last executing test programs: 1m29.02047217s ago: executing program 4 (id=332): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @empty, 0x0}, &(0x7f0000000180)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18070000000000000000001200fc26333da50d3f9ff27fb7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b18e}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = epoll_create1(0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r2, &(0x7f0000000080)) r7 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="1222a36c5f17aec040ee36a7ec711b19e94bb8048f1fcac17a4b8eeb87bea37704d0bf1d4a671947892f064d79b83a13025ed9ec95195c22b84628737a18699cd04ae20a62739f6d0f2f504be6e25cb54f1cfdb34752f3d10ede39d6763da4c4b7808ecd419e9b3203122e66392bd9ec21ed97a0528da7d32109220a294a00e97d03ce5a", 0x84, 0x8000, &(0x7f00000001c0)={0x11, 0x16, r0, 0x1, 0x7, 0x6, @random="829f00bd0110"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000c59579629400000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000b07010000f8ffffffb702000008000000b79e6100000000008500000071000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000038502002a0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800f000100626f6e645f736c61766500000c000580060005000b000000"], 0x40}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1m28.475281924s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x3c, 0x3c, 0x9, 0x2100, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x3c}}, 0x0) 1m14.589322436s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x3c, 0x3c, 0x9, 0x2100, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x3c}}, 0x0) 1m4.106386567s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x3c, 0x3c, 0x9, 0x2100, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x3c}}, 0x0) 53.244291082s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x3c, 0x3c, 0x9, 0x2100, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x3c}}, 0x0) 39.294649728s ago: executing program 2 (id=748): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xd001, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000, 0x2, 0xff, 0x0, 0x8, 0xd}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10001) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r7, 0x8000000000081, 0x0) close(r6) 38.920667199s ago: executing program 4 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x3c, 0x3c, 0x9, 0x2100, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x3c}}, 0x0) 38.071861326s ago: executing program 0 (id=753): r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x14088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x40}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004800) 38.070727117s ago: executing program 2 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000601000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a0101000000000000000007"], 0xc0}}, 0x0) 37.787352634s ago: executing program 1 (id=757): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="51000397ffff", 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x18, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="03", 0x1, 0x4048801, 0x0, 0x0) 37.774938128s ago: executing program 0 (id=758): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="850000002a000000250000000080ffff9500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d068ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c89056a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66732ed5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b703043f4b2497ae5602473d8c1bb627d5f73790476a4a2e8b1f714553049a5efe348d13d8fc8e5b91c597e8c5c6601e8ef45d05cbb87f4f31d3a289271f44bf50c3cf93fe4bcfe0999959d9a50cb52b3016d6662d2e83cf00ed88d398d23a8c1e1e8253beadf71eb240a72f42917dd167b883759856cfb262bcc2151c0dbae0e28cfb5e70d40aee6701baaf47c3"], &(0x7f0000000000)='GPL\x00', 0xa, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036b3a1e3"], 0x38}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x98, 0x98, 0x1f8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff, 0xffffffff, 0xff, 0xffffff00], 0x5, 0x2, {0x12350f22}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x17, 0x0, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="918797a867e6", 0x6, 0x7, [0x1a, 0x22, 0x3c, 0x31, 0x1, 0x0, 0x9, 0x31, 0x31, 0x26, 0x3, 0x30, 0x23, 0x24, 0x1, 0x3e], 0x2, 0x1, 0xa}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xae, 0x2, 0x9d2a, 0x2841, 0x8, 0x1, 0x1}}, @common=@ah={{0x30}, {[0xfff, 0x1000]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x80, 0xd, [0x39, 0x40, 0x9, 0x3, 0x28, 0x29, 0x11, 0x6, 0x26, 0x28, 0x29, 0x14, 0x17, 0x3d, 0x21, 0x28], 0x0, 0x8, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}, 0x1c) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x3, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, @in6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x38) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={r11}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000540)="95c4e115f2016887070961d41fa2b399a0c0f72ae42f4245e8ec08335f28969f90f389971ee0d41d77d54d799ed708e337c1a1383342003411525b94ffbd23a626b656945471e26e7387f88f0db6dab2152f394a6a9db728ddaa5c99ccc09377ef0a09bf5f113a3ef9c12993cb924dfbb28f86c77a21bf3498521eee28293af3e7680d0d33f9467cc88f0a58709fc090ede930a70fc626ef36f35266f090b280ee63253b88fe6bd948aa68", 0xab}, {&(0x7f0000000180)="e8479f787fa94952ce37b175b528d3fd49cdd477df3048a8f740b6e2", 0x1c}], 0x2, &(0x7f0000000600)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x4, 0x6, 0x2, 0xd, 0x1, 0x3, r7}}, @sndinfo={0x20, 0x84, 0x2, {0xfd6, 0x4, 0x6, 0x2, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x93a1, 0xd, 0x4, 0x5, 0x10001, 0x8, 0x8000}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0xd0, 0x24000840}, 0x4044004) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x3ff}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x50, 0x10, 0x439, 0x70bd27, 0xffffffe9, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1ff}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x4008040) 37.699521944s ago: executing program 2 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) getsockopt$inet_mreqn(r1, 0x11c, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001440)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xb, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$inet_sctp(r2, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000170a0101"], 0x14}}, 0x0) 37.563287441s ago: executing program 1 (id=760): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8}]]}}}]}, 0x40}}, 0x0) listen(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ldst={0x2, 0x3, 0x1, 0xa, 0x2, 0xfffffffffffffffc, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x3}, @ldst={0x2, 0x0, 0x6, 0x4, 0x7, 0x80, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff00}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xf424d, &(0x7f0000000100)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f020001", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) 37.373690904s ago: executing program 2 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000540)="a2d0800e", 0x4}], 0x1, &(0x7f0000001c00)=[{0x10, 0x88, 0x4}, {0x10, 0x1, 0x2}], 0x20}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x54}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB='c '], 0x8) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0xd1000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x100, 0xdc93}, &(0x7f0000000140)=0x90) 37.040979556s ago: executing program 2 (id=763): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)={0x430, 0x3f3, 0x20, 0x70bd27, 0x25dfdbff, {0x6, 0x0, 0x2b, [0xbec, 0x8, 0x0, 0x15d1, 0x1, 0x4, 0x10, 0x0, 0x5, 0x7, 0xffffff66, 0x1, 0x5, 0x8, 0x8001, 0x2, 0x6, 0x8, 0x4, 0x1, 0xd, 0x1ff, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x2000, 0x8, 0x6, 0x5, 0x5, 0x3, 0x4, 0x1, 0x5, 0x8, 0x7fff, 0x1000, 0xfffffff1, 0x9, 0xfffffff7, 0x8000, 0x3, 0x12b, 0x0, 0x2292, 0x3, 0x8, 0x6, 0x2, 0x9, 0xffff, 0x1, 0x0, 0x6, 0x6, 0x0, 0x9, 0x7f, 0x9, 0x3, 0x8001], [0x80, 0x6, 0xdc, 0x0, 0x6, 0x0, 0x200, 0x3, 0xd91d, 0x7f, 0x11, 0x4, 0x2, 0x4, 0x0, 0x9, 0x7, 0x4, 0x2, 0x80000000, 0x8, 0x8000, 0x2, 0x1, 0x8, 0x6511, 0xf, 0x2, 0x4, 0x7, 0xe, 0x6, 0x5, 0x2, 0x6d0, 0x7, 0x6, 0x8, 0x401, 0xffff, 0xfffffff8, 0x5, 0x6, 0x2, 0x7, 0x1, 0x7, 0xffff, 0x2a6c, 0xffffffff, 0x3, 0x5, 0x2, 0x0, 0x9, 0x7fffffff, 0x4, 0x9, 0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0x4], [0x4, 0x648, 0x2, 0x4, 0x6, 0x7, 0x8, 0xcb8, 0x6, 0xa4, 0x3ff, 0xb, 0x2, 0x14, 0x80, 0x3ff, 0x994c, 0xf, 0x8000, 0x6, 0x9, 0x6, 0x2, 0x100, 0x3b7, 0x1, 0x5f6c, 0x0, 0x6, 0xfffffff7, 0x8001, 0x2, 0x1, 0x1ff, 0x0, 0x8, 0xf5d, 0x1ff, 0x3, 0x7fffffff, 0x6, 0x3, 0xe000000, 0x80000000, 0x3, 0x0, 0xa, 0x43f00000, 0x400, 0x6, 0x2, 0x7, 0x8, 0x3, 0x1000, 0x8, 0x2, 0xffffffff, 0x5, 0x7fffffff, 0x3, 0x7, 0x5, 0xfffffff7], [0x0, 0x4d1, 0x3, 0x9, 0x1ff, 0x2000, 0x40, 0xc, 0x8, 0x401, 0xfffffff7, 0x4, 0x5, 0x8a7f, 0x5, 0x3, 0x0, 0x6, 0x5, 0x2, 0x1, 0x2, 0x2, 0x7, 0x7, 0x7d39, 0x5, 0x0, 0x2, 0x2, 0x5, 0x2c, 0x1, 0x7, 0x3, 0x1536, 0x0, 0xd8, 0xfffffff3, 0x1cc, 0xee, 0x8, 0x80000000, 0x10, 0x3, 0x0, 0x2, 0x8, 0x5, 0x3, 0x1, 0x200, 0x7, 0x7, 0xe, 0x5, 0x3ff, 0x0, 0x3, 0x7, 0xeed, 0x3, 0x7, 0x2], 0x10, ['&--\x00', './\x00', ')%\x00', '\x00', 'lo\x00', ',\x00']}, ["", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a0001"], 0x48}}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)=@udp6, 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000080)={0x3, 'bridge_slave_0\x00', {0x8001}, 0x9}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0xd}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0) 36.995214192s ago: executing program 1 (id=764): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e29, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 36.794505385s ago: executing program 1 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000010b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10) 36.567565362s ago: executing program 0 (id=766): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xd001, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000, 0x2, 0xff, 0x0, 0x8, 0xd}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10001) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r7, 0x8000000000081, 0x0) close(r6) 36.349488298s ago: executing program 1 (id=767): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000003", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x0) 35.605270003s ago: executing program 2 (id=768): r0 = socket(0x5ea3ad9fe5835d10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r11, 0x10d, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) splice(r7, 0x0, r4, 0x0, 0x8000000008, 0x4) write(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978002300009c3d04000a00000000000000040004"], 0x1c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) sendmsg$NL80211_CMD_START_NAN(r13, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r14, 0xb, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x34}}, 0x4) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/131, 0x83}], 0x1, 0x9, 0xffffffff) 35.525592393s ago: executing program 0 (id=769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x40020002, @remote, 0x9}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3c, 0x100, @void}}}}}}}}, 0x0) unshare(0x20000400) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x20, 0x0, 0x89, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x1}, 0x0, 0x20000}}, 0xb8}}, 0x4008040) 35.399601881s ago: executing program 1 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000008000000000008000400fbffffff08000d"], 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x800, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) close(r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x44, r13, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @void, @void, @void, @void, @void, @void, @void}}]}, 0x44}}, 0x0) bind$ax25(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}}, 0x0) 35.209919797s ago: executing program 0 (id=771): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/7, 0x130d000, 0x800, 0x1, 0x2}, 0x6b) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000019c0)="98ffffffffffffffffad4cd8d874cf5f7aa6fbee0156354b3babfffadc04ef59dae88fb3204bd0d8a643e2ebde7da4031ead97d6a651a333a6d33b92e82518ea2a64dbaa9f69db2b6e301f62f11823e8ece44588932177", 0x57}], 0x1}}], 0x1, 0x4010080) pipe(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2b, 'memory'}, {0x2b, 'net_cls'}, {0x2b, 'perf_event'}, {0x2b, 'devices'}, {0x2b, 'perf_event'}]}, 0x32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'io'}, {0x2d, 'rlimit'}, {0x0, 'net_cls'}, {0x2b, 'net_cls'}, {0x50, 'freezer'}]}, 0x34) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000000c0)=0x8, 0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 34.745920347s ago: executing program 0 (id=772): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = accept$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801, 0x100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}]}, 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x14}, r4}, 0xc) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x6, @any, 0x5, 0x1}, 0xe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x1e, 0x0, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="050000000000000000fb0e00000008000300", @ANYRES32=r11, @ANYBLOB="4e000e008000000008021100000108021100000150505050505000000000000000000000640000000006010101010101010003010005030000002a010071070000000000000076060000000000000000080026007109000008000c006400000008000d0000000000"], 0x84}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x9, [@struct={0x8, 0x6, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x1, 0x6}, {0xc, 0x4, 0xb8}, {0x5, 0x1, 0x6}, {0xd, 0x5, 0x2}, {0x10, 0x0, 0xfff}, {0x10, 0x1, 0x5}]}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x0, 0x61, 0x2e, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000480)=""/171, 0x9d, 0xab, 0x0, 0xe6, 0x0, @void, @value}, 0x28) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) 20.54356398s ago: executing program 32 (id=768): r0 = socket(0x5ea3ad9fe5835d10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r11, 0x10d, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) splice(r7, 0x0, r4, 0x0, 0x8000000008, 0x4) write(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978002300009c3d04000a00000000000000040004"], 0x1c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) sendmsg$NL80211_CMD_START_NAN(r13, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r14, 0xb, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x34}}, 0x4) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/131, 0x83}], 0x1, 0x9, 0xffffffff) 19.415162807s ago: executing program 33 (id=772): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = accept$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801, 0x100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}]}, 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x14}, r4}, 0xc) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x6, @any, 0x5, 0x1}, 0xe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x1e, 0x0, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="050000000000000000fb0e00000008000300", @ANYRES32=r11, @ANYBLOB="4e000e008000000008021100000108021100000150505050505000000000000000000000640000000006010101010101010003010005030000002a010071070000000000000076060000000000000000080026007109000008000c006400000008000d0000000000"], 0x84}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x9, [@struct={0x8, 0x6, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x1, 0x6}, {0xc, 0x4, 0xb8}, {0x5, 0x1, 0x6}, {0xd, 0x5, 0x2}, {0x10, 0x0, 0xfff}, {0x10, 0x1, 0x5}]}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x0, 0x61, 0x2e, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000480)=""/171, 0x9d, 0xab, 0x0, 0xe6, 0x0, @void, @value}, 0x28) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) 19.353520586s ago: executing program 34 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000008000000000008000400fbffffff08000d"], 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x800, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) close(r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x44, r13, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @void, @void, @void, @void, @void, @void, @void}}]}, 0x44}}, 0x0) bind$ax25(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}}, 0x0) 18.226310167s ago: executing program 3 (id=777): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x95}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 17.769705537s ago: executing program 3 (id=778): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)={0x430, 0x3f3, 0x20, 0x70bd27, 0x25dfdbff, {0x6, 0x0, 0x2b, [0xbec, 0x8, 0x0, 0x15d1, 0x1, 0x4, 0x10, 0x0, 0x5, 0x7, 0xffffff66, 0x1, 0x5, 0x8, 0x8001, 0x2, 0x6, 0x8, 0x4, 0x1, 0xd, 0x1ff, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x2000, 0x8, 0x6, 0x5, 0x5, 0x3, 0x4, 0x1, 0x5, 0x8, 0x7fff, 0x1000, 0xfffffff1, 0x9, 0xfffffff7, 0x8000, 0x3, 0x12b, 0x0, 0x2292, 0x3, 0x8, 0x6, 0x2, 0x9, 0xffff, 0x1, 0x0, 0x6, 0x6, 0x0, 0x9, 0x7f, 0x9, 0x3, 0x8001], [0x80, 0x6, 0xdc, 0x0, 0x6, 0x0, 0x200, 0x3, 0xd91d, 0x7f, 0x11, 0x4, 0x2, 0x4, 0x0, 0x9, 0x7, 0x4, 0x2, 0x80000000, 0x8, 0x8000, 0x2, 0x1, 0x8, 0x6511, 0xf, 0x2, 0x4, 0x7, 0xe, 0x6, 0x5, 0x2, 0x6d0, 0x7, 0x6, 0x8, 0x401, 0xffff, 0xfffffff8, 0x5, 0x6, 0x2, 0x7, 0x1, 0x7, 0xffff, 0x2a6c, 0xffffffff, 0x3, 0x5, 0x2, 0x0, 0x9, 0x7fffffff, 0x4, 0x9, 0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0x4], [0x4, 0x648, 0x2, 0x4, 0x6, 0x7, 0x8, 0xcb8, 0x6, 0xa4, 0x3ff, 0xb, 0x2, 0x14, 0x80, 0x3ff, 0x994c, 0xf, 0x8000, 0x6, 0x9, 0x6, 0x2, 0x100, 0x3b7, 0x1, 0x5f6c, 0x0, 0x6, 0xfffffff7, 0x8001, 0x2, 0x1, 0x1ff, 0x0, 0x8, 0xf5d, 0x1ff, 0x3, 0x7fffffff, 0x6, 0x3, 0xe000000, 0x80000000, 0x3, 0x0, 0xa, 0x43f00000, 0x400, 0x6, 0x2, 0x7, 0x8, 0x3, 0x1000, 0x8, 0x2, 0xffffffff, 0x5, 0x7fffffff, 0x3, 0x7, 0x5, 0xfffffff7], [0x0, 0x4d1, 0x3, 0x9, 0x1ff, 0x2000, 0x40, 0xc, 0x8, 0x401, 0xfffffff7, 0x4, 0x5, 0x8a7f, 0x5, 0x3, 0x0, 0x6, 0x5, 0x2, 0x1, 0x2, 0x2, 0x7, 0x7, 0x7d39, 0x5, 0x0, 0x2, 0x2, 0x5, 0x2c, 0x1, 0x7, 0x3, 0x1536, 0x0, 0xd8, 0xfffffff3, 0x1cc, 0xee, 0x8, 0x80000000, 0x10, 0x3, 0x0, 0x2, 0x8, 0x5, 0x3, 0x1, 0x200, 0x7, 0x7, 0xe, 0x5, 0x3ff, 0x0, 0x3, 0x7, 0xeed, 0x3, 0x7, 0x2], 0x10, ['&--\x00', './\x00', ')%\x00', '\x00', 'lo\x00', ',\x00']}, ["", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a0001"], 0x48}}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000540)=@udp6, 0x2}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000080)={0x3, 'bridge_slave_0\x00', {0x8001}, 0x9}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0xd}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0) 16.768552504s ago: executing program 3 (id=779): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xd001, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000, 0x2, 0xff, 0x0, 0x8, 0xd}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="85000000610000003500000000000020850000000500000095000000000000000001000000000000200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b0800000000000000087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c31a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5408e4dbfdb2fbfec699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d03"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10001) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r7, 0x8000000000081, 0x0) close(r6) 16.362736892s ago: executing program 3 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x8000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (fail_nth: 2) 15.575969922s ago: executing program 3 (id=781): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.178626721s ago: executing program 3 (id=782): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, r1}, {0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x8000}, {0x0, 0x20000000}, 0x0, 0xfffffffd, 0x0, 0x1, 0x2}, {{@in=@empty, 0xfffffffd, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x5db2}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x48}}, 0x0) r2 = getgid() r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000002040)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002080)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0xc) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002140)='cgroup.threads\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r12 = gettid() sendmsg$unix(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r12}}}], 0x20}, 0x20040001) r13 = getpid() r14 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002200)='cgroup.max.descendants\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000022c0)={0x0, 0x0, 0x0}, &(0x7f0000002300)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="d62e65e0044882ffb109aecfa7edb58b1dd846d5d0d73339211fd1156df2dfad23229f718c283aefd13ca4d33f5bde65a7ba1734792b9623539a31182dfe5ebf36dd5a7ad6c5f7842c0b5bf98cc8fc941619a4cff2c14908c81e8c303471a16bdcd0b3f8cd1961c6b78a218b7554687165718292a2fb80cac1bc62bdf7088f1a797114f2e553ed823c95a1d6c64fced589f2961e5fd600f8f215ca491cf8c635ec88e1c1fec3999d8df7741c919de439f37f7a58158923d2adaf7967035a271bea0b7e145a60bb9969b2af25e0e809b90e84f56c", 0xd4}, {&(0x7f0000000400)="29b743e29cd00c02ba0b276e1f9673efe560d4259156c1aa21e65e9470d38e1abb75b968c1a293211f5b", 0x2a}, {&(0x7f0000000440)="53ec5808d384e2218dd2c2871e84a950f05a1cccf6fee3309e2bdb1f1d226ecd610232c6d4bc9ee58db9557c9198d3acc973e8d1fb0d5fcbfc52e600dca3731d61ee2cb8f7a77e141306ab752632aabdc94b845260b67274ad10f3569955", 0x5e}, {&(0x7f00000004c0)="e5c49d9ddfa8", 0x6}], 0x4, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}], 0x108, 0x4008000}}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x68, 0x884}}, {{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)="5726540f7909c4bb5f43bcb583e43ea5557baae62c497bc2405b97a9e877bcaba680d62de6e655bc1900a8cf722b795f5c85ce43bfab75985454d1e3e86e10f068e1c5b92fa06135fd5dccad098d625ba0264de548c59d384bd6bb2b0c01810b25069eaa93eccd802b6b947abed58f3ca946b21d826fe3a7138975033a9812d203d868dd76343c01ff9f", 0x8a}, {&(0x7f0000000a40)="856548b1323e66cf8b152240a6015ae65e0295aff7f294314833328d2aa01ce78a2a28c723b73b4c4d9be9ac378dba555c8869c2379eba639a40d5b1f43d6255d417ba4c25198fd4b4bfb78beb5893c29184b29d4eb208ae0da9b90670a108e4582dab44adff70776651ea6c341d37d992a5f5851bb86b09b38eba820776e87071df3eb37ff7ff25cd27d4ce543ed5923436fbcf1c85fdd9fa1c3a90fa6ec68b4fb53668bf300465ab7e8b7804621bc5c231452327c9bc6025104c803aa98ed890a389070ac8e675a841ab003b2471b3af66aa80f1fd7b654d9673c2e0f3bc1a8518dcb6a2fa9c3a", 0xe8}], 0x2, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r4, r4, r16, r10]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @rights={{0x1c, 0x1, 0x1, [r16, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x4004800}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)="55451befe59f27d52977648c1a65c27e2557db8bf244776dabdcb3ee1f9510dd6ed4715d1035ab9fdedc5d26f2958cba2416d47838718aba76665c2fd35e28d044248837f401babd6a0bed87a29693b6c9f97ba74cbc1873df8e046ead16cd047ac4054ef60858dacb36e45fbcd19182b1fe61af9992be961c4d0be81e49f172a573d15777df494bd46e25f4469b38a50b7a3b1c432d31978145d035ec86961fae2240063646858b538c9abbb8e5f3a6fe95a4321ceaefa280c2fb5f77f7da5d5b12b476514c2dcbf3f6d17f0cfda6dec70cd8bb0f70f077f1376dab8bd420175fe859cce0faa5843efe605f2fce2201", 0xf0}, {&(0x7f0000001000)="0a1d5ec4ab", 0x5}], 0x2, &(0x7f0000001200)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x90, 0x800}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000012c0)="aad9cbfeb4eb7287593fc0ee67df0b703d7f978e9cb365155f4414a5e00ebcefecbeaeda6244475966f697b9ec17a97f0d9a3aa9fe3c88c094434e05bbcbe61ef81513550820e3ec6be827d235a74ef3aa932bbecd7b851781f28b5f41d026636ba3ebdc20eec5366a8cbedd20974de25b6b8509a06368ec9419a33a4665e93f0443548e269e44d7765329ac25e961484c93933639c9f493e204d66085c01fdb1442e1e8590508df19eb2fe82094a87bffc5937624ab574326065cd7836661ac6f87b604781aee6854b595a67a3c1cf6f9fdf2b0845a6f9693655099ddc69e061c", 0xe1}, {&(0x7f00000013c0)="500f14d1", 0x4}, {&(0x7f0000001400)="4fd11f88cabd2fe2", 0x8}, {&(0x7f0000001440)="9eb75afb8c9b7eecfeb4e378f9427bd81fee2a6a99b5cd7585b41bd3640d539999314a517c2585cb0ee24167436352ab0dc4449362c87a239687ed51452c689d22a71af3371bdc141adedf7154d1eb3a8c61134e3d5d5ed20ce1b2ba21c89a98b0ec39d5922cbd99288258d27bec03491983849273b8aaff94564a56a981b7a0a267d84281a22fb74e3c421d036260886a14740f627df14b0f17aefa87c4b89ee1c1c84b8de8c1fc3bccbeb2652c60b0d3ff4005572d81adfa38618ebd05", 0xbe}, {&(0x7f0000001500)="5add8e8924cb7dac736cd0ba1574bd45910f5ab2e549598f72cb265e8320348f18e21e894839c0094d6d92c5c872486a8d5085ec56d548642b4205c37fde9ccd8a4c74a62a1c79df696f6ff1854d8fb2b1d60a3ea865feca0e4de7b65509b8518c1b243ddbb88aad485ae5314748f7cf4f62fc85397a881be8062503ae513b92c9a18cd5332037fdce90a2ac74b11aeaf62b53b7404050d432b789da8afd70", 0x9f}], 0x5, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x148, 0x48800}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001a80)="153b2fcd8a70ed4ef3ecc791ad61e39a4b8640515c28efe6b1c5a290", 0x1c}, {&(0x7f0000001ac0)="6a3f745b88efe913e3c5915101ad26d7a907411a8e7e25c609d60f2746d311fab6ba788d8e7d101a722019d54e4fcd5f65ccb64bf800271626e4c4181b1ded1c47", 0x41}, {&(0x7f0000001b40)="227f50f3fa9b9182f03b722ff3c54309fbe5b3a9dc1ae273b348f9b2768846683f4592773e3c0ca32b6458bbb428b58ef1421d53350272fc57b71c4233bb27eae1b4aa45b96126fe501c538daf99018f0c7075f184dc2480d5ec62e053dd0855cde11b9008bf0c46eae2f493495b26e9bb6b3624277c32dcfb64c7a1660466d87fd205a3157b60678363cb8ff6d1910600e2f9d6b04e7c258717f2f9ed48075a395c5dd1752eefbeb14746a3d105511e4c8afe00a67ddefde779318634d182d617fbb871fd9b865f", 0xc8}, {&(0x7f0000001c40)="218dbcb0897c93ca50a260ad8ccb21d5123d8b4de5b1f4d90d30b8d386927a5bb7c2642eac418883f336adb471c26cc8aca3458f046b7d088e318d2f4959a73a67e10053b886bfd8363a76ad058c1714ab7dfcaddb4b313b", 0x58}], 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES16=r17, @ANYRES32=r0, @ANYBLOB="1c7ca9ac18161390e16f000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40008d0}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x9de}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e40)="3a0d526a4ead62739bcdadbf9c6589a128aebaf5037e918ed998cdd6d8ebfae6483d472342633de13d0ea14b5cbf8f67b74366078a9a0d968af6fb0a9b1582048ede376c3da6def399eb0f7cc6b2c1154fc57e1abfde", 0x56}, {&(0x7f0000001ec0)="bb01cce57ede0958db3ee3546b0a11e3d8e777ccfe94fc37b276d1e62274461e245063f82a85e160946cef3ff62fc03328e8a4a7555bdca770d2bbfbccc8aeb3b2efbeb2bf163b5970f745b84b5552779d7824cfa966cc726a1385329611706a4a4fad3788b69baccad6bc227c3d14411e965776e8d29aa2284670d9a1d6e0f77f6dc7814ebec2250bd997f799bbbd7426be", 0x92}], 0x2, &(0x7f0000002340)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c001a0000fbc3e582d3000000336094", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0001000034000100"/20, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES8=r18, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r16, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x178, 0x20000810}}], 0x7, 0x0) r20 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r20, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r20, &(0x7f0000000040)={0x1d, r21, 0x2, {0x1, 0x1, 0x2}, 0x2}, 0x18) sendmmsg(r20, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 0s ago: executing program 35 (id=782): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, r1}, {0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x8000}, {0x0, 0x20000000}, 0x0, 0xfffffffd, 0x0, 0x1, 0x2}, {{@in=@empty, 0xfffffffd, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x5db2}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}, @IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x48}}, 0x0) r2 = getgid() r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000002040)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002080)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0xc) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002140)='cgroup.threads\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r12 = gettid() sendmsg$unix(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r12}}}], 0x20}, 0x20040001) r13 = getpid() r14 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, 0x0}, &(0x7f00000021c0)=0xc) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002200)='cgroup.max.descendants\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000022c0)={0x0, 0x0, 0x0}, &(0x7f0000002300)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="d62e65e0044882ffb109aecfa7edb58b1dd846d5d0d73339211fd1156df2dfad23229f718c283aefd13ca4d33f5bde65a7ba1734792b9623539a31182dfe5ebf36dd5a7ad6c5f7842c0b5bf98cc8fc941619a4cff2c14908c81e8c303471a16bdcd0b3f8cd1961c6b78a218b7554687165718292a2fb80cac1bc62bdf7088f1a797114f2e553ed823c95a1d6c64fced589f2961e5fd600f8f215ca491cf8c635ec88e1c1fec3999d8df7741c919de439f37f7a58158923d2adaf7967035a271bea0b7e145a60bb9969b2af25e0e809b90e84f56c", 0xd4}, {&(0x7f0000000400)="29b743e29cd00c02ba0b276e1f9673efe560d4259156c1aa21e65e9470d38e1abb75b968c1a293211f5b", 0x2a}, {&(0x7f0000000440)="53ec5808d384e2218dd2c2871e84a950f05a1cccf6fee3309e2bdb1f1d226ecd610232c6d4bc9ee58db9557c9198d3acc973e8d1fb0d5fcbfc52e600dca3731d61ee2cb8f7a77e141306ab752632aabdc94b845260b67274ad10f3569955", 0x5e}, {&(0x7f00000004c0)="e5c49d9ddfa8", 0x6}], 0x4, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}], 0x108, 0x4008000}}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x68, 0x884}}, {{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000980)="5726540f7909c4bb5f43bcb583e43ea5557baae62c497bc2405b97a9e877bcaba680d62de6e655bc1900a8cf722b795f5c85ce43bfab75985454d1e3e86e10f068e1c5b92fa06135fd5dccad098d625ba0264de548c59d384bd6bb2b0c01810b25069eaa93eccd802b6b947abed58f3ca946b21d826fe3a7138975033a9812d203d868dd76343c01ff9f", 0x8a}, {&(0x7f0000000a40)="856548b1323e66cf8b152240a6015ae65e0295aff7f294314833328d2aa01ce78a2a28c723b73b4c4d9be9ac378dba555c8869c2379eba639a40d5b1f43d6255d417ba4c25198fd4b4bfb78beb5893c29184b29d4eb208ae0da9b90670a108e4582dab44adff70776651ea6c341d37d992a5f5851bb86b09b38eba820776e87071df3eb37ff7ff25cd27d4ce543ed5923436fbcf1c85fdd9fa1c3a90fa6ec68b4fb53668bf300465ab7e8b7804621bc5c231452327c9bc6025104c803aa98ed890a389070ac8e675a841ab003b2471b3af66aa80f1fd7b654d9673c2e0f3bc1a8518dcb6a2fa9c3a", 0xe8}], 0x2, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r4, r4, r16, r10]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @rights={{0x1c, 0x1, 0x1, [r16, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158, 0x4004800}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)="55451befe59f27d52977648c1a65c27e2557db8bf244776dabdcb3ee1f9510dd6ed4715d1035ab9fdedc5d26f2958cba2416d47838718aba76665c2fd35e28d044248837f401babd6a0bed87a29693b6c9f97ba74cbc1873df8e046ead16cd047ac4054ef60858dacb36e45fbcd19182b1fe61af9992be961c4d0be81e49f172a573d15777df494bd46e25f4469b38a50b7a3b1c432d31978145d035ec86961fae2240063646858b538c9abbb8e5f3a6fe95a4321ceaefa280c2fb5f77f7da5d5b12b476514c2dcbf3f6d17f0cfda6dec70cd8bb0f70f077f1376dab8bd420175fe859cce0faa5843efe605f2fce2201", 0xf0}, {&(0x7f0000001000)="0a1d5ec4ab", 0x5}], 0x2, &(0x7f0000001200)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x90, 0x800}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000012c0)="aad9cbfeb4eb7287593fc0ee67df0b703d7f978e9cb365155f4414a5e00ebcefecbeaeda6244475966f697b9ec17a97f0d9a3aa9fe3c88c094434e05bbcbe61ef81513550820e3ec6be827d235a74ef3aa932bbecd7b851781f28b5f41d026636ba3ebdc20eec5366a8cbedd20974de25b6b8509a06368ec9419a33a4665e93f0443548e269e44d7765329ac25e961484c93933639c9f493e204d66085c01fdb1442e1e8590508df19eb2fe82094a87bffc5937624ab574326065cd7836661ac6f87b604781aee6854b595a67a3c1cf6f9fdf2b0845a6f9693655099ddc69e061c", 0xe1}, {&(0x7f00000013c0)="500f14d1", 0x4}, {&(0x7f0000001400)="4fd11f88cabd2fe2", 0x8}, {&(0x7f0000001440)="9eb75afb8c9b7eecfeb4e378f9427bd81fee2a6a99b5cd7585b41bd3640d539999314a517c2585cb0ee24167436352ab0dc4449362c87a239687ed51452c689d22a71af3371bdc141adedf7154d1eb3a8c61134e3d5d5ed20ce1b2ba21c89a98b0ec39d5922cbd99288258d27bec03491983849273b8aaff94564a56a981b7a0a267d84281a22fb74e3c421d036260886a14740f627df14b0f17aefa87c4b89ee1c1c84b8de8c1fc3bccbeb2652c60b0d3ff4005572d81adfa38618ebd05", 0xbe}, {&(0x7f0000001500)="5add8e8924cb7dac736cd0ba1574bd45910f5ab2e549598f72cb265e8320348f18e21e894839c0094d6d92c5c872486a8d5085ec56d548642b4205c37fde9ccd8a4c74a62a1c79df696f6ff1854d8fb2b1d60a3ea865feca0e4de7b65509b8518c1b243ddbb88aad485ae5314748f7cf4f62fc85397a881be8062503ae513b92c9a18cd5332037fdce90a2ac74b11aeaf62b53b7404050d432b789da8afd70", 0x9f}], 0x5, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x148, 0x48800}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001a80)="153b2fcd8a70ed4ef3ecc791ad61e39a4b8640515c28efe6b1c5a290", 0x1c}, {&(0x7f0000001ac0)="6a3f745b88efe913e3c5915101ad26d7a907411a8e7e25c609d60f2746d311fab6ba788d8e7d101a722019d54e4fcd5f65ccb64bf800271626e4c4181b1ded1c47", 0x41}, {&(0x7f0000001b40)="227f50f3fa9b9182f03b722ff3c54309fbe5b3a9dc1ae273b348f9b2768846683f4592773e3c0ca32b6458bbb428b58ef1421d53350272fc57b71c4233bb27eae1b4aa45b96126fe501c538daf99018f0c7075f184dc2480d5ec62e053dd0855cde11b9008bf0c46eae2f493495b26e9bb6b3624277c32dcfb64c7a1660466d87fd205a3157b60678363cb8ff6d1910600e2f9d6b04e7c258717f2f9ed48075a395c5dd1752eefbeb14746a3d105511e4c8afe00a67ddefde779318634d182d617fbb871fd9b865f", 0xc8}, {&(0x7f0000001c40)="218dbcb0897c93ca50a260ad8ccb21d5123d8b4de5b1f4d90d30b8d386927a5bb7c2642eac418883f336adb471c26cc8aca3458f046b7d088e318d2f4959a73a67e10053b886bfd8363a76ad058c1714ab7dfcaddb4b313b", 0x58}], 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES16=r17, @ANYRES32=r0, @ANYBLOB="1c7ca9ac18161390e16f000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40008d0}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x9de}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e40)="3a0d526a4ead62739bcdadbf9c6589a128aebaf5037e918ed998cdd6d8ebfae6483d472342633de13d0ea14b5cbf8f67b74366078a9a0d968af6fb0a9b1582048ede376c3da6def399eb0f7cc6b2c1154fc57e1abfde", 0x56}, {&(0x7f0000001ec0)="bb01cce57ede0958db3ee3546b0a11e3d8e777ccfe94fc37b276d1e62274461e245063f82a85e160946cef3ff62fc03328e8a4a7555bdca770d2bbfbccc8aeb3b2efbeb2bf163b5970f745b84b5552779d7824cfa966cc726a1385329611706a4a4fad3788b69baccad6bc227c3d14411e965776e8d29aa2284670d9a1d6e0f77f6dc7814ebec2250bd997f799bbbd7426be", 0x92}], 0x2, &(0x7f0000002340)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="1c001a0000fbc3e582d3000000336094", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0001000034000100"/20, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES8=r18, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r16, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x178, 0x20000810}}], 0x7, 0x0) r20 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r20, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r20, &(0x7f0000000040)={0x1d, r21, 0x2, {0x1, 0x1, 0x2}, 0x2}, 0x18) sendmmsg(r20, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) kernel console output (not intermixed with test programs): functionality. [ 77.293205][ T5245] veth1_vlan: entered promiscuous mode [ 77.453865][ T5239] veth0_macvtap: entered promiscuous mode [ 77.488196][ T5245] veth0_macvtap: entered promiscuous mode [ 77.503066][ T5239] veth1_macvtap: entered promiscuous mode [ 77.520499][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.531432][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.541841][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.552745][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.564186][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.575336][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.587453][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.597885][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.608482][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.618426][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.628959][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.639167][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.647376][ T5320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.649873][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.673065][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.695436][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 77.697838][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.709934][ T5239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.723352][ T5239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.724136][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.736817][ T5239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.748770][ T5239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.779264][ T5245] veth1_macvtap: entered promiscuous mode [ 77.812991][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.823898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.861027][ T4626] Bluetooth: hci1: command tx timeout [ 77.871687][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.880299][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.898828][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.909479][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.919708][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.931113][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.941830][ T4626] Bluetooth: hci0: command tx timeout [ 77.948052][ T4626] Bluetooth: hci2: command tx timeout [ 77.954238][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.964992][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.981295][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.992107][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.003924][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.016047][ T5238] Bluetooth: hci3: command tx timeout [ 78.019979][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.039542][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.050825][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.068065][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.080317][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.091242][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.101455][ T5238] Bluetooth: hci4: command tx timeout [ 78.107509][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.118404][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.129784][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.140334][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.156892][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.192966][ T5245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.223114][ T5245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.235020][ T5245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.244159][ T5245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.294778][ T5329] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.310810][ T5329] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 78.322992][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.356095][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.541834][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.556623][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.577138][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.585032][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.669937][ T5335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.702743][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.732718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.043418][ T5341] team0: Device veth0_vlan failed to register rx_handler [ 79.385991][ T5351] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 79.456114][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.480492][ T5351] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.508528][ T5352] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 79.545245][ T5352] bond0: (slave team0): Releasing backup interface [ 79.588047][ T5352] bridge0: port 3(team0) entered blocking state [ 79.604048][ T5352] bridge0: port 3(team0) entered disabled state [ 79.610941][ T5352] team0: entered allmulticast mode [ 79.636258][ T5360] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 79.636963][ T5352] team_slave_0: entered allmulticast mode [ 79.654400][ T5352] team_slave_1: entered allmulticast mode [ 79.662664][ T5352] team0: entered promiscuous mode [ 79.667972][ T5352] team_slave_0: entered promiscuous mode [ 79.674018][ T5352] team_slave_1: entered promiscuous mode [ 79.937760][ T5238] Bluetooth: hci1: command tx timeout [ 80.020133][ T5238] Bluetooth: hci2: command tx timeout [ 80.025757][ T4626] Bluetooth: hci0: command tx timeout [ 80.096585][ T5238] Bluetooth: hci3: command tx timeout [ 80.176467][ T5238] Bluetooth: hci4: command tx timeout [ 81.309921][ T5363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 81.572085][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 81.989612][ T5382] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 82.175065][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 82.196027][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.266645][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.316827][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.332415][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.014858][ T5397] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.225971][ T5403] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.294747][ T5410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.361137][ T5409] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.616130][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 84.409836][ T5421] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.657052][ T5422] xfrm1: entered allmulticast mode [ 84.947795][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 85.101020][ T5438] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 85.127312][ T5443] netlink: 9 bytes leftover after parsing attributes in process `syz.1.38'. [ 85.144214][ T5443] 0·: renamed from hsr0 (while UP) [ 85.158846][ T5443] 0·: entered allmulticast mode [ 85.165268][ T5443] hsr_slave_0: entered allmulticast mode [ 85.172101][ T5443] hsr_slave_1: entered allmulticast mode [ 85.180849][ T5443] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 85.210401][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 85.237733][ T5444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.268679][ T5444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.336838][ T5444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.357240][ T5444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.490547][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 85.515705][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.545620][ T5455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.592949][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.652579][ T5455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.245777][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 86.324748][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 86.929308][ T5476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 86.975230][ T5476] netlink: 2 bytes leftover after parsing attributes in process `syz.2.46'. [ 87.068861][ T937] cfg80211: failed to load regulatory.db [ 87.137651][ T5482] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 87.441263][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.469434][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.506006][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.513496][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.593002][ T5492] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 87.626911][ T5495] 0·: renamed from hsr0 (while UP) [ 87.634209][ T5495] 0·: entered allmulticast mode [ 87.641540][ T5495] hsr_slave_0: entered allmulticast mode [ 87.657769][ T5495] hsr_slave_1: entered allmulticast mode [ 87.682889][ T5495] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 87.982391][ T5500] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 88.033628][ T5501] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 88.404926][ T5515] Zero length message leads to an empty skb [ 89.184509][ T5536] __nla_validate_parse: 5 callbacks suppressed [ 89.184530][ T5536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 89.427238][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.552118][ T5546] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.321280][ T5559] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 90.357640][ T5558] netlink: 'syz.0.71': attribute type 4 has an invalid length. [ 90.457317][ T5560] netlink: 'syz.0.71': attribute type 4 has an invalid length. [ 90.521026][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 90.740337][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.748568][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.785259][ T5553] bridge0: entered promiscuous mode [ 91.447617][ T5587] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.483471][ T5586] netlink: 9 bytes leftover after parsing attributes in process `syz.4.77'. [ 91.520439][ T5586] 0·: renamed from hsr0 (while UP) [ 91.557080][ T5586] 0·: entered allmulticast mode [ 91.575247][ T5586] hsr_slave_0: entered allmulticast mode [ 91.593870][ T5586] hsr_slave_1: entered allmulticast mode [ 91.610420][ T5586] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 92.180441][ T2913] wlan0: Trigger new scan to find an IBSS to join [ 92.211616][ T5602] netlink: 9 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.251289][ T5602] 1·: renamed from 70· (while UP) [ 92.276195][ T5602] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 92.292697][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 92.307215][ T5607] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 92.316235][ T5605] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 92.341487][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 92.526793][ T5612] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 92.601897][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 92.643620][ T5621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 92.921888][ T5628] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 93.648760][ T5632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.227806][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'. [ 94.245021][ T5649] netlink: 2 bytes leftover after parsing attributes in process `syz.0.101'. [ 94.279242][ T5651] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.435751][ T5655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.135634][ T2913] wlan0: Trigger new scan to find an IBSS to join [ 95.356908][ T5677] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 95.445194][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 95.556225][ T5682] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 95.587504][ T5685] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.914703][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 96.175647][ T2961] wlan0: Trigger new scan to find an IBSS to join [ 96.654772][ T5696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.821827][ T5703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.017211][ T5709] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 97.060460][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.140161][ T5713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.690578][ T5724] net_ratelimit: 1 callbacks suppressed [ 97.690600][ T5724] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 98.075394][ T5734] bridge2: entered promiscuous mode [ 98.107612][ T5734] bridge2: entered allmulticast mode [ 98.149312][ T5734] team0: Port device bridge2 added [ 98.186833][ T2913] wlan0: Trigger new scan to find an IBSS to join [ 98.208791][ T5734] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 98.221967][ T5737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.323376][ T5734] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.362718][ T5734] bridge0: port 4(ip6gretap0) entered blocking state [ 98.371432][ T5734] bridge0: port 4(ip6gretap0) entered disabled state [ 98.379068][ T5734] ip6gretap0: entered allmulticast mode [ 98.388710][ T5734] ip6gretap0: entered promiscuous mode [ 98.396701][ T5734] bridge0: port 4(ip6gretap0) entered blocking state [ 98.403826][ T5734] bridge0: port 4(ip6gretap0) entered forwarding state [ 98.687245][ T5750] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 98.810086][ T5748] netlink: 9 bytes leftover after parsing attributes in process `syz.4.130'. [ 98.826416][ T5748] 1·: renamed from 70· (while UP) [ 98.837240][ T5748] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 98.950480][ T5752] netlink: 104 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.978002][ T5758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'. [ 99.026617][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 99.125852][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.136112][ T2889] wlan0: Trigger new scan to find an IBSS to join [ 99.203892][ T5766] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.273824][ T5756] team0 (unregistering): Port device team_slave_0 removed [ 99.290599][ T5756] team0 (unregistering): Port device team_slave_1 removed [ 99.306693][ T5770] Bluetooth: MGMT ver 1.23 [ 99.609579][ T5774] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 99.964741][ T5792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.144'. [ 100.469929][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.149'. [ 100.508308][ T5802] netlink: 2 bytes leftover after parsing attributes in process `syz.2.149'. [ 100.560230][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 100.646161][ T5809] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 100.696561][ T5813] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 100.818113][ T5819] team0: Device veth0_vlan failed to register rx_handler [ 101.058282][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 101.375871][ T4626] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.376112][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.442420][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 101.456543][ T5837] netlink: 228 bytes leftover after parsing attributes in process `syz.2.159'. [ 101.475663][ T5837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.159'. [ 101.638954][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 101.748134][ T5844] ip6gretap1: entered allmulticast mode [ 101.960151][ T5853] netlink: 'syz.2.166': attribute type 3 has an invalid length. [ 101.982292][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 101.998960][ T5853] openvswitch: netlink: Flow key attr not present in new flow. [ 102.308148][ T5869] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 102.383810][ T5872] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 102.554805][ T5880] IPVS: length: 60 != 8 [ 103.318423][ T5903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.346561][ T5906] netlink: 'syz.2.187': attribute type 18 has an invalid length. [ 104.013851][ T5937] netlink: 'syz.4.198': attribute type 4 has an invalid length. [ 104.068136][ T5941] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 104.087578][ T5939] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 104.106319][ T5937] netlink: 'syz.4.198': attribute type 8 has an invalid length. [ 104.636747][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.664618][ T5969] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 104.781100][ T5973] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.232775][ T5989] __nla_validate_parse: 8 callbacks suppressed [ 105.232797][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 105.711727][ T6007] x_tables: unsorted entry at hook 2 [ 105.739654][ T6003] netlink: 'syz.3.215': attribute type 10 has an invalid length. [ 105.754403][ T6003] team0: Device ipvlan1 failed to register rx_handler [ 105.804891][ T6010] FAULT_INJECTION: forcing a failure. [ 105.804891][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 105.818521][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.0.218 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 105.829162][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.839255][ T6010] Call Trace: [ 105.842544][ T6010] [ 105.845489][ T6010] dump_stack_lvl+0x241/0x360 [ 105.850198][ T6010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.855409][ T6010] ? __pfx__printk+0x10/0x10 [ 105.860014][ T6010] ? ref_tracker_alloc+0x332/0x490 [ 105.865132][ T6010] should_fail_ex+0x3b0/0x4e0 [ 105.869825][ T6010] ? skb_clone+0x20c/0x390 [ 105.874342][ T6010] should_failslab+0xac/0x100 [ 105.879035][ T6010] ? skb_clone+0x20c/0x390 [ 105.883905][ T6010] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 105.889302][ T6010] skb_clone+0x20c/0x390 [ 105.893560][ T6010] __netlink_deliver_tap+0x3cc/0x7c0 [ 105.898869][ T6010] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.904095][ T6010] netlink_deliver_tap+0x19d/0x1b0 [ 105.909242][ T6010] netlink_unicast+0x7c4/0x990 [ 105.914033][ T6010] ? __pfx_netlink_unicast+0x10/0x10 [ 105.919338][ T6010] ? __virt_addr_valid+0x183/0x530 [ 105.924460][ T6010] ? __check_object_size+0x48e/0x900 [ 105.929766][ T6010] netlink_sendmsg+0x8e4/0xcb0 [ 105.934550][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.939847][ T6010] ? aa_sock_msg_perm+0x91/0x160 [ 105.944801][ T6010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.950093][ T6010] __sock_sendmsg+0x221/0x270 [ 105.954788][ T6010] ____sys_sendmsg+0x52a/0x7e0 [ 105.959605][ T6010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.965258][ T6010] __sys_sendmsg+0x292/0x380 [ 105.969889][ T6010] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.975049][ T6010] ? __pfx_vfs_write+0x10/0x10 [ 105.979841][ T6010] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.986187][ T6010] ? do_syscall_64+0x100/0x230 [ 105.991061][ T6010] ? do_syscall_64+0xb6/0x230 [ 105.995757][ T6010] do_syscall_64+0xf3/0x230 [ 106.000275][ T6010] ? clear_bhb_loop+0x35/0x90 [ 106.004977][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.010899][ T6010] RIP: 0033:0x7f3e2177e719 [ 106.015329][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.034944][ T6010] RSP: 002b:00007f3e2262e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.043371][ T6010] RAX: ffffffffffffffda RBX: 00007f3e21935f80 RCX: 00007f3e2177e719 [ 106.051351][ T6010] RDX: 0000000004000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 106.059332][ T6010] RBP: 00007f3e2262e090 R08: 0000000000000000 R09: 0000000000000000 [ 106.067318][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.075305][ T6010] R13: 0000000000000000 R14: 00007f3e21935f80 R15: 00007ffe8fd864b8 [ 106.083300][ T6010] [ 106.194548][ T6013] tipc: Started in network mode [ 106.231147][ T6013] tipc: Node identity b4, cluster identity 4711 [ 106.256734][ T6013] tipc: Node number set to 180 [ 106.357392][ T6022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.221'. [ 106.400487][ T6024] bridge_slave_0: left allmulticast mode [ 106.446610][ T6024] bridge_slave_0: left promiscuous mode [ 106.462745][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.488897][ T6024] bridge_slave_1: left allmulticast mode [ 106.513352][ T6024] bridge_slave_1: left promiscuous mode [ 106.532057][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.564604][ T6024] bond0: (slave bond_slave_0): Releasing backup interface [ 106.627533][ T6024] bond0: (slave bond_slave_1): Releasing backup interface [ 106.779369][ T6024] team0: Port device team_slave_0 removed [ 106.821434][ T6024] team0: Port device team_slave_1 removed [ 106.951027][ T6029] team0: Port device wg2 added [ 107.007012][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 107.145870][ T3011] wlan0: Trigger new scan to find an IBSS to join [ 107.618609][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 107.679360][ T6062] team0: Device veth0_vlan failed to register rx_handler [ 107.687967][ T6067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.238'. [ 107.827524][ T6069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.109319][ T6081] netlink: 'syz.4.245': attribute type 10 has an invalid length. [ 108.160460][ T6081] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.395946][ T6088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.465204][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.063018][ T6115] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 109.142178][ T6115] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 109.354432][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'. [ 109.390270][ T6124] netlink: 2 bytes leftover after parsing attributes in process `syz.1.265'. [ 109.630215][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 109.657123][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.675030][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.709991][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.757749][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.824565][ T6141] netlink: 'syz.4.272': attribute type 27 has an invalid length. [ 109.844252][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 109.856866][ T6143] netlink: 'syz.1.274': attribute type 7 has an invalid length. [ 109.867460][ T6143] netlink: 'syz.1.274': attribute type 8 has an invalid length. [ 109.882029][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 109.887964][ T6150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.984744][ T6156] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 110.171402][ T6161] bridge2: entered promiscuous mode [ 110.177274][ T6161] bridge2: entered allmulticast mode [ 110.179302][ T2961] wlan0: Trigger new scan to find an IBSS to join [ 110.188451][ T6161] team0: Port device bridge2 added [ 110.202482][ T6161] netlink: 'syz.4.278': attribute type 10 has an invalid length. [ 110.212599][ T6163] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 110.394120][ T6166] FAULT_INJECTION: forcing a failure. [ 110.394120][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 110.408739][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.4.280 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 110.419404][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.429512][ T6166] Call Trace: [ 110.432836][ T6166] [ 110.435812][ T6166] dump_stack_lvl+0x241/0x360 [ 110.440553][ T6166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.445815][ T6166] ? __pfx__printk+0x10/0x10 [ 110.450464][ T6166] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 110.456504][ T6166] ? __pfx___might_resched+0x10/0x10 [ 110.461866][ T6166] should_fail_ex+0x3b0/0x4e0 [ 110.466625][ T6166] should_failslab+0xac/0x100 [ 110.471363][ T6166] ? __alloc_skb+0x1c3/0x440 [ 110.476012][ T6166] kmem_cache_alloc_node_noprof+0x71/0x320 [ 110.481882][ T6166] __alloc_skb+0x1c3/0x440 [ 110.486349][ T6166] ? __pfx___alloc_skb+0x10/0x10 [ 110.491331][ T6166] ? netlink_autobind+0xd6/0x2f0 [ 110.496311][ T6166] ? netlink_autobind+0x2b0/0x2f0 [ 110.501406][ T6166] netlink_sendmsg+0x638/0xcb0 [ 110.506243][ T6166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.511665][ T6166] ? aa_sock_msg_perm+0x91/0x160 [ 110.516851][ T6166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.522198][ T6166] __sock_sendmsg+0x221/0x270 [ 110.526957][ T6166] ____sys_sendmsg+0x52a/0x7e0 [ 110.531799][ T6166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.537162][ T6166] __sys_sendmsg+0x292/0x380 [ 110.541822][ T6166] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.547014][ T6166] ? __pfx_vfs_write+0x10/0x10 [ 110.551940][ T6166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.558340][ T6166] ? do_syscall_64+0x100/0x230 [ 110.563161][ T6166] ? do_syscall_64+0xb6/0x230 [ 110.567905][ T6166] do_syscall_64+0xf3/0x230 [ 110.572560][ T6166] ? clear_bhb_loop+0x35/0x90 [ 110.577307][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.583259][ T6166] RIP: 0033:0x7f549e97e719 [ 110.587739][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.607394][ T6166] RSP: 002b:00007f549e3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.615878][ T6166] RAX: ffffffffffffffda RBX: 00007f549eb35f80 RCX: 00007f549e97e719 [ 110.623884][ T6166] RDX: 0000000004000080 RSI: 0000000020000480 RDI: 0000000000000003 [ 110.631988][ T6166] RBP: 00007f549e3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 110.639985][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.647972][ T6166] R13: 0000000000000000 R14: 00007f549eb35f80 R15: 00007ffe486e26b8 [ 110.655973][ T6166] [ 110.785226][ T6173] netlink: 'syz.0.285': attribute type 7 has an invalid length. [ 110.797467][ T6173] __nla_validate_parse: 3 callbacks suppressed [ 110.797488][ T6173] netlink: 176 bytes leftover after parsing attributes in process `syz.0.285'. [ 111.016257][ T6181] FAULT_INJECTION: forcing a failure. [ 111.016257][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.047539][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.4.288 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 111.058228][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.068332][ T6181] Call Trace: [ 111.071644][ T6181] [ 111.074643][ T6181] dump_stack_lvl+0x241/0x360 [ 111.079390][ T6181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.084663][ T6181] ? __pfx__printk+0x10/0x10 [ 111.089322][ T6181] ? kasan_save_track+0x51/0x80 [ 111.094216][ T6181] ? __pfx_lock_release+0x10/0x10 [ 111.099293][ T6181] ? kfree+0x1a0/0x440 [ 111.103411][ T6181] ? security_file_ioctl+0xc6/0x2a0 [ 111.108677][ T6181] should_fail_ex+0x3b0/0x4e0 [ 111.113387][ T6181] _copy_from_user+0x2f/0xe0 [ 111.118000][ T6181] br_dev_read_uargs+0x161/0x400 [ 111.122966][ T6181] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 111.128456][ T6181] br_dev_siocdevprivate+0xf5/0x1dc0 [ 111.133771][ T6181] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 111.139596][ T6181] ? __mutex_trylock_common+0x183/0x2e0 [ 111.145169][ T6181] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.151095][ T6181] ? rcu_is_watching+0x15/0xb0 [ 111.155878][ T6181] ? trace_contention_end+0x3c/0x120 [ 111.161184][ T6181] ? __mutex_lock+0x2ef/0xd70 [ 111.165882][ T6181] ? full_name_hash+0x93/0xe0 [ 111.170675][ T6181] dev_ifsioc+0xaec/0xe70 [ 111.175029][ T6181] ? __pfx_dev_ifsioc+0x10/0x10 [ 111.179955][ T6181] ? dev_load+0x21/0x1f0 [ 111.184218][ T6181] dev_ioctl+0x881/0x1340 [ 111.188567][ T6181] sock_ioctl+0x7ef/0x8e0 [ 111.192921][ T6181] ? __pfx_sock_ioctl+0x10/0x10 [ 111.197793][ T6181] ? __fget_files+0x3f3/0x470 [ 111.202493][ T6181] ? __pfx_sock_ioctl+0x10/0x10 [ 111.207371][ T6181] __se_sys_ioctl+0xf9/0x170 [ 111.211991][ T6181] do_syscall_64+0xf3/0x230 [ 111.216516][ T6181] ? clear_bhb_loop+0x35/0x90 [ 111.221216][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.227133][ T6181] RIP: 0033:0x7f549e97e719 [ 111.231566][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.251187][ T6181] RSP: 002b:00007f549e3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.259625][ T6181] RAX: ffffffffffffffda RBX: 00007f549eb35f80 RCX: 00007f549e97e719 [ 111.267617][ T6181] RDX: 0000000020000900 RSI: 00000000000089fe RDI: 0000000000000004 [ 111.275607][ T6181] RBP: 00007f549e3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 111.283593][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.291580][ T6181] R13: 0000000000000000 R14: 00007f549eb35f80 R15: 00007ffe486e26b8 [ 111.299579][ T6181] [ 111.352940][ T6186] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 111.375380][ T6187] bridge5: entered promiscuous mode [ 111.387744][ T6187] bridge5: entered allmulticast mode [ 111.394859][ T6187] team0: Port device bridge5 added [ 111.454939][ T6183] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 111.493588][ T6187] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 111.512164][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.935612][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 111.935956][ T4626] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.988288][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 112.071607][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 112.282347][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 112.321000][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 112.335893][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 112.477352][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 112.579148][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 112.609947][ T6229] dvmrp5: entered allmulticast mode [ 112.617081][ T6229] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 112.665669][ T6229] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 112.733989][ T6233] dvmrp5: left allmulticast mode [ 112.793579][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 112.816534][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 112.946409][ T6242] netlink: 'syz.4.306': attribute type 11 has an invalid length. [ 112.946706][ T6240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.056780][ T6247] dccp_invalid_packet: pskb_may_pull failed [ 113.242310][ T6252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.250046][ T6252] IPv6: NLM_F_CREATE should be set when creating new route [ 113.650018][ T6274] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 113.658831][ T6272] warning: `syz.1.315' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.700925][ T6276] FAULT_INJECTION: forcing a failure. [ 113.700925][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 113.756823][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.4.318 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 113.767743][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.778005][ T6276] Call Trace: [ 113.781300][ T6276] [ 113.784241][ T6276] dump_stack_lvl+0x241/0x360 [ 113.788955][ T6276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.794176][ T6276] ? __pfx__printk+0x10/0x10 [ 113.798785][ T6276] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 113.804265][ T6276] ? __pfx___might_resched+0x10/0x10 [ 113.809579][ T6276] should_fail_ex+0x3b0/0x4e0 [ 113.814284][ T6276] should_failslab+0xac/0x100 [ 113.818987][ T6276] ? device_add+0xc1/0xbf0 [ 113.823433][ T6276] __kmalloc_cache_noprof+0x6c/0x2c0 [ 113.828834][ T6276] device_add+0xc1/0xbf0 [ 113.833102][ T6276] ? device_initialize+0x266/0x460 [ 113.838238][ T6276] netdev_register_kobject+0x17e/0x310 [ 113.843726][ T6276] register_netdevice+0x12c5/0x1b00 [ 113.848952][ T6276] ? __pfx_register_netdevice+0x10/0x10 [ 113.854516][ T6276] ? alloc_netdev_mqs+0xccc/0x1080 [ 113.859659][ T6276] br_dev_newlink+0x27/0x100 [ 113.864259][ T6276] ? __pfx_br_dev_newlink+0x10/0x10 [ 113.869471][ T6276] rtnl_newlink+0x1591/0x20a0 [ 113.874183][ T6276] ? __pfx_rtnl_newlink+0x10/0x10 [ 113.879226][ T6276] ? do_raw_spin_unlock+0x13c/0x8b0 [ 113.884451][ T6276] ? __mutex_lock+0x9ab/0xd70 [ 113.889153][ T6276] ? __mutex_lock+0x52a/0xd70 [ 113.893867][ T6276] ? __pfx_rtnl_newlink+0x10/0x10 [ 113.898915][ T6276] rtnetlink_rcv_msg+0x73f/0xcf0 [ 113.903876][ T6276] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 113.909010][ T6276] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 113.915633][ T6276] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.921234][ T6276] netlink_rcv_skb+0x1e3/0x430 [ 113.926035][ T6276] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.931517][ T6276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.936869][ T6276] ? __rcu_read_unlock+0xa1/0x110 [ 113.941922][ T6276] netlink_unicast+0x7f6/0x990 [ 113.946741][ T6276] ? __pfx_netlink_unicast+0x10/0x10 [ 113.952049][ T6276] ? __virt_addr_valid+0x183/0x530 [ 113.957181][ T6276] ? __check_object_size+0x48e/0x900 [ 113.962496][ T6276] netlink_sendmsg+0x8e4/0xcb0 [ 113.967289][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.972689][ T6276] ? aa_sock_msg_perm+0x91/0x160 [ 113.977645][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.982946][ T6276] __sock_sendmsg+0x221/0x270 [ 113.987665][ T6276] ____sys_sendmsg+0x52a/0x7e0 [ 113.992470][ T6276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.997802][ T6276] __sys_sendmsg+0x292/0x380 [ 114.002417][ T6276] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.007563][ T6276] ? __pfx_vfs_write+0x10/0x10 [ 114.012461][ T6276] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.018820][ T6276] ? do_syscall_64+0x100/0x230 [ 114.023643][ T6276] ? do_syscall_64+0xb6/0x230 [ 114.028349][ T6276] do_syscall_64+0xf3/0x230 [ 114.032877][ T6276] ? clear_bhb_loop+0x35/0x90 [ 114.037665][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.043596][ T6276] RIP: 0033:0x7f549e97e719 [ 114.048026][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.067647][ T6276] RSP: 002b:00007f549e3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.076080][ T6276] RAX: ffffffffffffffda RBX: 00007f549eb35f80 RCX: 00007f549e97e719 [ 114.084077][ T6276] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 114.092069][ T6276] RBP: 00007f549e3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 114.100066][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.108049][ T6276] R13: 0000000000000000 R14: 00007f549eb35f80 R15: 00007ffe486e26b8 [ 114.116049][ T6276] [ 114.800583][ T6319] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 114.859582][ T6318] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 115.350381][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.486001][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.507937][ T6348] xt_hashlimit: max too large, truncated to 1048576 [ 115.911089][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.060605][ T2961] bond0: (slave netdevsim0): Releasing backup interface [ 116.074541][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.087694][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.097918][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.104905][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.123471][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.131252][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.138916][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.348021][ T6383] __nla_validate_parse: 4 callbacks suppressed [ 116.348041][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 117.583049][ T6367] FAULT_INJECTION: forcing a failure. [ 117.583049][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 117.596372][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.2.342 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 117.607004][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.617068][ T6367] Call Trace: [ 117.620354][ T6367] [ 117.623287][ T6367] dump_stack_lvl+0x241/0x360 [ 117.627993][ T6367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.633223][ T6367] ? __pfx__printk+0x10/0x10 [ 117.637854][ T6367] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 117.643879][ T6367] ? __pfx___might_resched+0x10/0x10 [ 117.649221][ T6367] should_fail_ex+0x3b0/0x4e0 [ 117.653935][ T6367] should_failslab+0xac/0x100 [ 117.658646][ T6367] ? __alloc_skb+0x1c3/0x440 [ 117.663259][ T6367] kmem_cache_alloc_node_noprof+0x71/0x320 [ 117.669119][ T6367] __alloc_skb+0x1c3/0x440 [ 117.673581][ T6367] ? __pfx___alloc_skb+0x10/0x10 [ 117.678545][ T6367] ? netlink_ack_tlv_len+0x6e/0x200 [ 117.683770][ T6367] netlink_ack+0x13f/0xa30 [ 117.688202][ T6367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.693698][ T6367] netlink_rcv_skb+0x262/0x430 [ 117.698480][ T6367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.703965][ T6367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.709371][ T6367] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.714587][ T6367] netlink_unicast+0x7f6/0x990 [ 117.719383][ T6367] ? __pfx_netlink_unicast+0x10/0x10 [ 117.724687][ T6367] ? __virt_addr_valid+0x183/0x530 [ 117.729824][ T6367] ? __check_object_size+0x48e/0x900 [ 117.735134][ T6367] netlink_sendmsg+0x8e4/0xcb0 [ 117.739927][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.745234][ T6367] ? aa_sock_msg_perm+0x91/0x160 [ 117.750195][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.755590][ T6367] __sock_sendmsg+0x221/0x270 [ 117.760308][ T6367] ____sys_sendmsg+0x52a/0x7e0 [ 117.765128][ T6367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.770439][ T6367] __sys_sendmsg+0x292/0x380 [ 117.775050][ T6367] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.780190][ T6367] ? __pfx_vfs_write+0x10/0x10 [ 117.784991][ T6367] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.791353][ T6367] ? do_syscall_64+0x100/0x230 [ 117.796140][ T6367] ? do_syscall_64+0xb6/0x230 [ 117.800847][ T6367] do_syscall_64+0xf3/0x230 [ 117.805364][ T6367] ? clear_bhb_loop+0x35/0x90 [ 117.810065][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.815986][ T6367] RIP: 0033:0x7f22bd37e719 [ 117.820508][ T6367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.840139][ T6367] RSP: 002b:00007f22be1cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.848589][ T6367] RAX: ffffffffffffffda RBX: 00007f22bd535f80 RCX: 00007f22bd37e719 [ 117.856569][ T6367] RDX: 0000000004000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 117.864552][ T6367] RBP: 00007f22be1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 117.872532][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.880513][ T6367] R13: 0000000000000000 R14: 00007f22bd535f80 R15: 00007fff9d6e8608 [ 117.888534][ T6367] [ 117.989684][ T6390] macvlan2: entered promiscuous mode [ 118.108034][ T6392] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 118.168948][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 118.187702][ T5238] Bluetooth: hci2: command tx timeout [ 118.244682][ T2961] bridge_slave_1: left allmulticast mode [ 118.252351][ T2961] bridge_slave_1: left promiscuous mode [ 118.259955][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.316372][ T2961] bridge_slave_0: left allmulticast mode [ 118.324990][ T2961] bridge_slave_0: left promiscuous mode [ 118.358613][ T5252] block nbd64: NBD_DISCONNECT [ 118.374436][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.388979][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 118.828298][ T6431] syz.1.351 uses obsolete (PF_INET,SOCK_PACKET) [ 119.128091][ T2961] team0: Port device bridge2 removed [ 119.257623][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.269559][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.281121][ T2961] bond0 (unregistering): Released all slaves [ 119.294588][ T6394] netlink: 'syz.2.344': attribute type 4 has an invalid length. [ 119.313310][ T6409] netlink: 'syz.2.344': attribute type 4 has an invalid length. [ 119.480302][ T6439] bridge6: entered promiscuous mode [ 119.485860][ T6439] bridge6: entered allmulticast mode [ 119.493821][ T6439] team0: Port device bridge6 added [ 119.578265][ T6439] netlink: 'syz.2.353': attribute type 10 has an invalid length. [ 119.603766][ T6442] bridge4: entered promiscuous mode [ 119.609519][ T6442] bridge4: entered allmulticast mode [ 119.623567][ T6442] team0: Port device bridge4 added [ 119.655900][ T6444] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 119.671703][ T6444] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 119.750967][ T6444] bridge0: port 3(ip6gretap0) entered blocking state [ 119.765693][ T6449] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 119.774702][ T6444] bridge0: port 3(ip6gretap0) entered disabled state [ 119.793189][ T6444] ip6gretap0: entered allmulticast mode [ 119.817433][ T6444] ip6gretap0: entered promiscuous mode [ 119.943642][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 119.947685][ T6461] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.061726][ T6449] pim6reg1: entered promiscuous mode [ 120.085436][ T6449] pim6reg1: entered allmulticast mode [ 120.101725][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.108996][ T4626] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.255955][ T4626] Bluetooth: hci2: command tx timeout [ 120.268529][ T2961] hsr_slave_0: left promiscuous mode [ 120.288192][ T2961] hsr_slave_1: left promiscuous mode [ 120.323186][ T2961] veth1_macvtap: left promiscuous mode [ 120.334399][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.361'. [ 120.344425][ T2961] veth0_macvtap: left promiscuous mode [ 120.352292][ T2961] veth1_vlan: left promiscuous mode [ 120.364753][ T2961] veth0_vlan: left promiscuous mode [ 120.468323][ T6481] sctp: [Deprecated]: syz.3.361 (pid 6481) Use of int in max_burst socket option deprecated. [ 120.468323][ T6481] Use struct sctp_assoc_value instead [ 121.004119][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 121.040985][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 121.409690][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 121.558347][ T6492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.684242][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.692211][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.701438][ T6362] bridge_slave_0: entered allmulticast mode [ 121.720455][ T6362] bridge_slave_0: entered promiscuous mode [ 121.731876][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.739137][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.746892][ T6362] bridge_slave_1: entered allmulticast mode [ 121.759350][ T6362] bridge_slave_1: entered promiscuous mode [ 121.910132][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.933912][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.049066][ T6518] bridge7: entered promiscuous mode [ 122.054604][ T6518] bridge7: entered allmulticast mode [ 122.061910][ T6518] team0: Port device bridge7 added [ 122.082221][ T6362] team0: Port device team_slave_0 added [ 122.176938][ T4626] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.226335][ T6362] team0: Port device team_slave_1 added [ 122.276136][ T6518] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 122.324643][ T6519] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 122.336289][ T4626] Bluetooth: hci2: command tx timeout [ 122.359252][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.584640][ T6542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.811122][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.818335][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.845041][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.882538][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 123.892427][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.372'. [ 123.903970][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.915801][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.945194][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.120990][ T6362] hsr_slave_0: entered promiscuous mode [ 124.147466][ T6362] hsr_slave_1: entered promiscuous mode [ 124.365953][ T4626] Bluetooth: hci0: command tx timeout [ 124.401554][ T6567] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 124.418012][ T4626] Bluetooth: hci2: command tx timeout [ 124.578121][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 124.587993][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 124.609914][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 124.633982][ T6584] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.018377][ T6595] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 125.043833][ T6595] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 125.062992][ T6595] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 125.088805][ T6595] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 125.111881][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.386'. [ 125.178365][ T6362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.233408][ T6362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.272022][ T6362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.305008][ T6362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.613463][ T6612] trusted_key: syz.1.392 sent an empty control message without MSG_MORE. [ 125.634748][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.699046][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.739174][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 125.786827][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 125.824655][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.831895][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.900149][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.907417][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.947608][ T6624] Bluetooth: MGMT ver 1.23 [ 126.112473][ T6629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.188554][ T6641] netlink: 'syz.2.398': attribute type 10 has an invalid length. [ 126.201294][ T6641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.398'. [ 126.212811][ T6641] bridge0: port 5(macvlan1) entered blocking state [ 126.219553][ T6641] bridge0: port 5(macvlan1) entered disabled state [ 126.226449][ T6641] macvlan1: entered allmulticast mode [ 126.231884][ T6641] veth1_vlan: entered allmulticast mode [ 126.239045][ T6641] macvlan1: entered promiscuous mode [ 126.256616][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 126.476846][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.607575][ T6653] IPv6: sit2: Disabled Multicast RS [ 126.814791][ T6666] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 127.133421][ T6362] veth0_vlan: entered promiscuous mode [ 127.157559][ T6682] Unsupported ieee802154 address type: 0 [ 127.201099][ T6362] veth1_vlan: entered promiscuous mode [ 127.256805][ T6688] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 127.326185][ T6690] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.448893][ T6362] veth0_macvtap: entered promiscuous mode [ 127.486985][ T6362] veth1_macvtap: entered promiscuous mode [ 127.541614][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.608488][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.657218][ T6362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.685192][ T6362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.715312][ T6362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.737455][ T6362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.014781][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.050641][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.191538][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.212048][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.348487][ T6741] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.426704][ T6745] Cannot find del_set index 0 as target [ 128.778137][ T6762] FAULT_INJECTION: forcing a failure. [ 128.778137][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.828059][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.3.429 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 128.838726][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.848831][ T6762] Call Trace: [ 128.852149][ T6762] [ 128.855125][ T6762] dump_stack_lvl+0x241/0x360 [ 128.859846][ T6762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.865095][ T6762] ? __pfx__printk+0x10/0x10 [ 128.869743][ T6762] should_fail_ex+0x3b0/0x4e0 [ 128.874499][ T6762] _copy_from_user+0x2f/0xe0 [ 128.879151][ T6762] move_addr_to_kernel+0x82/0x150 [ 128.884246][ T6762] __sys_connect+0xc1/0x300 [ 128.888792][ T6762] ? __pfx___sys_connect+0x10/0x10 [ 128.893961][ T6762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.900350][ T6762] ? do_syscall_64+0x100/0x230 [ 128.905169][ T6762] __x64_sys_connect+0x7a/0x90 [ 128.909990][ T6762] do_syscall_64+0xf3/0x230 [ 128.914533][ T6762] ? clear_bhb_loop+0x35/0x90 [ 128.919247][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.925177][ T6762] RIP: 0033:0x7fd7abf7e719 [ 128.929623][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.949264][ T6762] RSP: 002b:00007fd7acc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 128.957699][ T6762] RAX: ffffffffffffffda RBX: 00007fd7ac135f80 RCX: 00007fd7abf7e719 [ 128.965681][ T6762] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000003 [ 128.973658][ T6762] RBP: 00007fd7acc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.981634][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.989615][ T6762] R13: 0000000000000000 R14: 00007fd7ac135f80 R15: 00007ffe636597d8 [ 128.997609][ T6762] [ 129.186814][ T6775] __nla_validate_parse: 13 callbacks suppressed [ 129.186836][ T6775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.432'. [ 129.296281][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.335766][ T6774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.433'. [ 129.482345][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.518160][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 129.655858][ T6793] netlink: 'syz.2.441': attribute type 11 has an invalid length. [ 129.729084][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.859756][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 129.880914][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.918739][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 129.942935][ T6801] netlink: 'syz.1.444': attribute type 27 has an invalid length. [ 129.964526][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.994331][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.003325][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.045992][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.066913][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.075175][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.240569][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 130.250415][ T2961] bridge_slave_1: left allmulticast mode [ 130.256348][ T2961] bridge_slave_1: left promiscuous mode [ 130.266577][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.315358][ T2961] bridge_slave_0: left allmulticast mode [ 130.328540][ T2961] bridge_slave_0: left promiscuous mode [ 130.334350][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.725156][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.744102][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.758354][ T2961] bond0 (unregistering): Released all slaves [ 130.797987][ T6843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.459712][ T2961] hsr_slave_0: left promiscuous mode [ 131.477050][ T2961] hsr_slave_1: left promiscuous mode [ 131.529530][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.538184][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.551851][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.560193][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.588095][ T2961] veth1_macvtap: left promiscuous mode [ 131.593850][ T2961] veth0_macvtap: left promiscuous mode [ 131.599620][ T2961] veth1_vlan: left promiscuous mode [ 131.606170][ T2961] veth0_vlan: left promiscuous mode [ 132.185693][ T5238] Bluetooth: hci2: command tx timeout [ 132.332860][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 132.370661][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 132.740419][ T6877] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 132.790218][ T6880] bridge6: entered promiscuous mode [ 132.795607][ T6880] bridge6: entered allmulticast mode [ 132.802562][ T6880] team0: Port device bridge6 added [ 132.808584][ T6885] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 132.978811][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 133.145341][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157279][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.272672][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.298614][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.331078][ T6808] bridge_slave_0: entered allmulticast mode [ 133.359371][ T6808] bridge_slave_0: entered promiscuous mode [ 133.397471][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.404878][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.415955][ T6808] bridge_slave_1: entered allmulticast mode [ 133.424462][ T6808] bridge_slave_1: entered promiscuous mode [ 133.522612][ T6931] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.532185][ T6931] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.541414][ T6931] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.550659][ T6931] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.653690][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.692521][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.473'. [ 133.724721][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.845581][ T6949] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 133.901143][ T6949] team0: Device veth0_macvtap failed to register rx_handler [ 133.938331][ T6808] team0: Port device team_slave_0 added [ 134.140292][ T6808] team0: Port device team_slave_1 added [ 134.270452][ T5238] Bluetooth: hci2: command tx timeout [ 134.330963][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.338273][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.364652][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.455368][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.471135][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.471347][ T6974] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.515699][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.859384][ T6808] hsr_slave_0: entered promiscuous mode [ 134.885942][ T6808] hsr_slave_1: entered promiscuous mode [ 135.425292][ T7025] bridge0: port 3(70·) entered blocking state [ 135.447917][ T7025] bridge0: port 3(70·) entered disabled state [ 135.472250][ T7025] 0·: entered promiscuous mode [ 135.491081][ T7025] bridge0: port 3(70·) entered blocking state [ 135.497442][ T7025] bridge0: port 3(70·) entered forwarding state [ 135.830138][ T7037] netlink: 'syz.2.500': attribute type 29 has an invalid length. [ 135.861492][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 136.002573][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 136.053359][ T6808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.100183][ T6808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.139580][ T7053] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 136.196879][ T6808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.228723][ T7055] syzkaller1: entered promiscuous mode [ 136.244482][ T7055] syzkaller1: entered allmulticast mode [ 136.295035][ T6808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.358615][ T5238] Bluetooth: hci2: command tx timeout [ 136.628157][ T7072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.687963][ T7070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.750029][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.818101][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.862148][ T3059] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.869364][ T3059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.918155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.925343][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.971071][ T7086] tap0: tun_chr_ioctl cmd 1074025677 [ 136.989834][ T7086] tap0: linktype set to 821 [ 137.242455][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 137.343125][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.419673][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.622972][ T7124] syzkaller1: entered promiscuous mode [ 137.628814][ T7124] syzkaller1: entered allmulticast mode [ 137.984603][ T6808] veth0_vlan: entered promiscuous mode [ 137.998637][ T6808] veth1_vlan: entered promiscuous mode [ 138.022518][ T6808] veth0_macvtap: entered promiscuous mode [ 138.032620][ T6808] veth1_macvtap: entered promiscuous mode [ 138.057389][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.117396][ T7148] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 138.191575][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.214537][ T6808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.246786][ T6808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.277442][ T6808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.305677][ T6808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.393531][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 138.422878][ T5238] Bluetooth: hci2: command tx timeout [ 138.673719][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.529'. [ 138.759285][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.796848][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.863159][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 138.881106][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.902796][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.974488][ T7183] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 139.013662][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 139.111871][ T7186] netlink: 9 bytes leftover after parsing attributes in process `syz.1.534'. [ 139.121008][ T7186] 1·: renamed from 70· (while UP) [ 139.129180][ T7186] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 139.698759][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.002598][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.291320][ T4626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.300873][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.309807][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.319292][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.327335][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.334987][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.337070][ T7233] xt_bpf: check failed: parse error [ 140.368995][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.596096][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.809446][ T7248] netlink: 332 bytes leftover after parsing attributes in process `syz.3.557'. [ 140.870268][ T7248] netlink: 'syz.3.557': attribute type 3 has an invalid length. [ 140.929035][ T7252] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.966031][ T11] bridge_slave_1: left allmulticast mode [ 140.971767][ T11] bridge_slave_1: left promiscuous mode [ 140.979233][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.994490][ T11] bridge_slave_0: left allmulticast mode [ 141.000490][ T11] bridge_slave_0: left promiscuous mode [ 141.007026][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.215895][ T3059] wlan0: Trigger new scan to find an IBSS to join [ 141.528425][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.555919][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.586969][ T11] bond0 (unregistering): Released all slaves [ 141.603141][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 141.616902][ T7262] netlink: 156 bytes leftover after parsing attributes in process `syz.0.562'. [ 141.951525][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.169443][ T7266] bridge3: entered promiscuous mode [ 142.180668][ T7266] bridge3: entered allmulticast mode [ 142.186646][ T7266] team0: Device bridge3 is of different type [ 142.279768][ T7271] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 142.339394][ T7271] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.418890][ T7292] netlink: 5 bytes leftover after parsing attributes in process `syz.3.568'. [ 142.425660][ T5238] Bluetooth: hci2: command tx timeout [ 142.655157][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 142.720653][ T11] hsr_slave_0: left promiscuous mode [ 142.730850][ T11] hsr_slave_1: left promiscuous mode [ 142.751551][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.765968][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.774489][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.783964][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.807625][ T11] veth1_macvtap: left promiscuous mode [ 142.813330][ T11] veth0_macvtap: left promiscuous mode [ 142.824333][ T11] veth1_vlan: left promiscuous mode [ 142.830702][ T11] veth0_vlan: left promiscuous mode [ 143.320562][ T11] team0 (unregistering): Port device team_slave_1 removed [ 143.366023][ T11] team0 (unregistering): Port device team_slave_0 removed [ 143.851570][ T7306] dummy0: entered promiscuous mode [ 143.867033][ T7306] dummy0: left promiscuous mode [ 143.905939][ T7314] netlink: 'syz.3.571': attribute type 21 has an invalid length. [ 143.923383][ T7314] netlink: 128 bytes leftover after parsing attributes in process `syz.3.571'. [ 143.932676][ T7314] netlink: 'syz.3.571': attribute type 4 has an invalid length. [ 143.941210][ T7314] netlink: 3 bytes leftover after parsing attributes in process `syz.3.571'. [ 143.952011][ T7310] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 144.036320][ T7323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 144.176177][ T3011] wlan0: Trigger new scan to find an IBSS to join [ 144.391088][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.401023][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.410179][ T7228] bridge_slave_0: entered allmulticast mode [ 144.423448][ T7228] bridge_slave_0: entered promiscuous mode [ 144.482099][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.500045][ T5238] Bluetooth: hci2: command tx timeout [ 144.537928][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.548979][ T7228] bridge_slave_1: entered allmulticast mode [ 144.557651][ T7228] bridge_slave_1: entered promiscuous mode [ 144.572734][ T7354] pimreg: entered allmulticast mode [ 144.665050][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.582'. [ 144.761204][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.818733][ T7357] pimreg: left allmulticast mode [ 144.906117][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.101064][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.135775][ T7228] team0: Port device team_slave_0 added [ 145.171503][ T7228] team0: Port device team_slave_1 added [ 145.203858][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.587'. [ 145.227123][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 145.552082][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.560105][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.586339][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.600007][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.607231][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.636573][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.740872][ T7228] hsr_slave_0: entered promiscuous mode [ 145.768727][ T7228] hsr_slave_1: entered promiscuous mode [ 145.829042][ T7404] syzkaller1: entered promiscuous mode [ 145.845356][ T7404] syzkaller1: entered allmulticast mode [ 145.928504][ T7410] netlink: 100 bytes leftover after parsing attributes in process `syz.3.593'. [ 146.247230][ T7420] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 146.519168][ T7436] syzkaller1: entered promiscuous mode [ 146.525354][ T7436] syzkaller1: entered allmulticast mode [ 146.543020][ T7436] SET target dimension over the limit! [ 146.578030][ T5238] Bluetooth: hci2: command tx timeout [ 146.805214][ T7228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.832177][ T7228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.863462][ T7228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.878361][ T7228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.100959][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.143190][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.184577][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.191824][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.278509][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.285760][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.440108][ T7474] netlink: 'syz.0.608': attribute type 5 has an invalid length. [ 147.466081][ T7474] __nla_validate_parse: 5 callbacks suppressed [ 147.466102][ T7474] netlink: 256 bytes leftover after parsing attributes in process `syz.0.608'. [ 147.534687][ T7474] netlink: 256 bytes leftover after parsing attributes in process `syz.0.608'. [ 147.536197][ T7480] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 147.605668][ T7479] netlink: 'syz.0.608': attribute type 5 has an invalid length. [ 147.836637][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 147.843871][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 147.869115][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.611'. [ 148.100660][ T7511] netlink: 9 bytes leftover after parsing attributes in process `syz.0.614'. [ 148.114070][ T7511] 0·: renamed from 71· (while UP) [ 148.121640][ T7511] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 148.235158][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.473188][ T7528] netlink: 9 bytes leftover after parsing attributes in process `syz.1.617'. [ 148.513695][ T7528] 0·: renamed from 71· (while UP) [ 148.548209][ T7528] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 148.669903][ T5238] Bluetooth: hci2: command tx timeout [ 148.871129][ T7544] bridge7: entered promiscuous mode [ 148.892413][ T7544] bridge7: entered allmulticast mode [ 148.913916][ T7544] team0: Port device bridge7 added [ 148.947689][ T7549] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 149.023521][ T7228] veth0_vlan: entered promiscuous mode [ 149.069507][ T7228] veth1_vlan: entered promiscuous mode [ 149.147453][ T7228] veth0_macvtap: entered promiscuous mode [ 149.193027][ T7228] veth1_macvtap: entered promiscuous mode [ 149.219459][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 149.278718][ T7563] netlink: 9 bytes leftover after parsing attributes in process `syz.2.626'. [ 149.313989][ T7563] 0·: renamed from hsr0 (while UP) [ 149.342255][ T7563] 0·: entered allmulticast mode [ 149.381900][ T7563] hsr_slave_0: entered allmulticast mode [ 149.429403][ T7563] hsr_slave_1: entered allmulticast mode [ 149.439314][ T7563] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 149.546768][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.571649][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.600256][ T7228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.627423][ T7228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.646774][ T7228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.675701][ T7228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.841302][ T7584] netlink: 9 bytes leftover after parsing attributes in process `syz.1.630'. [ 149.862353][ T7584] 1·: renamed from 70· (while UP) [ 149.903865][ T7584] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 149.971624][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.981517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.036352][ T7590] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 150.070173][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.083224][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.131819][ T7596] bridge0: port 4(ipvlan2) entered blocking state [ 150.143311][ T2961] wlan0: failed to finalize CSA on link 0, disconnecting [ 150.165884][ T7596] bridge0: port 4(ipvlan2) entered disabled state [ 150.183023][ T7596] ipvlan2: entered allmulticast mode [ 150.192797][ T7596] erspan0: entered allmulticast mode [ 150.208630][ T7596] ipvlan2: left allmulticast mode [ 150.226326][ T7596] erspan0: left allmulticast mode [ 150.497070][ T7609] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 150.625369][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.698886][ T7620] bridge3: entered promiscuous mode [ 150.704176][ T7620] bridge3: entered allmulticast mode [ 150.725859][ T7622] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 150.891951][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.920691][ T7614] bridge0: port 4(ip6gretap0) entered blocking state [ 150.927876][ T7614] bridge0: port 4(ip6gretap0) entered disabled state [ 150.934781][ T7614] ip6gretap0: entered allmulticast mode [ 150.942462][ T7614] ip6gretap0: entered promiscuous mode [ 150.948622][ T7614] bridge0: port 4(ip6gretap0) entered blocking state [ 150.956299][ T7614] bridge0: port 4(ip6gretap0) entered forwarding state [ 151.050832][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.169641][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.704241][ T7638] syzkaller0: entered promiscuous mode [ 151.725714][ T7638] syzkaller0: entered allmulticast mode [ 151.795017][ T2961] bridge_slave_1: left allmulticast mode [ 151.816032][ T2961] bridge_slave_1: left promiscuous mode [ 151.827371][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.870578][ T2961] bridge_slave_0: left allmulticast mode [ 151.888393][ T2961] bridge_slave_0: left promiscuous mode [ 151.904381][ T4626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.904816][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.922925][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.936804][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.946931][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.964444][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.972134][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.659004][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.674368][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.688796][ T2961] bond0 (unregistering): Released all slaves [ 152.700830][ T7650] __nla_validate_parse: 3 callbacks suppressed [ 152.700845][ T7650] netlink: 9 bytes leftover after parsing attributes in process `syz.3.643'. [ 152.716242][ T7650] 0·: renamed from hsr0 (while UP) [ 152.722955][ T7650] 0·: entered allmulticast mode [ 152.728532][ T7650] hsr_slave_0: entered allmulticast mode [ 152.734198][ T7650] hsr_slave_1: entered allmulticast mode [ 152.741948][ T7650] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 153.183987][ T7668] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 154.016708][ T5238] Bluetooth: hci2: command tx timeout [ 154.286755][ T7676] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 154.529167][ T7684] bridge8: entered promiscuous mode [ 154.534454][ T7684] bridge8: entered allmulticast mode [ 154.557010][ T7684] team0: Port device bridge8 added [ 154.578805][ T7685] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 154.661363][ T7710] macvlan2: entered allmulticast mode [ 154.696609][ T7710] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 154.711938][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 154.736167][ T7710] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 154.749938][ T7710] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 154.843036][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 155.019547][ T7713] bond0: entered promiscuous mode [ 155.034952][ T7713] bond_slave_0: entered promiscuous mode [ 155.051565][ T7713] bond_slave_1: entered promiscuous mode [ 155.068366][ T7713] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 155.110690][ T7713] macvlan2: entered promiscuous mode [ 155.361690][ T2961] hsr_slave_0: left promiscuous mode [ 155.379273][ T2961] hsr_slave_1: left promiscuous mode [ 155.434774][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.453632][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.479970][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.494768][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.523665][ T7755] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 155.551384][ T2961] veth1_macvtap: left promiscuous mode [ 155.568768][ T2961] veth0_macvtap: left promiscuous mode [ 155.580227][ T2961] veth1_vlan: left promiscuous mode [ 155.591333][ T2961] veth0_vlan: left promiscuous mode [ 156.099391][ T5238] Bluetooth: hci2: command 0x041b tx timeout [ 156.106724][ T7743] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 156.202631][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 156.243706][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 156.601914][ T7760] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 156.620436][ T7763] netlink: 9 bytes leftover after parsing attributes in process `syz.3.666'. [ 156.664703][ T7763] 1·: renamed from 70· (while UP) [ 156.677526][ T7763] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 156.865373][ T7784] netlink: 'syz.3.670': attribute type 4 has an invalid length. [ 156.882258][ T7779] bridge4: entered promiscuous mode [ 156.900121][ T7779] bridge4: entered allmulticast mode [ 156.924305][ T7786] FAULT_INJECTION: forcing a failure. [ 156.924305][ T7786] name failslab, interval 1, probability 0, space 0, times 0 [ 156.943378][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.2.669 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 156.954055][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.964154][ T7786] Call Trace: [ 156.967473][ T7786] [ 156.970439][ T7786] dump_stack_lvl+0x241/0x360 [ 156.975173][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.980423][ T7786] ? __pfx__printk+0x10/0x10 [ 156.985158][ T7786] ? fs_reclaim_acquire+0x93/0x130 [ 156.990319][ T7786] ? __pfx___might_resched+0x10/0x10 [ 156.995663][ T7786] should_fail_ex+0x3b0/0x4e0 [ 156.995867][ T7776] netlink: 'syz.1.668': attribute type 10 has an invalid length. [ 157.000379][ T7786] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 157.000426][ T7786] should_failslab+0xac/0x100 [ 157.000455][ T7786] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 157.000483][ T7786] __kmalloc_noprof+0xd8/0x400 [ 157.029289][ T7786] tomoyo_realpath_from_path+0xcf/0x5e0 [ 157.034901][ T7786] tomoyo_path_number_perm+0x23a/0x880 [ 157.040418][ T7786] ? rcu_read_lock_any_held+0xb7/0x160 [ 157.045942][ T7786] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 157.051984][ T7786] ? tomoyo_path_number_perm+0x208/0x880 [ 157.057683][ T7786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.063712][ T7786] ? sb_end_write+0xe9/0x1c0 [ 157.068340][ T7786] ? vfs_write+0x7bf/0xc90 [ 157.072826][ T7786] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.078861][ T7786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.085247][ T7786] security_file_ioctl+0xc6/0x2a0 [ 157.090329][ T7786] __se_sys_ioctl+0x47/0x170 [ 157.094978][ T7786] do_syscall_64+0xf3/0x230 [ 157.099528][ T7786] ? clear_bhb_loop+0x35/0x90 [ 157.104258][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.110197][ T7786] RIP: 0033:0x7f22bd37e719 [ 157.114658][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.134313][ T7786] RSP: 002b:00007f22be1cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.142785][ T7786] RAX: ffffffffffffffda RBX: 00007f22bd535f80 RCX: 00007f22bd37e719 [ 157.150796][ T7786] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000003 [ 157.158787][ T7786] RBP: 00007f22be1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 157.166774][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.174757][ T7786] R13: 0000000000000000 R14: 00007f22bd535f80 R15: 00007fff9d6e8608 [ 157.182757][ T7786] [ 157.236450][ T7786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.327723][ T7654] chnl_net:caif_netlink_parms(): no params data found [ 157.644969][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.666495][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.673814][ T7654] bridge_slave_0: entered allmulticast mode [ 157.681973][ T7654] bridge_slave_0: entered promiscuous mode [ 157.730623][ T7824] netlink: 9 bytes leftover after parsing attributes in process `syz.3.680'. [ 157.774262][ T7824] 0·: renamed from 71· (while UP) [ 157.814282][ T7824] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 157.821209][ T7828] FAULT_INJECTION: forcing a failure. [ 157.821209][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 157.834055][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.846808][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz.0.682 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 157.860393][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.868689][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.870472][ T7828] Call Trace: [ 157.870484][ T7828] [ 157.878418][ T7654] bridge_slave_1: entered allmulticast mode [ 157.880788][ T7828] dump_stack_lvl+0x241/0x360 [ 157.884967][ T7654] bridge_slave_1: entered promiscuous mode [ 157.889602][ T7828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.889636][ T7828] ? __pfx__printk+0x10/0x10 [ 157.889665][ T7828] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 157.915595][ T7828] ? __pfx___might_resched+0x10/0x10 [ 157.920939][ T7828] should_fail_ex+0x3b0/0x4e0 [ 157.925697][ T7828] ? __anon_vma_prepare+0xc4/0x4a0 [ 157.930862][ T7828] should_failslab+0xac/0x100 [ 157.935602][ T7828] ? __anon_vma_prepare+0xc4/0x4a0 [ 157.940760][ T7828] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 157.946189][ T7828] __anon_vma_prepare+0xc4/0x4a0 [ 157.951180][ T7828] handle_pte_fault+0x5361/0x6800 [ 157.956271][ T7828] ? __pfx_handle_pte_fault+0x10/0x10 [ 157.961691][ T7828] ? __pfx_lock_acquire+0x10/0x10 [ 157.966768][ T7828] ? __pmd_alloc+0x4ff/0x620 [ 157.971491][ T7828] ? __pfx_lock_release+0x10/0x10 [ 157.976573][ T7828] ? do_raw_spin_lock+0x14f/0x370 [ 157.981654][ T7828] ? do_raw_spin_unlock+0x13c/0x8b0 [ 157.986907][ T7828] ? _raw_spin_unlock+0x28/0x50 [ 157.991799][ T7828] ? __pmd_alloc+0x4ff/0x620 [ 157.996447][ T7828] ? __pfx___pmd_alloc+0x10/0x10 [ 158.001449][ T7828] handle_mm_fault+0x1106/0x1bb0 [ 158.006529][ T7828] ? mt_find+0x2a9/0x920 [ 158.010857][ T7828] ? __pfx_handle_mm_fault+0x10/0x10 [ 158.016213][ T7828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.022599][ T7828] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 158.027943][ T7828] exc_page_fault+0x2b9/0x8c0 [ 158.032678][ T7828] asm_exc_page_fault+0x26/0x30 [ 158.038101][ T7828] RIP: 0010:__put_user_4+0x11/0x20 [ 158.043259][ T7828] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 158.062921][ T7828] RSP: 0018:ffffc90009e47dd8 EFLAGS: 00050206 [ 158.069044][ T7828] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 158.077059][ T7828] RDX: 0000000000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c60fb20 [ 158.085078][ T7828] RBP: ffffc90009e47ed0 R08: ffffffff901d11af R09: 1ffffffff203a235 [ 158.093085][ T7828] R10: dffffc0000000000 R11: fffffbfff203a236 R12: 0000000000000000 [ 158.101079][ T7828] R13: 1ffff920013c8fc4 R14: 1ffff920013c8fcc R15: 0000000020000000 [ 158.109072][ T7828] __sys_socketpair+0x186/0x720 [ 158.113952][ T7828] ? __pfx___sys_socketpair+0x10/0x10 [ 158.119327][ T7828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.125341][ T7828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.131683][ T7828] ? do_syscall_64+0x100/0x230 [ 158.136456][ T7828] __x64_sys_socketpair+0x9b/0xb0 [ 158.141483][ T7828] do_syscall_64+0xf3/0x230 [ 158.146010][ T7828] ? clear_bhb_loop+0x35/0x90 [ 158.150728][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.156629][ T7828] RIP: 0033:0x7f3e2177e719 [ 158.161066][ T7828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.180682][ T7828] RSP: 002b:00007f3e2262e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 158.189101][ T7828] RAX: ffffffffffffffda RBX: 00007f3e21935f80 RCX: 00007f3e2177e719 [ 158.195820][ T5238] Bluetooth: hci2: command 0x041b tx timeout [ 158.197065][ T7828] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 158.211048][ T7828] RBP: 00007f3e2262e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.219047][ T7828] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.227026][ T7828] R13: 0000000000000001 R14: 00007f3e21935f80 R15: 00007ffe8fd864b8 [ 158.235018][ T7828] [ 158.250770][ T7828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.682'. [ 158.323623][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.368919][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.509884][ T7654] team0: Port device team_slave_0 added [ 158.538975][ T7654] team0: Port device team_slave_1 added [ 158.655076][ T5240] IPVS: starting estimator thread 0... [ 158.756316][ T7857] IPVS: using max 17 ests per chain, 40800 per kthread [ 158.797518][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.804520][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.894606][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.963808][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.975244][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'. [ 159.002711][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.036290][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.187575][ T7654] hsr_slave_0: entered promiscuous mode [ 159.234224][ T7654] hsr_slave_1: entered promiscuous mode [ 159.377129][ T7887] bridge8: entered promiscuous mode [ 159.384311][ T7887] bridge8: entered allmulticast mode [ 159.429032][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 159.676203][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 160.075855][ T7908] FAULT_INJECTION: forcing a failure. [ 160.075855][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.106828][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.1.702 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 160.117493][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.127590][ T7908] Call Trace: [ 160.130889][ T7908] [ 160.133837][ T7908] dump_stack_lvl+0x241/0x360 [ 160.138543][ T7908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.143763][ T7908] ? __pfx__printk+0x10/0x10 [ 160.148385][ T7908] ? __pfx_lock_release+0x10/0x10 [ 160.153445][ T7908] should_fail_ex+0x3b0/0x4e0 [ 160.158151][ T7908] _copy_from_iter+0x1ed/0x1d60 [ 160.163021][ T7908] ? __virt_addr_valid+0x183/0x530 [ 160.168183][ T7908] ? __pfx_lock_release+0x10/0x10 [ 160.173240][ T7908] ? __alloc_skb+0x28f/0x440 [ 160.177866][ T7908] ? __pfx__copy_from_iter+0x10/0x10 [ 160.183172][ T7908] ? __virt_addr_valid+0x183/0x530 [ 160.188300][ T7908] ? __virt_addr_valid+0x183/0x530 [ 160.193425][ T7908] ? __virt_addr_valid+0x45f/0x530 [ 160.198551][ T7908] ? __check_object_size+0x48e/0x900 [ 160.203857][ T7908] netlink_sendmsg+0x73d/0xcb0 [ 160.208650][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.213950][ T7908] ? aa_sock_msg_perm+0x91/0x160 [ 160.218908][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.224230][ T7908] __sock_sendmsg+0x221/0x270 [ 160.228972][ T7908] ____sys_sendmsg+0x52a/0x7e0 [ 160.233774][ T7908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.239103][ T7908] __sys_sendmsg+0x292/0x380 [ 160.243718][ T7908] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.248862][ T7908] ? __pfx_vfs_write+0x10/0x10 [ 160.253664][ T7908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.260023][ T7908] ? do_syscall_64+0x100/0x230 [ 160.264813][ T7908] ? do_syscall_64+0xb6/0x230 [ 160.269517][ T7908] do_syscall_64+0xf3/0x230 [ 160.274063][ T7908] ? clear_bhb_loop+0x35/0x90 [ 160.278764][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.284711][ T7908] RIP: 0033:0x7fd3c237e719 [ 160.289138][ T7908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.308754][ T7908] RSP: 002b:00007fd3c3194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.317183][ T7908] RAX: ffffffffffffffda RBX: 00007fd3c2535f80 RCX: 00007fd3c237e719 [ 160.325164][ T7908] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 160.333151][ T7908] RBP: 00007fd3c3194090 R08: 0000000000000000 R09: 0000000000000000 [ 160.341133][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.349124][ T7908] R13: 0000000000000000 R14: 00007fd3c2535f80 R15: 00007ffef76472b8 [ 160.357121][ T7908] [ 160.374332][ T5238] Bluetooth: hci2: command 0x041b tx timeout [ 161.021696][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.711'. [ 161.072717][ T7654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.137038][ T7654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.159450][ T7654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.159560][ T7945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.713'. [ 161.225077][ T7654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.471413][ T7958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.718'. [ 161.483880][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.533326][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.540798][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 161.570193][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.577390][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.604178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.611393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.773492][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 161.941772][ T7968] geneve3: entered promiscuous mode [ 161.949600][ T7968] geneve3: entered allmulticast mode [ 162.192646][ T7654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.416022][ T5238] Bluetooth: hci2: command 0x041b tx timeout [ 162.923302][ T8020] __nla_validate_parse: 4 callbacks suppressed [ 162.923325][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 162.965945][ T7654] veth0_vlan: entered promiscuous mode [ 163.028419][ T7654] veth1_vlan: entered promiscuous mode [ 163.120066][ T7654] veth0_macvtap: entered promiscuous mode [ 163.144455][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 163.238249][ T7654] veth1_macvtap: entered promiscuous mode [ 163.318493][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.409185][ T7654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.555408][ T7654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.564273][ T7654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.615709][ T7654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.637350][ T7654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.677316][ T8042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.739'. [ 163.905966][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.945533][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.037710][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.085525][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.274352][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 164.276871][ T8066] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 164.307785][ T8074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'. [ 164.613446][ T8084] netlink: 9 bytes leftover after parsing attributes in process `syz.2.748'. [ 164.636460][ T8084] 1·: renamed from 70· (while UP) [ 164.724590][ T8084] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 165.019677][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.192859][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.367876][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.423674][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.559410][ T11] bridge_slave_1: left allmulticast mode [ 165.568366][ T11] bridge_slave_1: left promiscuous mode [ 165.574245][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.585210][ T11] bridge_slave_0: left allmulticast mode [ 165.591675][ T11] bridge_slave_0: left promiscuous mode [ 165.597719][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.153193][ T4626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.169594][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.192074][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.278645][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.298973][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.310161][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.509814][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.524832][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.538447][ T11] bond0 (unregistering): Released all slaves [ 166.554672][ T8154] netlink: 'syz.1.760': attribute type 15 has an invalid length. [ 166.760127][ T8172] ipt_ECN: cannot use operation on non-tcp rule [ 166.932842][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 167.392748][ T8183] netlink: 'syz.3.762': attribute type 39 has an invalid length. [ 168.128041][ T8195] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 168.136537][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 168.338578][ T4626] Bluetooth: hci2: command tx timeout [ 168.519163][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 168.644571][ T8231] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 168.691624][ T8145] chnl_net:caif_netlink_parms(): no params data found [ 168.811747][ T11] hsr_slave_0: left promiscuous mode [ 168.862042][ T11] hsr_slave_1: left promiscuous mode [ 168.897803][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.932792][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.977739][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.005286][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.099813][ T11] veth1_macvtap: left promiscuous mode [ 169.111851][ T11] veth0_macvtap: left promiscuous mode [ 169.118372][ T11] veth1_vlan: left promiscuous mode [ 169.123846][ T11] veth0_vlan: left promiscuous mode [ 170.257267][ T2961] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 170.415630][ T4626] Bluetooth: hci2: command tx timeout [ 172.495675][ T4626] Bluetooth: hci2: command tx timeout [ 174.575716][ T4626] Bluetooth: hci2: command tx timeout [ 183.472847][ T11] team0 (unregistering): Port device team_slave_1 removed [ 183.589669][ T11] team0 (unregistering): Port device team_slave_0 removed [ 183.681754][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.710850][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.720215][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.731064][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.739240][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 183.748652][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.792872][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 185.032578][ T8248] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 185.115932][ T4626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.124691][ T4626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.136467][ T4626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.167921][ T4626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.175964][ T4626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 185.195572][ T4626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.335567][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.354844][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.365906][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.373975][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.383948][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 185.413048][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.775661][ T5238] Bluetooth: hci5: command tx timeout [ 186.275868][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 186.352082][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.387348][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.412947][ T8145] bridge_slave_0: entered allmulticast mode [ 186.465613][ T8145] bridge_slave_0: entered promiscuous mode [ 186.484282][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.485989][ T5288] sched: DL replenish lagged too much [ 186.555715][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.590597][ T8145] bridge_slave_1: entered allmulticast mode [ 186.637657][ T8145] bridge_slave_1: entered promiscuous mode [ 187.109272][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.144997][ T8287] netlink: 9 bytes leftover after parsing attributes in process `syz.3.779'. [ 187.187744][ T8287] 1·: renamed from 70· (while UP) [ 187.203463][ T8287] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 187.277316][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.296127][ T5238] Bluetooth: hci6: command tx timeout [ 187.455681][ T5238] Bluetooth: hci7: command tx timeout [ 187.478920][ T8145] team0: Port device team_slave_0 added [ 187.506814][ T8295] FAULT_INJECTION: forcing a failure. [ 187.506814][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 187.545778][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.3.780 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 187.556439][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.566531][ T8295] Call Trace: [ 187.569841][ T8295] [ 187.572799][ T8295] dump_stack_lvl+0x241/0x360 [ 187.577526][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.582763][ T8295] ? __pfx__printk+0x10/0x10 [ 187.587392][ T8295] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 187.593419][ T8295] ? __pfx___might_resched+0x10/0x10 [ 187.598754][ T8295] ? aa_label_sk_perm+0x4f3/0x6c0 [ 187.603827][ T8295] should_fail_ex+0x3b0/0x4e0 [ 187.608557][ T8295] should_failslab+0xac/0x100 [ 187.613283][ T8295] ? __alloc_skb+0x1c3/0x440 [ 187.617925][ T8295] kmem_cache_alloc_node_noprof+0x71/0x320 [ 187.623834][ T8295] __alloc_skb+0x1c3/0x440 [ 187.628299][ T8295] ? __pfx___alloc_skb+0x10/0x10 [ 187.633287][ T8295] netlink_sendmsg+0x638/0xcb0 [ 187.638119][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.643462][ T8295] ? aa_sock_msg_perm+0x91/0x160 [ 187.648451][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.653780][ T8295] __sock_sendmsg+0x221/0x270 [ 187.658520][ T8295] ____sys_sendmsg+0x52a/0x7e0 [ 187.663337][ T8295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.668686][ T8295] __sys_sendmsg+0x292/0x380 [ 187.673324][ T8295] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.678504][ T8295] ? __pfx_vfs_write+0x10/0x10 [ 187.683339][ T8295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.689725][ T8295] ? do_syscall_64+0x100/0x230 [ 187.694537][ T8295] ? do_syscall_64+0xb6/0x230 [ 187.699273][ T8295] do_syscall_64+0xf3/0x230 [ 187.703824][ T8295] ? clear_bhb_loop+0x35/0x90 [ 187.708553][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.714485][ T8295] RIP: 0033:0x7fd7abf7e719 [ 187.718931][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.738583][ T8295] RSP: 002b:00007fd7acc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.747061][ T8295] RAX: ffffffffffffffda RBX: 00007fd7ac135f80 RCX: 00007fd7abf7e719 [ 187.755071][ T8295] RDX: 0000000000000800 RSI: 0000000020000380 RDI: 0000000000000003 [ 187.763079][ T8295] RBP: 00007fd7acc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.771086][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.779186][ T8295] R13: 0000000000000000 R14: 00007fd7ac135f80 R15: 00007ffe636597d8 [ 187.787213][ T8295] [ 187.901284][ T5238] Bluetooth: hci5: command tx timeout [ 187.959069][ T8145] team0: Port device team_slave_1 added [ 188.058689][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.065876][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.105539][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.251316][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 188.289426][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.306672][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.362461][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.639626][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.375628][ T5238] Bluetooth: hci6: command tx timeout [ 189.535682][ T5238] Bluetooth: hci7: command tx timeout [ 189.935613][ T5238] Bluetooth: hci5: command tx timeout [ 191.455640][ T5238] Bluetooth: hci6: command tx timeout [ 191.625858][ T5238] Bluetooth: hci7: command tx timeout [ 192.015777][ T4626] Bluetooth: hci5: command tx timeout [ 193.535609][ T5238] Bluetooth: hci6: command tx timeout [ 193.695661][ T5238] Bluetooth: hci7: command tx timeout [ 194.593737][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602578][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.655639][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 201.633883][ T52] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.281976][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.291704][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.301330][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.309541][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.320419][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.327845][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.415717][ T5238] Bluetooth: hci0: command tx timeout [ 207.052298][ T8311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.063003][ T8311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.495626][ T5238] Bluetooth: hci0: command tx timeout [ 210.575664][ T5238] Bluetooth: hci0: command tx timeout [ 212.655618][ T5238] Bluetooth: hci0: command tx timeout [ 227.591221][ T4626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.602792][ T4626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.612403][ T4626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.623325][ T4626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.630971][ T4626] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.641377][ T4626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.695695][ T4626] Bluetooth: hci3: command tx timeout [ 231.775672][ T4626] Bluetooth: hci3: command tx timeout [ 233.616007][ T3059] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.855749][ T4626] Bluetooth: hci3: command tx timeout [ 235.935589][ T4626] Bluetooth: hci3: command tx timeout [ 244.906708][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.916495][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.924593][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.935755][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.943913][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.951382][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.396013][ T4626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 245.404999][ T4626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 245.415619][ T4626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 245.424887][ T4626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 245.434820][ T4626] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 245.446618][ T4626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 245.478836][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 245.487834][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 245.495913][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 245.503935][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 245.520470][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 245.527935][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 246.975623][ T54] Bluetooth: hci4: command tx timeout [ 247.535622][ T54] Bluetooth: hci8: command tx timeout [ 247.615627][ T54] Bluetooth: hci9: command tx timeout [ 249.055594][ T54] Bluetooth: hci4: command tx timeout [ 249.615684][ T54] Bluetooth: hci8: command tx timeout [ 249.695634][ T4626] Bluetooth: hci9: command tx timeout [ 251.135632][ T4626] Bluetooth: hci4: command tx timeout [ 251.695576][ T4626] Bluetooth: hci8: command tx timeout [ 251.785694][ T4626] Bluetooth: hci9: command tx timeout [ 253.215669][ T4626] Bluetooth: hci4: command tx timeout [ 253.775591][ T4626] Bluetooth: hci8: command tx timeout [ 253.855619][ T4626] Bluetooth: hci9: command tx timeout [ 256.017869][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024389][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.263952][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 265.274728][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 265.285538][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 265.293564][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 265.304066][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 265.316194][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 265.615901][ T52] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.375603][ T4626] Bluetooth: hci10: command tx timeout [ 269.455683][ T4626] Bluetooth: hci10: command tx timeout [ 271.535530][ T4626] Bluetooth: hci10: command tx timeout [ 273.615533][ T4626] Bluetooth: hci10: command tx timeout [ 288.834293][ T4626] Bluetooth: hci2: command 0x0406 tx timeout [ 288.910779][ T4626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 288.920111][ T4626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 288.930846][ T4626] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 288.938979][ T4626] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 288.949320][ T4626] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 288.960820][ T4626] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 291.055574][ T4626] Bluetooth: hci11: command tx timeout [ 293.135761][ T4626] Bluetooth: hci11: command tx timeout [ 295.217935][ T4626] Bluetooth: hci11: command tx timeout [ 297.295576][ T4626] Bluetooth: hci11: command tx timeout [ 297.617786][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 305.624433][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 305.633485][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 305.641878][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 305.650096][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 305.663409][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 305.671973][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 305.885820][ T4626] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 305.900217][ T4626] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 305.908209][ T4626] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 305.919591][ T4626] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 305.927428][ T4626] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 305.940698][ T4626] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 306.063804][ T4626] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 306.073648][ T4626] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 306.082298][ T4626] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 306.095499][ T4626] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 306.103682][ T4626] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 306.111341][ T4626] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 307.775645][ T5248] Bluetooth: hci12: command tx timeout [ 308.015688][ T5248] Bluetooth: hci13: command tx timeout [ 308.175634][ T5248] Bluetooth: hci14: command tx timeout [ 309.305938][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 309.312067][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 309.322516][ T5248] Bluetooth: hci7: command 0x0406 tx timeout [ 309.855619][ T5238] Bluetooth: hci12: command tx timeout [ 310.095636][ T5238] Bluetooth: hci13: command tx timeout [ 310.255550][ T5238] Bluetooth: hci14: command tx timeout [ 311.935624][ T5238] Bluetooth: hci12: command tx timeout [ 312.175806][ T5238] Bluetooth: hci13: command tx timeout [ 312.337730][ T5238] Bluetooth: hci14: command tx timeout [ 314.015573][ T5238] Bluetooth: hci12: command tx timeout [ 314.255645][ T5238] Bluetooth: hci13: command tx timeout [ 314.415584][ T5238] Bluetooth: hci14: command tx timeout [ 317.458841][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465204][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.790476][ T4626] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 325.808051][ T4626] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 325.818199][ T4626] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 325.826700][ T4626] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 325.834459][ T4626] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 325.841972][ T4626] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 327.947844][ T4626] Bluetooth: hci15: command tx timeout [ 329.615950][ T52] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.780698][ T4626] Bluetooth: hci0: command 0x0406 tx timeout [ 330.015515][ T5238] Bluetooth: hci15: command tx timeout [ 332.095526][ T5238] Bluetooth: hci15: command tx timeout [ 334.175694][ T5238] Bluetooth: hci15: command tx timeout [ 349.910601][ T5244] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 349.921634][ T5244] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 349.933287][ T5244] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 349.941563][ T5244] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 349.952150][ T5244] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 349.961920][ T5244] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 350.261103][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 352.018318][ T4626] Bluetooth: hci16: command tx timeout [ 352.655594][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 352.663393][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 352.692500][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 352.722738][ T30] task:kworker/u8:0 state:D stack:20496 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 352.760387][ T30] Workqueue: netns cleanup_net [ 352.765262][ T30] Call Trace: [ 352.779400][ T30] [ 352.782402][ T30] __schedule+0x1895/0x4b30 [ 352.867842][ T30] ? __pfx___schedule+0x10/0x10 [ 352.872788][ T30] ? __pfx_lock_release+0x10/0x10 [ 352.925056][ T30] ? kthread_data+0x52/0xd0 [ 352.945435][ T30] ? wq_worker_sleeping+0x66/0x240 [ 352.950630][ T30] ? schedule+0x90/0x320 [ 352.954905][ T30] schedule+0x14b/0x320 [ 352.966961][ T30] schedule_timeout+0xb0/0x310 [ 352.971803][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 352.980255][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.987871][ T30] ? wait_for_completion+0x2fe/0x620 [ 352.993365][ T30] ? wait_for_completion+0x2fe/0x620 [ 353.000378][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.007107][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 353.012363][ T30] ? wait_for_completion+0x2fe/0x620 [ 353.020277][ T30] wait_for_completion+0x355/0x620 [ 353.026883][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 353.032572][ T30] ? __flush_work+0xe7/0xc50 [ 353.038808][ T30] __flush_work+0xa37/0xc50 [ 353.043368][ T30] ? __flush_work+0xe7/0xc50 [ 353.050779][ T30] ? __pfx___flush_work+0x10/0x10 [ 353.057288][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 353.062686][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.070637][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 353.077834][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.083107][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 353.092446][ T30] ? __mutex_lock+0x9a1/0xd70 [ 353.098769][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 353.103887][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 353.112335][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 353.119090][ T30] ? __mutex_lock+0x9ab/0xd70 [ 353.123843][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 353.131719][ T30] ? __mutex_lock+0x52a/0xd70 [ 353.138180][ T30] unregister_netdevice_queue+0x303/0x370 [ 353.143967][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 353.151879][ T30] nsim_destroy+0x180/0x5c0 [ 353.157986][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 353.163763][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 353.171749][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 353.178801][ T30] nsim_dev_reload_down+0x98/0xd0 [ 353.183889][ T30] devlink_reload+0x18b/0x870 [ 353.190741][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 353.197748][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 353.203277][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 353.212139][ T30] ? class_remove_file_ns+0x121/0x160 [ 353.219063][ T30] cleanup_net+0x615/0xcc0 [ 353.223559][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 353.230236][ T30] ? process_scheduled_works+0x976/0x1850 [ 353.237606][ T30] process_scheduled_works+0xa63/0x1850 [ 353.243239][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 353.251727][ T30] ? assign_work+0x364/0x3d0 [ 353.257973][ T30] worker_thread+0x870/0xd30 [ 353.262636][ T30] ? __kthread_parkme+0x169/0x1d0 [ 353.269519][ T30] ? __pfx_worker_thread+0x10/0x10 [ 353.274689][ T30] kthread+0x2f0/0x390 [ 353.280553][ T30] ? __pfx_worker_thread+0x10/0x10 [ 353.288396][ T30] ? __pfx_kthread+0x10/0x10 [ 353.293067][ T30] ret_from_fork+0x4b/0x80 [ 353.340110][ T30] ? __pfx_kthread+0x10/0x10 [ 353.344792][ T30] ret_from_fork_asm+0x1a/0x30 [ 353.354060][ T30] [ 353.357676][ T30] INFO: task kworker/u8:9:3011 blocked for more than 144 seconds. [ 353.370829][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 353.379067][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.390460][ T30] task:kworker/u8:9 state:D stack:19360 pid:3011 tgid:3011 ppid:2 flags:0x00004000 [ 353.401312][ T30] Workqueue: events_unbound linkwatch_event [ 353.411304][ T30] Call Trace: [ 353.414627][ T30] [ 353.418554][ T30] __schedule+0x1895/0x4b30 [ 353.423177][ T30] ? __pfx___schedule+0x10/0x10 [ 353.430955][ T30] ? __pfx_lock_release+0x10/0x10 [ 353.436435][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 353.441950][ T30] ? kthread_data+0x52/0xd0 [ 353.450361][ T30] ? schedule+0x90/0x320 [ 353.454658][ T30] ? wq_worker_sleeping+0x66/0x240 [ 353.460278][ T30] ? schedule+0x90/0x320 [ 353.464569][ T30] schedule+0x14b/0x320 [ 353.471498][ T30] schedule_preempt_disabled+0x13/0x30 [ 353.477416][ T30] __mutex_lock+0x6a7/0xd70 [ 353.481988][ T30] ? __mutex_lock+0x52a/0xd70 [ 353.490763][ T30] ? linkwatch_event+0xe/0x60 [ 353.495907][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 353.501006][ T30] ? process_scheduled_works+0x976/0x1850 [ 353.509774][ T30] linkwatch_event+0xe/0x60 [ 353.514348][ T30] process_scheduled_works+0xa63/0x1850 [ 353.520508][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 353.530918][ T30] ? assign_work+0x364/0x3d0 [ 353.542086][ T30] worker_thread+0x870/0xd30 [ 353.549392][ T30] ? __kthread_parkme+0x169/0x1d0 [ 353.554489][ T30] ? __pfx_worker_thread+0x10/0x10 [ 353.560162][ T30] kthread+0x2f0/0x390 [ 353.564284][ T30] ? __pfx_worker_thread+0x10/0x10 [ 353.573650][ T30] ? __pfx_kthread+0x10/0x10 [ 353.578634][ T30] ret_from_fork+0x4b/0x80 [ 353.583118][ T30] ? __pfx_kthread+0x10/0x10 [ 353.590636][ T30] ret_from_fork_asm+0x1a/0x30 [ 353.595820][ T30] [ 353.598892][ T30] INFO: task dhcpcd:4903 blocked for more than 144 seconds. [ 353.609184][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 353.618778][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.630296][ T30] task:dhcpcd state:D stack:20608 pid:4903 tgid:4903 ppid:4902 flags:0x00000002 [ 353.641376][ T30] Call Trace: [ 353.644735][ T30] [ 353.651582][ T30] __schedule+0x1895/0x4b30 [ 353.656567][ T30] ? __pfx___schedule+0x10/0x10 [ 353.661476][ T30] ? __pfx_lock_release+0x10/0x10 [ 353.669523][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 353.675098][ T30] ? schedule+0x90/0x320 [ 353.679964][ T30] schedule+0x14b/0x320 [ 353.684179][ T30] schedule_preempt_disabled+0x13/0x30 [ 353.693762][ T30] __mutex_lock+0x6a7/0xd70 [ 353.698714][ T30] ? __mutex_lock+0x52a/0xd70 [ 353.703455][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 353.711287][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 353.716749][ T30] ? apparmor_capable+0x13b/0x1b0 [ 353.721843][ T30] ? bpf_lsm_capable+0x9/0x10 [ 353.729525][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 353.734275][ T30] ? get_user_ifreq+0x1bb/0x200 [ 353.740816][ T30] inet_ioctl+0x3d7/0x4f0 [ 353.745206][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 353.753220][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 353.759006][ T30] sock_do_ioctl+0x158/0x460 [ 353.763668][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 353.771670][ T30] ? __pfx_lock_release+0x10/0x10 [ 353.779303][ T30] sock_ioctl+0x626/0x8e0 [ 353.783701][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 353.791437][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.798009][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.804409][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 353.813499][ T30] __se_sys_ioctl+0xf9/0x170 [ 353.818524][ T30] do_syscall_64+0xf3/0x230 [ 353.823092][ T30] ? clear_bhb_loop+0x35/0x90 [ 353.830684][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.837042][ T30] RIP: 0033:0x7ffb05080d49 [ 353.841505][ T30] RSP: 002b:00007ffe793f9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.852924][ T30] RAX: ffffffffffffffda RBX: 00007ffb04fb26c0 RCX: 00007ffb05080d49 [ 353.863062][ T30] RDX: 00007ffe79409d18 RSI: 0000000000008914 RDI: 000000000000000f [ 353.873886][ T30] RBP: 00007ffe79419ed8 R08: 00007ffe79409cd8 R09: 00007ffe79409c88 [ 353.882352][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.893205][ T30] R13: 00007ffe79409d18 R14: 0000000000000028 R15: 0000000000008914 [ 353.902882][ T30] [ 353.908679][ T30] INFO: task syz-executor:8145 blocked for more than 144 seconds. [ 353.917172][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 353.924852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.937030][ T30] task:syz-executor state:D stack:21728 pid:8145 tgid:8145 ppid:1 flags:0x00000004 [ 353.951118][ T30] Call Trace: [ 353.954453][ T30] [ 353.957931][ T30] __schedule+0x1895/0x4b30 [ 353.962646][ T30] ? __pfx___schedule+0x10/0x10 [ 353.970865][ T30] ? __pfx_lock_release+0x10/0x10 [ 353.977484][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 353.983016][ T30] ? schedule+0x90/0x320 [ 353.990122][ T30] schedule+0x14b/0x320 [ 353.994342][ T30] schedule_preempt_disabled+0x13/0x30 [ 354.000370][ T30] __mutex_lock+0x6a7/0xd70 [ 354.004934][ T30] ? __mutex_lock+0x52a/0xd70 [ 354.012501][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 354.019335][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 354.024437][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 354.032167][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 354.037692][ T30] ? __lock_acquire+0x1384/0x2050 [ 354.042791][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.051154][ T30] netlink_rcv_skb+0x1e3/0x430 [ 354.056293][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.061817][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.071238][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.077307][ T30] netlink_unicast+0x7f6/0x990 [ 354.082141][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 354.090343][ T30] ? __virt_addr_valid+0x183/0x530 [ 354.095617][ T4626] Bluetooth: hci16: command tx timeout [ 354.102722][ T30] ? __check_object_size+0x48e/0x900 [ 354.110692][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 354.115873][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.121377][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 354.129152][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.134491][ T30] __sock_sendmsg+0x221/0x270 [ 354.140873][ T30] __sys_sendto+0x39b/0x4f0 [ 354.148036][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 354.153144][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.159708][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.168862][ T30] __x64_sys_sendto+0xde/0x100 [ 354.173690][ T30] do_syscall_64+0xf3/0x230 [ 354.179911][ T30] ? clear_bhb_loop+0x35/0x90 [ 354.184649][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.193901][ T30] RIP: 0033:0x7f6cbcb805ac [ 354.198741][ T30] RSP: 002b:00007ffe5b1e4d40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.210039][ T30] RAX: ffffffffffffffda RBX: 00007f6cbd864620 RCX: 00007f6cbcb805ac [ 354.218385][ T30] RDX: 0000000000000020 RSI: 00007f6cbd864670 RDI: 0000000000000003 [ 354.230437][ T30] RBP: 0000000000000000 R08: 00007ffe5b1e4d94 R09: 000000000000000c [ 354.238875][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 354.249452][ T30] R13: 0000000000000000 R14: 00007f6cbd864670 R15: 0000000000000000 [ 354.257869][ T30] [ 354.260935][ T30] INFO: task syz-executor:8250 blocked for more than 144 seconds. [ 354.272771][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 354.280816][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.292360][ T30] task:syz-executor state:D stack:21728 pid:8250 tgid:8250 ppid:1 flags:0x00000004 [ 354.304599][ T30] Call Trace: [ 354.310686][ T30] [ 354.313671][ T30] __schedule+0x1895/0x4b30 [ 354.318725][ T30] ? __pfx___schedule+0x10/0x10 [ 354.323801][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.331658][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 354.345483][ T30] ? schedule+0x90/0x320 [ 354.349787][ T30] schedule+0x14b/0x320 [ 354.353986][ T30] schedule_preempt_disabled+0x13/0x30 [ 354.364170][ T30] __mutex_lock+0x6a7/0xd70 [ 354.369088][ T30] ? __mutex_lock+0x52a/0xd70 [ 354.373820][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 354.383105][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 354.388537][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 354.393533][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 354.401474][ T30] ? __lock_acquire+0x1384/0x2050 [ 354.407339][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.412907][ T30] netlink_rcv_skb+0x1e3/0x430 [ 354.420553][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.427818][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.433187][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.441298][ T30] netlink_unicast+0x7f6/0x990 [ 354.446473][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 354.451817][ T30] ? __virt_addr_valid+0x183/0x530 [ 354.459731][ T30] ? __check_object_size+0x48e/0x900 [ 354.465073][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 354.471422][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.479421][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 354.484420][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.490220][ T30] __sock_sendmsg+0x221/0x270 [ 354.494968][ T30] __sys_sendto+0x39b/0x4f0 [ 354.502531][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 354.509335][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.514585][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 354.524081][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.530602][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.539695][ T30] __x64_sys_sendto+0xde/0x100 [ 354.544525][ T30] do_syscall_64+0xf3/0x230 [ 354.550588][ T30] ? clear_bhb_loop+0x35/0x90 [ 354.555323][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.565409][ T30] RIP: 0033:0x7fd5137805ac [ 354.569891][ T30] RSP: 002b:00007ffdfe9817f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.582991][ T30] RAX: ffffffffffffffda RBX: 00007fd514464620 RCX: 00007fd5137805ac [ 354.592464][ T30] RDX: 000000000000002c RSI: 00007fd514464670 RDI: 0000000000000003 [ 354.603134][ T30] RBP: 0000000000000000 R08: 00007ffdfe981844 R09: 000000000000000c [ 354.611508][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 354.622414][ T30] R13: 0000000000000000 R14: 00007fd514464670 R15: 0000000000000000 [ 354.632721][ T30] [ 354.638435][ T30] INFO: task syz-executor:8255 blocked for more than 145 seconds. [ 354.646611][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 354.654289][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.665424][ T30] task:syz-executor state:D stack:21728 pid:8255 tgid:8255 ppid:1 flags:0x00000004 [ 354.678966][ T30] Call Trace: [ 354.682291][ T30] [ 354.685253][ T30] __schedule+0x1895/0x4b30 [ 354.690323][ T30] ? __pfx___schedule+0x10/0x10 [ 354.695230][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.703217][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 354.710262][ T30] ? schedule+0x90/0x320 [ 354.714667][ T30] schedule+0x14b/0x320 [ 354.721673][ T30] schedule_preempt_disabled+0x13/0x30 [ 354.727708][ T30] __mutex_lock+0x6a7/0xd70 [ 354.732432][ T30] ? __mutex_lock+0x52a/0xd70 [ 354.740380][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 354.747083][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 354.752188][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 354.759930][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 354.765105][ T30] ? __lock_acquire+0x1384/0x2050 [ 354.770809][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.778986][ T30] netlink_rcv_skb+0x1e3/0x430 [ 354.783809][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.791016][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.799141][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.804408][ T30] netlink_unicast+0x7f6/0x990 [ 354.809614][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 354.814956][ T30] ? __virt_addr_valid+0x183/0x530 [ 354.823780][ T30] ? __check_object_size+0x48e/0x900 [ 354.830647][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 354.838283][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.843693][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 354.849614][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.854949][ T30] __sock_sendmsg+0x221/0x270 [ 354.862534][ T30] __sys_sendto+0x39b/0x4f0 [ 354.868608][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 354.873702][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.881688][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 354.888147][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.894196][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.903333][ T30] __x64_sys_sendto+0xde/0x100 [ 354.909753][ T30] do_syscall_64+0xf3/0x230 [ 354.914312][ T30] ? clear_bhb_loop+0x35/0x90 [ 354.921764][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.928036][ T30] RIP: 0033:0x7f5247f805ac [ 354.932495][ T30] RSP: 002b:00007ffc5c8b0320 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.943934][ T30] RAX: ffffffffffffffda RBX: 00007f5248c64620 RCX: 00007f5247f805ac [ 354.953473][ T30] RDX: 000000000000003c RSI: 00007f5248c64670 RDI: 0000000000000003 [ 354.964743][ T30] RBP: 0000000000000000 R08: 00007ffc5c8b0374 R09: 000000000000000c [ 354.973105][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 354.983765][ T30] R13: 0000000000000000 R14: 00007f5248c64670 R15: 0000000000000000 [ 354.993284][ T30] [ 354.998931][ T30] INFO: task syz-executor:8258 blocked for more than 145 seconds. [ 355.007148][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 355.014818][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.026334][ T30] task:syz-executor state:D stack:21728 pid:8258 tgid:8258 ppid:1 flags:0x00004004 [ 355.039458][ T30] Call Trace: [ 355.042869][ T30] [ 355.047591][ T30] __schedule+0x1895/0x4b30 [ 355.052187][ T30] ? __pfx___schedule+0x10/0x10 [ 355.061505][ T30] ? __pfx_lock_release+0x10/0x10 [ 355.069783][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 355.075311][ T30] ? schedule+0x90/0x320 [ 355.081283][ T30] schedule+0x14b/0x320 [ 355.086982][ T30] schedule_preempt_disabled+0x13/0x30 [ 355.092498][ T30] __mutex_lock+0x6a7/0xd70 [ 355.098739][ T30] ? __mutex_lock+0x52a/0xd70 [ 355.103480][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 355.109900][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 355.114988][ T30] ? __asan_memset+0x23/0x50 [ 355.122272][ T30] ? nla_strscpy+0x113/0x180 [ 355.128501][ T30] rtnl_newlink+0xab7/0x20a0 [ 355.133152][ T30] ? rtnl_newlink+0x4b1/0x20a0 [ 355.139672][ T30] ? rtnl_newlink+0x4b1/0x20a0 [ 355.144652][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 355.152587][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 355.160087][ T30] ? __pfx_lock_release+0x10/0x10 [ 355.165189][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 355.171881][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 355.178850][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 355.184028][ T30] ? __lock_acquire+0x1384/0x2050 [ 355.191759][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.198784][ T30] netlink_rcv_skb+0x1e3/0x430 [ 355.204036][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.211093][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.218396][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.223660][ T30] netlink_unicast+0x7f6/0x990 [ 355.230135][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 355.238193][ T30] ? __virt_addr_valid+0x183/0x530 [ 355.243362][ T30] ? __check_object_size+0x48e/0x900 [ 355.250537][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 355.256869][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.262209][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 355.268733][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.274072][ T30] __sock_sendmsg+0x221/0x270 [ 355.281615][ T30] __sys_sendto+0x39b/0x4f0 [ 355.288109][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 355.293289][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.300148][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 355.307938][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.313992][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.323418][ T30] __x64_sys_sendto+0xde/0x100 [ 355.329887][ T30] do_syscall_64+0xf3/0x230 [ 355.334453][ T30] ? clear_bhb_loop+0x35/0x90 [ 355.340885][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.348508][ T30] RIP: 0033:0x7f4c80d805ac [ 355.352973][ T30] RSP: 002b:00007ffc81a079e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 355.364261][ T30] RAX: ffffffffffffffda RBX: 00007f4c81a64620 RCX: 00007f4c80d805ac [ 355.373902][ T30] RDX: 000000000000003c RSI: 00007f4c81a64670 RDI: 0000000000000003 [ 355.392273][ T30] RBP: 0000000000000000 R08: 00007ffc81a07a34 R09: 000000000000000c [ 355.403633][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 355.413208][ T30] R13: 0000000000000000 R14: 00007f4c81a64670 R15: 0000000000000000 [ 355.422795][ T30] [ 355.427399][ T30] INFO: task syz.3.782:8311 blocked for more than 146 seconds. [ 355.435016][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 355.445588][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.454463][ T30] task:syz.3.782 state:D stack:21104 pid:8311 tgid:8310 ppid:5239 flags:0x00004006 [ 355.467563][ T30] Call Trace: [ 355.470902][ T30] [ 355.473868][ T30] __schedule+0x1895/0x4b30 [ 355.480261][ T30] ? __pfx___schedule+0x10/0x10 [ 355.485175][ T30] ? __pfx_lock_release+0x10/0x10 [ 355.493042][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 355.498928][ T30] ? schedule+0x90/0x320 [ 355.503220][ T30] schedule+0x14b/0x320 [ 355.510598][ T30] schedule_preempt_disabled+0x13/0x30 [ 355.517655][ T30] __mutex_lock+0x6a7/0xd70 [ 355.522212][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 355.530331][ T30] ? __mutex_lock+0x52a/0xd70 [ 355.535077][ T30] ? nsim_destroy+0x71/0x5c0 [ 355.540164][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 355.545262][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 355.553705][ T30] ? _raw_spin_unlock+0x28/0x50 [ 355.560088][ T30] ? simple_release_fs+0x9c/0xd0 [ 355.565097][ T30] nsim_destroy+0x71/0x5c0 [ 355.572378][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 355.578440][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 355.583625][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 355.589602][ T30] nsim_dev_reload_down+0x98/0xd0 [ 355.594684][ T30] devlink_reload+0x18b/0x870 [ 355.603637][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 355.609249][ T30] ? bpf_lsm_capable+0x9/0x10 [ 355.613977][ T30] ? security_capable+0x7e/0x2d0 [ 355.624107][ T30] devlink_nl_reload_doit+0x9c3/0xe50 [ 355.629904][ T30] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 355.639710][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 355.646499][ T30] genl_rcv_msg+0xb14/0xec0 [ 355.651244][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.659749][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 355.664857][ T30] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 355.671985][ T30] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 355.680822][ T30] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 355.689032][ T30] ? __pfx___might_resched+0x10/0x10 [ 355.694397][ T30] netlink_rcv_skb+0x1e3/0x430 [ 355.702088][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.707544][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.713047][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 355.722862][ T30] genl_rcv+0x28/0x40 [ 355.727746][ T30] netlink_unicast+0x7f6/0x990 [ 355.732589][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 355.740828][ T30] ? __virt_addr_valid+0x183/0x530 [ 355.746390][ T30] ? __check_object_size+0x48e/0x900 [ 355.751742][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 355.759542][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.764898][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 355.771008][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.779487][ T30] __sock_sendmsg+0x221/0x270 [ 355.784269][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 355.789597][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.794969][ T30] __sys_sendmsg+0x292/0x380 [ 355.802787][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.808412][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.814467][ T30] ? call_rcu+0x731/0xa70 [ 355.821865][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.828675][ T30] ? do_syscall_64+0x100/0x230 [ 355.833501][ T30] ? do_syscall_64+0xb6/0x230 [ 355.841573][ T30] do_syscall_64+0xf3/0x230 [ 355.846872][ T30] ? clear_bhb_loop+0x35/0x90 [ 355.851607][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.861336][ T30] RIP: 0033:0x7fd7abf7e719 [ 355.866187][ T30] RSP: 002b:00007fd7acc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.874654][ T30] RAX: ffffffffffffffda RBX: 00007fd7ac135f80 RCX: 00007fd7abf7e719 [ 355.885405][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 355.893424][ T30] RBP: 00007fd7abff132e R08: 0000000000000000 R09: 0000000000000000 [ 355.903646][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.911997][ T30] R13: 0000000000000000 R14: 00007fd7ac135f80 R15: 00007ffe636597d8 [ 355.923352][ T30] [ 355.926757][ T30] INFO: task syz-executor:8325 blocked for more than 146 seconds. [ 355.934597][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 355.945118][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.954783][ T30] task:syz-executor state:D stack:24128 pid:8325 tgid:8325 ppid:1 flags:0x00000004 [ 355.968538][ T30] Call Trace: [ 355.971867][ T30] [ 355.974829][ T30] __schedule+0x1895/0x4b30 [ 355.979977][ T30] ? __pfx___schedule+0x10/0x10 [ 355.984882][ T30] ? __pfx_lock_release+0x10/0x10 [ 355.992722][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 355.998670][ T30] ? schedule+0x90/0x320 [ 356.002968][ T30] schedule+0x14b/0x320 [ 356.010664][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.016555][ T30] __mutex_lock+0x6a7/0xd70 [ 356.021116][ T30] ? __mutex_lock+0x52a/0xd70 [ 356.028689][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.033869][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 356.039507][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.044501][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 356.053758][ T30] ? __lock_acquire+0x1384/0x2050 [ 356.059675][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.065683][ T30] netlink_rcv_skb+0x1e3/0x430 [ 356.070545][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.079052][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.084420][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.091361][ T30] netlink_unicast+0x7f6/0x990 [ 356.101437][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 356.107097][ T30] ? __virt_addr_valid+0x183/0x530 [ 356.112263][ T30] ? __check_object_size+0x48e/0x900 [ 356.120481][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 356.125321][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.132180][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 356.139996][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.145347][ T30] __sock_sendmsg+0x221/0x270 [ 356.150532][ T30] __sys_sendto+0x39b/0x4f0 [ 356.155095][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 356.164335][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.171380][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.178026][ T4626] Bluetooth: hci16: command tx timeout [ 356.187635][ T30] ? exc_page_fault+0x590/0x8c0 [ 356.192562][ T30] __x64_sys_sendto+0xde/0x100 [ 356.197977][ T30] do_syscall_64+0xf3/0x230 [ 356.202536][ T30] ? clear_bhb_loop+0x35/0x90 [ 356.211268][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.217553][ T30] RIP: 0033:0x7fb5081805ac [ 356.222017][ T30] RSP: 002b:00007ffed4fc7c80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 356.233379][ T30] RAX: ffffffffffffffda RBX: 00007fb508e64620 RCX: 00007fb5081805ac [ 356.242905][ T30] RDX: 0000000000000028 RSI: 00007fb508e64670 RDI: 0000000000000003 [ 356.253770][ T30] RBP: 0000000000000000 R08: 00007ffed4fc7cd4 R09: 000000000000000c [ 356.262204][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 356.272945][ T30] R13: 0000000000000000 R14: 00007fb508e64670 R15: 0000000000000000 [ 356.283052][ T30] [ 356.288691][ T30] [ 356.288691][ T30] Showing all locks held in the system: [ 356.296886][ T30] 7 locks held by kworker/u8:0/11: [ 356.302033][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 356.315410][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 356.329194][ T30] #2: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 356.339094][ T30] #3: ffff88805f2ee0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 356.351946][ T30] #4: ffff88805f2ef250 (&devlink->lock_key#4){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 356.364478][ T30] #5: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 356.376280][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 356.389741][ T30] 3 locks held by kworker/1:0/25: [ 356.394897][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 356.411569][ T30] #1: ffffc900001f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 356.434267][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 356.448045][ T30] 1 lock held by khungtaskd/30: [ 356.452981][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 356.463482][ T30] 3 locks held by kworker/u8:6/2889: [ 356.471574][ T30] #0: ffff88802e8d6148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 356.484955][ T30] #1: ffffc9000a0e7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 356.502458][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 356.512372][ T30] 3 locks held by kworker/u8:9/3011: [ 356.520348][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 356.533606][ T30] #1: ffffc9000a6c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 356.547439][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 356.557119][ T30] 3 locks held by kworker/1:2/3233: [ 356.562366][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 356.575339][ T30] #1: ffffc9000adf7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 356.589293][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 356.600136][ T30] 1 lock held by dhcpcd/4903: [ 356.604849][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 356.619055][ T30] 2 locks held by getty/4996: [ 356.623793][ T30] #0: ffff88802f31c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 356.636626][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 356.648415][ T30] 7 locks held by kworker/0:3/5240: [ 356.653685][ T30] 1 lock held by syz-executor/8145: [ 356.662513][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.672463][ T30] 1 lock held by syz-executor/8250: [ 356.680657][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.691706][ T30] 1 lock held by syz-executor/8255: [ 356.699546][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.709463][ T30] 1 lock held by syz-executor/8258: [ 356.714702][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 356.725909][ T30] 4 locks held by syz.3.782/8311: [ 356.730981][ T30] #0: ffffffff8fd39430 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 356.742617][ T30] #1: ffff88805eccf0e8 (&dev->mutex){....}-{3:3}, at: devlink_get_from_attrs_lock+0x264/0x410 [ 356.753443][ T30] #2: ffff88805ed08250 (&devlink->lock_key#5){+.+.}-{3:3}, at: devlink_get_from_attrs_lock+0x273/0x410 [ 356.768648][ T30] #3: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 356.778040][ T30] 1 lock held by syz-executor/8325: [ 356.783439][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.795925][ T30] 1 lock held by syz-executor/8331: [ 356.801175][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.813797][ T30] 1 lock held by syz-executor/8338: [ 356.820570][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.831678][ T30] 1 lock held by syz-executor/8342: [ 356.839041][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.851212][ T30] 1 lock held by syz-executor/8343: [ 356.857992][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.869060][ T30] 1 lock held by syz-executor/8347: [ 356.874299][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.887043][ T30] 1 lock held by syz-executor/8353: [ 356.892293][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.906882][ T30] 1 lock held by syz-executor/8361: [ 356.912129][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.923442][ T30] 1 lock held by syz-executor/8365: [ 356.930300][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.942547][ T30] 1 lock held by syz-executor/8367: [ 356.949818][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.960878][ T30] 1 lock held by syz-executor/8372: [ 356.967680][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.980025][ T30] 1 lock held by syz-executor/8379: [ 356.987029][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.998178][ T30] [ 357.000551][ T30] ============================================= [ 357.000551][ T30] [ 357.010838][ T30] NMI backtrace for cpu 1 [ 357.015206][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 357.025738][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.035828][ T30] Call Trace: [ 357.039227][ T30] [ 357.042183][ T30] dump_stack_lvl+0x241/0x360 [ 357.046906][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.052147][ T30] ? __pfx__printk+0x10/0x10 [ 357.056789][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 357.061777][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.067298][ T30] ? _printk+0xd5/0x120 [ 357.071489][ T30] ? __pfx__printk+0x10/0x10 [ 357.076118][ T30] ? __wake_up_klogd+0xcc/0x110 [ 357.081008][ T30] ? __pfx__printk+0x10/0x10 [ 357.085636][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 357.090705][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.096729][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 357.102762][ T30] watchdog+0xff4/0x1040 [ 357.107044][ T30] ? watchdog+0x1ea/0x1040 [ 357.111508][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.116228][ T30] kthread+0x2f0/0x390 [ 357.120331][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.125057][ T30] ? __pfx_kthread+0x10/0x10 [ 357.129682][ T30] ret_from_fork+0x4b/0x80 [ 357.134140][ T30] ? __pfx_kthread+0x10/0x10 [ 357.138768][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.143586][ T30] [ 357.147172][ T30] Sending NMI from CPU 1 to CPUs 0: [ 357.152435][ C0] NMI backtrace for cpu 0 [ 357.152448][ C0] CPU: 0 UID: 0 PID: 5240 Comm: kworker/0:3 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 357.152469][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.152481][ C0] Workqueue: events nsim_dev_trap_report_work [ 357.152507][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 357.152532][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 357.152548][ C0] RSP: 0018:ffffc90000006c20 EFLAGS: 00000246 [ 357.152562][ C0] RAX: ffffc90000007101 RBX: 1ffff92000000db2 RCX: ffffffff8141732b [ 357.152576][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000006d90 [ 357.152588][ C0] RBP: ffffffffffffffff R08: ffffc90000006d9f R09: 1ffff92000000db3 [ 357.152602][ C0] R10: dffffc0000000000 R11: fffff52000000db3 R12: ffffc90000008000 [ 357.152615][ C0] R13: ffffc90000006d40 R14: dffffc0000000001 R15: fffff52000000db4 [ 357.152629][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 357.152644][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.152656][ C0] CR2: 00007fd7ab9ffd58 CR3: 000000000e734000 CR4: 00000000003526f0 [ 357.152671][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.152682][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.152693][ C0] Call Trace: [ 357.152699][ C0] [ 357.152706][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 357.152733][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 357.152762][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.152786][ C0] ? nmi_handle+0x2a/0x5a0 [ 357.152812][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 357.152836][ C0] ? nmi_handle+0x14f/0x5a0 [ 357.152854][ C0] ? nmi_handle+0x2a/0x5a0 [ 357.152872][ C0] ? kasan_check_range+0x8c/0x290 [ 357.152911][ C0] ? default_do_nmi+0x63/0x160 [ 357.152939][ C0] ? exc_nmi+0x123/0x1f0 [ 357.152965][ C0] ? end_repeat_nmi+0xf/0x53 [ 357.152991][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 357.153009][ C0] ? kasan_check_range+0x8c/0x290 [ 357.153031][ C0] ? kasan_check_range+0x8c/0x290 [ 357.153053][ C0] ? kasan_check_range+0x8c/0x290 [ 357.153074][ C0] [ 357.153080][ C0] [ 357.153088][ C0] __asan_memset+0x23/0x50 [ 357.153115][ C0] ? __kasan_slab_free+0x59/0x70 [ 357.153133][ C0] unwind_next_frame+0xcfb/0x22d0 [ 357.153155][ C0] ? kasan_save_free_info+0x40/0x50 [ 357.153182][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.153206][ C0] arch_stack_walk+0x11c/0x150 [ 357.153228][ C0] ? __kasan_slab_free+0x59/0x70 [ 357.153257][ C0] stack_trace_save+0x118/0x1d0 [ 357.153279][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 357.153303][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.153333][ C0] kasan_save_track+0x3f/0x80 [ 357.153350][ C0] ? kasan_save_track+0x3f/0x80 [ 357.153367][ C0] ? kasan_save_free_info+0x40/0x50 [ 357.153416][ C0] ? skb_release_data+0x6a0/0x8a0 [ 357.153438][ C0] kasan_save_free_info+0x40/0x50 [ 357.153462][ C0] __kasan_slab_free+0x59/0x70 [ 357.153481][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 357.153500][ C0] kmem_cache_free+0x1a2/0x420 [ 357.153524][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 357.153545][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 357.153566][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 357.153586][ C0] ? nf_ip_checksum+0x13a/0x500 [ 357.153608][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 357.153630][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 357.153647][ C0] ? validate_chain+0x11e/0x5920 [ 357.153671][ C0] ? __pfx_validate_chain+0x10/0x10 [ 357.153696][ C0] nft_do_chain+0x4ad/0x1da0 [ 357.153723][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 357.153740][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 357.153780][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 357.153804][ C0] nft_do_chain_inet+0x418/0x6b0 [ 357.153824][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 357.153841][ C0] ? ipt_do_table+0x312/0x1860 [ 357.153868][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 357.153886][ C0] nf_hook_slow+0xc3/0x220 [ 357.153912][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 357.153936][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 357.153960][ C0] NF_HOOK+0x29e/0x450 [ 357.153983][ C0] ? NF_HOOK+0x9a/0x450 [ 357.154004][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 357.154028][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 357.154055][ C0] ? ip_rcv_finish+0x406/0x560 [ 357.154078][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 357.154101][ C0] NF_HOOK+0x3a4/0x450 [ 357.154122][ C0] ? __lock_acquire+0x1384/0x2050 [ 357.154150][ C0] ? NF_HOOK+0x9a/0x450 [ 357.154171][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 357.154192][ C0] ? ip_rcv_core+0x801/0xd10 [ 357.154226][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 357.154256][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 357.154278][ C0] __netif_receive_skb+0x2bf/0x650 [ 357.154303][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 357.154329][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 357.154351][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.154376][ C0] ? __pfx_lock_release+0x10/0x10 [ 357.154402][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 357.154427][ C0] process_backlog+0x662/0x15b0 [ 357.154454][ C0] ? process_backlog+0x33b/0x15b0 [ 357.154483][ C0] ? __pfx_process_backlog+0x10/0x10 [ 357.154507][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.154535][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.154563][ C0] __napi_poll+0xcb/0x490 [ 357.154587][ C0] net_rx_action+0x89b/0x1240 [ 357.154623][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 357.154648][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 357.154691][ C0] handle_softirqs+0x2c5/0x980 [ 357.154717][ C0] ? do_softirq+0x11b/0x1e0 [ 357.154740][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 357.154765][ C0] ? rcu_is_watching+0x15/0xb0 [ 357.154786][ C0] do_softirq+0x11b/0x1e0 [ 357.154807][ C0] [ 357.154813][ C0] [ 357.154819][ C0] ? __pfx_do_softirq+0x10/0x10 [ 357.154842][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 357.154869][ C0] ? rcu_is_watching+0x15/0xb0 [ 357.154889][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 357.154913][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 357.154933][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 357.154956][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 357.154979][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 357.155002][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 357.155031][ C0] ? process_scheduled_works+0x976/0x1850 [ 357.155055][ C0] process_scheduled_works+0xa63/0x1850 [ 357.155093][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.155121][ C0] ? assign_work+0x364/0x3d0 [ 357.155147][ C0] worker_thread+0x870/0xd30 [ 357.155174][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 357.155196][ C0] ? __kthread_parkme+0x169/0x1d0 [ 357.155222][ C0] ? __pfx_worker_thread+0x10/0x10 [ 357.155251][ C0] kthread+0x2f0/0x390 [ 357.155267][ C0] ? __pfx_worker_thread+0x10/0x10 [ 357.155290][ C0] ? __pfx_kthread+0x10/0x10 [ 357.155307][ C0] ret_from_fork+0x4b/0x80 [ 357.155333][ C0] ? __pfx_kthread+0x10/0x10 [ 357.155349][ C0] ret_from_fork_asm+0x1a/0x30 [ 357.155388][ C0] [ 357.870139][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 357.877049][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 357.887589][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.897674][ T30] Call Trace: [ 357.900985][ T30] [ 357.903943][ T30] dump_stack_lvl+0x241/0x360 [ 357.908665][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.913906][ T30] ? __pfx__printk+0x10/0x10 [ 357.918529][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.924562][ T30] ? vscnprintf+0x5d/0x90 [ 357.928938][ T30] panic+0x349/0x880 [ 357.932870][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 357.939067][ T30] ? __pfx_panic+0x10/0x10 [ 357.943514][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 357.948928][ T30] ? __irq_work_queue_local+0x137/0x410 [ 357.954518][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 357.959923][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 357.966124][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 357.972334][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 357.978534][ T30] watchdog+0x1033/0x1040 [ 357.982903][ T30] ? watchdog+0x1ea/0x1040 [ 357.987365][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.992082][ T30] kthread+0x2f0/0x390 [ 357.996193][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.000910][ T30] ? __pfx_kthread+0x10/0x10 [ 358.005534][ T30] ret_from_fork+0x4b/0x80 [ 358.009989][ T30] ? __pfx_kthread+0x10/0x10 [ 358.014609][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.019431][ T30] [ 358.022822][ T30] Kernel Offset: disabled [ 358.027161][ T30] Rebooting in 86400 seconds..