last executing test programs: 19.898203771s ago: executing program 1 (id=131): setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (fail_nth: 11) 19.686139888s ago: executing program 4 (id=132): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x81, 0x0}}, 0x10) listen(r1, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32, @ANYBLOB="1433010000000000140012800b79010062726999b885cb0000942c8008000a003001f19fc36f395ecf3be46f155997acfc23e99dbfff4762c945b7c0bf223b0e91366a723575c55b434a2db2499602000000b54edf3bdd3bb0b53e3f6c89f57248de3cb4e2d629f08d2a644f7058ce638200173ad4ef9d7599df5224ad1d073b2b600c6ed7bb5d3e47cd3840a06b8fbfbbf5edd73ce206aeb27cfeb816", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) 19.399139789s ago: executing program 1 (id=134): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000dc08000440000000240500020007000000300001800c0001006269747769736500200002800800034000000004080001400000001404000780080002400008000d0900010073797a30"], 0x104}}, 0x0) bind$inet(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r6, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x68}}}, 0x84) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000180)=""/189, &(0x7f0000000140)=0xffffffffffffff5c) 19.335640649s ago: executing program 0 (id=135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0x0, 0x4, 0x18}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r4, 0x0, 0x21, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x4a, &(0x7f0000000040), 0x4) sendmsg$802154_dgram(r4, &(0x7f0000001100)={&(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000010c0)={&(0x7f0000001080)="882c326ff3c6ab9ddac7accb32c3e4", 0xf}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) 19.149726112s ago: executing program 0 (id=136): r0 = socket(0x1d, 0x2, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 19.148930192s ago: executing program 4 (id=138): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110b86000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r2) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r3, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x48080) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r7, 0x803, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004002) (async, rerun: 64) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xdf}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040002}, 0x20004080) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 19.148587078s ago: executing program 2 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000cbd7000fddbdf25010000000800020004000000070001002c2a0000080008000a01010114000600ff020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) 18.999742688s ago: executing program 2 (id=140): r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20044080) 18.969726577s ago: executing program 0 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@getae={0xe8, 0x1f, 0x2, 0x70bd27, 0x25dfdbff, {{@in6=@empty, 0x4d5, 0x2, 0x89a92d87327f241f}, @in=@local, 0x5, 0x3503}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @algo_comp={0x66, 0x3, {{'deflate\x00'}, 0xf0, "cfe6e3ab6eed1bfde56237f9a9ccadb55b0aa61a008fa80e5a50ccc24dd7"}}, @policy_type={0xa}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x40}}, 0x40000) 18.939971946s ago: executing program 4 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x80805, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000cc0)={0x8, 0x2}) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESOCT], 0x44) listen(r1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r7, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="08002600b40900000800270000000000050018013c0000000800a100000000e5a5af15"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 18.852695564s ago: executing program 2 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x44000) syz_emit_ethernet(0xb6, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @val={@void, {0x8100, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x4, 0x13, "15ab0fbfe6eb85f2c41e4e32cddb50262583ac415a6187d905e7735da64a7bef93375942d236e576aebe713e5cc1a5a5e0c35694f9a5b4161708d82b27d0d43cb0e55062748d9b62b6d8bad0e640722cf98127ca90c9a19d7dda2455b55f477f59046583d568627d7e328eff6bdd0c244b0830f6bb365f0677b45698afece2dcfa2e8b590335103ab34eaf1ab35f4f740b1d28f807edc7145c959a121350e4185a"}}}}, &(0x7f00000001c0)={0x1, 0x3, [0xc4c, 0x777, 0x588, 0xd60]}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="002000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}}, 0x0) 18.760246427s ago: executing program 0 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x400000000000000) 18.716774709s ago: executing program 3 (id=147): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0xfffff905, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="10000000000000000000007fff"], 0x10}}], 0x1, 0x0) 18.624596827s ago: executing program 4 (id=148): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) 18.624054041s ago: executing program 2 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000000b80)=""/154, 0x9a}, {&(0x7f0000000d00)=""/144, 0x90}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000dc0)=""/247, 0xf7}, {&(0x7f0000000ec0)=""/236, 0xec}, {&(0x7f0000000fc0)=""/198, 0xc6}, {&(0x7f00000000c0)=""/17, 0x11}], 0x8, &(0x7f00000010c0)=""/245, 0xf5}, 0x2000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000005, 0x12, r0, 0xf3f08000) splice(r4, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r7, 0x0, 0x80, 0x4) read(r1, &(0x7f0000000240)=""/233, 0xe9) write(r3, 0x0, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) write$cgroup_int(r6, &(0x7f0000000780)=0xff, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180572000000000000000000000000009500000000000000c37ea6201093c9206328eaeaf8a75d0fa1b7f6f65f3291189a0206de9633222588e57233177cf818b010cfaec94d674b517449577b6f9e44e945cf521b33645ee957ec6e3a7536c7f5048b8efe878934cac86b93c261f99298e348893613148d813c4fce83e756bf33dca1591fa6"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r12, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) 18.552123009s ago: executing program 0 (id=150): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000002000)=""/4099, 0x1003, 0x102, &(0x7f0000000080)=@rc={0x1f, @any, 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000007000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe0879c77fff7b241439686cb4db435d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b3943"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) 18.549828934s ago: executing program 3 (id=151): r0 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000440)=0x10) listen(r0, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x7, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}, 0xd, 0xf9}, &(0x7f0000000200)=0x90) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000027ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000280)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x4, 0x1, 0x2e0247ce808b466a, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x20, 0x700, 0x7fffffff, 0x7}}) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 18.485633543s ago: executing program 3 (id=152): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 18.416581169s ago: executing program 1 (id=153): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 18.416342785s ago: executing program 4 (id=154): r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20044080) 18.378525097s ago: executing program 3 (id=155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 18.340395637s ago: executing program 4 (id=156): r0 = socket(0x1d, 0x2, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff}}) (fail_nth: 8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 18.244410895s ago: executing program 1 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 18.239637244s ago: executing program 3 (id=158): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) write$nci(r0, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020006}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xe10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x3, {0x1, 0xde, "f0178dc59425ce54a3259819c669f475842a310fbdcb0b250aba7941ff3a27287cbc971c8baee67aa31c063eb00a76bf66272315056de28c66f281aeebeae783170a82610b2dec796cf4908eebe4f50d75e49d1aa44c5253686cd5542f5808bcd8623e8962689ed012a4756d429a390e512d5dbb4457140757eecceec531ac1ac939011681d21acc724fa335da98ae580db422e646f4c280aa1ddc44480275c99cfbbbfe2dd6ef3550ebe101ff9eab72f4612b4a1c1c81654f3b69837a51e8a1751ae8f18cee95711c8dab1c3fb3d465983ee95a7106c88e3bd0348ee344"}}, 0xe3) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r5, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) 18.204083446s ago: executing program 1 (id=159): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000800)={'veth0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x19, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000012c0), 0x4) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x11611, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb8010cf086dd", 0x0, 0xeebc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(0x3) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) (async) shutdown(r6, 0x2) r8 = socket(0x2c, 0x3, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRESOCT=r7, @ANYRES32=r6, @ANYRES64=r6], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r8}, 0x20) (async, rerun: 64) close(r8) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) 18.048183867s ago: executing program 1 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmmsg(r2, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/12, 0xc}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000001380)=""/75, 0x4b}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/59, 0x3b}], 0x7, &(0x7f0000002080)=""/63, 0x3f}, 0x1}], 0x2, 0x3, &(0x7f0000002140)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) recvmsg(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/166, 0xa6}, {&(0x7f0000002240)=""/87, 0x57}, {&(0x7f00000022c0)=""/243, 0xf3}], 0x3, &(0x7f0000002400)=""/196, 0xc4}, 0x60000002) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 17.828774592s ago: executing program 3 (id=161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000020101040000000000000000020000090800084000000008080003400000000008001a40", @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x40) 17.69029111s ago: executing program 0 (id=162): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000030000000000087907800000000ffffffff2100907812000228250000000000000000000000e0000002e0000000"], 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000200)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) connect$caif(r6, &(0x7f00000000c0)=@dgm={0x25, 0x1}, 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$alg(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x12, 0x117, 0x4, 0xe}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x2404c099}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000766c616e00000000180002800c000200d23700001f000000060001000133000008000500"/52, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 15.577839278s ago: executing program 2 (id=163): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0xfffff905, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="10000000000000002000000000"], 0x10}}], 0x1, 0x0) 15.488891814s ago: executing program 2 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r1, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) (fail_nth: 8) 3.006534612s ago: executing program 32 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmmsg(r2, &(0x7f00000020c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/12, 0xc}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000001380)=""/75, 0x4b}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000014c0)=""/172, 0xac}, {&(0x7f0000001580)=""/59, 0x3b}], 0x7, &(0x7f0000002080)=""/63, 0x3f}, 0x1}], 0x2, 0x3, &(0x7f0000002140)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) recvmsg(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/166, 0xa6}, {&(0x7f0000002240)=""/87, 0x57}, {&(0x7f00000022c0)=""/243, 0xf3}], 0x3, &(0x7f0000002400)=""/196, 0xc4}, 0x60000002) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.968955789s ago: executing program 33 (id=156): r0 = socket(0x1d, 0x2, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff}}) (fail_nth: 8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.934504543s ago: executing program 34 (id=162): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000030000000000087907800000000ffffffff2100907812000228250000000000000000000000e0000002e0000000"], 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000200)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) connect$caif(r6, &(0x7f00000000c0)=@dgm={0x25, 0x1}, 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$alg(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x12, 0x117, 0x4, 0xe}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x2404c099}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000766c616e00000000180002800c000200d23700001f000000060001000133000008000500"/52, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.886260299s ago: executing program 35 (id=161): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000020101040000000000000000020000090800084000000008080003400000000008001a40", @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x40) 0s ago: executing program 36 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r1, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) (fail_nth: 8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 73.468906][ T5840] cgroup: Unknown subsys name 'net' [ 73.622539][ T5840] cgroup: Unknown subsys name 'cpuset' [ 73.631194][ T5840] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.078325][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.073526][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.075935][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.089543][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.089802][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.098288][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.107160][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.113463][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.127123][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.133084][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.134801][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.142431][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.157831][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.158809][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.172864][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.173489][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.188075][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.199809][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.207066][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.211297][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.215899][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.229026][ T5173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.237189][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.239616][ T5173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.246019][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.252157][ T5173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.832020][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 79.978054][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 80.126760][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 80.138875][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 80.237288][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.245035][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.255687][ T5852] bridge_slave_0: entered allmulticast mode [ 80.264460][ T5852] bridge_slave_0: entered promiscuous mode [ 80.283455][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.290789][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.298102][ T5852] bridge_slave_1: entered allmulticast mode [ 80.305110][ T5852] bridge_slave_1: entered promiscuous mode [ 80.334440][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.341774][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.349457][ T5851] bridge_slave_0: entered allmulticast mode [ 80.357197][ T5851] bridge_slave_0: entered promiscuous mode [ 80.409510][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.416964][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.424123][ T5851] bridge_slave_1: entered allmulticast mode [ 80.433290][ T5851] bridge_slave_1: entered promiscuous mode [ 80.466242][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 80.480565][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.523434][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.542436][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.596752][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.654606][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.661870][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.669569][ T5864] bridge_slave_0: entered allmulticast mode [ 80.677928][ T5864] bridge_slave_0: entered promiscuous mode [ 80.695772][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.703061][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.710486][ T5850] bridge_slave_0: entered allmulticast mode [ 80.718814][ T5850] bridge_slave_0: entered promiscuous mode [ 80.735098][ T5852] team0: Port device team_slave_0 added [ 80.744254][ T5852] team0: Port device team_slave_1 added [ 80.751209][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.758879][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.766103][ T5864] bridge_slave_1: entered allmulticast mode [ 80.773120][ T5864] bridge_slave_1: entered promiscuous mode [ 80.791481][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.798894][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.806249][ T5850] bridge_slave_1: entered allmulticast mode [ 80.813213][ T5850] bridge_slave_1: entered promiscuous mode [ 80.856563][ T5851] team0: Port device team_slave_0 added [ 80.930099][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.942316][ T5851] team0: Port device team_slave_1 added [ 80.965165][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.985972][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.993724][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.019756][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.033949][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.069303][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.076389][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.102970][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.116929][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.152127][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.159447][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.185656][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.215440][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.222716][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.248957][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.272011][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.279564][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.286950][ T5858] bridge_slave_0: entered allmulticast mode [ 81.294024][ T5858] bridge_slave_0: entered promiscuous mode [ 81.302633][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.310282][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.310293][ T5866] Bluetooth: hci1: command tx timeout [ 81.317523][ T5173] Bluetooth: hci4: command tx timeout [ 81.323146][ T5866] Bluetooth: hci0: command tx timeout [ 81.328519][ T51] Bluetooth: hci3: command tx timeout [ 81.333724][ T5863] Bluetooth: hci2: command tx timeout [ 81.340241][ T5858] bridge_slave_1: entered allmulticast mode [ 81.353158][ T5858] bridge_slave_1: entered promiscuous mode [ 81.362800][ T5864] team0: Port device team_slave_0 added [ 81.372624][ T5864] team0: Port device team_slave_1 added [ 81.389207][ T5850] team0: Port device team_slave_0 added [ 81.398381][ T5850] team0: Port device team_slave_1 added [ 81.476170][ T5852] hsr_slave_0: entered promiscuous mode [ 81.482869][ T5852] hsr_slave_1: entered promiscuous mode [ 81.505861][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.528882][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.535843][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.562274][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.586037][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.593320][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.619351][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.633507][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.661871][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.669170][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.695480][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.719104][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.726998][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.753246][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.877418][ T5851] hsr_slave_0: entered promiscuous mode [ 81.884190][ T5851] hsr_slave_1: entered promiscuous mode [ 81.891690][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.899542][ T5851] Cannot create hsr debugfs directory [ 81.965309][ T5858] team0: Port device team_slave_0 added [ 82.024566][ T5864] hsr_slave_0: entered promiscuous mode [ 82.032947][ T5864] hsr_slave_1: entered promiscuous mode [ 82.039857][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.047808][ T5864] Cannot create hsr debugfs directory [ 82.068233][ T5858] team0: Port device team_slave_1 added [ 82.180418][ T5850] hsr_slave_0: entered promiscuous mode [ 82.187503][ T5850] hsr_slave_1: entered promiscuous mode [ 82.193535][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.201170][ T5850] Cannot create hsr debugfs directory [ 82.214846][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.221945][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.248249][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.305021][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.312073][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.338517][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.539999][ T5858] hsr_slave_0: entered promiscuous mode [ 82.546457][ T5858] hsr_slave_1: entered promiscuous mode [ 82.552523][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.560167][ T5858] Cannot create hsr debugfs directory [ 82.852929][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.865565][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.885621][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.903099][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.996312][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.012695][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.031696][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.042630][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.104743][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.120708][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.131811][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.141996][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.267260][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.278068][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.293926][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.327597][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.386570][ T5863] Bluetooth: hci0: command tx timeout [ 83.392004][ T5863] Bluetooth: hci4: command tx timeout [ 83.396279][ T5857] Bluetooth: hci2: command tx timeout [ 83.397901][ T5866] Bluetooth: hci3: command tx timeout [ 83.402734][ T5857] Bluetooth: hci1: command tx timeout [ 83.450392][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.470520][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.478688][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.489100][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.505683][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.539240][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.569911][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.601284][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.615268][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.622598][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.635597][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.642716][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.682875][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.690014][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.700421][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.707596][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.853899][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.870935][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.963417][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.978456][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.000099][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.007306][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.034213][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.041348][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.072189][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.091646][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.098860][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.140832][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.148059][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.199349][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.258337][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.265441][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.291797][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.299009][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.385042][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.549955][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.633319][ T5852] veth0_vlan: entered promiscuous mode [ 84.654620][ T5852] veth1_vlan: entered promiscuous mode [ 84.812095][ T5852] veth0_macvtap: entered promiscuous mode [ 84.840763][ T5851] veth0_vlan: entered promiscuous mode [ 84.860624][ T5852] veth1_macvtap: entered promiscuous mode [ 84.883836][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.924592][ T5851] veth1_vlan: entered promiscuous mode [ 84.963253][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.996618][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.024968][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.034127][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.043816][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.052746][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.084046][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.100160][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.158412][ T5851] veth0_macvtap: entered promiscuous mode [ 85.191572][ T5851] veth1_macvtap: entered promiscuous mode [ 85.254935][ T5850] veth0_vlan: entered promiscuous mode [ 85.318767][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.331319][ T5864] veth0_vlan: entered promiscuous mode [ 85.362771][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.382232][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.411024][ T5864] veth1_vlan: entered promiscuous mode [ 85.422734][ T5850] veth1_vlan: entered promiscuous mode [ 85.442591][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.465772][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.475770][ T5857] Bluetooth: hci1: command tx timeout [ 85.481338][ T51] Bluetooth: hci3: command tx timeout [ 85.482252][ T5863] Bluetooth: hci2: command tx timeout [ 85.487180][ T51] Bluetooth: hci0: command tx timeout [ 85.492599][ T5866] Bluetooth: hci4: command tx timeout [ 85.498201][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512535][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.521593][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.556000][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.582004][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.604790][ T5864] veth0_macvtap: entered promiscuous mode [ 85.619244][ T5864] veth1_macvtap: entered promiscuous mode [ 85.699607][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.708198][ T5850] veth0_macvtap: entered promiscuous mode [ 85.745706][ T5850] veth1_macvtap: entered promiscuous mode [ 85.757463][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.757511][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.777486][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.815975][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.884317][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.893346][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.902280][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.911165][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.937153][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.959896][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.974854][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.984244][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.001488][ T5858] veth0_vlan: entered promiscuous mode [ 86.044346][ T5858] veth1_vlan: entered promiscuous mode [ 86.053568][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.075056][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.087947][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.097117][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.142981][ T5980] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 86.235685][ T5858] veth0_macvtap: entered promiscuous mode [ 86.284697][ T5858] veth1_macvtap: entered promiscuous mode [ 86.361169][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.374182][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.388447][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.395121][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.410332][ T5985] FAULT_INJECTION: forcing a failure. [ 86.410332][ T5985] name failslab, interval 1, probability 0, space 0, times 1 [ 86.422465][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.433785][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.1.7 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 86.433808][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.433825][ T5985] Call Trace: [ 86.433832][ T5985] [ 86.433840][ T5985] dump_stack_lvl+0x189/0x250 [ 86.433869][ T5985] ? __pfx____ratelimit+0x10/0x10 [ 86.433895][ T5985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.433915][ T5985] ? __pfx__printk+0x10/0x10 [ 86.433940][ T5985] ? __pfx___might_resched+0x10/0x10 [ 86.433960][ T5985] ? fs_reclaim_acquire+0x7d/0x100 [ 86.433988][ T5985] should_fail_ex+0x414/0x560 [ 86.434018][ T5985] should_failslab+0xa8/0x100 [ 86.434042][ T5985] __kmalloc_noprof+0xcb/0x4f0 [ 86.434061][ T5985] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 86.434092][ T5985] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 86.434125][ T5985] genl_family_rcv_msg_doit+0xb8/0x300 [ 86.434157][ T5985] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 86.434183][ T5985] ? rcu_is_watching+0x15/0xb0 [ 86.434206][ T5985] ? apparmor_capable+0x137/0x1b0 [ 86.434228][ T5985] ? bpf_lsm_capable+0x9/0x20 [ 86.434246][ T5985] ? security_capable+0x7e/0x2e0 [ 86.434277][ T5985] genl_rcv_msg+0x60e/0x790 [ 86.434308][ T5985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.434330][ T5985] ? __pfx_nfc_genl_start_poll+0x10/0x10 [ 86.434368][ T5985] netlink_rcv_skb+0x205/0x470 [ 86.434389][ T5985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.434414][ T5985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.434452][ T5985] ? down_read+0x1ad/0x2e0 [ 86.434474][ T5985] genl_rcv+0x28/0x40 [ 86.434495][ T5985] netlink_unicast+0x759/0x8e0 [ 86.434526][ T5985] netlink_sendmsg+0x805/0xb30 [ 86.434557][ T5985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.434579][ T5985] ? aa_sock_msg_perm+0x94/0x160 [ 86.434601][ T5985] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 86.434623][ T5985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.434650][ T5985] __sock_sendmsg+0x21c/0x270 [ 86.434670][ T5985] ____sys_sendmsg+0x505/0x830 [ 86.434696][ T5985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.434727][ T5985] ? import_iovec+0x74/0xa0 [ 86.434751][ T5985] ___sys_sendmsg+0x21f/0x2a0 [ 86.434775][ T5985] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.434835][ T5985] ? __fget_files+0x2a/0x420 [ 86.434855][ T5985] ? __fget_files+0x3a0/0x420 [ 86.434887][ T5985] __x64_sys_sendmsg+0x19b/0x260 [ 86.434911][ T5985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 86.434942][ T5985] ? __pfx_ksys_write+0x10/0x10 [ 86.434959][ T5985] ? rcu_is_watching+0x15/0xb0 [ 86.434984][ T5985] ? do_syscall_64+0xbe/0x3b0 [ 86.435006][ T5985] do_syscall_64+0xfa/0x3b0 [ 86.435021][ T5985] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.435045][ T5985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.435062][ T5985] ? clear_bhb_loop+0x60/0xb0 [ 86.435081][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.435096][ T5985] RIP: 0033:0x7f5355b8e929 [ 86.435117][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.435130][ T5985] RSP: 002b:00007f53569ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.435149][ T5985] RAX: ffffffffffffffda RBX: 00007f5355db5fa0 RCX: 00007f5355b8e929 [ 86.435162][ T5985] RDX: 0000000000000840 RSI: 0000200000000280 RDI: 0000000000000004 [ 86.435173][ T5985] RBP: 00007f53569ac090 R08: 0000000000000000 R09: 0000000000000000 [ 86.435183][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.435193][ T5985] R13: 0000000000000000 R14: 00007f5355db5fa0 R15: 00007ffcfd7ea9a8 [ 86.435222][ T5985] [ 86.457545][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.811204][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.819435][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.824375][ T24] cfg80211: failed to load regulatory.db [ 86.869085][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.878974][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.890944][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.910292][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.015949][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.040085][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.072719][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.077632][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.116097][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.132685][ T5999] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 87.158212][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.167026][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.253520][ T5999] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 87.264862][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.306982][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.329959][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.369435][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.385917][ T5999] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11'. [ 87.413070][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.433255][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.454243][ T6002] Bluetooth: MGMT ver 1.23 [ 87.550203][ T5866] Bluetooth: hci0: command tx timeout [ 87.550257][ T51] Bluetooth: hci1: command tx timeout [ 87.555634][ T5866] Bluetooth: hci4: command tx timeout [ 87.555666][ T5866] Bluetooth: hci2: command tx timeout [ 87.561307][ T5857] Bluetooth: hci3: command tx timeout [ 88.122830][ T6028] FAULT_INJECTION: forcing a failure. [ 88.122830][ T6028] name failslab, interval 1, probability 0, space 0, times 0 [ 88.161562][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.4.17 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 88.161588][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.161599][ T6028] Call Trace: [ 88.161606][ T6028] [ 88.161614][ T6028] dump_stack_lvl+0x189/0x250 [ 88.161639][ T6028] ? __pfx____ratelimit+0x10/0x10 [ 88.161664][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.161685][ T6028] ? __pfx__printk+0x10/0x10 [ 88.161713][ T6028] ? __pfx___might_resched+0x10/0x10 [ 88.161733][ T6028] ? fs_reclaim_acquire+0x7d/0x100 [ 88.161767][ T6028] should_fail_ex+0x414/0x560 [ 88.161796][ T6028] should_failslab+0xa8/0x100 [ 88.161821][ T6028] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 88.161842][ T6028] ? __alloc_skb+0x112/0x2d0 [ 88.161866][ T6028] __alloc_skb+0x112/0x2d0 [ 88.161890][ T6028] netlink_ack+0x146/0xa50 [ 88.161908][ T6028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.161950][ T6028] netlink_rcv_skb+0x28c/0x470 [ 88.161971][ T6028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.161996][ T6028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.162031][ T6028] ? down_read+0x1ad/0x2e0 [ 88.162051][ T6028] genl_rcv+0x28/0x40 [ 88.162073][ T6028] netlink_unicast+0x759/0x8e0 [ 88.162102][ T6028] netlink_sendmsg+0x805/0xb30 [ 88.162132][ T6028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.162157][ T6028] ? aa_sock_msg_perm+0x94/0x160 [ 88.162183][ T6028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.162207][ T6028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.162228][ T6028] __sock_sendmsg+0x21c/0x270 [ 88.162249][ T6028] ____sys_sendmsg+0x505/0x830 [ 88.162277][ T6028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.162308][ T6028] ? import_iovec+0x74/0xa0 [ 88.162331][ T6028] ___sys_sendmsg+0x21f/0x2a0 [ 88.162354][ T6028] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.162415][ T6028] ? __fget_files+0x2a/0x420 [ 88.162435][ T6028] ? __fget_files+0x3a0/0x420 [ 88.162466][ T6028] __x64_sys_sendmsg+0x19b/0x260 [ 88.162490][ T6028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.162517][ T6028] ? __pfx_ksys_write+0x10/0x10 [ 88.162534][ T6028] ? rcu_is_watching+0x15/0xb0 [ 88.162558][ T6028] ? do_syscall_64+0xbe/0x3b0 [ 88.162579][ T6028] do_syscall_64+0xfa/0x3b0 [ 88.162595][ T6028] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.162618][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.162635][ T6028] ? clear_bhb_loop+0x60/0xb0 [ 88.162657][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.162673][ T6028] RIP: 0033:0x7f399d18e929 [ 88.162689][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.162702][ T6028] RSP: 002b:00007f399aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.162721][ T6028] RAX: ffffffffffffffda RBX: 00007f399d3b5fa0 RCX: 00007f399d18e929 [ 88.162733][ T6028] RDX: 0000000000000840 RSI: 0000200000000280 RDI: 0000000000000004 [ 88.162744][ T6028] RBP: 00007f399aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.162761][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.162771][ T6028] R13: 0000000000000000 R14: 00007f399d3b5fa0 R15: 00007ffc18fc09c8 [ 88.162800][ T6028] [ 88.604738][ T6032] FAULT_INJECTION: forcing a failure. [ 88.604738][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.710033][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.1.18 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 88.710056][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.710066][ T6032] Call Trace: [ 88.710072][ T6032] [ 88.710079][ T6032] dump_stack_lvl+0x189/0x250 [ 88.710104][ T6032] ? __pfx____ratelimit+0x10/0x10 [ 88.710128][ T6032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.710146][ T6032] ? __pfx__printk+0x10/0x10 [ 88.710167][ T6032] ? __might_fault+0xb0/0x130 [ 88.710195][ T6032] should_fail_ex+0x414/0x560 [ 88.710222][ T6032] _copy_from_user+0x2d/0xb0 [ 88.710243][ T6032] sock_do_ioctl+0x182/0x300 [ 88.710268][ T6032] ? __pfx_sock_do_ioctl+0x10/0x10 [ 88.710289][ T6032] ? __lock_acquire+0xab9/0xd20 [ 88.710323][ T6032] sock_ioctl+0x576/0x790 [ 88.710348][ T6032] ? __pfx_sock_ioctl+0x10/0x10 [ 88.710371][ T6032] ? __fget_files+0x2a/0x420 [ 88.710391][ T6032] ? __fget_files+0x3a0/0x420 [ 88.710409][ T6032] ? __fget_files+0x2a/0x420 [ 88.710443][ T6032] ? bpf_lsm_file_ioctl+0x9/0x20 [ 88.710462][ T6032] ? __pfx_sock_ioctl+0x10/0x10 [ 88.710485][ T6032] __se_sys_ioctl+0xfc/0x170 [ 88.710505][ T6032] do_syscall_64+0xfa/0x3b0 [ 88.710521][ T6032] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.710545][ T6032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.710567][ T6032] ? clear_bhb_loop+0x60/0xb0 [ 88.710587][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.710603][ T6032] RIP: 0033:0x7f5355b8e929 [ 88.710620][ T6032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.710634][ T6032] RSP: 002b:00007f53569ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.710652][ T6032] RAX: ffffffffffffffda RBX: 00007f5355db5fa0 RCX: 00007f5355b8e929 [ 88.710663][ T6032] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 88.710673][ T6032] RBP: 00007f53569ac090 R08: 0000000000000000 R09: 0000000000000000 [ 88.710684][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.710694][ T6032] R13: 0000000000000000 R14: 00007f5355db5fa0 R15: 00007ffcfd7ea9a8 [ 88.710723][ T6032] [ 89.126973][ T6035] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 89.167283][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.224484][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.243220][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.309431][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.403901][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 89.415375][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 89.486844][ T6059] netlink: 'syz.4.28': attribute type 4 has an invalid length. [ 90.097739][ T6087] : renamed from veth0_vlan (while UP) [ 90.101495][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 90.129808][ T6087] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 90.251586][ T6097] FAULT_INJECTION: forcing a failure. [ 90.251586][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.286215][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.3.41 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 90.286241][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.286251][ T6097] Call Trace: [ 90.286258][ T6097] [ 90.286265][ T6097] dump_stack_lvl+0x189/0x250 [ 90.286291][ T6097] ? __pfx____ratelimit+0x10/0x10 [ 90.286314][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.286330][ T6097] ? __pfx__printk+0x10/0x10 [ 90.286372][ T6097] should_fail_ex+0x414/0x560 [ 90.286395][ T6097] _copy_to_user+0x31/0xb0 [ 90.286413][ T6097] simple_read_from_buffer+0xe1/0x170 [ 90.286434][ T6097] proc_fail_nth_read+0x1df/0x250 [ 90.286456][ T6097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.286476][ T6097] ? rw_verify_area+0x258/0x650 [ 90.286493][ T6097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.286513][ T6097] vfs_read+0x200/0x980 [ 90.286531][ T6097] ? __pfx___mutex_lock+0x10/0x10 [ 90.286546][ T6097] ? __pfx_vfs_read+0x10/0x10 [ 90.286562][ T6097] ? __fget_files+0x2a/0x420 [ 90.286582][ T6097] ? __fget_files+0x3a0/0x420 [ 90.286599][ T6097] ? __fget_files+0x2a/0x420 [ 90.286622][ T6097] ksys_read+0x145/0x250 [ 90.286639][ T6097] ? __pfx_ksys_read+0x10/0x10 [ 90.286652][ T6097] ? rcu_is_watching+0x15/0xb0 [ 90.286671][ T6097] ? do_syscall_64+0xbe/0x3b0 [ 90.286688][ T6097] do_syscall_64+0xfa/0x3b0 [ 90.286699][ T6097] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.286719][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.286731][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 90.286747][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.286759][ T6097] RIP: 0033:0x7f5c2a18d33c [ 90.286772][ T6097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.286783][ T6097] RSP: 002b:00007f5c2b028030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.286798][ T6097] RAX: ffffffffffffffda RBX: 00007f5c2a3b5fa0 RCX: 00007f5c2a18d33c [ 90.286807][ T6097] RDX: 000000000000000f RSI: 00007f5c2b0280a0 RDI: 0000000000000005 [ 90.286815][ T6097] RBP: 00007f5c2b028090 R08: 0000000000000000 R09: 0000000000000000 [ 90.286823][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.286831][ T6097] R13: 0000000000000000 R14: 00007f5c2a3b5fa0 R15: 00007ffe6886b9f8 [ 90.286853][ T6097] [ 90.797015][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.235863][ T6127] Zero length message leads to an empty skb [ 91.258893][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.296783][ T6135] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 91.327658][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.366397][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.394280][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.426948][ T6138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.487840][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.494864][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.571911][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.590963][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.601033][ T6133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 91.622770][ T6145] __nla_validate_parse: 1 callbacks suppressed [ 91.622786][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 91.723769][ T6140] bond1: entered promiscuous mode [ 91.746587][ T6140] bond1: entered allmulticast mode [ 91.752275][ T6140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.956311][ T6140] bond1 (unregistering): Released all slaves [ 92.174562][ T6166] set match dimension is over the limit! [ 92.269132][ T6168] netlink: 96 bytes leftover after parsing attributes in process `syz.4.68'. [ 92.283878][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.688767][ T6194] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20000 [ 92.706902][ T6193] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 92.744468][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.761335][ T6193] team0: Port device bond0 added [ 92.850541][ T6200] net_ratelimit: 24 callbacks suppressed [ 92.850562][ T6200] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 93.088284][ T6210] FAULT_INJECTION: forcing a failure. [ 93.088284][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 93.129888][ T6210] CPU: 1 UID: 0 PID: 6210 Comm: syz.4.84 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 93.129915][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.129925][ T6210] Call Trace: [ 93.129932][ T6210] [ 93.129941][ T6210] dump_stack_lvl+0x189/0x250 [ 93.129967][ T6210] ? __pfx____ratelimit+0x10/0x10 [ 93.129991][ T6210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.130011][ T6210] ? __pfx__printk+0x10/0x10 [ 93.130091][ T6210] ? ref_tracker_alloc+0x318/0x460 [ 93.130119][ T6210] should_fail_ex+0x414/0x560 [ 93.130148][ T6210] should_failslab+0xa8/0x100 [ 93.130171][ T6210] kmem_cache_alloc_noprof+0x73/0x3c0 [ 93.130190][ T6210] ? skb_clone+0x212/0x3a0 [ 93.130218][ T6210] skb_clone+0x212/0x3a0 [ 93.130244][ T6210] __netlink_deliver_tap+0x404/0x850 [ 93.130279][ T6210] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.130300][ T6210] netlink_deliver_tap+0x19c/0x1b0 [ 93.130322][ T6210] netlink_unicast+0x730/0x8e0 [ 93.130354][ T6210] netlink_sendmsg+0x805/0xb30 [ 93.130385][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.130409][ T6210] ? aa_sock_msg_perm+0x94/0x160 [ 93.130435][ T6210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.130459][ T6210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.130481][ T6210] __sock_sendmsg+0x21c/0x270 [ 93.130502][ T6210] ____sys_sendmsg+0x505/0x830 [ 93.130530][ T6210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.130566][ T6210] ? import_iovec+0x74/0xa0 [ 93.130591][ T6210] ___sys_sendmsg+0x21f/0x2a0 [ 93.130615][ T6210] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.130682][ T6210] ? __fget_files+0x2a/0x420 [ 93.130703][ T6210] ? __fget_files+0x3a0/0x420 [ 93.130737][ T6210] __x64_sys_sendmsg+0x19b/0x260 [ 93.130762][ T6210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.130794][ T6210] ? __pfx_ksys_write+0x10/0x10 [ 93.130811][ T6210] ? rcu_is_watching+0x15/0xb0 [ 93.130836][ T6210] ? do_syscall_64+0xbe/0x3b0 [ 93.130855][ T6210] do_syscall_64+0xfa/0x3b0 [ 93.130869][ T6210] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.130891][ T6210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.130907][ T6210] ? clear_bhb_loop+0x60/0xb0 [ 93.130928][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.130944][ T6210] RIP: 0033:0x7f399d18e929 [ 93.130961][ T6210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.130974][ T6210] RSP: 002b:00007f399aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.130993][ T6210] RAX: ffffffffffffffda RBX: 00007f399d3b5fa0 RCX: 00007f399d18e929 [ 93.131006][ T6210] RDX: 0000000000008894 RSI: 0000200000000180 RDI: 0000000000000003 [ 93.131016][ T6210] RBP: 00007f399aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.131026][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.131043][ T6210] R13: 0000000000000000 R14: 00007f399d3b5fa0 R15: 00007ffc18fc09c8 [ 93.131072][ T6210] [ 93.708593][ T6225] block nbd4: not configured, cannot reconfigure [ 94.085409][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 94.104127][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 94.105768][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.121357][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.221168][ T6239] bridge_slave_0: left allmulticast mode [ 94.229523][ T6239] bridge_slave_0: left promiscuous mode [ 94.235503][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.259564][ T6239] bridge_slave_1: left allmulticast mode [ 94.265464][ T6239] bridge_slave_1: left promiscuous mode [ 94.279315][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.312178][ T6239] bond0: (slave bond_slave_0): Releasing backup interface [ 94.332548][ T6239] bond0: (slave bond_slave_1): Releasing backup interface [ 94.353162][ T6239] team0: Port device team_slave_0 removed [ 94.373984][ T6239] team0: Port device team_slave_1 removed [ 94.395827][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.408885][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.422024][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.444994][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.580107][ T6239] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.606261][ T6239] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.615191][ T6239] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.638665][ T6239] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.003622][ T6279] netlink: 'syz.0.102': attribute type 4 has an invalid length. [ 95.050641][ T6282] openvswitch: netlink: Missing key (keys=40, expected=100) [ 95.507316][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 95.535284][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 95.840001][ T6325] syz.2.111 uses obsolete (PF_INET,SOCK_PACKET) [ 95.989097][ T6331] syz.1.113 uses old SIOCAX25GETINFO [ 96.028763][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 96.085155][ T6331] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.118990][ T6331] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.130354][ T6337] netlink: 'syz.4.115': attribute type 4 has an invalid length. [ 96.141959][ T6331] gretap1: entered promiscuous mode [ 96.180533][ T6331] gretap1: entered allmulticast mode [ 96.296519][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 96.411996][ T6352] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.120'. [ 96.448706][ T6350] xt_CT: No such helper "snmp" [ 96.968970][ T6383] FAULT_INJECTION: forcing a failure. [ 96.968970][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.997298][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.1.131 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 96.997325][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.997336][ T6383] Call Trace: [ 96.997343][ T6383] [ 96.997351][ T6383] dump_stack_lvl+0x189/0x250 [ 96.997378][ T6383] ? __pfx____ratelimit+0x10/0x10 [ 96.997404][ T6383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.997424][ T6383] ? __pfx__printk+0x10/0x10 [ 96.997459][ T6383] should_fail_ex+0x414/0x560 [ 96.997489][ T6383] _copy_to_user+0x31/0xb0 [ 96.997512][ T6383] simple_read_from_buffer+0xe1/0x170 [ 96.997538][ T6383] proc_fail_nth_read+0x1df/0x250 [ 96.997565][ T6383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.997592][ T6383] ? rw_verify_area+0x258/0x650 [ 96.997610][ T6383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.997635][ T6383] vfs_read+0x200/0x980 [ 96.997660][ T6383] ? __pfx___mutex_lock+0x10/0x10 [ 96.997678][ T6383] ? __pfx_vfs_read+0x10/0x10 [ 96.997708][ T6383] ? __fget_files+0x2a/0x420 [ 96.997733][ T6383] ? __fget_files+0x3a0/0x420 [ 96.997752][ T6383] ? __fget_files+0x2a/0x420 [ 96.997781][ T6383] ksys_read+0x145/0x250 [ 96.997802][ T6383] ? __pfx_ksys_read+0x10/0x10 [ 96.997818][ T6383] ? rcu_is_watching+0x15/0xb0 [ 96.997844][ T6383] ? do_syscall_64+0xbe/0x3b0 [ 96.997865][ T6383] do_syscall_64+0xfa/0x3b0 [ 96.997881][ T6383] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.997903][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.997920][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 96.997941][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.997957][ T6383] RIP: 0033:0x7f5355b8d33c [ 96.997974][ T6383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.997987][ T6383] RSP: 002b:00007f53569ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.998005][ T6383] RAX: ffffffffffffffda RBX: 00007f5355db5fa0 RCX: 00007f5355b8d33c [ 96.998017][ T6383] RDX: 000000000000000f RSI: 00007f53569ac0a0 RDI: 0000000000000006 [ 96.998027][ T6383] RBP: 00007f53569ac090 R08: 0000000000000000 R09: 0000000000000000 [ 96.998038][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.998048][ T6383] R13: 0000000000000000 R14: 00007f5355db5fa0 R15: 00007ffcfd7ea9a8 [ 96.998077][ T6383] [ 97.240549][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 97.890416][ T6428] netlink: 51 bytes leftover after parsing attributes in process `syz.3.141'. [ 97.982228][ T6435] netlink: 'syz.4.143': attribute type 10 has an invalid length. [ 98.015995][ T6435] team0: Device veth1_macvtap failed to register rx_handler [ 98.373532][ T6455] netlink: 'syz.0.150': attribute type 4 has an invalid length. [ 98.403826][ T6456] netlink: 'syz.0.150': attribute type 4 has an invalid length. [ 98.463041][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'. [ 98.547926][ T6468] FAULT_INJECTION: forcing a failure. [ 98.547926][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 98.563769][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.4.156 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 98.563793][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.563803][ T6468] Call Trace: [ 98.563810][ T6468] [ 98.563818][ T6468] dump_stack_lvl+0x189/0x250 [ 98.563841][ T6468] ? __pfx____ratelimit+0x10/0x10 [ 98.563867][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.563886][ T6468] ? __pfx__printk+0x10/0x10 [ 98.563911][ T6468] ? __pfx___might_resched+0x10/0x10 [ 98.563930][ T6468] ? fs_reclaim_acquire+0x7d/0x100 [ 98.563958][ T6468] should_fail_ex+0x414/0x560 [ 98.563986][ T6468] should_failslab+0xa8/0x100 [ 98.564007][ T6468] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 98.564027][ T6468] ? page_pool_create_percpu+0x76/0xbe0 [ 98.564055][ T6468] page_pool_create_percpu+0x76/0xbe0 [ 98.564085][ T6468] __veth_napi_enable_range+0x16c/0x6f0 [ 98.564115][ T6468] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 98.564146][ T6468] ? netif_napi_set_irq_locked+0x20b/0x720 [ 98.564167][ T6468] veth_napi_enable_range+0xff/0x200 [ 98.564191][ T6468] veth_set_features+0x1c8/0x2a0 [ 98.564218][ T6468] __netdev_update_features+0xa43/0x1a20 [ 98.564257][ T6468] ? __pfx___netdev_update_features+0x10/0x10 [ 98.564279][ T6468] ? __lock_acquire+0xab9/0xd20 [ 98.564307][ T6468] ? __might_fault+0xb0/0x130 [ 98.564349][ T6468] ethtool_set_one_feature+0x2b4/0x300 [ 98.564365][ T6468] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 98.564381][ T6468] ? bpf_lsm_capable+0x9/0x20 [ 98.564398][ T6468] ? security_capable+0x7e/0x2e0 [ 98.564429][ T6468] dev_ethtool+0x1077/0x1990 [ 98.564464][ T6468] ? __pfx_dev_ethtool+0x10/0x10 [ 98.564504][ T6468] ? dev_load+0x21/0x1f0 [ 98.564523][ T6468] dev_ioctl+0x392/0x1150 [ 98.564546][ T6468] sock_do_ioctl+0x22c/0x300 [ 98.564573][ T6468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 98.564603][ T6468] ? __lock_acquire+0xab9/0xd20 [ 98.564637][ T6468] sock_ioctl+0x576/0x790 [ 98.564663][ T6468] ? __pfx_sock_ioctl+0x10/0x10 [ 98.564687][ T6468] ? __fget_files+0x2a/0x420 [ 98.564707][ T6468] ? __fget_files+0x3a0/0x420 [ 98.564726][ T6468] ? __fget_files+0x2a/0x420 [ 98.564750][ T6468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 98.564768][ T6468] ? __pfx_sock_ioctl+0x10/0x10 [ 98.564791][ T6468] __se_sys_ioctl+0xfc/0x170 [ 98.564812][ T6468] do_syscall_64+0xfa/0x3b0 [ 98.564829][ T6468] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.564852][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.564869][ T6468] ? clear_bhb_loop+0x60/0xb0 [ 98.564890][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.564906][ T6468] RIP: 0033:0x7f399d18e929 [ 98.564921][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.564935][ T6468] RSP: 002b:00007f399aff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.564953][ T6468] RAX: ffffffffffffffda RBX: 00007f399d3b5fa0 RCX: 00007f399d18e929 [ 98.564965][ T6468] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 98.564976][ T6468] RBP: 00007f399aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.564986][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.564996][ T6468] R13: 0000000000000000 R14: 00007f399d3b5fa0 R15: 00007ffc18fc09c8 [ 98.565024][ T6468] [ 98.567753][ T6468] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 114.196559][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.205110][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.215271][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.224608][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.232248][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.233846][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.247827][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.248515][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.264099][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.276731][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.243674][ T5173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.252509][ T5173] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.264963][ T5173] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.273883][ T5173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.297502][ T5173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.354952][ T5866] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 115.363303][ T5866] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 115.371831][ T5866] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 115.381455][ T5866] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 115.391636][ T5866] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 116.346272][ T5173] Bluetooth: hci6: command tx timeout [ 116.346279][ T5866] Bluetooth: hci5: command tx timeout [ 117.050949][ T5866] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 117.060949][ T5866] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 117.069705][ T5866] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 117.079063][ T5866] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 117.091658][ T5866] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 117.386305][ T5173] Bluetooth: hci7: command tx timeout [ 117.470428][ T5173] Bluetooth: hci8: command tx timeout [ 118.427388][ T5173] Bluetooth: hci5: command tx timeout [ 118.427398][ T5866] Bluetooth: hci6: command tx timeout [ 119.156207][ T5866] Bluetooth: hci9: command tx timeout [ 119.466161][ T5866] Bluetooth: hci7: command tx timeout [ 119.546197][ T5866] Bluetooth: hci8: command tx timeout [ 120.506187][ T5866] Bluetooth: hci6: command tx timeout [ 120.516277][ T5866] Bluetooth: hci5: command tx timeout [ 121.226371][ T5866] Bluetooth: hci9: command tx timeout [ 121.546188][ T5866] Bluetooth: hci7: command tx timeout [ 121.636191][ T5866] Bluetooth: hci8: command tx timeout [ 122.586223][ T5866] Bluetooth: hci5: command tx timeout [ 122.586240][ T5173] Bluetooth: hci6: command tx timeout [ 123.306314][ T5173] Bluetooth: hci9: command tx timeout [ 123.626411][ T5173] Bluetooth: hci7: command tx timeout [ 123.716320][ T5173] Bluetooth: hci8: command tx timeout [ 125.386329][ T5173] Bluetooth: hci9: command tx timeout [ 132.839783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848886][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.155091][ T5866] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 175.177201][ T5866] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 175.189553][ T5866] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 175.207373][ T5866] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 175.216190][ T5866] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 175.283732][ T5866] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 175.292807][ T5866] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 175.303541][ T5866] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 175.312822][ T5866] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 175.322809][ T5866] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 175.577119][ T5866] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 175.585916][ T5866] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 175.594508][ T5866] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 175.602646][ T5866] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 175.611332][ T5866] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 175.651305][ T5173] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 175.660211][ T5173] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 175.668536][ T5173] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 175.677860][ T5173] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 175.685737][ T5173] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 177.306415][ T5173] Bluetooth: hci10: command tx timeout [ 177.386392][ T5173] Bluetooth: hci11: command tx timeout [ 177.521884][ T5866] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 177.529923][ T5866] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 177.538450][ T5866] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 177.549201][ T5866] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 177.559475][ T5866] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 177.626265][ T5866] Bluetooth: hci12: command tx timeout [ 177.716160][ T5866] Bluetooth: hci13: command tx timeout [ 179.396201][ T5866] Bluetooth: hci10: command tx timeout [ 179.466267][ T5866] Bluetooth: hci11: command tx timeout [ 179.636627][ T5866] Bluetooth: hci14: command tx timeout [ 179.706208][ T5866] Bluetooth: hci12: command tx timeout [ 179.786491][ T5866] Bluetooth: hci13: command tx timeout [ 181.466195][ T5866] Bluetooth: hci10: command tx timeout [ 181.556491][ T5866] Bluetooth: hci11: command tx timeout [ 181.706302][ T5866] Bluetooth: hci14: command tx timeout [ 181.786332][ T5866] Bluetooth: hci12: command tx timeout [ 181.866326][ T5866] Bluetooth: hci13: command tx timeout [ 183.546363][ T5866] Bluetooth: hci10: command tx timeout [ 183.626210][ T5866] Bluetooth: hci11: command tx timeout [ 183.786168][ T5866] Bluetooth: hci14: command tx timeout [ 183.867140][ T5866] Bluetooth: hci12: command tx timeout [ 183.946152][ T5866] Bluetooth: hci13: command tx timeout [ 185.876359][ T5866] Bluetooth: hci14: command tx timeout [ 194.270240][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276797][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.466290][ T5173] Bluetooth: hci0: command 0x0406 tx timeout [ 201.466386][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 201.472345][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 201.481982][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 201.486197][ T5173] Bluetooth: hci4: command 0x0406 tx timeout [ 235.799460][ T5857] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 235.808143][ T5857] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 235.816508][ T5857] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 235.825129][ T5857] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 235.856895][ T5857] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 235.887705][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 235.897023][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 235.905135][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 235.926238][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 235.934883][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 235.969730][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 235.979424][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 235.987612][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 235.999142][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 236.008118][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 236.638403][ T5857] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 236.646787][ T5857] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 236.654755][ T5857] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 236.669136][ T5857] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 236.681410][ T5857] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 237.316227][ T5870] Bluetooth: hci6: command 0x0406 tx timeout [ 237.317084][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 237.648518][ T51] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 237.657192][ T51] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 237.665719][ T51] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 237.674813][ T51] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 237.683973][ T51] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 237.946141][ T51] Bluetooth: hci15: command tx timeout [ 238.026299][ T51] Bluetooth: hci16: command tx timeout [ 238.026339][ T5863] Bluetooth: hci17: command tx timeout [ 238.746281][ T5863] Bluetooth: hci18: command tx timeout [ 239.706207][ T5863] Bluetooth: hci19: command tx timeout [ 240.026142][ T5863] Bluetooth: hci15: command tx timeout [ 240.106178][ T5863] Bluetooth: hci16: command tx timeout [ 240.106195][ T51] Bluetooth: hci17: command tx timeout [ 240.826654][ T5870] Bluetooth: hci18: command tx timeout [ 241.786174][ T5870] Bluetooth: hci19: command tx timeout [ 242.106245][ T5870] Bluetooth: hci15: command tx timeout [ 242.186115][ T5870] Bluetooth: hci16: command tx timeout [ 242.196101][ T5870] Bluetooth: hci17: command tx timeout [ 242.428077][ T5866] Bluetooth: hci7: command 0x0406 tx timeout [ 242.428141][ T5871] Bluetooth: hci8: command 0x0406 tx timeout [ 242.434332][ T5870] Bluetooth: hci9: command 0x0406 tx timeout [ 242.916327][ T5863] Bluetooth: hci18: command tx timeout [ 243.866905][ T5863] Bluetooth: hci19: command tx timeout [ 244.196283][ T5863] Bluetooth: hci15: command tx timeout [ 244.276245][ T5863] Bluetooth: hci17: command tx timeout [ 244.276267][ T5857] Bluetooth: hci16: command tx timeout [ 244.986257][ T5857] Bluetooth: hci18: command tx timeout [ 245.946288][ T5857] Bluetooth: hci19: command tx timeout [ 255.720545][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728661][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.636125][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 257.643836][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 257.657033][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.665753][ T31] task:kworker/u8:1 state:D stack:24712 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 257.677987][ T31] Workqueue: ipv6_addrconf addrconf_dad_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 257.684026][ T31] Call Trace: [ 257.687450][ T31] [ 257.696030][ T31] __schedule+0x16f5/0x4d00 [ 257.700614][ T31] ? __lock_acquire+0xab9/0xd20 [ 257.705708][ T31] ? schedule+0x165/0x360 [ 257.739756][ T31] ? __pfx___schedule+0x10/0x10 [ 257.744698][ T31] ? schedule+0x91/0x360 [ 257.782667][ T31] schedule+0x165/0x360 [ 257.793182][ T31] schedule_preempt_disabled+0x13/0x30 [ 257.798918][ T31] __mutex_lock+0x724/0xe80 [ 257.803454][ T31] ? __mutex_lock+0x51b/0xe80 [ 257.808218][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 257.813458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 257.819737][ T31] ? do_raw_spin_lock+0x121/0x290 [ 257.824806][ T31] ? look_up_lock_class+0x74/0x170 [ 257.830001][ T31] addrconf_dad_work+0x112/0x14b0 [ 257.835052][ T31] ? __lock_acquire+0xab9/0xd20 [ 257.843339][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 257.848885][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 257.859709][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.864958][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 257.871578][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 257.881363][ T31] process_scheduled_works+0xae1/0x17b0 [ 257.887032][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.893055][ T31] worker_thread+0x8a0/0xda0 [ 257.900782][ T31] kthread+0x70e/0x8a0 [ 257.904880][ T31] ? __pfx_worker_thread+0x10/0x10 [ 257.910894][ T31] ? __pfx_kthread+0x10/0x10 [ 257.915502][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.923412][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.929244][ T31] ? __pfx_kthread+0x10/0x10 [ 257.933844][ T31] ret_from_fork+0x3fc/0x770 [ 257.941203][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 257.947387][ T31] ? __switch_to_asm+0x39/0x70 [ 257.952187][ T31] ? __switch_to_asm+0x33/0x70 [ 257.961295][ T31] ? __pfx_kthread+0x10/0x10 [ 257.965939][ T31] ret_from_fork_asm+0x1a/0x30 [ 257.970804][ T31] [ 257.973941][ T31] INFO: task kworker/u8:13:3584 blocked for more than 143 seconds. [ 257.984429][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 257.993192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.002974][ T31] task:kworker/u8:13 state:D stack:23336 pid:3584 tgid:3584 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 258.015132][ T31] Workqueue: events_unbound linkwatch_event [ 258.021112][ T31] Call Trace: [ 258.024418][ T31] [ 258.027447][ T31] __schedule+0x16f5/0x4d00 [ 258.032001][ T31] ? __lock_acquire+0xab9/0xd20 [ 258.037034][ T31] ? schedule+0x165/0x360 [ 258.041440][ T31] ? __pfx___schedule+0x10/0x10 [ 258.046423][ T31] ? schedule+0x91/0x360 [ 258.050684][ T31] schedule+0x165/0x360 [ 258.054841][ T31] schedule_preempt_disabled+0x13/0x30 [ 258.061326][ T31] __mutex_lock+0x724/0xe80 [ 258.065855][ T31] ? __mutex_lock+0x51b/0xe80 [ 258.070618][ T31] ? linkwatch_event+0xe/0x60 [ 258.075317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 258.080443][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.085667][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 258.091738][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 258.097764][ T31] linkwatch_event+0xe/0x60 [ 258.102292][ T31] process_scheduled_works+0xae1/0x17b0 [ 258.113333][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.119435][ T31] worker_thread+0x8a0/0xda0 [ 258.124063][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.130456][ T31] ? __kthread_parkme+0x7b/0x200 [ 258.135427][ T31] kthread+0x70e/0x8a0 [ 258.139580][ T31] ? __pfx_worker_thread+0x10/0x10 [ 258.144720][ T31] ? __pfx_kthread+0x10/0x10 [ 258.149381][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.154628][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.159909][ T31] ? __pfx_kthread+0x10/0x10 [ 258.165448][ T31] ret_from_fork+0x3fc/0x770 [ 258.170144][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 258.175278][ T31] ? __switch_to_asm+0x39/0x70 [ 258.180091][ T31] ? __switch_to_asm+0x33/0x70 [ 258.184869][ T31] ? __pfx_kthread+0x10/0x10 [ 258.189607][ T31] ret_from_fork_asm+0x1a/0x30 [ 258.194419][ T31] [ 258.197650][ T31] INFO: task kworker/1:7:5981 blocked for more than 143 seconds. [ 258.205403][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 258.214269][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.228293][ T31] task:kworker/1:7 state:D stack:24936 pid:5981 tgid:5981 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 258.241355][ T31] Workqueue: events_power_efficient crda_timeout_work [ 258.248410][ T31] Call Trace: [ 258.251698][ T31] [ 258.254641][ T31] __schedule+0x16f5/0x4d00 [ 258.259492][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 258.265705][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.272723][ T31] ? schedule+0x165/0x360 [ 258.277345][ T31] ? preempt_schedule+0xae/0xc0 [ 258.282230][ T31] ? __pfx___schedule+0x10/0x10 [ 258.287525][ T31] ? preempt_schedule+0xae/0xc0 [ 258.292428][ T31] ? schedule+0x91/0x360 [ 258.297099][ T31] schedule+0x165/0x360 [ 258.301285][ T31] schedule_preempt_disabled+0x13/0x30 [ 258.307146][ T31] __mutex_lock+0x724/0xe80 [ 258.311674][ T31] ? __mutex_lock+0x51b/0xe80 [ 258.316406][ T31] ? crda_timeout_work+0x15/0x50 [ 258.321487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 258.326619][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.331836][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 258.337619][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 258.343364][ T31] crda_timeout_work+0x15/0x50 [ 258.348277][ T31] process_scheduled_works+0xae1/0x17b0 [ 258.353860][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.359927][ T31] worker_thread+0x8a0/0xda0 [ 258.364547][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.372198][ T31] ? __kthread_parkme+0x7b/0x200 [ 258.377232][ T31] kthread+0x70e/0x8a0 [ 258.381450][ T31] ? __pfx_worker_thread+0x10/0x10 [ 258.386830][ T31] ? __pfx_kthread+0x10/0x10 [ 258.391448][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.397012][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.402230][ T31] ? __pfx_kthread+0x10/0x10 [ 258.407163][ T31] ret_from_fork+0x3fc/0x770 [ 258.411762][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 258.417282][ T31] ? __switch_to_asm+0x39/0x70 [ 258.422083][ T31] ? __switch_to_asm+0x33/0x70 [ 258.427253][ T31] ? __pfx_kthread+0x10/0x10 [ 258.431862][ T31] ret_from_fork_asm+0x1a/0x30 [ 258.437077][ T31] [ 258.440135][ T31] INFO: task syz.1.160:6481 blocked for more than 144 seconds. [ 258.447747][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 258.455392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.464119][ T31] task:syz.1.160 state:D stack:26824 pid:6481 tgid:6480 ppid:5852 task_flags:0x400140 flags:0x00004004 [ 258.477004][ T31] Call Trace: [ 258.480305][ T31] [ 258.483299][ T31] __schedule+0x16f5/0x4d00 [ 258.487924][ T31] ? __lock_acquire+0xab9/0xd20 [ 258.492810][ T31] ? schedule+0x165/0x360 [ 258.497434][ T31] ? __pfx___schedule+0x10/0x10 [ 258.502354][ T31] ? schedule+0x91/0x360 [ 258.507181][ T31] schedule+0x165/0x360 [ 258.511387][ T31] schedule_preempt_disabled+0x13/0x30 [ 258.517256][ T31] __mutex_lock+0x724/0xe80 [ 258.521950][ T31] ? __mutex_lock+0x51b/0xe80 [ 258.527056][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 258.531845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 258.537140][ T31] ? ns_capable+0x8a/0xf0 [ 258.541492][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 258.547702][ T31] rtnl_newlink+0x8db/0x1c70 [ 258.552331][ T31] ? finish_task_switch+0x266/0x950 [ 258.557630][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.562679][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 258.568685][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.574852][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 258.580839][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.587217][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 258.593831][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 258.600878][ T31] ? rcu_is_watching+0x15/0xb0 [ 258.605667][ T31] ? trace_irq_disable+0x37/0x110 [ 258.610792][ T31] ? rcu_is_watching+0x15/0xb0 [ 258.615627][ T31] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 258.621349][ T31] ? irqentry_exit+0x74/0x90 [ 258.626000][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.631276][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.636373][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 258.641341][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 258.646504][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.651975][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 258.657071][ T31] ? __copy_skb_header+0xa7/0x550 [ 258.662131][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 258.667583][ T31] ? __skb_clone+0x63/0x7a0 [ 258.672111][ T31] netlink_rcv_skb+0x205/0x470 [ 258.678167][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.683675][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.689305][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.694574][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.699878][ T31] netlink_unicast+0x759/0x8e0 [ 258.704678][ T31] netlink_sendmsg+0x805/0xb30 [ 258.709548][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.714874][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 258.719985][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.725294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.730691][ T31] __sock_sendmsg+0x21c/0x270 [ 258.735403][ T31] ____sys_sendmsg+0x505/0x830 [ 258.740250][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.745579][ T31] ? import_iovec+0x74/0xa0 [ 258.750163][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 258.754863][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.760158][ T31] ? __fget_files+0x2a/0x420 [ 258.764778][ T31] ? __fget_files+0x3a0/0x420 [ 258.770504][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 258.776475][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.782023][ T31] ? rcu_is_watching+0x15/0xb0 [ 258.787053][ T31] ? do_syscall_64+0xbe/0x3b0 [ 258.791765][ T31] do_syscall_64+0xfa/0x3b0 [ 258.799969][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.805227][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.811396][ T31] ? clear_bhb_loop+0x60/0xb0 [ 258.816134][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.822045][ T31] RIP: 0033:0x7f5355b8e929 [ 258.826554][ T31] RSP: 002b:00007f53569ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.834994][ T31] RAX: ffffffffffffffda RBX: 00007f5355db5fa0 RCX: 00007f5355b8e929 [ 258.843027][ T31] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 258.851058][ T31] RBP: 00007f5355c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 258.859136][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.867179][ T31] R13: 0000000000000000 R14: 00007f5355db5fa0 R15: 00007ffcfd7ea9a8 [ 258.875173][ T31] [ 258.880266][ T31] INFO: task syz.1.160:6482 blocked for more than 144 seconds. [ 258.887984][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 258.895630][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.904380][ T31] task:syz.1.160 state:D stack:24696 pid:6482 tgid:6480 ppid:5852 task_flags:0x400140 flags:0x00004004 [ 258.917635][ T31] Call Trace: [ 258.920949][ T31] [ 258.923897][ T31] __schedule+0x16f5/0x4d00 [ 258.929761][ T31] ? __lock_acquire+0xab9/0xd20 [ 258.934648][ T31] ? schedule+0x165/0x360 [ 258.939496][ T31] ? __pfx___schedule+0x10/0x10 [ 258.944391][ T31] ? schedule+0x91/0x360 [ 258.948725][ T31] schedule+0x165/0x360 [ 258.952909][ T31] schedule_preempt_disabled+0x13/0x30 [ 258.958452][ T31] __mutex_lock+0x724/0xe80 [ 258.962975][ T31] ? __lock_acquire+0xab9/0xd20 [ 258.967914][ T31] ? __mutex_lock+0x51b/0xe80 [ 258.972614][ T31] ? wg_set_device+0x15b/0x1fe0 [ 258.977543][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 258.983670][ T31] ? dev_get_by_index+0x22/0x2e0 [ 258.989839][ T31] ? dev_get_by_index+0x2a1/0x2e0 [ 258.994910][ T31] ? lookup_interface+0x2a4/0x2f0 [ 259.002421][ T31] wg_set_device+0x15b/0x1fe0 [ 259.009141][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 259.014905][ T31] ? __pfx_wg_set_device+0x10/0x10 [ 259.021313][ T31] ? __nla_parse+0x40/0x60 [ 259.025770][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 259.034127][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 259.040988][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.047237][ T31] ? bpf_lsm_capable+0x9/0x20 [ 259.051937][ T31] ? security_capable+0x7e/0x2e0 [ 259.056956][ T31] genl_rcv_msg+0x60e/0x790 [ 259.061498][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.068492][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 259.073567][ T31] ? __pfx_wg_set_device+0x10/0x10 [ 259.080541][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.087803][ T31] netlink_rcv_skb+0x205/0x470 [ 259.092629][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.097813][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.103132][ T31] ? down_read+0x1ad/0x2e0 [ 259.107644][ T31] genl_rcv+0x28/0x40 [ 259.111645][ T31] netlink_unicast+0x759/0x8e0 [ 259.116523][ T31] netlink_sendmsg+0x805/0xb30 [ 259.121310][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.126747][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 259.131706][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.137065][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.142478][ T31] __sock_sendmsg+0x21c/0x270 [ 259.151988][ T31] ____sys_sendmsg+0x505/0x830 [ 259.156873][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.162197][ T31] ? import_iovec+0x74/0xa0 [ 259.166786][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 259.171484][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.176796][ T31] ? __fget_files+0x2a/0x420 [ 259.181398][ T31] ? __fget_files+0x3a0/0x420 [ 259.187165][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 259.192144][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.197699][ T31] ? rcu_is_watching+0x15/0xb0 [ 259.202491][ T31] ? do_syscall_64+0xbe/0x3b0 [ 259.207477][ T31] do_syscall_64+0xfa/0x3b0 [ 259.212001][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.217636][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.223734][ T31] ? clear_bhb_loop+0x60/0xb0 [ 259.228498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.234434][ T31] RIP: 0033:0x7f5355b8e929 [ 259.238915][ T31] RSP: 002b:00007f535698b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.247580][ T31] RAX: ffffffffffffffda RBX: 00007f5355db6080 RCX: 00007f5355b8e929 [ 259.255572][ T31] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 259.263613][ T31] RBP: 00007f5355c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.271628][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.279683][ T31] R13: 0000000000000000 R14: 00007f5355db6080 R15: 00007ffcfd7ea9a8 [ 259.288837][ T31] [ 259.291939][ T31] INFO: task syz.3.161:6487 blocked for more than 145 seconds. [ 259.299757][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 259.307449][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.316179][ T31] task:syz.3.161 state:D stack:26856 pid:6487 tgid:6486 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 259.328167][ T31] Call Trace: [ 259.331477][ T31] [ 259.334437][ T31] __schedule+0x16f5/0x4d00 [ 259.339042][ T31] ? __lock_acquire+0xab9/0xd20 [ 259.343919][ T31] ? schedule+0x165/0x360 [ 259.348322][ T31] ? __pfx___schedule+0x10/0x10 [ 259.353216][ T31] ? schedule+0x91/0x360 [ 259.357542][ T31] schedule+0x165/0x360 [ 259.361730][ T31] schedule_preempt_disabled+0x13/0x30 [ 259.367337][ T31] __mutex_lock+0x724/0xe80 [ 259.371861][ T31] ? __mutex_lock+0x51b/0xe80 [ 259.376627][ T31] ? dev_ioctl+0x83c/0x1150 [ 259.381162][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 259.386527][ T31] ? dev_load+0x21/0x1f0 [ 259.391893][ T31] ? dev_load+0x21/0x1f0 [ 259.396221][ T31] dev_ioctl+0x83c/0x1150 [ 259.400606][ T31] sock_ioctl+0x719/0x790 [ 259.405052][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 259.409982][ T31] ? __fget_files+0x3a0/0x420 [ 259.414693][ T31] ? __fget_files+0x2a/0x420 [ 259.419397][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.424366][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 259.429325][ T31] __se_sys_ioctl+0xfc/0x170 [ 259.433957][ T31] do_syscall_64+0xfa/0x3b0 [ 259.438633][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.443864][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.449983][ T31] ? clear_bhb_loop+0x60/0xb0 [ 259.454685][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.460635][ T31] RIP: 0033:0x7f5c2a18e929 [ 259.465068][ T31] RSP: 002b:00007f5c2b028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.473764][ T31] RAX: ffffffffffffffda RBX: 00007f5c2a3b5fa0 RCX: 00007f5c2a18e929 [ 259.481829][ T31] RDX: 0000200000000500 RSI: 00000000000089f3 RDI: 0000000000000003 [ 259.490089][ T31] RBP: 00007f5c2a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.499513][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.507584][ T31] R13: 0000000000000000 R14: 00007f5c2a3b5fa0 R15: 00007ffe6886b9f8 [ 259.515784][ T31] [ 259.518868][ T31] INFO: task syz.0.162:6491 blocked for more than 145 seconds. [ 259.526612][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 259.534254][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.542980][ T31] task:syz.0.162 state:D stack:28328 pid:6491 tgid:6490 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 259.555521][ T31] Call Trace: [ 259.558960][ T31] [ 259.562107][ T31] __schedule+0x16f5/0x4d00 [ 259.566689][ T31] ? __lock_acquire+0xab9/0xd20 [ 259.571664][ T31] ? schedule+0x165/0x360 [ 259.576097][ T31] ? __pfx___schedule+0x10/0x10 [ 259.581131][ T31] ? schedule+0x91/0x360 [ 259.585406][ T31] schedule+0x165/0x360 [ 259.589630][ T31] schedule_preempt_disabled+0x13/0x30 [ 259.596362][ T31] __mutex_lock+0x724/0xe80 [ 259.600902][ T31] ? __mutex_lock+0x51b/0xe80 [ 259.605597][ T31] ? ppp_ioctl+0x695/0x19a0 [ 259.610198][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 259.615445][ T31] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 259.620623][ T31] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 259.626363][ T31] ? alloc_netdev_mqs+0xe41/0x11e0 [ 259.631510][ T31] ppp_ioctl+0x695/0x19a0 [ 259.635861][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 259.640718][ T31] ? __fget_files+0x2a/0x420 [ 259.645319][ T31] ? __fget_files+0x3a0/0x420 [ 259.650056][ T31] ? __fget_files+0x2a/0x420 [ 259.654673][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.659845][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 259.664629][ T31] __se_sys_ioctl+0xfc/0x170 [ 259.669483][ T31] do_syscall_64+0xfa/0x3b0 [ 259.674008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.679494][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.685582][ T31] ? clear_bhb_loop+0x60/0xb0 [ 259.690327][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.696283][ T31] RIP: 0033:0x7fba35f8e929 [ 259.702346][ T31] RSP: 002b:00007fba36eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.710949][ T31] RAX: ffffffffffffffda RBX: 00007fba361b5fa0 RCX: 00007fba35f8e929 [ 259.718960][ T31] RDX: 0000200000000140 RSI: 00000000c004743e RDI: 0000000000000003 [ 259.727001][ T31] RBP: 00007fba36010b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.734988][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.743032][ T31] R13: 0000000000000000 R14: 00007fba361b5fa0 R15: 00007ffd1d37abf8 [ 259.751092][ T31] [ 259.754122][ T31] INFO: task syz.0.162:6492 blocked for more than 145 seconds. [ 259.761702][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 259.769378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.778101][ T31] task:syz.0.162 state:D stack:28712 pid:6492 tgid:6490 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 259.790103][ T31] Call Trace: [ 259.793384][ T31] [ 259.796406][ T31] __schedule+0x16f5/0x4d00 [ 259.802017][ T31] ? __lock_acquire+0xab9/0xd20 [ 259.806954][ T31] ? schedule+0x165/0x360 [ 259.811328][ T31] ? __pfx___schedule+0x10/0x10 [ 259.817131][ T31] ? schedule+0x91/0x360 [ 259.821423][ T31] schedule+0x165/0x360 [ 259.825603][ T31] schedule_preempt_disabled+0x13/0x30 [ 259.831130][ T31] __mutex_lock+0x724/0xe80 [ 259.835650][ T31] ? __mutex_lock+0x51b/0xe80 [ 259.841962][ T31] ? ppp_ioctl+0xcd/0x19a0 [ 259.847870][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 259.852910][ T31] ? __lock_acquire+0xab9/0xd20 [ 259.859567][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 259.864346][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 259.869612][ T31] ppp_ioctl+0xcd/0x19a0 [ 259.874120][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 259.881222][ T31] ? __fget_files+0x2a/0x420 [ 259.885826][ T31] ? __fget_files+0x3a0/0x420 [ 259.891140][ T31] ? __fget_files+0x2a/0x420 [ 259.895739][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 259.903530][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 259.908378][ T31] __se_sys_ioctl+0xfc/0x170 [ 259.912998][ T31] do_syscall_64+0xfa/0x3b0 [ 259.917651][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.922879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.929061][ T31] ? clear_bhb_loop+0x60/0xb0 [ 259.933759][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.939738][ T31] RIP: 0033:0x7fba35f8e929 [ 259.944176][ T31] RSP: 002b:00007fba36e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.952871][ T31] RAX: ffffffffffffffda RBX: 00007fba361b6080 RCX: 00007fba35f8e929 [ 259.960962][ T31] RDX: 0000200000000080 RSI: 0000000080047456 RDI: 0000000000000003 [ 259.969042][ T31] RBP: 00007fba36010b39 R08: 0000000000000000 R09: 0000000000000000 [ 259.977119][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.985114][ T31] R13: 0000000000000001 R14: 00007fba361b6080 R15: 00007ffd1d37abf8 [ 259.993176][ T31] [ 259.996261][ T31] INFO: task syz.0.162:6493 blocked for more than 145 seconds. [ 260.003821][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 260.014381][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.024288][ T31] task:syz.0.162 state:D stack:28312 pid:6493 tgid:6490 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 260.038907][ T31] Call Trace: [ 260.042203][ T31] [ 260.045128][ T31] __schedule+0x16f5/0x4d00 [ 260.052386][ T31] ? __lock_acquire+0xab9/0xd20 [ 260.059912][ T31] ? __lock_acquire+0xab9/0xd20 [ 260.064775][ T31] ? schedule+0x165/0x360 [ 260.069362][ T31] ? __pfx___schedule+0x10/0x10 [ 260.074264][ T31] ? schedule+0x91/0x360 [ 260.082619][ T31] schedule+0x165/0x360 [ 260.087617][ T31] schedule_preempt_disabled+0x13/0x30 [ 260.093105][ T31] __mutex_lock+0x724/0xe80 [ 260.100332][ T31] ? unwind_get_return_address+0x4d/0x90 [ 260.106067][ T31] ? __mutex_lock+0x51b/0xe80 [ 260.112148][ T31] ? genl_rcv_msg+0x10d/0x790 [ 260.117137][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 260.122188][ T31] ? stack_trace_save+0x9c/0xe0 [ 260.127113][ T31] ? radix_tree_lookup+0x240/0x290 [ 260.132258][ T31] genl_rcv_msg+0x10d/0x790 [ 260.136938][ T31] ? __lock_acquire+0xab9/0xd20 [ 260.141812][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.146945][ T31] netlink_rcv_skb+0x205/0x470 [ 260.151728][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.156927][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.162238][ T31] ? down_read+0x1ad/0x2e0 [ 260.166718][ T31] genl_rcv+0x28/0x40 [ 260.170730][ T31] netlink_unicast+0x759/0x8e0 [ 260.175515][ T31] netlink_sendmsg+0x805/0xb30 [ 260.180387][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.185701][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 260.195034][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.200409][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.205725][ T31] __sock_sendmsg+0x21c/0x270 [ 260.211438][ T31] __sys_sendto+0x3bd/0x520 [ 260.216040][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 260.221103][ T31] ? count_memcg_event_mm+0x21/0x260 [ 260.226509][ T31] ? exc_page_fault+0x76/0xf0 [ 260.231214][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 260.236790][ T31] __x64_sys_sendto+0xde/0x100 [ 260.241574][ T31] do_syscall_64+0xfa/0x3b0 [ 260.246347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.251582][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.257702][ T31] ? clear_bhb_loop+0x60/0xb0 [ 260.262401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.268591][ T31] RIP: 0033:0x7fba35f907bc [ 260.273035][ T31] RSP: 002b:00007fba36e75ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 260.281530][ T31] RAX: ffffffffffffffda RBX: 00007fba36e75fc0 RCX: 00007fba35f907bc [ 260.289625][ T31] RDX: 0000000000000020 RSI: 00007fba36e76010 RDI: 0000000000000006 [ 260.297657][ T31] RBP: 0000000000000000 R08: 00007fba36e75f14 R09: 000000000000000c [ 260.305678][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 260.314646][ T31] R13: 00007fba36e75f68 R14: 00007fba36e76010 R15: 0000000000000000 [ 260.322731][ T31] [ 260.325777][ T31] INFO: task syz.0.162:6494 blocked for more than 146 seconds. [ 260.333399][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 260.341116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.349844][ T31] task:syz.0.162 state:D stack:28360 pid:6494 tgid:6490 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 260.361811][ T31] Call Trace: [ 260.365094][ T31] [ 260.368089][ T31] __schedule+0x16f5/0x4d00 [ 260.372642][ T31] ? __lock_acquire+0xab9/0xd20 [ 260.377567][ T31] ? schedule+0x165/0x360 [ 260.381934][ T31] ? __pfx___schedule+0x10/0x10 [ 260.386942][ T31] ? schedule+0x91/0x360 [ 260.391221][ T31] schedule+0x165/0x360 [ 260.395406][ T31] schedule_preempt_disabled+0x13/0x30 [ 260.400969][ T31] __mutex_lock+0x724/0xe80 [ 260.405499][ T31] ? __mutex_lock+0x51b/0xe80 [ 260.410475][ T31] ? ppp_ioctl+0xcd/0x19a0 [ 260.415905][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 260.421026][ T31] ? vfs_write+0x8e2/0xa90 [ 260.425454][ T31] ? __lock_acquire+0xab9/0xd20 [ 260.430359][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 260.435140][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 260.439969][ T31] ppp_ioctl+0xcd/0x19a0 [ 260.444240][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 260.449073][ T31] ? __fget_files+0x2a/0x420 [ 260.453693][ T31] ? __fget_files+0x3a0/0x420 [ 260.459234][ T31] ? __fget_files+0x2a/0x420 [ 260.463858][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 260.468862][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 260.473637][ T31] __se_sys_ioctl+0xfc/0x170 [ 260.478472][ T31] do_syscall_64+0xfa/0x3b0 [ 260.483004][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.488268][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.494363][ T31] ? clear_bhb_loop+0x60/0xb0 [ 260.499108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.505011][ T31] RIP: 0033:0x7fba35f8e929 [ 260.509717][ T31] RSP: 002b:00007fba36e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.521696][ T31] RAX: ffffffffffffffda RBX: 00007fba361b6240 RCX: 00007fba35f8e929 [ 260.530818][ T31] RDX: 0000200000000200 RSI: 000000008008743f RDI: 0000000000000003 [ 260.538920][ T31] RBP: 00007fba36010b39 R08: 0000000000000000 R09: 0000000000000000 [ 260.546993][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.554993][ T31] R13: 0000000000000000 R14: 00007fba361b6240 R15: 00007ffd1d37abf8 [ 260.563080][ T31] [ 260.566145][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 260.575244][ T31] INFO: task syz.2.164:6507 blocked for more than 146 seconds. [ 260.582918][ T31] Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 [ 260.590877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.599637][ T31] task:syz.2.164 state:D stack:28312 pid:6507 tgid:6506 ppid:5851 task_flags:0x400040 flags:0x00004004 [ 260.611689][ T31] Call Trace: [ 260.614987][ T31] [ 260.617996][ T31] __schedule+0x16f5/0x4d00 [ 260.623676][ T31] ? __lock_acquire+0xab9/0xd20 [ 260.628612][ T31] ? schedule+0x165/0x360 [ 260.632992][ T31] ? __pfx___schedule+0x10/0x10 [ 260.637965][ T31] ? schedule+0x91/0x360 [ 260.642248][ T31] schedule+0x165/0x360 [ 260.646483][ T31] schedule_preempt_disabled+0x13/0x30 [ 260.651975][ T31] __mutex_lock+0x724/0xe80 [ 260.656738][ T31] ? __mutex_lock+0x51b/0xe80 [ 260.661448][ T31] ? genl_rcv_msg+0x10d/0x790 [ 260.666535][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 260.671601][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 260.677384][ T31] ? radix_tree_lookup+0x240/0x290 [ 260.682536][ T31] genl_rcv_msg+0x10d/0x790 [ 260.687122][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.692166][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 260.697256][ T31] ? __copy_skb_header+0xa7/0x550 [ 260.702310][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.707794][ T31] netlink_rcv_skb+0x205/0x470 [ 260.712583][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.717659][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.723889][ T31] ? down_read+0x1ad/0x2e0 [ 260.728440][ T31] genl_rcv+0x28/0x40 [ 260.732513][ T31] netlink_unicast+0x759/0x8e0 [ 260.737412][ T31] netlink_sendmsg+0x805/0xb30 [ 260.742203][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.747565][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 260.752527][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.757858][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.763160][ T31] __sock_sendmsg+0x21c/0x270 [ 260.767921][ T31] __sys_sendto+0x3bd/0x520 [ 260.772440][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 260.777549][ T31] ? count_memcg_event_mm+0x21/0x260 [ 260.782867][ T31] ? exc_page_fault+0x76/0xf0 [ 260.787903][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 260.793232][ T31] __x64_sys_sendto+0xde/0x100 [ 260.798429][ T31] do_syscall_64+0xfa/0x3b0 [ 260.802953][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.808414][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.814504][ T31] ? clear_bhb_loop+0x60/0xb0 [ 260.819439][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.826535][ T31] RIP: 0033:0x7fe72b3907bc [ 260.830982][ T31] RSP: 002b:00007fe72c142ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 260.839671][ T31] RAX: ffffffffffffffda RBX: 00007fe72c142fc0 RCX: 00007fe72b3907bc [ 260.847725][ T31] RDX: 0000000000000020 RSI: 00007fe72c143010 RDI: 0000000000000004 [ 260.855727][ T31] RBP: 0000000000000000 R08: 00007fe72c142f14 R09: 000000000000000c [ 260.863855][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 260.871887][ T31] R13: 00007fe72c142f68 R14: 00007fe72c143010 R15: 0000000000000000 [ 260.879971][ T31] [ 260.883022][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 260.892399][ T31] [ 260.892399][ T31] Showing all locks held in the system: [ 260.900185][ T31] 3 locks held by kworker/u8:1/13: [ 260.905317][ T31] #0: ffff88814c3b4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 260.917229][ T31] #1: ffffc90000127bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 260.931288][ T31] #2: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 260.940923][ T31] 1 lock held by khungtaskd/31: [ 260.945790][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 260.955742][ T31] 3 locks held by kworker/u8:13/3584: [ 260.961174][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 260.972912][ T31] #1: ffffc9000d0a7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 260.983942][ T31] #2: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 260.993003][ T31] 2 locks held by getty/5627: [ 260.997755][ T31] #0: ffff888030e9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 261.007605][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 261.017806][ T31] 3 locks held by kworker/1:6/5948: [ 261.022997][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 261.036498][ T31] #1: ffffc9000530fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 261.047838][ T31] #2: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 261.057777][ T31] 3 locks held by kworker/1:7/5981: [ 261.062992][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 261.075881][ T31] #1: ffffc900053bfbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 261.086976][ T31] #2: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 261.097334][ T31] 2 locks held by syz.4.156/6471: [ 261.102376][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 261.111212][ T31] #1: ffff888034ce6d30 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 261.121564][ T31] 2 locks held by syz.1.160/6481: [ 261.126846][ T31] #0: ffffffff8fa22ac8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 261.137712][ T31] #1: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 261.146891][ T31] 3 locks held by syz.1.160/6482: [ 261.151918][ T31] #0: ffffffff8f583bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 261.160399][ T31] #1: ffffffff8f5839c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 261.169543][ T31] #2: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device+0x15b/0x1fe0 [ 261.178807][ T31] 1 lock held by syz.3.161/6487: [ 261.183748][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 261.192608][ T31] 2 locks held by syz.0.162/6491: [ 261.197676][ T31] #0: ffffffff8ecf3e08 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xcd/0x19a0 [ 261.206422][ T31] #1: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x695/0x19a0 [ 261.215263][ T31] 1 lock held by syz.0.162/6492: [ 261.220261][ T31] #0: ffffffff8ecf3e08 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xcd/0x19a0 [ 261.234762][ T31] 2 locks held by syz.0.162/6493: [ 261.239880][ T31] #0: ffffffff8f583bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 261.248328][ T31] #1: ffffffff8f5839c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 261.257371][ T31] 1 lock held by syz.0.162/6494: [ 261.262312][ T31] #0: ffffffff8ecf3e08 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xcd/0x19a0 [ 261.270978][ T31] 2 locks held by syz.2.164/6507: [ 261.276040][ T31] #0: ffffffff8f583bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 261.284264][ T31] #1: ffffffff8f5839c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 261.293316][ T31] 1 lock held by syz-executor/6516: [ 261.298550][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.308317][ T31] 1 lock held by syz-executor/6518: [ 261.313538][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.323035][ T31] 1 lock held by syz-executor/6523: [ 261.328282][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.338842][ T31] 1 lock held by syz-executor/6525: [ 261.344051][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.353554][ T31] 1 lock held by syz-executor/6528: [ 261.358820][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.368761][ T31] 1 lock held by syz-executor/6533: [ 261.373972][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.383483][ T31] 1 lock held by syz-executor/6537: [ 261.388762][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.398258][ T31] 1 lock held by syz-executor/6539: [ 261.403466][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.412973][ T31] 1 lock held by syz-executor/6541: [ 261.418219][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.427745][ T31] 1 lock held by syz-executor/6547: [ 261.432962][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.443710][ T31] 1 lock held by syz-executor/6554: [ 261.449019][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.458552][ T31] 1 lock held by syz-executor/6556: [ 261.463763][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.473272][ T31] 1 lock held by syz-executor/6558: [ 261.478520][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.488023][ T31] 1 lock held by syz-executor/6561: [ 261.493247][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.502793][ T31] 1 lock held by syz-executor/6564: [ 261.508510][ T31] #0: ffffffff8f51d848 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 261.518212][ T31] [ 261.520559][ T31] ============================================= [ 261.520559][ T31] [ 261.529568][ T31] NMI backtrace for cpu 0 [ 261.529586][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 261.529607][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.529617][ T31] Call Trace: [ 261.529624][ T31] [ 261.529631][ T31] dump_stack_lvl+0x189/0x250 [ 261.529655][ T31] ? __wake_up_klogd+0xd9/0x110 [ 261.529681][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.529701][ T31] ? __pfx__printk+0x10/0x10 [ 261.529735][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 261.529755][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 261.529766][ T31] ? _printk+0xcf/0x120 [ 261.529781][ T31] ? __pfx__printk+0x10/0x10 [ 261.529794][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 261.529805][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 261.529819][ T31] watchdog+0xfee/0x1030 [ 261.529829][ T31] ? watchdog+0x1de/0x1030 [ 261.529842][ T31] kthread+0x70e/0x8a0 [ 261.529860][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.529874][ T31] ? __pfx_kthread+0x10/0x10 [ 261.529898][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.529922][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.529944][ T31] ? __pfx_kthread+0x10/0x10 [ 261.529967][ T31] ret_from_fork+0x3fc/0x770 [ 261.529987][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 261.530000][ T31] ? __switch_to_asm+0x39/0x70 [ 261.530012][ T31] ? __switch_to_asm+0x33/0x70 [ 261.530023][ T31] ? __pfx_kthread+0x10/0x10 [ 261.530036][ T31] ret_from_fork_asm+0x1a/0x30 [ 261.530056][ T31] [ 261.530060][ T31] Sending NMI from CPU 0 to CPUs 1: [ 261.689764][ C1] NMI backtrace for cpu 1 [ 261.689780][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 261.689798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.689808][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 261.689839][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 fd 18 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 261.689852][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 261.689867][ C1] RAX: 2eef350949e37900 RBX: ffffffff81976c78 RCX: 2eef350949e37900 [ 261.689879][ C1] RDX: 0000000000000001 RSI: ffffffff8d998bbb RDI: ffffffff8be29dc0 [ 261.689890][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 261.689901][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1f3f0 [ 261.689912][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a59b40 [ 261.689923][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 261.689935][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.689946][ C1] CR2: 0000559c59769000 CR3: 0000000033cca000 CR4: 00000000003526f0 [ 261.689960][ C1] Call Trace: [ 261.689968][ C1] [ 261.689974][ C1] default_idle+0x13/0x20 [ 261.689990][ C1] default_idle_call+0x74/0xb0 [ 261.690007][ C1] do_idle+0x1e8/0x510 [ 261.690025][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.690042][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.690063][ C1] ? __pfx_do_idle+0x10/0x10 [ 261.690084][ C1] ? do_idle+0x4ed/0x510 [ 261.690103][ C1] cpu_startup_entry+0x44/0x60 [ 261.690120][ C1] start_secondary+0x101/0x110 [ 261.690134][ C1] common_startup_64+0x13e/0x147 [ 261.690162][ C1] [ 261.690890][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 261.875098][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 261.886894][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.896943][ T31] Call Trace: [ 261.900216][ T31] [ 261.903143][ T31] dump_stack_lvl+0x99/0x250 [ 261.907742][ T31] ? __asan_memcpy+0x40/0x70 [ 261.912342][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.917539][ T31] ? __pfx__printk+0x10/0x10 [ 261.922135][ T31] panic+0x2db/0x790 [ 261.926032][ T31] ? __pfx_panic+0x10/0x10 [ 261.930439][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 261.936244][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 261.941620][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 261.947864][ T31] watchdog+0x102d/0x1030 [ 261.952192][ T31] ? watchdog+0x1de/0x1030 [ 261.956608][ T31] kthread+0x70e/0x8a0 [ 261.960678][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.965343][ T31] ? __pfx_kthread+0x10/0x10 [ 261.969930][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.975127][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.980326][ T31] ? __pfx_kthread+0x10/0x10 [ 261.984914][ T31] ret_from_fork+0x3fc/0x770 [ 261.989504][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 261.994613][ T31] ? __switch_to_asm+0x39/0x70 [ 261.999374][ T31] ? __switch_to_asm+0x33/0x70 [ 262.004133][ T31] ? __pfx_kthread+0x10/0x10 [ 262.008724][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.013505][ T31] [ 262.016795][ T31] Kernel Offset: disabled [ 262.021114][ T31] Rebooting in 86400 seconds..