __sock_sendmsg+0x221/0x270 [ 250.244016][ T6580] sock_write_iter+0x2d7/0x3f0 [ 250.248786][ T6580] ? __pfx_sock_write_iter+0x10/0x10 [ 250.254085][ T6580] ? bpf_lsm_file_permission+0x9/0x10 [ 250.259456][ T6580] ? security_file_permission+0x74/0x280 [ 250.265090][ T6580] vfs_write+0xa6d/0xc90 [ 250.269335][ T6580] ? __pfx_sock_write_iter+0x10/0x10 [ 250.274621][ T6580] ? __pfx_vfs_write+0x10/0x10 [ 250.279399][ T6580] ? fdget_pos+0x19a/0x320 [ 250.283817][ T6580] ksys_write+0x183/0x2b0 [ 250.288151][ T6580] ? __pfx_ksys_write+0x10/0x10 [ 250.293005][ T6580] ? do_syscall_64+0x100/0x230 [ 250.297788][ T6580] ? do_syscall_64+0xb6/0x230 [ 250.302481][ T6580] do_syscall_64+0xf3/0x230 [ 250.306987][ T6580] ? clear_bhb_loop+0x35/0x90 [ 250.311696][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.317600][ T6580] RIP: 0033:0x7fe32e97dff9 [ 250.322016][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.341623][ T6580] RSP: 002b:00007fe32f7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.350067][ T6580] RAX: ffffffffffffffda RBX: 00007fe32eb35f80 RCX: 00007fe32e97dff9 [ 250.358045][ T6580] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000006 [ 250.366010][ T6580] RBP: 00007fe32f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.373980][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.381945][ T6580] R13: 0000000000000000 R14: 00007fe32eb35f80 R15: 00007ffcdf292a58 [ 250.389954][ T6580] [ 250.708885][ T5285] IPVS: starting estimator thread 0... [ 250.825379][ T6600] IPVS: using max 18 ests per chain, 43200 per kthread [ 251.061697][ T6624] netlink: 'syz.2.330': attribute type 27 has an invalid length. [ 251.074534][ T6624] C: renamed from team_slave_0 (while UP) [ 251.887564][ T6664] netlink: 'syz.4.346': attribute type 9 has an invalid length. [ 251.910766][ T6664] __nla_validate_parse: 9 callbacks suppressed [ 251.910787][ T6664] netlink: 132496 bytes leftover after parsing attributes in process `syz.4.346'. [ 251.950025][ T6667] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 251.981995][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 251.984326][ T6667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.347'. [ 251.997640][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 252.272590][ T6686] netlink: 'syz.4.350': attribute type 4 has an invalid length. [ 252.305210][ T6686] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 252.344980][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.370523][ T6686] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 252.512525][ T6704] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 252.737645][ T6715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.047746][ T6732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 253.085292][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 253.099993][ T6732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 253.129960][ T6732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 253.408345][ T6747] batadv0: entered promiscuous mode [ 253.435126][ T6747] veth1: entered promiscuous mode [ 253.586728][ T6762] netlink: 'syz.3.377': attribute type 11 has an invalid length. [ 254.116653][ T6779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.624039][ T6792] geneve2: entered allmulticast mode [ 254.948652][ T6807] FAULT_INJECTION: forcing a failure. [ 254.948652][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.962366][ T6807] CPU: 0 UID: 0 PID: 6807 Comm: syz.1.393 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 254.972649][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.982728][ T6807] Call Trace: [ 254.986014][ T6807] [ 254.988951][ T6807] dump_stack_lvl+0x241/0x360 [ 254.993686][ T6807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.998914][ T6807] ? __pfx__printk+0x10/0x10 [ 255.003519][ T6807] ? __pfx_lock_release+0x10/0x10 [ 255.008572][ T6807] should_fail_ex+0x3b0/0x4e0 [ 255.013800][ T6807] _copy_to_user+0x2f/0xb0 [ 255.018226][ T6807] bpf_test_finish+0x212/0x890 [ 255.023015][ T6807] ? __pfx_bpf_test_finish+0x10/0x10 [ 255.028304][ T6807] ? convert___skb_to_skb+0x41/0x620 [ 255.033584][ T6807] ? convert_skb_to___skb+0x2d3/0x510 [ 255.038959][ T6807] bpf_prog_test_run_skb+0xfe5/0x1820 [ 255.044433][ T6807] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 255.050241][ T6807] ? fput+0x1a8/0x230 [ 255.054219][ T6807] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 255.060026][ T6807] bpf_prog_test_run+0x2e4/0x360 [ 255.064966][ T6807] __sys_bpf+0x48d/0x810 [ 255.069207][ T6807] ? __pfx___sys_bpf+0x10/0x10 [ 255.073975][ T6807] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.079959][ T6807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.086284][ T6807] ? do_syscall_64+0x100/0x230 [ 255.091137][ T6807] __x64_sys_bpf+0x7c/0x90 [ 255.095561][ T6807] do_syscall_64+0xf3/0x230 [ 255.100061][ T6807] ? clear_bhb_loop+0x35/0x90 [ 255.104753][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.110761][ T6807] RIP: 0033:0x7f8f5357dff9 [ 255.115181][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.134792][ T6807] RSP: 002b:00007f8f543ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.143204][ T6807] RAX: ffffffffffffffda RBX: 00007f8f53735f80 RCX: 00007f8f5357dff9 [ 255.151172][ T6807] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 255.159140][ T6807] RBP: 00007f8f543ab090 R08: 0000000000000000 R09: 0000000000000000 [ 255.167104][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.175070][ T6807] R13: 0000000000000000 R14: 00007f8f53735f80 R15: 00007ffcdd200418 [ 255.183048][ T6807] [ 255.340558][ T6813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.396'. [ 255.357326][ T6813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.396'. [ 255.446091][ T6824] team0: Port device macvlan1 added [ 255.498186][ T6819] team_slave_0: entered promiscuous mode [ 255.504398][ T6819] team_slave_1: entered promiscuous mode [ 255.510172][ T6819] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 255.548081][ T6819] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 255.600669][ T6836] IPVS: Error connecting to the multicast addr [ 256.026171][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.123739][ T6845] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 256.137114][ T6845] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 256.170247][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.192218][ T6845] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 256.603052][ T6879] xt_TCPMSS: Only works on TCP SYN packets [ 256.716563][ T6883] xt_hashlimit: max too large, truncated to 1048576 [ 256.753152][ T6883] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 257.030968][ T6888] __nla_validate_parse: 3 callbacks suppressed [ 257.030989][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 257.061299][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 257.085806][ T6888] gretap0: entered promiscuous mode [ 257.101936][ T6888] batadv_slave_1: entered promiscuous mode [ 257.125363][ T6888] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 257.132985][ T6888] Cannot create hsr debugfs directory [ 257.248463][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 257.280331][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 257.308385][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 257.334848][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 257.498873][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 257.618529][ T6919] IPVS: Error connecting to the multicast addr [ 257.776047][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 257.800332][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 257.820724][ T6922] ipvlan1: entered allmulticast mode [ 257.861466][ T6922] veth0_vlan: entered allmulticast mode [ 257.872324][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 257.936343][ T6923] ipvlan2: entered allmulticast mode [ 257.982568][ T6928] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 258.087151][ T6940] Unknown options in mask 1f4 [ 258.165676][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.189469][ T6928] bond0: (slave team0): Enslaving as an active interface with an up link [ 258.978050][ T6981] netlink: 'syz.4.448': attribute type 9 has an invalid length. [ 258.993891][ T6981] bond0: entered promiscuous mode [ 258.999537][ T6981] bond_slave_0: entered promiscuous mode [ 259.005516][ T6981] bond_slave_1: entered promiscuous mode [ 259.011562][ T6981] team0: entered promiscuous mode [ 259.016764][ T6981] team_slave_0: entered promiscuous mode [ 259.022757][ T6981] team_slave_1: entered promiscuous mode [ 259.030306][ T6981] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 259.060622][ T6981] bond0: left promiscuous mode [ 259.069147][ T6981] bond_slave_0: left promiscuous mode [ 259.076012][ T6981] bond_slave_1: left promiscuous mode [ 259.087486][ T6981] team0: left promiscuous mode [ 259.095275][ T6981] team_slave_0: left promiscuous mode [ 259.104251][ T6981] team_slave_1: left promiscuous mode [ 259.227593][ T6986] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 259.504381][ T6997] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 259.602863][ T6997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.528465][ T7064] xfrm1: entered allmulticast mode [ 261.738187][ T7070] netlink: 'syz.1.477': attribute type 9 has an invalid length. [ 261.798701][ T7070] bond0: entered promiscuous mode [ 261.824365][ T7070] bond_slave_0: entered promiscuous mode [ 261.856976][ T7070] bond_slave_1: entered promiscuous mode [ 261.885044][ T7070] vlan2: entered promiscuous mode [ 261.890262][ T7070] team0: entered promiscuous mode [ 261.895788][ T7070] macvlan1: entered promiscuous mode [ 261.917598][ T7070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.942433][ T7070] bond0: left promiscuous mode [ 261.949716][ T7070] bond_slave_0: left promiscuous mode [ 261.959031][ T7070] bond_slave_1: left promiscuous mode [ 261.966602][ T7070] vlan2: left promiscuous mode [ 261.989474][ T7070] team0: left promiscuous mode [ 262.001516][ T7070] macvlan1: left promiscuous mode [ 262.118543][ T7077] FAULT_INJECTION: forcing a failure. [ 262.118543][ T7077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.164915][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.2.481 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 262.175662][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.185732][ T7077] Call Trace: [ 262.189022][ T7077] [ 262.191957][ T7077] dump_stack_lvl+0x241/0x360 [ 262.196641][ T7077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.201839][ T7077] ? __pfx__printk+0x10/0x10 [ 262.206448][ T7077] should_fail_ex+0x3b0/0x4e0 [ 262.211147][ T7077] prepare_alloc_pages+0x1da/0x5d0 [ 262.216260][ T7077] __alloc_pages_noprof+0x166/0x6c0 [ 262.221453][ T7077] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 262.227178][ T7077] ? _copy_from_iter+0x257/0x1d60 [ 262.232235][ T7077] ? rcu_is_watching+0x15/0xb0 [ 262.237032][ T7077] ? __mutex_lock+0x2ef/0xd70 [ 262.241732][ T7077] alloc_pages_mpol_noprof+0x3e8/0x680 [ 262.247206][ T7077] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 262.253207][ T7077] ? page_copy_sane+0x46/0x260 [ 262.258056][ T7077] ? alloc_pages_noprof+0xef/0x170 [ 262.263168][ T7077] pipe_write+0x652/0x1a30 [ 262.267577][ T7077] ? mark_lock+0x9a/0x360 [ 262.271930][ T7077] ? __pfx_pipe_write+0x10/0x10 [ 262.276812][ T7077] ? common_file_perm+0x1a6/0x210 [ 262.281870][ T7077] ? bpf_lsm_file_permission+0x9/0x10 [ 262.287267][ T7077] ? security_file_permission+0x74/0x280 [ 262.292905][ T7077] vfs_write+0xa6d/0xc90 [ 262.297159][ T7077] ? __pfx_pipe_write+0x10/0x10 [ 262.302006][ T7077] ? __pfx_vfs_write+0x10/0x10 [ 262.306795][ T7077] ? fdget_pos+0x19a/0x320 [ 262.311218][ T7077] ksys_write+0x183/0x2b0 [ 262.315548][ T7077] ? __pfx_ksys_write+0x10/0x10 [ 262.320427][ T7077] ? do_syscall_64+0x100/0x230 [ 262.325224][ T7077] ? do_syscall_64+0xb6/0x230 [ 262.329930][ T7077] do_syscall_64+0xf3/0x230 [ 262.334459][ T7077] ? clear_bhb_loop+0x35/0x90 [ 262.339163][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.345173][ T7077] RIP: 0033:0x7fb8b237dff9 [ 262.349618][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.369246][ T7077] RSP: 002b:00007fb8b30de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.377770][ T7077] RAX: ffffffffffffffda RBX: 00007fb8b2535f80 RCX: 00007fb8b237dff9 [ 262.385933][ T7077] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 262.393890][ T7077] RBP: 00007fb8b30de090 R08: 0000000000000000 R09: 0000000000000000 [ 262.401853][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.409834][ T7077] R13: 0000000000000000 R14: 00007fb8b2535f80 R15: 00007ffe0e014258 [ 262.417853][ T7077] [ 262.471708][ T7084] __nla_validate_parse: 17 callbacks suppressed [ 262.471728][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 262.517465][ T7084] bridge0: entered promiscuous mode [ 262.524403][ T7084] macvtap1: entered promiscuous mode [ 262.531904][ T7084] macvtap1: entered allmulticast mode [ 262.538776][ T7084] bridge0: entered allmulticast mode [ 262.551957][ T7091] bridge0: left allmulticast mode [ 262.557872][ T7091] bridge0: left promiscuous mode [ 262.579488][ T7084] netlink: 47 bytes leftover after parsing attributes in process `syz.1.484'. [ 262.647561][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 262.776839][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.786691][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.230957][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 263.272472][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 263.429026][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.493'. [ 264.011417][ T35] tipc: Subscription rejected, illegal request [ 264.123127][ T7145] netlink: 'syz.0.505': attribute type 4 has an invalid length. [ 264.145179][ T7145] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 264.160060][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.186124][ T7145] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 264.197066][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.211365][ T7145] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 264.562800][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.508'. [ 264.574271][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'. [ 264.583774][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.508'. [ 264.646488][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.508'. [ 264.663949][ T7165] FAULT_INJECTION: forcing a failure. [ 264.663949][ T7165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.677728][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.2.512 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 264.688002][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.698146][ T7165] Call Trace: [ 264.701420][ T7165] [ 264.704345][ T7165] dump_stack_lvl+0x241/0x360 [ 264.709033][ T7165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.714233][ T7165] ? __pfx__printk+0x10/0x10 [ 264.718828][ T7165] ? __pfx_lock_release+0x10/0x10 [ 264.723862][ T7165] should_fail_ex+0x3b0/0x4e0 [ 264.728550][ T7165] _copy_from_iter+0x1ed/0x1d60 [ 264.733401][ T7165] ? rcu_is_watching+0x15/0xb0 [ 264.738170][ T7165] ? trace_contention_end+0x3c/0x120 [ 264.743451][ T7165] ? __mutex_lock+0x2ef/0xd70 [ 264.748123][ T7165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.754452][ T7165] ? __pfx__copy_from_iter+0x10/0x10 [ 264.759736][ T7165] ? pipe_write+0xd5b/0x1a30 [ 264.764325][ T7165] ? __pfx___mutex_lock+0x10/0x10 [ 264.769347][ T7165] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 264.775673][ T7165] ? page_copy_sane+0x46/0x260 [ 264.780522][ T7165] copy_page_from_iter+0x7a/0x100 [ 264.785544][ T7165] pipe_write+0x7f5/0x1a30 [ 264.789954][ T7165] ? mark_lock+0x9a/0x360 [ 264.794298][ T7165] ? __pfx_pipe_write+0x10/0x10 [ 264.799317][ T7165] ? __pfx_autoremove_wake_function+0x10/0x10 [ 264.805392][ T7165] ? bpf_lsm_file_permission+0x9/0x10 [ 264.810759][ T7165] ? security_file_permission+0x74/0x280 [ 264.816395][ T7165] vfs_write+0xa6d/0xc90 [ 264.820644][ T7165] ? __pfx_pipe_write+0x10/0x10 [ 264.825496][ T7165] ? __pfx_vfs_write+0x10/0x10 [ 264.830271][ T7165] ? fdget_pos+0x19a/0x320 [ 264.834690][ T7165] ksys_write+0x183/0x2b0 [ 264.839021][ T7165] ? __pfx_ksys_write+0x10/0x10 [ 264.843871][ T7165] ? do_syscall_64+0x100/0x230 [ 264.848634][ T7165] ? do_syscall_64+0xb6/0x230 [ 264.853313][ T7165] do_syscall_64+0xf3/0x230 [ 264.857811][ T7165] ? clear_bhb_loop+0x35/0x90 [ 264.862483][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.868373][ T7165] RIP: 0033:0x7fb8b237dff9 [ 264.872780][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.892386][ T7165] RSP: 002b:00007fb8b30de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.900799][ T7165] RAX: ffffffffffffffda RBX: 00007fb8b2535f80 RCX: 00007fb8b237dff9 [ 264.908768][ T7165] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 264.916744][ T7165] RBP: 00007fb8b30de090 R08: 0000000000000000 R09: 0000000000000000 [ 264.924746][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.932808][ T7165] R13: 0000000000000000 R14: 00007fb8b2535f80 R15: 00007ffe0e014258 [ 264.940791][ T7165] [ 265.220327][ T7176] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 265.490117][ T7190] netlink: 'syz.0.518': attribute type 4 has an invalid length. [ 265.504114][ T7190] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 265.556160][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.578470][ T7190] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 265.615948][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.675312][ T7190] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 265.780622][ T7209] nbd: must specify an index to disconnect [ 266.328407][ T7244] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 266.441273][ T7247] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 266.466525][ T7247] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 266.485098][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.500346][ T7247] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 266.514099][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.528443][ T7247] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 266.542957][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.556303][ T7247] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 266.821179][ T7259] bridge_slave_1: left allmulticast mode [ 266.831253][ T7259] bridge_slave_1: left promiscuous mode [ 266.840157][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.854591][ T7259] netlink: 'syz.2.541': attribute type 2 has an invalid length. [ 266.889403][ T7262] FAULT_INJECTION: forcing a failure. [ 266.889403][ T7262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.903467][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.1.543 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 266.913806][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.923892][ T7262] Call Trace: [ 266.927205][ T7262] [ 266.930163][ T7262] dump_stack_lvl+0x241/0x360 [ 266.934886][ T7262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.940126][ T7262] ? __pfx__printk+0x10/0x10 [ 266.944769][ T7262] should_fail_ex+0x3b0/0x4e0 [ 266.949501][ T7262] prepare_alloc_pages+0x1da/0x5d0 [ 266.954650][ T7262] __alloc_pages_noprof+0x166/0x6c0 [ 266.959896][ T7262] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 266.965654][ T7262] ? _copy_from_iter+0x257/0x1d60 [ 266.970730][ T7262] ? rcu_is_watching+0x15/0xb0 [ 266.975539][ T7262] ? __mutex_lock+0x2ef/0xd70 [ 266.980245][ T7262] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.986590][ T7262] alloc_pages_mpol_noprof+0x3e8/0x680 [ 266.992054][ T7262] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 266.998029][ T7262] ? page_copy_sane+0x46/0x260 [ 267.002800][ T7262] ? alloc_pages_noprof+0xef/0x170 [ 267.007913][ T7262] pipe_write+0x652/0x1a30 [ 267.012324][ T7262] ? mark_lock+0x9a/0x360 [ 267.016665][ T7262] ? __pfx_pipe_write+0x10/0x10 [ 267.021526][ T7262] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.027604][ T7262] ? bpf_lsm_file_permission+0x9/0x10 [ 267.032977][ T7262] ? security_file_permission+0x74/0x280 [ 267.038624][ T7262] vfs_write+0xa6d/0xc90 [ 267.042871][ T7262] ? __pfx_pipe_write+0x10/0x10 [ 267.047728][ T7262] ? __pfx_vfs_write+0x10/0x10 [ 267.052508][ T7262] ? fdget_pos+0x19a/0x320 [ 267.056924][ T7262] ksys_write+0x183/0x2b0 [ 267.061258][ T7262] ? __pfx_ksys_write+0x10/0x10 [ 267.066116][ T7262] ? do_syscall_64+0x100/0x230 [ 267.070880][ T7262] ? do_syscall_64+0xb6/0x230 [ 267.075575][ T7262] do_syscall_64+0xf3/0x230 [ 267.080094][ T7262] ? clear_bhb_loop+0x35/0x90 [ 267.084777][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.090670][ T7262] RIP: 0033:0x7f8f5357dff9 [ 267.095084][ T7262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.115123][ T7262] RSP: 002b:00007f8f543ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.123540][ T7262] RAX: ffffffffffffffda RBX: 00007f8f53735f80 RCX: 00007f8f5357dff9 [ 267.131523][ T7262] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 267.139519][ T7262] RBP: 00007f8f543ab090 R08: 0000000000000000 R09: 0000000000000000 [ 267.147512][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.155485][ T7262] R13: 0000000000000000 R14: 00007f8f53735f80 R15: 00007ffcdd200418 [ 267.163466][ T7262] [ 267.198957][ T7259] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 267.269416][ T7268] dccp_invalid_packet: invalid packet type [ 267.497032][ T7281] netlink: 'syz.4.550': attribute type 4 has an invalid length. [ 267.539736][ T7281] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 267.559994][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.571293][ T7281] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 267.588472][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.615557][ T7281] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 267.629655][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.643701][ T7281] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 267.787875][ T7289] syzkaller1: entered promiscuous mode [ 267.794887][ T7289] syzkaller1: entered allmulticast mode [ 268.001216][ T7305] __nla_validate_parse: 10 callbacks suppressed [ 268.001236][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.557'. [ 268.016965][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 268.028465][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.557'. [ 268.037714][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.557'. [ 268.117924][ T7307] netlink: 'syz.2.558': attribute type 9 has an invalid length. [ 268.154317][ T7307] bond0: entered promiscuous mode [ 268.173988][ T7307] bond_slave_0: entered promiscuous mode [ 268.197437][ T7307] bond_slave_1: entered promiscuous mode [ 268.225947][ T7307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.270427][ T7307] bond0: left promiscuous mode [ 268.285660][ T7307] bond_slave_0: left promiscuous mode [ 268.303598][ T7307] bond_slave_1: left promiscuous mode [ 268.893955][ T7331] netlink: 'syz.0.566': attribute type 4 has an invalid length. [ 268.904514][ T7331] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 268.927185][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.942047][ T7331] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 268.953621][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.967202][ T7331] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 268.977816][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.994621][ T7331] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 269.102482][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 269.124529][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 269.364484][ T7354] netlink: 'syz.3.574': attribute type 9 has an invalid length. [ 269.383473][ T7354] bond0: entered promiscuous mode [ 269.390219][ T7354] bond_slave_0: entered promiscuous mode [ 269.404969][ T7354] bond_slave_1: entered promiscuous mode [ 269.412444][ T7354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.422302][ T7354] bond0: left promiscuous mode [ 269.428352][ T7354] bond_slave_0: left promiscuous mode [ 269.438913][ T7354] bond_slave_1: left promiscuous mode [ 269.469354][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 269.478474][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 269.904938][ T7378] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 269.933232][ T7378] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 269.946231][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.962129][ T7378] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 269.976038][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.997427][ T7378] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 270.056568][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.084788][ T7378] batman_adv: The newly added mac address (0c:00:04:00:00:00) already exists on: batadv_slave_1 [ 270.095970][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.116843][ T7378] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 270.143113][ T7387] netlink: 'syz.3.585': attribute type 9 has an invalid length. [ 270.184071][ T7387] bond0: entered promiscuous mode [ 270.221407][ T7387] bond_slave_0: entered promiscuous mode [ 270.234930][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 270.261561][ T7387] bond_slave_1: entered promiscuous mode [ 270.270975][ T7387] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.286677][ T7387] bond0: left promiscuous mode [ 270.294325][ T7387] bond_slave_0: left promiscuous mode [ 270.302742][ T7387] bond_slave_1: left promiscuous mode [ 270.328773][ T7389] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 270.345106][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 271.232594][ T7445] FAULT_INJECTION: forcing a failure. [ 271.232594][ T7445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.271424][ T7445] CPU: 0 UID: 0 PID: 7445 Comm: syz.4.611 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 271.281729][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.291792][ T7445] Call Trace: [ 271.295094][ T7445] [ 271.298048][ T7445] dump_stack_lvl+0x241/0x360 [ 271.302764][ T7445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.308000][ T7445] ? __pfx__printk+0x10/0x10 [ 271.312633][ T7445] ? __pfx_lock_release+0x10/0x10 [ 271.317693][ T7445] ? percpu_ref_get_many+0x19/0x140 [ 271.322928][ T7445] should_fail_ex+0x3b0/0x4e0 [ 271.327642][ T7445] _copy_from_iter+0x1ed/0x1d60 [ 271.332520][ T7445] ? rcu_is_watching+0x15/0xb0 [ 271.337316][ T7445] ? __mutex_lock+0x2ef/0xd70 [ 271.342024][ T7445] ? __pfx__copy_from_iter+0x10/0x10 [ 271.347335][ T7445] ? alloc_pages_mpol_noprof+0x417/0x680 [ 271.352999][ T7445] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 271.359007][ T7445] ? page_copy_sane+0x46/0x260 [ 271.363804][ T7445] copy_page_from_iter+0x7a/0x100 [ 271.368866][ T7445] pipe_write+0x7f5/0x1a30 [ 271.373313][ T7445] ? mark_lock+0x9a/0x360 [ 271.377703][ T7445] ? __pfx_pipe_write+0x10/0x10 [ 271.382560][ T7445] ? common_file_perm+0x1a6/0x210 [ 271.387586][ T7445] ? bpf_lsm_file_permission+0x9/0x10 [ 271.392955][ T7445] ? security_file_permission+0x74/0x280 [ 271.398590][ T7445] vfs_write+0xa6d/0xc90 [ 271.402840][ T7445] ? __pfx_pipe_write+0x10/0x10 [ 271.407716][ T7445] ? __pfx_vfs_write+0x10/0x10 [ 271.412522][ T7445] ? fdget_pos+0x19a/0x320 [ 271.416964][ T7445] ksys_write+0x183/0x2b0 [ 271.421342][ T7445] ? __pfx_ksys_write+0x10/0x10 [ 271.426223][ T7445] ? do_syscall_64+0x100/0x230 [ 271.431001][ T7445] ? do_syscall_64+0xb6/0x230 [ 271.435688][ T7445] do_syscall_64+0xf3/0x230 [ 271.440203][ T7445] ? clear_bhb_loop+0x35/0x90 [ 271.444901][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.450813][ T7445] RIP: 0033:0x7f435fd7dff9 [ 271.455236][ T7445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.475046][ T7445] RSP: 002b:00007f435f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.483480][ T7445] RAX: ffffffffffffffda RBX: 00007f435ff35f80 RCX: 00007f435fd7dff9 [ 271.491458][ T7445] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 271.499431][ T7445] RBP: 00007f435f7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 271.507398][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.515365][ T7445] R13: 0000000000000000 R14: 00007f435ff35f80 R15: 00007fff16e82708 [ 271.523348][ T7445] [ 273.027381][ T7542] warning: `syz.1.648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 273.184287][ T7554] __nla_validate_parse: 9 callbacks suppressed [ 273.184305][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 273.214167][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 273.235412][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 273.285659][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.293180][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.377288][ T7552] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 273.743159][ T7589] netlink: 'syz.1.665': attribute type 15 has an invalid length. [ 275.375451][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 275.526909][ T7648] netlink: zone id is out of range [ 275.538918][ T7648] netlink: zone id is out of range [ 275.544964][ T54] Bluetooth: hci8: command 0x0405 tx timeout [ 275.564904][ T7648] netlink: zone id is out of range [ 275.571739][ T7649] netlink: 'syz.0.686': attribute type 9 has an invalid length. [ 275.577213][ T7648] netlink: zone id is out of range [ 275.609023][ T7652] netlink: 76 bytes leftover after parsing attributes in process `syz.4.684'. [ 275.609082][ T7648] netlink: zone id is out of range [ 275.633679][ T7649] bond0: entered promiscuous mode [ 275.656531][ T7649] bond_slave_0: entered promiscuous mode [ 275.664729][ T7649] bond_slave_1: entered promiscuous mode [ 275.685009][ T7649] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 275.692248][ T7648] netlink: zone id is out of range [ 275.703567][ T7649] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 275.925263][ T7649] bond0: left promiscuous mode [ 275.930382][ T7649] bond_slave_0: left promiscuous mode [ 275.943292][ T7649] bond_slave_1: left promiscuous mode [ 275.951136][ T7649] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 276.017770][ T7652] Êü: entered promiscuous mode [ 276.032044][ T7648] netlink: zone id is out of range [ 276.041969][ T7648] netlink: zone id is out of range [ 276.053395][ T7648] netlink: zone id is out of range [ 276.061783][ T7648] netlink: zone id is out of range [ 276.131240][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 276.140358][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 276.336320][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 276.412795][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 276.422498][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.429965][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.445002][ T7667] nbd: must specify at least one socket [ 276.535482][ T7667] batadv0: entered promiscuous mode [ 276.947442][ T7684] syzkaller0: entered promiscuous mode [ 276.973391][ T7684] syzkaller0: entered allmulticast mode [ 277.006617][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.013835][ T7686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.021721][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.028927][ T7686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.400116][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.409438][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.418111][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.434461][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.442443][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.616928][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.665051][ T54] Bluetooth: hci0: command tx timeout [ 288.752367][ T54] Bluetooth: hci0: command tx timeout [ 288.838449][ T4622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.846392][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.865862][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.874247][ T4622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.881956][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.893530][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.919242][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.931347][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.938860][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.998695][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.006455][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.013832][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.448795][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.459098][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.471440][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.480196][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.488687][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.498673][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.621165][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.630550][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.646665][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.657778][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.676830][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.685848][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.824848][ T5246] Bluetooth: hci0: command tx timeout [ 290.985028][ T5246] Bluetooth: hci1: command tx timeout [ 291.065930][ T5246] Bluetooth: hci2: command tx timeout [ 291.544850][ T5246] Bluetooth: hci3: command tx timeout [ 291.784942][ T5246] Bluetooth: hci4: command tx timeout [ 292.485923][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.670935][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.905036][ T5246] Bluetooth: hci0: command tx timeout [ 293.064886][ T5246] Bluetooth: hci1: command tx timeout [ 293.145781][ T5246] Bluetooth: hci2: command tx timeout [ 293.624773][ T5246] Bluetooth: hci3: command tx timeout [ 293.864959][ T5246] Bluetooth: hci4: command tx timeout [ 295.150405][ T5246] Bluetooth: hci1: command tx timeout [ 295.225049][ T5246] Bluetooth: hci2: command tx timeout [ 295.710062][ T5246] Bluetooth: hci3: command tx timeout [ 295.944836][ T5246] Bluetooth: hci4: command tx timeout [ 297.225012][ T5246] Bluetooth: hci1: command tx timeout [ 297.308539][ T5246] Bluetooth: hci2: command tx timeout [ 297.784844][ T5246] Bluetooth: hci3: command tx timeout [ 298.027055][ T5246] Bluetooth: hci4: command tx timeout [ 300.484672][ C1] sched: DL replenish lagged too much [ 309.801471][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.912779][ T35] team0: Port device netdevsim0 removed [ 313.991256][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.771033][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 314.794925][ T35] bridge_slave_1: left allmulticast mode [ 314.800635][ T35] bridge_slave_1: left promiscuous mode [ 314.812836][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.911926][ T35] bridge_slave_0: left allmulticast mode [ 314.922205][ T35] bridge_slave_0: left promiscuous mode [ 314.930142][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.119635][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.253335][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.293994][ T35] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 317.377206][ T35] team_slave_0: left promiscuous mode [ 317.382940][ T35] team_slave_1: left promiscuous mode [ 317.398870][ T35] bond0 (unregistering): Released all slaves [ 317.434029][ T7712] chnl_net:caif_netlink_parms(): no params data found [ 317.502694][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.962610][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 318.006040][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 344.824725][ T7712] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 346.043826][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 346.216964][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.228971][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.240410][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.252377][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.260906][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.269545][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.709797][ T7771] chnl_net:caif_netlink_parms(): no params data found [ 347.082480][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.134946][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.142229][ T7771] bridge_slave_0: entered allmulticast mode [ 347.185913][ T7771] bridge_slave_0: entered promiscuous mode [ 347.211419][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.228756][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.243888][ T7771] bridge_slave_1: entered allmulticast mode [ 347.258078][ T7771] bridge_slave_1: entered promiscuous mode [ 347.414212][ T7771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.440259][ T7771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.658837][ T7771] team0: Port device team_slave_0 added [ 347.676875][ T7771] team0: Port device team_slave_1 added [ 347.776791][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.783792][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.904781][ T7771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.968919][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.996978][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.104786][ T7771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.344937][ T5243] Bluetooth: hci0: command tx timeout [ 348.475720][ T7771] hsr_slave_0: entered promiscuous mode [ 348.530867][ T7771] hsr_slave_1: entered promiscuous mode [ 348.557325][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.566930][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.575383][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.583949][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.592135][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.610218][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.645150][ T5246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.655437][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.663947][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.674927][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.687698][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.695136][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.706670][ T7771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.714280][ T7771] Cannot create hsr debugfs directory [ 349.559097][ T5246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.568249][ T5246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.577055][ T5246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 349.592443][ T5246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 349.600177][ T5246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 349.625151][ T5246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.718228][ T5243] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 349.730715][ T5243] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 349.741508][ T5243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 349.750872][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 349.761446][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 349.769327][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 350.424950][ T5243] Bluetooth: hci0: command tx timeout [ 350.665142][ T5243] Bluetooth: hci5: command tx timeout [ 350.745190][ T5243] Bluetooth: hci6: command tx timeout [ 351.705252][ T5243] Bluetooth: hci7: command tx timeout [ 351.865204][ T5243] Bluetooth: hci8: command tx timeout [ 352.504900][ T5243] Bluetooth: hci0: command tx timeout [ 352.745119][ T5243] Bluetooth: hci5: command tx timeout [ 352.842396][ T5243] Bluetooth: hci6: command tx timeout [ 353.785126][ T5243] Bluetooth: hci7: command tx timeout [ 353.945154][ T5243] Bluetooth: hci8: command tx timeout [ 354.584984][ T5246] Bluetooth: hci0: command tx timeout [ 354.825067][ T5246] Bluetooth: hci5: command tx timeout [ 354.905016][ T5246] Bluetooth: hci6: command tx timeout [ 355.865156][ T5246] Bluetooth: hci7: command tx timeout [ 356.025091][ T5243] Bluetooth: hci8: command tx timeout [ 356.905045][ T5243] Bluetooth: hci5: command tx timeout [ 356.984958][ T5243] Bluetooth: hci6: command tx timeout [ 357.945050][ T5243] Bluetooth: hci7: command tx timeout [ 358.105244][ T5243] Bluetooth: hci8: command tx timeout [ 378.911394][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.217193][ T5246] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 408.227368][ T5246] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 408.235979][ T5246] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 408.249435][ T5246] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 408.257208][ T5246] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 408.264550][ T5246] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 408.965563][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 408.976194][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 408.984624][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 408.995197][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 409.003920][ T5243] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 409.011838][ T5243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 409.083917][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 409.103002][ T5243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 409.112130][ T5243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 409.121270][ T5243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 409.129292][ T5243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 409.137914][ T5243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 410.076341][ T4622] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 410.085737][ T4622] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 410.093838][ T4622] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 410.102047][ T4622] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 410.116792][ T4622] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 410.134933][ T4622] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 410.198889][ T5245] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 410.208494][ T5245] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 410.217599][ T5245] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 410.225957][ T5245] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 410.234747][ T5245] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 410.242659][ T5245] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 410.344931][ T5245] Bluetooth: hci9: command tx timeout [ 411.065011][ T5245] Bluetooth: hci10: command tx timeout [ 411.227007][ T5245] Bluetooth: hci11: command tx timeout [ 411.715301][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 411.721428][ T5245] Bluetooth: hci1: command 0x0406 tx timeout [ 411.727575][ T4622] Bluetooth: hci3: command 0x0406 tx timeout [ 412.185148][ T5246] Bluetooth: hci12: command tx timeout [ 412.345342][ T5246] Bluetooth: hci13: command tx timeout [ 412.424948][ T5246] Bluetooth: hci9: command tx timeout [ 413.144961][ T5246] Bluetooth: hci10: command tx timeout [ 413.305101][ T5246] Bluetooth: hci11: command tx timeout [ 414.264954][ T5246] Bluetooth: hci12: command tx timeout [ 414.425086][ T5246] Bluetooth: hci13: command tx timeout [ 414.505033][ T5246] Bluetooth: hci9: command tx timeout [ 415.225034][ T5243] Bluetooth: hci10: command tx timeout [ 415.386364][ T5243] Bluetooth: hci11: command tx timeout [ 416.354700][ T5243] Bluetooth: hci12: command tx timeout [ 416.505066][ T5243] Bluetooth: hci13: command tx timeout [ 416.585028][ T5243] Bluetooth: hci9: command tx timeout [ 416.834892][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 417.304981][ T5246] Bluetooth: hci10: command tx timeout [ 417.465215][ T5246] Bluetooth: hci11: command tx timeout [ 418.424995][ T5246] Bluetooth: hci12: command tx timeout [ 418.585174][ T5246] Bluetooth: hci13: command tx timeout [ 440.347244][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.534889][ T5243] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 468.545789][ T5243] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 468.553975][ T5243] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 468.562222][ T5243] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 468.570045][ T5243] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 468.577627][ T5243] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 469.142302][ T5246] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 469.152595][ T5246] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 469.161192][ T5246] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 469.170975][ T5246] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 469.179908][ T5246] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 469.189356][ T5246] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 469.487220][ T5243] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 469.496819][ T5243] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 469.505620][ T5243] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 469.514060][ T5243] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 469.527135][ T5243] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 469.534602][ T5243] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 470.665422][ T5243] Bluetooth: hci14: command tx timeout [ 471.105550][ T4622] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 471.115208][ T4622] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 471.123495][ T4622] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 471.133137][ T4622] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 471.144982][ T4622] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 471.152497][ T4622] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 471.223130][ T5674] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 471.231918][ T5674] Bluetooth: hci15: command tx timeout [ 471.239917][ T5674] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 471.249446][ T5674] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 471.259070][ T5674] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 471.269738][ T5674] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 471.277616][ T5674] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 471.625074][ T5674] Bluetooth: hci16: command tx timeout [ 472.745415][ T5674] Bluetooth: hci14: command tx timeout [ 473.174931][ T4622] Bluetooth: hci5: command 0x0406 tx timeout [ 473.181023][ T4622] Bluetooth: hci6: command 0x0406 tx timeout [ 473.187118][ T5238] Bluetooth: hci7: command 0x0406 tx timeout [ 473.193151][ T5238] Bluetooth: hci8: command 0x0406 tx timeout [ 473.202430][ T5674] Bluetooth: hci0: command 0x0406 tx timeout [ 473.225237][ T5248] Bluetooth: hci17: command tx timeout [ 473.306368][ T5248] Bluetooth: hci15: command tx timeout [ 473.314944][ T5243] Bluetooth: hci18: command tx timeout [ 473.705523][ T5245] Bluetooth: hci16: command tx timeout [ 474.824956][ T5245] Bluetooth: hci14: command tx timeout [ 475.305052][ T5245] Bluetooth: hci17: command tx timeout [ 475.385027][ T5245] Bluetooth: hci15: command tx timeout [ 475.390584][ T5245] Bluetooth: hci18: command tx timeout [ 475.784963][ T5245] Bluetooth: hci16: command tx timeout [ 476.905007][ T5245] Bluetooth: hci14: command tx timeout [ 477.385002][ T5245] Bluetooth: hci17: command tx timeout [ 477.465070][ T5246] Bluetooth: hci15: command tx timeout [ 477.470647][ T5245] Bluetooth: hci18: command tx timeout [ 477.865021][ T5245] Bluetooth: hci16: command tx timeout [ 479.465059][ T5245] Bluetooth: hci17: command tx timeout [ 479.544980][ T5245] Bluetooth: hci18: command tx timeout [ 494.745035][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 494.752782][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 494.794938][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.848951][ T30] task:kworker/u8:2 state:D stack:20664 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 494.898293][ T30] Workqueue: netns cleanup_net [ 494.903161][ T30] Call Trace: [ 494.929338][ T30] [ 494.932343][ T30] __schedule+0x1895/0x4b30 [ 494.951500][ T30] ? __pfx___schedule+0x10/0x10 [ 494.984612][ T30] ? __pfx_lock_release+0x10/0x10 [ 494.989900][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 495.022658][ T30] ? kthread_data+0x52/0xd0 [ 495.040137][ T30] ? schedule+0x90/0x320 [ 495.052854][ T30] ? wq_worker_sleeping+0x66/0x240 [ 495.124739][ T30] ? schedule+0x90/0x320 [ 495.129065][ T30] schedule+0x14b/0x320 [ 495.133254][ T30] schedule_preempt_disabled+0x13/0x30 [ 495.214791][ T30] __mutex_lock+0x6a7/0xd70 [ 495.244993][ T30] ? __mutex_lock+0x52a/0xd70 [ 495.249745][ T30] ? wiphy_unregister+0x236/0xb00 [ 495.305202][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 495.310297][ T30] ? __up_read+0x2c2/0x6b0 [ 495.345170][ T30] ? __pfx___up_read+0x10/0x10 [ 495.350053][ T30] wiphy_unregister+0x236/0xb00 [ 495.391816][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 495.434766][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 495.440221][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 495.504956][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 495.510671][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 495.554869][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 495.560499][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 495.614760][ T30] hwsim_exit_net+0x5c1/0x670 [ 495.619563][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 495.668369][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 495.674250][ T30] cleanup_net+0x802/0xcc0 [ 495.715067][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 495.720092][ T30] ? process_scheduled_works+0x976/0x1850 [ 495.761146][ T30] process_scheduled_works+0xa63/0x1850 [ 495.771693][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.805193][ T30] ? assign_work+0x364/0x3d0 [ 495.809873][ T30] worker_thread+0x870/0xd30 [ 495.814593][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 495.860932][ T30] ? __kthread_parkme+0x169/0x1d0 [ 495.894880][ T30] ? __pfx_worker_thread+0x10/0x10 [ 495.900077][ T30] kthread+0x2f0/0x390 [ 495.904174][ T30] ? __pfx_worker_thread+0x10/0x10 [ 495.952734][ T30] ? __pfx_kthread+0x10/0x10 [ 495.994625][ T30] ret_from_fork+0x4b/0x80 [ 495.999350][ T30] ? __pfx_kthread+0x10/0x10 [ 496.003977][ T30] ret_from_fork_asm+0x1a/0x30 [ 496.035619][ T30] [ 496.044870][ T30] INFO: task kworker/0:2:937 blocked for more than 144 seconds. [ 496.052566][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 496.082170][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.094881][ T30] task:kworker/0:2 state:D stack:22544 pid:937 tgid:937 ppid:2 flags:0x00004000 [ 496.115761][ T30] Workqueue: events switchdev_deferred_process_work [ 496.122443][ T30] Call Trace: [ 496.135215][ T30] [ 496.138230][ T30] __schedule+0x1895/0x4b30 [ 496.155155][ T30] ? schedule+0x90/0x320 [ 496.159485][ T30] ? __pfx___schedule+0x10/0x10 [ 496.164373][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 496.182433][ T30] ? __pfx_lock_release+0x10/0x10 [ 496.192274][ T30] ? kick_pool+0x1bd/0x620 [ 496.204902][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.210183][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 496.234735][ T30] ? schedule+0x90/0x320 [ 496.239224][ T30] schedule+0x14b/0x320 [ 496.364722][ T30] schedule_preempt_disabled+0x13/0x30 [ 496.370275][ T30] __mutex_lock+0x6a7/0xd70 [ 496.384755][ T30] ? __mutex_lock+0x52a/0xd70 [ 496.389508][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 496.409251][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 496.414367][ T30] ? process_scheduled_works+0x976/0x1850 [ 496.424688][ T30] switchdev_deferred_process_work+0xe/0x20 [ 496.430647][ T30] process_scheduled_works+0xa63/0x1850 [ 496.449562][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.462855][ T30] ? assign_work+0x364/0x3d0 [ 496.472679][ T30] worker_thread+0x870/0xd30 [ 496.484983][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 496.491001][ T30] ? __kthread_parkme+0x169/0x1d0 [ 496.506911][ T30] ? __pfx_worker_thread+0x10/0x10 [ 496.512093][ T30] kthread+0x2f0/0x390 [ 496.524693][ T30] ? __pfx_worker_thread+0x10/0x10 [ 496.529964][ T30] ? __pfx_kthread+0x10/0x10 [ 496.534585][ T30] ret_from_fork+0x4b/0x80 [ 496.551850][ T30] ? __pfx_kthread+0x10/0x10 [ 496.562762][ T30] ret_from_fork_asm+0x1a/0x30 [ 496.575480][ T30] [ 496.580772][ T30] INFO: task kworker/u8:8:2972 blocked for more than 145 seconds. [ 496.598912][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 496.614485][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.627133][ T30] task:kworker/u8:8 state:D stack:22200 pid:2972 tgid:2972 ppid:2 flags:0x00004000 [ 496.644773][ T30] Workqueue: events_unbound linkwatch_event [ 496.650748][ T30] Call Trace: [ 496.673462][ T30] [ 496.677312][ T30] __schedule+0x1895/0x4b30 [ 496.681926][ T30] ? __pfx___schedule+0x10/0x10 [ 496.694785][ T30] ? __pfx_lock_release+0x10/0x10 [ 496.699907][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 496.716250][ T30] ? kthread_data+0x52/0xd0 [ 496.720830][ T30] ? schedule+0x90/0x320 [ 496.736887][ T30] ? wq_worker_sleeping+0x66/0x240 [ 496.742077][ T30] ? schedule+0x90/0x320 [ 496.761277][ T30] schedule+0x14b/0x320 [ 496.766014][ T30] schedule_preempt_disabled+0x13/0x30 [ 496.771520][ T30] __mutex_lock+0x6a7/0xd70 [ 496.789448][ T30] ? __mutex_lock+0x52a/0xd70 [ 496.794534][ T30] ? linkwatch_event+0xe/0x60 [ 496.811614][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 496.821480][ T30] ? process_scheduled_works+0x976/0x1850 [ 496.834857][ T30] linkwatch_event+0xe/0x60 [ 496.839432][ T30] process_scheduled_works+0xa63/0x1850 [ 496.856724][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.874809][ T30] ? assign_work+0x364/0x3d0 [ 496.879481][ T30] worker_thread+0x870/0xd30 [ 496.884118][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 496.900136][ T30] ? __kthread_parkme+0x169/0x1d0 [ 496.912916][ T30] ? __pfx_worker_thread+0x10/0x10 [ 496.924018][ T30] kthread+0x2f0/0x390 [ 496.934000][ T30] ? __pfx_worker_thread+0x10/0x10 [ 496.944858][ T30] ? __pfx_kthread+0x10/0x10 [ 496.949519][ T30] ret_from_fork+0x4b/0x80 [ 496.953967][ T30] ? __pfx_kthread+0x10/0x10 [ 496.970343][ T30] ret_from_fork_asm+0x1a/0x30 [ 496.980919][ T30] [ 496.984068][ T30] INFO: task jbd2/sda1-8:4646 blocked for more than 145 seconds. [ 497.015137][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 497.022477][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.044536][ T30] task:jbd2/sda1-8 state:D stack:23856 pid:4646 tgid:4646 ppid:2 flags:0x00004000 [ 497.065073][ T30] Call Trace: [ 497.068407][ T30] [ 497.071412][ T30] __schedule+0x1895/0x4b30 [ 497.094878][ T30] ? __pfx___schedule+0x10/0x10 [ 497.099843][ T30] ? __pfx_lock_release+0x10/0x10 [ 497.114857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.120942][ T30] ? schedule+0x90/0x320 [ 497.136832][ T30] schedule+0x14b/0x320 [ 497.141067][ T30] io_schedule+0x8d/0x110 [ 497.154934][ T30] bit_wait_io+0x12/0xd0 [ 497.159271][ T30] __wait_on_bit+0xb0/0x2f0 [ 497.163863][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 497.180305][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 497.193098][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 497.204002][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 497.221828][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 497.232426][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 497.244938][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 497.251683][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 497.270506][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 497.284599][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 497.290429][ T30] ? __timer_delete_sync+0x15c/0x310 [ 497.306065][ T30] ? __timer_delete_sync+0x25d/0x310 [ 497.311427][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 497.329857][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 497.341216][ T30] ? prepare_to_wait+0x186/0x210 [ 497.351965][ T30] ? schedule+0x90/0x320 [ 497.362608][ T30] kjournald2+0x41c/0x7b0 [ 497.373615][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.386507][ T30] ? __pfx_kjournald2+0x10/0x10 [ 497.391416][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 497.409972][ T30] ? __kthread_parkme+0x169/0x1d0 [ 497.421620][ T30] ? __pfx_kjournald2+0x10/0x10 [ 497.431232][ T30] kthread+0x2f0/0x390 [ 497.442540][ T30] ? __pfx_kjournald2+0x10/0x10 [ 497.447910][ T30] ? __pfx_kthread+0x10/0x10 [ 497.452557][ T30] ret_from_fork+0x4b/0x80 [ 497.472756][ T30] ? __pfx_kthread+0x10/0x10 [ 497.484807][ T30] ret_from_fork_asm+0x1a/0x30 [ 497.489652][ T30] [ 497.503356][ T30] INFO: task dhcpcd:4898 blocked for more than 146 seconds. [ 497.513417][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 497.532750][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.544676][ T30] task:dhcpcd state:D stack:20352 pid:4898 tgid:4898 ppid:4897 flags:0x00000002 [ 497.568256][ T30] Call Trace: [ 497.571588][ T30] [ 497.582898][ T30] __schedule+0x1895/0x4b30 [ 497.593640][ T30] ? __pfx___schedule+0x10/0x10 [ 497.604687][ T30] ? __pfx_lock_release+0x10/0x10 [ 497.609779][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 497.624906][ T30] ? schedule+0x90/0x320 [ 497.629233][ T30] schedule+0x14b/0x320 [ 497.633465][ T30] schedule_preempt_disabled+0x13/0x30 [ 497.651247][ T30] __mutex_lock+0x6a7/0xd70 [ 497.662567][ T30] ? __mutex_lock+0x52a/0xd70 [ 497.674210][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 497.684681][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 497.689767][ T30] ? apparmor_capable+0x13b/0x1b0 [ 497.707033][ T30] ? bpf_lsm_capable+0x9/0x10 [ 497.711788][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 497.726864][ T30] ? get_user_ifreq+0x1bb/0x200 [ 497.731786][ T30] inet_ioctl+0x3d7/0x4f0 [ 497.747339][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 497.752255][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 497.764717][ T30] sock_do_ioctl+0x158/0x460 [ 497.769419][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 497.774568][ T30] ? __pfx_lock_release+0x10/0x10 [ 497.793591][ T30] sock_ioctl+0x626/0x8e0 [ 497.804536][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 497.809931][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.824982][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.831376][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 497.847494][ T30] __se_sys_ioctl+0xf9/0x170 [ 497.852155][ T30] do_syscall_64+0xf3/0x230 [ 497.865621][ T30] ? clear_bhb_loop+0x35/0x90 [ 497.870375][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.893382][ T30] RIP: 0033:0x7f04201e3d49 [ 497.898062][ T30] RSP: 002b:00007fffa05fdf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.914838][ T30] RAX: ffffffffffffffda RBX: 00007f04201156c0 RCX: 00007f04201e3d49 [ 497.934855][ T30] RDX: 00007fffa060e108 RSI: 0000000000008914 RDI: 000000000000000e [ 497.942896][ T30] RBP: 00007fffa061e2c8 R08: 00007fffa060e0c8 R09: 00007fffa060e078 [ 497.965111][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.973207][ T30] R13: 00007fffa060e108 R14: 0000000000000028 R15: 0000000000008914 [ 497.993314][ T30] [ 498.000933][ T30] INFO: task kworker/u8:9:5741 blocked for more than 146 seconds. [ 498.015333][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 498.022695][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.050761][ T30] task:kworker/u8:9 state:D stack:24080 pid:5741 tgid:5741 ppid:2 flags:0x00004000 [ 498.074930][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 498.080992][ T30] Call Trace: [ 498.084289][ T30] [ 498.098756][ T30] __schedule+0x1895/0x4b30 [ 498.103392][ T30] ? __pfx___schedule+0x10/0x10 [ 498.115085][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.120176][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 498.138608][ T30] ? kthread_data+0x52/0xd0 [ 498.143182][ T30] ? schedule+0x90/0x320 [ 498.155146][ T30] ? wq_worker_sleeping+0x66/0x240 [ 498.160562][ T30] ? schedule+0x90/0x320 [ 498.174711][ T30] schedule+0x14b/0x320 [ 498.178943][ T30] schedule_preempt_disabled+0x13/0x30 [ 498.184430][ T30] __mutex_lock+0x6a7/0xd70 [ 498.203496][ T30] ? mark_lock+0x9a/0x360 [ 498.211596][ T30] ? __mutex_lock+0x52a/0xd70 [ 498.224615][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 498.229978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 498.244789][ T30] addrconf_dad_work+0xd0/0x16f0 [ 498.249811][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 498.265106][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.271753][ T30] ? process_scheduled_works+0x976/0x1850 [ 498.284785][ T30] process_scheduled_works+0xa63/0x1850 [ 498.290423][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.307812][ T30] ? assign_work+0x364/0x3d0 [ 498.312477][ T30] worker_thread+0x870/0xd30 [ 498.325107][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 498.331485][ T30] ? __kthread_parkme+0x169/0x1d0 [ 498.346793][ T30] ? __pfx_worker_thread+0x10/0x10 [ 498.351968][ T30] kthread+0x2f0/0x390 [ 498.364694][ T30] ? __pfx_worker_thread+0x10/0x10 [ 498.369929][ T30] ? __pfx_kthread+0x10/0x10 [ 498.374545][ T30] ret_from_fork+0x4b/0x80 [ 498.389986][ T30] ? __pfx_kthread+0x10/0x10 [ 498.403157][ T30] ret_from_fork_asm+0x1a/0x30 [ 498.413787][ T30] [ 498.422731][ T30] INFO: task syz-executor:7712 blocked for more than 147 seconds. [ 498.438358][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 498.452702][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.474750][ T30] task:syz-executor state:D stack:20208 pid:7712 tgid:7712 ppid:1 flags:0x00004006 [ 498.494978][ T30] Call Trace: [ 498.500069][ T30] [ 498.503041][ T30] __schedule+0x1895/0x4b30 [ 498.514728][ T30] ? __pfx___schedule+0x10/0x10 [ 498.519640][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.536746][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 498.542283][ T30] ? schedule+0x90/0x320 [ 498.557525][ T30] schedule+0x14b/0x320 [ 498.561751][ T30] schedule_preempt_disabled+0x13/0x30 [ 498.575630][ T30] __mutex_lock+0x6a7/0xd70 [ 498.580194][ T30] ? __mutex_lock+0x52a/0xd70 [ 498.595184][ T30] ? tun_chr_close+0x3b/0x1b0 [ 498.600869][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 498.614747][ T30] ? __pfx_call_rcu+0x10/0x10 [ 498.619501][ T30] tun_chr_close+0x3b/0x1b0 [ 498.624033][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 498.640769][ T30] __fput+0x23f/0x880 [ 498.650693][ T30] task_work_run+0x24f/0x310 [ 498.661115][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 498.673910][ T30] ? __pfx_task_work_run+0x10/0x10 [ 498.684688][ T30] ? do_exit+0xa2a/0x28e0 [ 498.689067][ T30] ? kmem_cache_free+0x1a2/0x420 [ 498.694030][ T30] ? do_exit+0xa2a/0x28e0 [ 498.710562][ T30] do_exit+0xa2f/0x28e0 [ 498.720069][ T30] ? __pfx_do_exit+0x10/0x10 [ 498.731498][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 498.743239][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.754696][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.761081][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 498.777602][ T30] do_group_exit+0x207/0x2c0 [ 498.782241][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.794796][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 498.800066][ T30] get_signal+0x176f/0x1810 [ 498.811548][ T30] ? __sock_sendmsg+0x113/0x270 [ 498.823398][ T30] ? __pfx_get_signal+0x10/0x10 [ 498.834987][ T30] arch_do_signal_or_restart+0x96/0x860 [ 498.840635][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.858078][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.864143][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 498.882966][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 498.889097][ T30] do_syscall_64+0x100/0x230 [ 498.893726][ T30] ? clear_bhb_loop+0x35/0x90 [ 498.910650][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.924685][ T30] RIP: 0033:0x7f3c5c57fe8c [ 498.929157][ T30] RSP: 002b:00007ffeb0f31150 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 498.953159][ T30] RAX: 000000000000003c RBX: 00007f3c5d264620 RCX: 00007f3c5c57fe8c [ 498.964675][ T30] RDX: 000000000000003c RSI: 00007f3c5d264670 RDI: 0000000000000003 [ 498.972697][ T30] RBP: 0000000000000000 R08: 00007ffeb0f311a4 R09: 000000000000000c [ 498.991630][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 499.004793][ T30] R13: 0000000000000000 R14: 00007f3c5d264670 R15: 0000000000000000 [ 499.024097][ T30] [ 499.028729][ T30] INFO: task syz-executor:7720 blocked for more than 147 seconds. [ 499.045190][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 499.058203][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.086861][ T30] task:syz-executor state:D stack:21728 pid:7720 tgid:7720 ppid:1 flags:0x00000004 [ 499.111202][ T30] Call Trace: [ 499.114541][ T30] [ 499.122621][ T30] __schedule+0x1895/0x4b30 [ 499.132988][ T30] ? __pfx___schedule+0x10/0x10 [ 499.144975][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.150073][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 499.165090][ T30] ? schedule+0x90/0x320 [ 499.169398][ T30] schedule+0x14b/0x320 [ 499.173583][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.189699][ T30] __mutex_lock+0x6a7/0xd70 [ 499.194274][ T30] ? __mutex_lock+0x52a/0xd70 [ 499.213568][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 499.219269][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.224440][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 499.243453][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 499.252331][ T30] ? __lock_acquire+0x1384/0x2050 [ 499.265204][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 499.270766][ T30] netlink_rcv_skb+0x1e3/0x430 [ 499.288801][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 499.294333][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.305055][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.310370][ T30] netlink_unicast+0x7f6/0x990 [ 499.327319][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 499.332681][ T30] ? __virt_addr_valid+0x183/0x530 [ 499.344812][ T30] ? __check_object_size+0x48e/0x900 [ 499.354931][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 499.359873][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.374806][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 499.379867][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.396559][ T30] __sock_sendmsg+0x221/0x270 [ 499.401304][ T30] __sys_sendto+0x39b/0x4f0 [ 499.416606][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 499.423052][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.434963][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 499.441100][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 499.458050][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.464448][ T30] __x64_sys_sendto+0xde/0x100 [ 499.480444][ T30] do_syscall_64+0xf3/0x230 [ 499.491922][ T30] ? clear_bhb_loop+0x35/0x90 [ 499.501772][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.514835][ T30] RIP: 0033:0x7fba3717fe8c [ 499.519403][ T30] RSP: 002b:00007ffddca3bf20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 499.539198][ T30] RAX: ffffffffffffffda RBX: 00007fba37e64620 RCX: 00007fba3717fe8c [ 499.554825][ T30] RDX: 000000000000003c RSI: 00007fba37e64670 RDI: 0000000000000003 [ 499.562862][ T30] RBP: 0000000000000000 R08: 00007ffddca3bf74 R09: 000000000000000c [ 499.581323][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 499.594206][ T30] R13: 0000000000000000 R14: 00007fba37e64670 R15: 0000000000000000 [ 499.609185][ T30] [ 499.612351][ T30] INFO: task syz-executor:7721 blocked for more than 148 seconds. [ 499.629167][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 499.642460][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.659510][ T30] task:syz-executor state:D stack:21728 pid:7721 tgid:7721 ppid:1 flags:0x00000004 [ 499.678500][ T30] Call Trace: [ 499.681834][ T30] [ 499.693189][ T30] __schedule+0x1895/0x4b30 [ 499.702577][ T30] ? __pfx___schedule+0x10/0x10 [ 499.714614][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.720188][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 499.735056][ T30] ? schedule+0x90/0x320 [ 499.739363][ T30] schedule+0x14b/0x320 [ 499.743551][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.762217][ T30] __mutex_lock+0x6a7/0xd70 [ 499.772603][ T30] ? __mutex_lock+0x52a/0xd70 [ 499.783123][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 499.794070][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.804868][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 499.809859][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 499.826693][ T30] ? __lock_acquire+0x1384/0x2050 [ 499.833257][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 499.845108][ T30] netlink_rcv_skb+0x1e3/0x430 [ 499.849968][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 499.865603][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.870975][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.892280][ T30] netlink_unicast+0x7f6/0x990 [ 499.901946][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 499.914209][ T30] ? __virt_addr_valid+0x183/0x530 [ 499.919941][ T30] ? __check_object_size+0x48e/0x900 [ 499.934796][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 499.939657][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.956891][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 499.961909][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.978978][ T30] __sock_sendmsg+0x221/0x270 [ 499.983865][ T30] __sys_sendto+0x39b/0x4f0 [ 499.994935][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 500.000039][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.015137][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 500.021283][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.040335][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.051539][ T30] __x64_sys_sendto+0xde/0x100 [ 500.063388][ T30] do_syscall_64+0xf3/0x230 [ 500.073313][ T30] ? clear_bhb_loop+0x35/0x90 [ 500.083893][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.094678][ T30] RIP: 0033:0x7f7a2ed7fe8c [ 500.099148][ T30] RSP: 002b:00007ffe2e91a0a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 500.126538][ T30] RAX: ffffffffffffffda RBX: 00007f7a2fa64620 RCX: 00007f7a2ed7fe8c [ 500.146887][ T30] RDX: 000000000000002c RSI: 00007f7a2fa64670 RDI: 0000000000000003 [ 500.165151][ T30] RBP: 0000000000000000 R08: 00007ffe2e91a0f4 R09: 000000000000000c [ 500.184440][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 500.193086][ T30] R13: 0000000000000000 R14: 00007f7a2fa64670 R15: 0000000000000000 [ 500.212554][ T30] [ 500.219410][ T30] INFO: task syz-executor:7725 blocked for more than 148 seconds. [ 500.234889][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 500.249795][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.263010][ T30] task:syz-executor state:D stack:21728 pid:7725 tgid:7725 ppid:1 flags:0x00000004 [ 500.284511][ T30] Call Trace: [ 500.293530][ T30] [ 500.304560][ T30] __schedule+0x1895/0x4b30 [ 500.312821][ T30] ? __pfx___schedule+0x10/0x10 [ 500.324692][ T30] ? __pfx_lock_release+0x10/0x10 [ 500.329792][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 500.345101][ T30] ? schedule+0x90/0x320 [ 500.349410][ T30] schedule+0x14b/0x320 [ 500.353647][ T30] schedule_preempt_disabled+0x13/0x30 [ 500.372210][ T30] __mutex_lock+0x6a7/0xd70 [ 500.382696][ T30] ? __mutex_lock+0x52a/0xd70 [ 500.393352][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 500.404852][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 500.409963][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 500.427273][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 500.432456][ T30] ? __lock_acquire+0x1384/0x2050 [ 500.449450][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.461056][ T30] netlink_rcv_skb+0x1e3/0x430 [ 500.471691][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.483422][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.494590][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.499919][ T30] netlink_unicast+0x7f6/0x990 [ 500.514805][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 500.520211][ T30] ? __virt_addr_valid+0x183/0x530 [ 500.537675][ T30] ? __check_object_size+0x48e/0x900 [ 500.543045][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 500.554705][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.560072][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 500.576802][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.582159][ T30] __sock_sendmsg+0x221/0x270 [ 500.599660][ T30] __sys_sendto+0x39b/0x4f0 [ 500.604253][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 500.614724][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.620073][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 500.639517][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.654544][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.664580][ T30] __x64_sys_sendto+0xde/0x100 [ 500.669471][ T30] do_syscall_64+0xf3/0x230 [ 500.674001][ T30] ? clear_bhb_loop+0x35/0x90 [ 500.690678][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.702933][ T30] RIP: 0033:0x7fb99ed7fe8c [ 500.714241][ T30] RSP: 002b:00007ffee656aa40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 500.727714][ T30] RAX: ffffffffffffffda RBX: 00007fb99fa64620 RCX: 00007fb99ed7fe8c [ 500.744150][ T30] RDX: 000000000000006c RSI: 00007fb99fa64670 RDI: 0000000000000003 [ 500.756938][ T30] RBP: 0000000000000000 R08: 00007ffee656aa94 R09: 000000000000000c [ 500.774763][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 500.782811][ T30] R13: 0000000000000000 R14: 00007fb99fa64670 R15: 0000000000000000 [ 500.802711][ T30] [ 500.809629][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 500.824767][ T30] INFO: task syz-executor:7727 blocked for more than 149 seconds. [ 500.832630][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 500.854347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.873468][ T30] task:syz-executor state:D stack:21728 pid:7727 tgid:7727 ppid:1 flags:0x00000004 [ 500.892192][ T30] Call Trace: [ 500.900837][ T30] [ 500.903911][ T30] __schedule+0x1895/0x4b30 [ 500.922915][ T30] ? __pfx___schedule+0x10/0x10 [ 500.931488][ T30] ? __pfx_lock_release+0x10/0x10 [ 500.944756][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 500.950296][ T30] ? schedule+0x90/0x320 [ 500.960888][ T30] schedule+0x14b/0x320 [ 500.973138][ T30] schedule_preempt_disabled+0x13/0x30 [ 500.982784][ T30] __mutex_lock+0x6a7/0xd70 [ 500.994810][ T30] ? __mutex_lock+0x52a/0xd70 [ 500.999557][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 501.015133][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 501.020237][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 501.036921][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 501.042106][ T30] ? __lock_acquire+0x1384/0x2050 [ 501.058830][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 501.064375][ T30] netlink_rcv_skb+0x1e3/0x430 [ 501.074794][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 501.080327][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.098662][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.103943][ T30] netlink_unicast+0x7f6/0x990 [ 501.114843][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 501.120196][ T30] ? __virt_addr_valid+0x183/0x530 [ 501.135678][ T30] ? __check_object_size+0x48e/0x900 [ 501.141033][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 501.159170][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.164540][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 501.182080][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.193687][ T30] __sock_sendmsg+0x221/0x270 [ 501.210215][ T30] __sys_sendto+0x39b/0x4f0 [ 501.220742][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 501.232015][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.244844][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 501.250997][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.268225][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.281549][ T30] __x64_sys_sendto+0xde/0x100 [ 501.291234][ T30] do_syscall_64+0xf3/0x230 [ 501.303323][ T30] ? clear_bhb_loop+0x35/0x90 [ 501.323631][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.334371][ T30] RIP: 0033:0x7f8e46d7fe8c [ 501.345107][ T30] RSP: 002b:00007ffc4936db40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 501.353586][ T30] RAX: ffffffffffffffda RBX: 00007f8e47a64620 RCX: 00007f8e46d7fe8c [ 501.377682][ T30] RDX: 000000000000003c RSI: 00007f8e47a64670 RDI: 0000000000000003 [ 501.395256][ T30] RBP: 0000000000000000 R08: 00007ffc4936db94 R09: 000000000000000c [ 501.403286][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 501.423406][ T30] R13: 0000000000000000 R14: 00007f8e47a64670 R15: 0000000000000000 [ 501.434209][ T30] [ 501.444820][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 501.465250][ T30] INFO: task syz-executor:7771 blocked for more than 150 seconds. [ 501.475466][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 501.482787][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.496950][ T30] task:syz-executor state:D stack:21728 pid:7771 tgid:7771 ppid:1 flags:0x00004006 [ 501.519863][ T30] Call Trace: [ 501.523229][ T30] [ 501.530462][ T30] __schedule+0x1895/0x4b30 [ 501.544971][ T30] ? __pfx___schedule+0x10/0x10 [ 501.549893][ T30] ? __pfx_lock_release+0x10/0x10 [ 501.565123][ T30] ? schedule+0x90/0x320 [ 501.571168][ T30] schedule+0x14b/0x320 [ 501.586767][ T30] schedule_timeout+0xb0/0x310 [ 501.591644][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 501.604757][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.611252][ T30] ? wait_for_completion+0x2fe/0x620 [ 501.625033][ T30] ? wait_for_completion+0x2fe/0x620 [ 501.630389][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.650012][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 501.661243][ T30] ? wait_for_completion+0x2fe/0x620 [ 501.671147][ T30] wait_for_completion+0x355/0x620 [ 501.684554][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 501.692857][ T30] ? __flush_work+0xe7/0xc50 [ 501.704835][ T30] __flush_work+0xa37/0xc50 [ 501.709420][ T30] ? __flush_work+0xe7/0xc50 [ 501.714044][ T30] ? __pfx___flush_work+0x10/0x10 [ 501.731389][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 501.742626][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.754870][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 501.760052][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.778005][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 501.784403][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 501.794262][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.814944][ T30] ? __pfx___might_resched+0x10/0x10 [ 501.820294][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 501.838713][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 501.853013][ T30] ? rcu_is_watching+0x15/0xb0 [ 501.863112][ T30] ? trace_contention_end+0x3c/0x120 [ 501.874842][ T30] ? __mutex_lock+0x2ef/0xd70 [ 501.884776][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 501.890048][ T30] unregister_netdevice_queue+0x303/0x370 [ 501.904691][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 501.911004][ T30] nsim_destroy+0x180/0x5c0 [ 501.928204][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 501.933380][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 501.944691][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 501.950038][ T30] nsim_drv_remove+0x58/0x160 [ 501.968799][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 501.978394][ T30] bus_remove_device+0x34f/0x420 [ 501.983401][ T30] device_del+0x57a/0x9b0 [ 501.998949][ T30] ? __pfx_device_del+0x10/0x10 [ 502.003878][ T30] device_unregister+0x20/0xc0 [ 502.014767][ T30] del_device_store+0x363/0x480 [ 502.019692][ T30] ? __pfx_del_device_store+0x10/0x10 [ 502.044862][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 502.049788][ T30] ? bus_attr_store+0x4f/0xa0 [ 502.054498][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 502.071804][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 502.080754][ T30] vfs_write+0xa6d/0xc90 [ 502.094509][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 502.101937][ T30] ? __pfx_vfs_write+0x10/0x10 [ 502.114877][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 502.120179][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.135058][ T30] ? fdget_pos+0x265/0x320 [ 502.139560][ T30] ksys_write+0x183/0x2b0 [ 502.143929][ T30] ? __pfx_ksys_write+0x10/0x10 [ 502.160161][ T30] ? do_syscall_64+0x100/0x230 [ 502.170860][ T30] ? do_syscall_64+0xb6/0x230 [ 502.181572][ T30] do_syscall_64+0xf3/0x230 [ 502.203079][ T30] ? clear_bhb_loop+0x35/0x90 [ 502.210785][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.225056][ T30] RIP: 0033:0x7f58bef7cadf [ 502.229521][ T30] RSP: 002b:00007ffea0304c40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 502.250468][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f58bef7cadf [ 502.264825][ T30] RDX: 0000000000000001 RSI: 00007ffea0304c90 RDI: 0000000000000005 [ 502.272862][ T30] RBP: 00007f58beff13ae R08: 0000000000000000 R09: 00007ffea0304a97 [ 502.292950][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 502.304833][ T30] R13: 00007ffea0304c90 R14: 00007f58bfc64620 R15: 0000000000000003 [ 502.312889][ T30] [ 502.326584][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 502.345335][ T30] INFO: task syz-executor:7795 blocked for more than 150 seconds. [ 502.353198][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 502.372283][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.394770][ T30] task:syz-executor state:D stack:24128 pid:7795 tgid:7795 ppid:1 flags:0x00000004 [ 502.419348][ T30] Call Trace: [ 502.422702][ T30] [ 502.435188][ T30] __schedule+0x1895/0x4b30 [ 502.439789][ T30] ? __pfx___schedule+0x10/0x10 [ 502.456954][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.462035][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 502.479010][ T30] ? schedule+0x90/0x320 [ 502.483321][ T30] schedule+0x14b/0x320 [ 502.494686][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.500207][ T30] __mutex_lock+0x6a7/0xd70 [ 502.516557][ T30] ? __mutex_lock+0x52a/0xd70 [ 502.521599][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 502.534682][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.539774][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 502.555117][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 502.560290][ T30] ? __lock_acquire+0x1384/0x2050 [ 502.575059][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.580597][ T30] netlink_rcv_skb+0x1e3/0x430 [ 502.601571][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.611057][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.624396][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.630104][ T30] netlink_unicast+0x7f6/0x990 [ 502.646694][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 502.652045][ T30] ? __virt_addr_valid+0x183/0x530 [ 502.664935][ T30] ? __check_object_size+0x48e/0x900 [ 502.670292][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 502.685072][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.690436][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 502.707582][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.713030][ T30] __sock_sendmsg+0x221/0x270 [ 502.724759][ T30] __sys_sendto+0x39b/0x4f0 [ 502.729338][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 502.741148][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.752122][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 502.764691][ T30] ? exc_page_fault+0x590/0x8c0 [ 502.769619][ T30] __x64_sys_sendto+0xde/0x100 [ 502.774418][ T30] do_syscall_64+0xf3/0x230 [ 502.792243][ T30] ? clear_bhb_loop+0x35/0x90 [ 502.802732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.814702][ T30] RIP: 0033:0x7f624d17fe8c [ 502.819172][ T30] RSP: 002b:00007ffc72f4b8d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 502.839163][ T30] RAX: ffffffffffffffda RBX: 00007f624de64620 RCX: 00007f624d17fe8c [ 502.856390][ T30] RDX: 0000000000000028 RSI: 00007f624de64670 RDI: 0000000000000003 [ 502.864509][ T30] RBP: 0000000000000000 R08: 00007ffc72f4b924 R09: 000000000000000c [ 502.884845][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 502.892881][ T30] R13: 0000000000000000 R14: 00007f624de64670 R15: 0000000000000000 [ 502.913848][ T30] [ 502.917409][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 502.939915][ T30] INFO: task syz-executor:7797 blocked for more than 151 seconds. [ 502.954086][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 502.967468][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.984309][ T30] task:syz-executor state:D stack:24128 pid:7797 tgid:7797 ppid:1 flags:0x00000004 [ 503.007560][ T30] Call Trace: [ 503.010899][ T30] [ 503.013855][ T30] __schedule+0x1895/0x4b30 [ 503.029925][ T30] ? __pfx___schedule+0x10/0x10 [ 503.040661][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.051976][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.063945][ T30] ? schedule+0x90/0x320 [ 503.081690][ T30] schedule+0x14b/0x320 [ 503.086521][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.092031][ T30] __mutex_lock+0x6a7/0xd70 [ 503.108851][ T30] ? __mutex_lock+0x52a/0xd70 [ 503.113598][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.130726][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.142600][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.154519][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 503.164522][ T30] ? __lock_acquire+0x1384/0x2050 [ 503.174690][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.180227][ T30] netlink_rcv_skb+0x1e3/0x430 [ 503.196297][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.201865][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.219008][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.224286][ T30] netlink_unicast+0x7f6/0x990 [ 503.244195][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 503.261863][ T30] ? __virt_addr_valid+0x183/0x530 [ 503.272240][ T30] ? __check_object_size+0x48e/0x900 [ 503.284697][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 503.289548][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.305053][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 503.312187][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.324678][ T30] __sock_sendmsg+0x221/0x270 [ 503.329418][ T30] __sys_sendto+0x39b/0x4f0 [ 503.333954][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 503.351718][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.363995][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.376236][ T30] ? exc_page_fault+0x590/0x8c0 [ 503.381164][ T30] __x64_sys_sendto+0xde/0x100 [ 503.397039][ T30] do_syscall_64+0xf3/0x230 [ 503.401605][ T30] ? clear_bhb_loop+0x35/0x90 [ 503.411620][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.424837][ T30] RIP: 0033:0x7f7e61f7fe8c [ 503.429329][ T30] RSP: 002b:00007ffe9e9d4010 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 503.449190][ T30] RAX: ffffffffffffffda RBX: 00007f7e62c64620 RCX: 00007f7e61f7fe8c [ 503.472109][ T30] RDX: 0000000000000028 RSI: 00007f7e62c64670 RDI: 0000000000000003 [ 503.487317][ T30] RBP: 0000000000000000 R08: 00007ffe9e9d4064 R09: 000000000000000c [ 503.503395][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 503.514017][ T30] R13: 0000000000000000 R14: 00007f7e62c64670 R15: 0000000000000000 [ 503.534828][ T30] [ 503.537944][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 503.558274][ T30] INFO: task syz-executor:7801 blocked for more than 152 seconds. [ 503.573142][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 503.585668][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.594407][ T30] task:syz-executor state:D stack:24128 pid:7801 tgid:7801 ppid:1 flags:0x00000004 [ 503.614753][ T30] Call Trace: [ 503.619030][ T30] [ 503.622003][ T30] __schedule+0x1895/0x4b30 [ 503.637918][ T30] ? __pfx___schedule+0x10/0x10 [ 503.642839][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.658613][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.664151][ T30] ? schedule+0x90/0x320 [ 503.682124][ T30] schedule+0x14b/0x320 [ 503.694899][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.700449][ T30] __mutex_lock+0x6a7/0xd70 [ 503.715169][ T30] ? __mutex_lock+0x52a/0xd70 [ 503.733749][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.739427][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.744513][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.761250][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 503.770145][ T30] ? __lock_acquire+0x1384/0x2050 [ 503.783241][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.792514][ T30] netlink_rcv_skb+0x1e3/0x430 [ 503.804683][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.810242][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.827334][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.832602][ T30] netlink_unicast+0x7f6/0x990 [ 503.844764][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 503.850101][ T30] ? __virt_addr_valid+0x183/0x530 [ 503.868901][ T30] ? __check_object_size+0x48e/0x900 [ 503.874308][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 503.884696][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.890045][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 503.905476][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.910820][ T30] __sock_sendmsg+0x221/0x270 [ 503.928476][ T30] __sys_sendto+0x39b/0x4f0 [ 503.933074][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 503.944843][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.950896][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.967872][ T30] ? exc_page_fault+0x590/0x8c0 [ 503.972793][ T30] __x64_sys_sendto+0xde/0x100 [ 503.984750][ T30] do_syscall_64+0xf3/0x230 [ 503.989318][ T30] ? clear_bhb_loop+0x35/0x90 [ 503.994021][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.012207][ T30] RIP: 0033:0x7fbeeb37fe8c [ 504.021944][ T30] RSP: 002b:00007ffc21a29d50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 504.034675][ T30] RAX: ffffffffffffffda RBX: 00007fbeec064620 RCX: 00007fbeeb37fe8c [ 504.042706][ T30] RDX: 0000000000000028 RSI: 00007fbeec064670 RDI: 0000000000000003 [ 504.065150][ T30] RBP: 0000000000000000 R08: 00007ffc21a29da4 R09: 000000000000000c [ 504.073184][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 504.093289][ T30] R13: 0000000000000000 R14: 00007fbeec064670 R15: 0000000000000000 [ 504.104955][ T30] [ 504.108104][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 504.134845][ T30] INFO: task syz-executor:7803 blocked for more than 152 seconds. [ 504.142760][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 504.163266][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.176892][ T30] task:syz-executor state:D stack:24128 pid:7803 tgid:7803 ppid:1 flags:0x00000004 [ 504.195086][ T30] Call Trace: [ 504.198417][ T30] [ 504.201369][ T30] __schedule+0x1895/0x4b30 [ 504.218767][ T30] ? __pfx___schedule+0x10/0x10 [ 504.223702][ T30] ? __pfx_lock_release+0x10/0x10 [ 504.244026][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 504.249932][ T30] ? schedule+0x90/0x320 [ 504.254219][ T30] schedule+0x14b/0x320 [ 504.269988][ T30] schedule_preempt_disabled+0x13/0x30 [ 504.296151][ T30] __mutex_lock+0x6a7/0xd70 [ 504.300729][ T30] ? __mutex_lock+0x52a/0xd70 [ 504.314827][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 504.320006][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 504.333572][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 504.343165][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 504.355131][ T30] ? __lock_acquire+0x1384/0x2050 [ 504.360222][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.376991][ T30] netlink_rcv_skb+0x1e3/0x430 [ 504.381999][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 504.394818][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.400197][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.418586][ T30] netlink_unicast+0x7f6/0x990 [ 504.423427][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 504.434685][ T30] ? __virt_addr_valid+0x183/0x530 [ 504.444328][ T30] ? __check_object_size+0x48e/0x900 [ 504.455704][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 504.460535][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.477148][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 504.482153][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.498404][ T30] __sock_sendmsg+0x221/0x270 [ 504.503149][ T30] __sys_sendto+0x39b/0x4f0 [ 504.514717][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 504.519832][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.535052][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.543731][ T30] ? exc_page_fault+0x590/0x8c0 [ 504.556690][ T30] __x64_sys_sendto+0xde/0x100 [ 504.561519][ T30] do_syscall_64+0xf3/0x230 [ 504.577836][ T30] ? clear_bhb_loop+0x35/0x90 [ 504.582569][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.594688][ T30] RIP: 0033:0x7f017297fe8c [ 504.599152][ T30] RSP: 002b:00007ffd6871b210 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 504.620737][ T30] RAX: ffffffffffffffda RBX: 00007f0173664620 RCX: 00007f017297fe8c [ 504.634821][ T30] RDX: 0000000000000028 RSI: 00007f0173664670 RDI: 0000000000000003 [ 504.649496][ T30] RBP: 0000000000000000 R08: 00007ffd6871b264 R09: 000000000000000c [ 504.663450][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 504.674692][ T30] R13: 0000000000000000 R14: 00007f0173664670 R15: 0000000000000000 [ 504.694788][ T30] [ 504.697871][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 504.714825][ T30] [ 504.714825][ T30] Showing all locks held in the system: [ 504.722601][ T30] 1 lock held by khungtaskd/30: [ 504.739448][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 504.754898][ T30] 4 locks held by kworker/u8:2/35: