last executing test programs: 34.283802474s ago: executing program 1 (id=3033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) 34.251214768s ago: executing program 1 (id=3034): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) close(r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 34.163111465s ago: executing program 1 (id=3036): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r4, 0x80000001}, &(0x7f00000000c0)=0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bind$packet(r5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff40f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 34.008767749s ago: executing program 1 (id=3041): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x80010, r2, 0x950b3000) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r6, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 27.703618497s ago: executing program 1 (id=3041): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x80010, r2, 0x950b3000) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r6, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 21.279459743s ago: executing program 1 (id=3041): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x80010, r2, 0x950b3000) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r6, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 20.239549818s ago: executing program 2 (id=3251): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "800420", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @mcast2}}}}}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x3a}) 20.1240219s ago: executing program 2 (id=3252): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x4, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x3, r0, 0x4}, 0x38) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x401, 0x7729}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe0804000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0xd10ef40f9f9981b3, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000300400000000000000000006b0110000000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0xffffffffffff8000, 0x5fb0, 0x6}) 20.073613516s ago: executing program 2 (id=3254): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001780)={'veth0_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.028556481s ago: executing program 2 (id=3255): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x118, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2000}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x28040010}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22bc4bb8d6b959c}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, 0x15, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "61de1135806357751cc0585c98d3fae8879fb35467915126aa0bf42a760aeec6e19b6d8c4eea4dcc35a1734b7ed97bfb15e33e1486372e4a26db9e21f71222c303439c4c8e99a86656d6a1138fa66499d9398a1caa0ac988b8881e789dff63c02239686be997ac936853f8a4d6b49ce190fd8b1b99459b918d519095c5b1bb10958d87639b8164869f4358dcc51ced61b224c0c403323925a08b4eff03f0978dd179f38374612f8dc823"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "73e2f6057edaeef0ceffcd7c9fb5446c0c5bcb1790b00180014b064f7bbb251e85f1000974dbe67b7423"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x8044) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8800) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8992, &(0x7f0000000040)={'gre0\x00', 0x400}) 19.891893782s ago: executing program 2 (id=3256): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}}], 0x1, 0x4) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000240)=0x1, 0x4) (async) socket$kcm(0x29, 0x5, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r6, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040c01}, 0x8044) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5e785b720000000000020800000000df5700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffe1d, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/12], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) (async) socket$vsock_stream(0x28, 0x1, 0x0) 19.700013153s ago: executing program 2 (id=3259): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a050100000016001200bc00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000bf9eda780aadef9f846e1fa93dbfdaede28cbbce92973570b1d7dc2721edd155295646af9d849eacd9fd1b1abc1a7144ea6f90866aa4bdca5af0090c64f984be7723f0993bbef187c4423d49c2859f81ec90d8ca45ffad3f007c2bc5db0a89f7c91bf6729e3e91bdc6a9ec9ed94bfd06dc30b90781f45f0fba8070197b4e4b181504cd3c878b3a1977cc2c64336c3520fe11b404d4b9b17e4aa885e6ceeb58bc8507341b8215cf1913a8a99a86bdcaf3e7fbda9551e76db326e549cf79f1ac88aa405fd03522e2975aca0d91e54c3c32de1dfe", @ANYRES16=r2, @ANYBLOB="08002cbd7000fbdbdf25620000000600b300010000000600b400370c00000600b400bf1200000600b4008a0f00000600b400da0800000600b400cc0a0000"], 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) socket(0x2a, 0xa, 0x4800000) 18.277431468s ago: executing program 3 (id=3281): unshare(0x6a040000) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x1207000, 0x800, 0x10, 0x1}, 0x20) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "65ee981ae8a3a31d93f90be90ccb2074"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000985}, 0xe010) r8 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) unshare(0xc000000) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) 17.051782771s ago: executing program 3 (id=3287): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x20000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x27, &(0x7f00000038c0)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84040}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0xfffffffffffffe55, &(0x7f0000000000), 0x3}}], 0x40002b2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@remote, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffe}, 0x20) 16.83055198s ago: executing program 0 (id=3292): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000ca00000095f03e3b78462950466af35a833795207f1cca299fe12535c9039f134e"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002980)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000003c0012800800010067726500300002800400120005000a000100000005000a00000000000800070064"], 0x5c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40800}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x78, 0x4}}], 0x2, 0x400a005) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40040) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000d06010200000000008e0518b1000000c7768b4f002c099c332f08b40356a795d72a759e635b1590eef8dc099bbff3a410ce513f5df5"], 0x14}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x7, 0x0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x42, 0x7, 0x2, 0x6, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x8001, 0x7c, &(0x7f00000005c0)=""/124, 0x40f00, 0x47, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xa, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000006c0)=[{0x2, 0x2, 0xb, 0x8}, {0x5, 0x3, 0x0, 0x6}, {0x4, 0x1, 0x10, 0x2}, {0x2, 0x4, 0x6, 0xb}, {0x2, 0x2, 0x8, 0x2}, {0x2, 0x4, 0x6, 0x1}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x3, 0x2, 0x4, 0x6, 0x50, 0xfffffffffffffff0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000100)='syzkaller\x00', 0xd, 0x0, &(0x7f0000000300), 0x40f00, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x9, 0x62ae, 0x9}, 0x10, r8, r9, 0x8, &(0x7f0000000800)=[r0, r1], &(0x7f00000008c0)=[{0x3, 0x1, 0x0, 0x5}, {0x0, 0x1, 0xd, 0xc}, {0x2, 0x3, 0x2}, {0x2, 0x3, 0xe}, {0x0, 0x5, 0x5, 0x6}, {0x1, 0x5, 0x5, 0x6}, {0x4, 0x3, 0x2, 0x8}, {0x1, 0x2, 0xd, 0xc}], 0x10, 0x1000, @void, @value}, 0x94) 16.221896673s ago: executing program 0 (id=3293): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001780)={'veth0_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.16963078s ago: executing program 0 (id=3294): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019580)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000480000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x24018840) 16.084598783s ago: executing program 0 (id=3295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x1, 0xc6, 0x10001, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0x1, 0x3ff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x812}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16.078419439s ago: executing program 3 (id=3296): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000dc0)="d0b4163e964573", 0x7, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r6, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c2be0000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf250d000000080039000500000008000600", @ANYRES32=r4, @ANYBLOB="05002f000100000005002d000100000008002b00030000000800390004000000080032000200000008003b00dc01000008000300", @ANYRES32=r6, @ANYBLOB="0500380001000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c4) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c2be0000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf250d000000080039000500000008000600", @ANYRES32=r4, @ANYBLOB="05002f000100000005002d000100000008002b00030000000800390004000000080032000200000008003b00dc01000008000300", @ANYRES32=r6, @ANYBLOB="0500380001000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000018000000850000002300000095000035eaf97b94", @ANYBLOB="632aa5ec9d27a11a049a587841590bddc9080783e33bf410a1a4217bcb75120a60429dc412351963891b8cc8b6f892f03fda88cf90e90c6fa9485df7eee0b20a2f7490258bd7dbab392e604dbf9713f9c93fbc8ac10c1a1ee28a1e51dfe47a17f4c68927a2935fd90f033bbe1237266e6a2c7191730a22707392aee2ef3a5082b3ede41af885e5c760ed8f8303074fbce115ad7b75f241dac8a9d7f6c884594eb7fd8e406428a278e3619a5e20eabafb33a1702a2f7a31996f58bed08f1ac356a468205ea7e6717d675b60a387bb770317", @ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$kcm(0x29, 0x2, 0x0) (async) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4) (async) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r14, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r16 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r16, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r16, r15}) sendmsg$kcm(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r8}, 0x10) 15.847921047s ago: executing program 4 (id=3297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x405b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x9c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x54f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 15.847605676s ago: executing program 3 (id=3298): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @private=0xa010106}}}], 0x20}, 0x24008004) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x3, 0x4aa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200009c0], 0x0, &(0x7f0000000100), &(0x7f00000009c0)=[{0x0, '\x00', 0x0, 0x2, 0x1, [{0x3, 0x1, 0x9100, 'bridge_slave_0\x00', 'syz_tun\x00', 'veth0_vlan\x00', 'macvlan1\x00', @local, [0x0, 0x0, 0xff, 0x0, 0x0, 0x1fe], @empty, [0x0, 0x0, 0x0, 0xff], 0x6e, 0x1ce, 0x21e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:default_context_t:s0\x00'}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7fffffff}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', {0x800}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x5, 0x84, 0x892f, 'pim6reg0\x00', 'team_slave_0\x00', 'team0\x00', 'ip6tnl0\x00', @broadcast, [0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}}, {0x9, 0x8, 0x60, 'veth1_to_hsr\x00', 'bridge_slave_1\x00', 'nr0\x00', 'lo\x00', @remote, [0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xee, 0x126, 0x156, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x33}, [0xff000000, 0xff, 0x0, 0xff000000], 0x4e21, 0x3c, 0x0, 0x4e23, 0x2, 0x10}}}, @state={{'state\x00', 0x0, 0x8}, {{0x8}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}]}, 0x522) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 15.836638355s ago: executing program 0 (id=3299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000100)="e09f547ed3f02d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffe) 15.811612753s ago: executing program 3 (id=3300): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) (fail_nth: 2) 15.702124429s ago: executing program 4 (id=3301): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = accept4(r0, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x4000050) sendto$packet(r1, &(0x7f0000000280)="ba2a22d8a1b793c1ec702e641043f42d93ed50b2e2fba0a7cabb5323f36b017578d84555c22d4b185377f683fdc05bac83e5a15f2e078a183c7e5dd5d43202396a5874aed4d917a35ddf737a2a09bcf4ac2fc7e591d5e536607c55258ae1", 0x5e, 0x20004044, &(0x7f0000000300)={0x11, 0xf5, r2, 0x1, 0x7, 0x6, @random="a62bb1dc070c"}, 0x14) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0x7}, 0x2f) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1080}, 0x2048814) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @loopback, @remote}, &(0x7f0000000600)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xee}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040085) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000780)={@multicast1, @private=0xa010101, r6}, 0xc) connect$l2tp6(r0, &(0x7f00000007c0)={0xa, 0x0, 0x14c6, @private2, 0x423, 0x2}, 0x20) listen(r1, 0x7) r7 = socket$inet6(0xa, 0x80000, 0xc269) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x88d4}, 0x4040000) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000980)={r9, 0x8, 0x3ff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r10, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x840c0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000b00)={0x1ff, 0x8, 0x8004, 0x8, 0x8001, 0x9d, 0x8, 0x1, r9}, &(0x7f0000000b40)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000b80)={r9, 0x25ea6bd0, 0xfffffff3, 0x344}, &(0x7f0000000bc0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000c00)=@assoc_value={r11, 0x6}, 0x8) 15.631012211s ago: executing program 3 (id=3302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r5, 0x1, 0x0, 0x300000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa5}]}, 0x34}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r5, 0x1, 0x0, 0x300000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa5}]}, 0x34}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) 15.630611751s ago: executing program 4 (id=3303): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8014) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, r4, 0x1, 0x70bd27, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x5421, 0x110e22ffff) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0xf8, 0x0, 0x4, 0x12, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x793f, 0x10, 0x2, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x93, 0xd, 0xffff, 0x73, @mcast1, @private1, 0x700, 0x8000, 0x751, 0x80000001}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004e90000000000", @ANYRES32=r9, @ANYBLOB="000000161d00000018009024120008000100876974000c000200080003"], 0x38}}, 0x4041) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffc, 0xffffffff, 0x8}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080002"], 0x1c}}, 0x80) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r9, 0x40083, 0x602a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r11}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r11, 0x58, &(0x7f0000000440)}, 0xe) 15.433589303s ago: executing program 4 (id=3304): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) connect$ax25(r1, &(0x7f00000001c0)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001780)={'veth0_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.374812336s ago: executing program 4 (id=3305): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019580)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000600000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x24018840) 15.291824624s ago: executing program 4 (id=3306): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x2, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtfilter={0x224, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f4, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x1a8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x81}, {0xf34d, 0x5, 0x2, 0x4, 0x6, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x6, 0x5, 0x1, "2c05010552"}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x81}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x7}, {0xce10, 0xb, 0x5128, 0x4d}}}, @TCF_EM_META={0xa0, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x8000}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0bdb5cd7", @TCF_META_TYPE_VAR="be8b4f7209296a"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR='`Je\"']}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="86caf6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bcb6d3", @TCF_META_TYPE_VAR="e3438446daeaf787", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR='L', @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="8cfb4e63bfb14e26ab80", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="2ea70a60431a", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="68dc02f3d4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0x4, 0x4, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xa82}, {0x1, 0xb, 0x2e2bb925, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x2269}, {0xa, 0x6, 0x9, 0x2, 0x0, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x9}, {0x7fff, 0x5, 0x7b12, 0x4, 0xf, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xd, 0x8, 0x400}, {0x4, 0x6, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xdb2, 0x3, 0x3}, {0x9, 0x8, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}, @TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1ff, 0x3, 0x4}, {0x401, 0x0, 0x6, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb6b}}, @TCA_EMATCH_TREE_HDR={0x4, 0x1, {0x7}}]}]}}]}, 0x224}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000180)=0xfffffff8, 0x4) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delnexthop={0x40, 0x69, 0x300, 0x70bd27, 0x25dfdbff, {}, [{0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r10 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'macvtap0\x00', @ifru_flags=0x2000}}) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="6a20a400"], 0x9) 15.291600855s ago: executing program 0 (id=3307): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xae50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6259}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xae50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6259}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async) 56.406281ms ago: executing program 32 (id=3307): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xae50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6259}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xae50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6259}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async) 32.452868ms ago: executing program 33 (id=3302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r5, 0x1, 0x0, 0x300000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa5}]}, 0x34}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r5, 0x1, 0x0, 0x300000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xa5}]}, 0x34}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) 0s ago: executing program 34 (id=3306): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x2, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtfilter={0x224, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f4, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x1a8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x81}, {0xf34d, 0x5, 0x2, 0x4, 0x6, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x6, 0x5, 0x1, "2c05010552"}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x81}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x7}, {0xce10, 0xb, 0x5128, 0x4d}}}, @TCF_EM_META={0xa0, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x8000}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0bdb5cd7", @TCF_META_TYPE_VAR="be8b4f7209296a"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR='`Je\"']}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="86caf6", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bcb6d3", @TCF_META_TYPE_VAR="e3438446daeaf787", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR='L', @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="8cfb4e63bfb14e26ab80", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="2ea70a60431a", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="68dc02f3d4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0x4, 0x4, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xa82}, {0x1, 0xb, 0x2e2bb925, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x2269}, {0xa, 0x6, 0x9, 0x2, 0x0, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x9}, {0x7fff, 0x5, 0x7b12, 0x4, 0xf, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xd, 0x8, 0x400}, {0x4, 0x6, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xdb2, 0x3, 0x3}, {0x9, 0x8, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}, @TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1ff, 0x3, 0x4}, {0x401, 0x0, 0x6, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb6b}}, @TCA_EMATCH_TREE_HDR={0x4, 0x1, {0x7}}]}]}}]}, 0x224}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000180)=0xfffffff8, 0x4) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delnexthop={0x40, 0x69, 0x300, 0x70bd27, 0x25dfdbff, {}, [{0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r10 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000000)={'macvtap0\x00', @ifru_flags=0x2000}}) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="6a20a400"], 0x9) kernel console output (not intermixed with test programs): ency failed, not supported in mode balance-rr(0) [ 180.897690][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 180.952696][T14036] macvtap0: entered promiscuous mode [ 180.978637][T14036] dummy0: entered promiscuous mode [ 180.984013][T14036] macvtap0: entered allmulticast mode [ 181.009625][T14036] dummy0: entered allmulticast mode [ 181.071113][T14036] dummy0: left allmulticast mode [ 181.106755][T14036] dummy0: left promiscuous mode [ 181.206923][T14043] lo speed is unknown, defaulting to 1000 [ 181.214184][T14064] lo speed is unknown, defaulting to 1000 [ 181.229995][T14062] nbd: socks must be embedded in a SOCK_ITEM attr [ 181.271225][T14062] ax25_connect(): syz.2.2500 uses autobind, please contact jreuter@yaina.de [ 181.368313][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 181.374450][ T5836] Bluetooth: hci3: command 0x0401 tx timeout [ 181.380695][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 181.493505][T14084] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.2505'. [ 181.630204][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.916733][T14115] dummy0: entered promiscuous mode [ 181.926104][T14115] macvtap2: entered promiscuous mode [ 181.933799][T14115] macvtap2: entered allmulticast mode [ 181.940992][T14115] dummy0: entered allmulticast mode [ 181.942691][T14113] nbd: socks must be embedded in a SOCK_ITEM attr [ 181.956345][T14115] dummy0: left allmulticast mode [ 181.966383][T14115] dummy0: left promiscuous mode [ 181.990177][T14113] ax25_connect(): syz.3.2514 uses autobind, please contact jreuter@yaina.de [ 182.004324][T14118] lo speed is unknown, defaulting to 1000 [ 182.426899][T14150] nbd: socks must be embedded in a SOCK_ITEM attr [ 182.442779][T14150] ax25_connect(): syz.2.2528 uses autobind, please contact jreuter@yaina.de [ 182.491167][T14157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.640348][T14171] dummy0: entered promiscuous mode [ 182.645678][T14171] macvtap2: entered promiscuous mode [ 182.651179][T14171] macvtap2: entered allmulticast mode [ 182.658158][T14171] dummy0: entered allmulticast mode [ 182.665385][T14171] dummy0: left allmulticast mode [ 182.670523][T14171] dummy0: left promiscuous mode [ 182.693556][T14176] lo speed is unknown, defaulting to 1000 [ 182.871478][T14187] net_ratelimit: 344 callbacks suppressed [ 182.871498][T14187] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 182.960398][T14198] ip6tnl1: entered promiscuous mode [ 182.983714][T14198] ip6tnl1: entered allmulticast mode [ 183.012411][T14198] __nla_validate_parse: 12 callbacks suppressed [ 183.012429][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2540'. [ 183.021219][T14203] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.077997][T14203] ax25_connect(): syz.0.2542 uses autobind, please contact jreuter@yaina.de [ 183.248943][T14214] lo speed is unknown, defaulting to 1000 [ 183.369224][T14233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2546'. [ 183.374739][T14221] lo speed is unknown, defaulting to 1000 [ 183.385355][T14232] dummy0: entered promiscuous mode [ 183.403644][T14232] macvtap0: entered promiscuous mode [ 183.421801][T14232] macvtap0: entered allmulticast mode [ 183.448192][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 183.457780][T14232] dummy0: entered allmulticast mode [ 183.464399][T14232] dummy0: left allmulticast mode [ 183.469699][T14232] dummy0: left promiscuous mode [ 183.580019][T14236] lo speed is unknown, defaulting to 1000 [ 183.661764][T14250] IPVS: Scheduler module ip_vs_sip not found [ 183.679382][T14250] IPVS: length: 24 != 3221225496 [ 183.742653][T14247] IPVS: Scheduler module ip_vs_sip not found [ 183.770717][T14252] IPVS: length: 24 != 3221225496 [ 183.789340][T14258] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.831408][T14258] ax25_connect(): syz.1.2555 uses autobind, please contact jreuter@yaina.de [ 183.941997][T14265] netlink: 'syz.0.2556': attribute type 10 has an invalid length. [ 184.187568][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 184.323251][T14297] nbd: socks must be embedded in a SOCK_ITEM attr [ 184.360283][T14297] ax25_connect(): syz.2.2567 uses autobind, please contact jreuter@yaina.de [ 184.385983][T14309] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2572'. [ 184.399055][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 184.409830][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 184.441968][T14309] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 184.464216][T14309] macsec0: entered allmulticast mode [ 184.474480][T14309] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 184.607650][T14324] wg2: entered promiscuous mode [ 184.613875][T14324] wg2: entered allmulticast mode [ 184.764608][T14343] lo speed is unknown, defaulting to 1000 [ 184.838337][T14354] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2588'. [ 184.951149][T14362] netlink: 'syz.0.2591': attribute type 1 has an invalid length. [ 184.978920][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 185.004191][T14364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2592'. [ 185.077064][T14366] lo speed is unknown, defaulting to 1000 [ 185.341354][T14400] netlink: 'syz.1.2601': attribute type 4 has an invalid length. [ 185.461530][T14410] sctp: [Deprecated]: syz.1.2605 (pid 14410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.461530][T14410] Use struct sctp_sack_info instead [ 185.541360][T14409] sctp: [Deprecated]: syz.1.2605 (pid 14409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.541360][T14409] Use struct sctp_sack_info instead [ 185.710144][T14440] netlink: 'syz.2.2613': attribute type 10 has an invalid length. [ 186.122975][T14479] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 186.135215][T14480] netlink: 'syz.2.2623': attribute type 7 has an invalid length. [ 186.143890][T14480] netlink: 'syz.2.2623': attribute type 8 has an invalid length. [ 186.192415][T14485] xt_hashlimit: size too large, truncated to 1048576 [ 186.205582][T14490] netlink: 'syz.3.2628': attribute type 2 has an invalid length. [ 186.268786][T14498] : renamed from bond0 [ 186.458066][T14508] lo speed is unknown, defaulting to 1000 [ 186.960326][T14518] ax25_connect(): syz.0.2637 uses autobind, please contact jreuter@yaina.de [ 187.133323][T14526] netlink: zone id is out of range [ 187.139293][T14526] netlink: zone id is out of range [ 187.144477][T14526] netlink: zone id is out of range [ 187.149743][T14526] netlink: zone id is out of range [ 187.154911][T14526] netlink: zone id is out of range [ 187.160546][T14526] netlink: zone id is out of range [ 187.165730][T14526] netlink: zone id is out of range [ 187.171915][T14526] netlink: zone id is out of range [ 187.177778][T14526] netlink: zone id is out of range [ 187.389282][T14540] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 187.437693][T14545] netlink: 'syz.4.2649': attribute type 12 has an invalid length. [ 187.588881][T14544] netlink: 'syz.4.2649': attribute type 12 has an invalid length. [ 187.642601][T14542] ax25_connect(): syz.2.2648 uses autobind, please contact jreuter@yaina.de [ 188.053301][T14601] ax25_connect(): syz.3.2668 uses autobind, please contact jreuter@yaina.de [ 188.157407][T14617] dummy0: entered promiscuous mode [ 188.162793][T14617] macvtap0: entered promiscuous mode [ 188.178632][T14617] macvtap0: entered allmulticast mode [ 188.189077][T14617] dummy0: entered allmulticast mode [ 188.211124][T14617] dummy0: left allmulticast mode [ 188.237107][T14617] dummy0: left promiscuous mode [ 188.423078][T14615] lo speed is unknown, defaulting to 1000 [ 188.439782][T14624] lo speed is unknown, defaulting to 1000 [ 188.497597][T14640] syzkaller1: entered promiscuous mode [ 188.509062][T14640] syzkaller1: entered allmulticast mode [ 188.552655][T14637] __nla_validate_parse: 13 callbacks suppressed [ 188.552673][T14637] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2681'. [ 188.618220][T14645] net_ratelimit: 9 callbacks suppressed [ 188.618239][T14645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.700993][T14652] syz.3.2683[14652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.701081][T14652] syz.3.2683[14652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.724504][T14652] syz.3.2683[14652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.840907][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 188.876082][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 188.887877][T14662] ax25_connect(): syz.3.2688 uses autobind, please contact jreuter@yaina.de [ 188.900659][T14659] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2687'. [ 188.906350][T14663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2687'. [ 189.025501][T14667] validate_nla: 4 callbacks suppressed [ 189.025518][T14667] netlink: 'syz.0.2689': attribute type 29 has an invalid length. [ 189.066493][T14668] netlink: 'syz.0.2689': attribute type 29 has an invalid length. [ 189.079113][T14659] lo speed is unknown, defaulting to 1000 [ 189.117238][T14658] lo speed is unknown, defaulting to 1000 [ 189.208594][T14682] syzkaller1: entered promiscuous mode [ 189.214101][T14682] syzkaller1: entered allmulticast mode [ 189.258586][T14687] macvtap0: entered promiscuous mode [ 189.264054][T14687] dummy0: entered promiscuous mode [ 189.269411][T14687] macvtap0: entered allmulticast mode [ 189.274903][T14687] dummy0: entered allmulticast mode [ 189.288610][T14690] FAULT_INJECTION: forcing a failure. [ 189.288610][T14690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.302204][T14690] CPU: 0 UID: 0 PID: 14690 Comm: syz.3.2698 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 189.302225][T14690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.302234][T14690] Call Trace: [ 189.302239][T14690] [ 189.302244][T14690] dump_stack_lvl+0x241/0x360 [ 189.302279][T14690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.302297][T14690] ? __pfx__printk+0x10/0x10 [ 189.302316][T14690] ? __pfx_lock_release+0x10/0x10 [ 189.302333][T14690] ? rcu_is_watching+0x15/0xb0 [ 189.302353][T14690] ? lock_release+0xbf/0xa30 [ 189.302371][T14690] should_fail_ex+0x3b0/0x4e0 [ 189.302388][T14690] _copy_from_user+0x2d/0xb0 [ 189.302408][T14690] copy_msghdr_from_user+0xae/0x680 [ 189.302428][T14690] ? rcu_is_watching+0x15/0xb0 [ 189.302448][T14690] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 189.302467][T14690] ? __fget_files+0x2a/0x410 [ 189.302489][T14690] ? __fget_files+0x2a/0x410 [ 189.302511][T14690] __sys_sendmsg+0x209/0x350 [ 189.302526][T14690] ? bpf_lsm_file_permission+0x9/0x10 [ 189.302540][T14690] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.302562][T14690] ? do_sys_openat2+0x17a/0x1d0 [ 189.302587][T14690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.302606][T14690] ? rcu_is_watching+0x15/0xb0 [ 189.302626][T14690] ? rcu_is_watching+0x15/0xb0 [ 189.302646][T14690] do_syscall_64+0xf3/0x230 [ 189.302660][T14690] ? clear_bhb_loop+0x35/0x90 [ 189.302678][T14690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.302694][T14690] RIP: 0033:0x7f40fd98cd29 [ 189.302792][T14690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.302839][T14690] RSP: 002b:00007f40fe890038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.302851][T14690] RAX: ffffffffffffffda RBX: 00007f40fdba5fa0 RCX: 00007f40fd98cd29 [ 189.302858][T14690] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 189.302864][T14690] RBP: 00007f40fe890090 R08: 0000000000000000 R09: 0000000000000000 [ 189.302870][T14690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.302875][T14690] R13: 0000000000000000 R14: 00007f40fdba5fa0 R15: 00007fff106c0038 [ 189.302888][T14690] [ 189.303026][T14687] dummy0: left allmulticast mode [ 189.332305][T14693] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2699'. [ 189.336942][T14687] dummy0: left promiscuous mode [ 189.520920][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 189.595122][T14706] ax25_connect(): syz.3.2700 uses autobind, please contact jreuter@yaina.de [ 189.606832][T14685] lo speed is unknown, defaulting to 1000 [ 189.808914][T14717] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 189.826875][T14717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.865269][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 190.188473][T14740] ax25_connect(): syz.3.2711 uses autobind, please contact jreuter@yaina.de [ 190.237811][T14742] dummy0: entered promiscuous mode [ 190.247090][T14742] macvtap1: entered promiscuous mode [ 190.252525][T14742] macvtap1: entered allmulticast mode [ 190.276097][T14742] dummy0: entered allmulticast mode [ 190.282619][T14751] FAULT_INJECTION: forcing a failure. [ 190.282619][T14751] name failslab, interval 1, probability 0, space 0, times 0 [ 190.299189][T14751] CPU: 0 UID: 0 PID: 14751 Comm: syz.3.2715 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 190.299214][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 190.299224][T14751] Call Trace: [ 190.299231][T14751] [ 190.299237][T14751] dump_stack_lvl+0x241/0x360 [ 190.299264][T14751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.299285][T14751] ? __pfx__printk+0x10/0x10 [ 190.299306][T14751] ? __pfx___might_resched+0x10/0x10 [ 190.299325][T14751] should_fail_ex+0x3b0/0x4e0 [ 190.299344][T14751] should_failslab+0xac/0x100 [ 190.299364][T14751] kmem_cache_alloc_node_noprof+0x77/0x380 [ 190.299385][T14751] ? __alloc_skb+0x1c3/0x440 [ 190.299402][T14751] __alloc_skb+0x1c3/0x440 [ 190.299417][T14751] ? __pfx___netlink_lookup+0x10/0x10 [ 190.299438][T14751] ? __pfx___alloc_skb+0x10/0x10 [ 190.299454][T14751] ? netlink_autobind+0xd6/0x2f0 [ 190.299471][T14751] ? netlink_autobind+0x2b0/0x2f0 [ 190.299490][T14751] netlink_sendmsg+0x638/0xcb0 [ 190.299512][T14751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.299531][T14751] ? aa_sock_msg_perm+0x91/0x160 [ 190.299550][T14751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.299567][T14751] __sock_sendmsg+0x221/0x270 [ 190.299588][T14751] ____sys_sendmsg+0x52a/0x7e0 [ 190.299609][T14751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.299626][T14751] ? __fget_files+0x2a/0x410 [ 190.299647][T14751] ? __fget_files+0x2a/0x410 [ 190.299671][T14751] __sys_sendmsg+0x269/0x350 [ 190.299687][T14751] ? bpf_lsm_file_permission+0x9/0x10 [ 190.299703][T14751] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.299726][T14751] ? do_sys_openat2+0x17a/0x1d0 [ 190.299757][T14751] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.299777][T14751] ? rcu_is_watching+0x15/0xb0 [ 190.299799][T14751] ? rcu_is_watching+0x15/0xb0 [ 190.299821][T14751] do_syscall_64+0xf3/0x230 [ 190.299837][T14751] ? clear_bhb_loop+0x35/0x90 [ 190.299855][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.299871][T14751] RIP: 0033:0x7f40fd98cd29 [ 190.299885][T14751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.299899][T14751] RSP: 002b:00007f40fe890038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.299916][T14751] RAX: ffffffffffffffda RBX: 00007f40fdba5fa0 RCX: 00007f40fd98cd29 [ 190.299928][T14751] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 190.299939][T14751] RBP: 00007f40fe890090 R08: 0000000000000000 R09: 0000000000000000 [ 190.299948][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.299966][T14751] R13: 0000000000000000 R14: 00007f40fdba5fa0 R15: 00007fff106c0038 [ 190.299983][T14751] [ 190.300012][T14742] dummy0: left allmulticast mode [ 190.585907][T14742] dummy0: left promiscuous mode [ 190.640334][T14756] syzkaller1: entered promiscuous mode [ 190.648489][T14756] syzkaller1: entered allmulticast mode [ 190.828139][T14789] ax25_connect(): syz.3.2725 uses autobind, please contact jreuter@yaina.de [ 190.982462][T14804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2731'. [ 191.011073][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'. [ 191.035993][T14808] dummy0: entered promiscuous mode [ 191.053840][T14808] macvtap0: entered promiscuous mode [ 191.067340][T14808] macvtap0: entered allmulticast mode [ 191.072848][T14808] dummy0: entered allmulticast mode [ 191.084157][T14808] dummy0: left allmulticast mode [ 191.095460][T14808] dummy0: left promiscuous mode [ 191.221044][T14831] FAULT_INJECTION: forcing a failure. [ 191.221044][T14831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.235151][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.4.2742 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 191.235175][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.235184][T14831] Call Trace: [ 191.235190][T14831] [ 191.235195][T14831] dump_stack_lvl+0x241/0x360 [ 191.235222][T14831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.235241][T14831] ? __pfx__printk+0x10/0x10 [ 191.235260][T14831] ? __pfx_lock_release+0x10/0x10 [ 191.235280][T14831] should_fail_ex+0x3b0/0x4e0 [ 191.235297][T14831] _copy_from_iter+0x1e9/0x1c20 [ 191.235315][T14831] ? kmem_cache_alloc_node_noprof+0x22c/0x380 [ 191.235341][T14831] ? __alloc_skb+0x28f/0x440 [ 191.235356][T14831] ? __pfx__copy_from_iter+0x10/0x10 [ 191.235375][T14831] ? __virt_addr_valid+0x183/0x530 [ 191.235393][T14831] ? __virt_addr_valid+0x183/0x530 [ 191.235410][T14831] ? __virt_addr_valid+0x45f/0x530 [ 191.235427][T14831] ? __phys_addr_symbol+0x2f/0x70 [ 191.235444][T14831] ? __check_object_size+0x47a/0x730 [ 191.235464][T14831] netlink_sendmsg+0x73d/0xcb0 [ 191.235487][T14831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.235505][T14831] ? aa_sock_msg_perm+0x91/0x160 [ 191.235523][T14831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.235538][T14831] __sock_sendmsg+0x221/0x270 [ 191.235558][T14831] ____sys_sendmsg+0x52a/0x7e0 [ 191.235578][T14831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.235605][T14831] ? __fget_files+0x2a/0x410 [ 191.235627][T14831] ? __fget_files+0x2a/0x410 [ 191.235650][T14831] __sys_sendmsg+0x269/0x350 [ 191.235664][T14831] ? bpf_lsm_file_permission+0x9/0x10 [ 191.235680][T14831] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.235702][T14831] ? do_sys_openat2+0x17a/0x1d0 [ 191.235731][T14831] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.235750][T14831] ? rcu_is_watching+0x15/0xb0 [ 191.235772][T14831] ? rcu_is_watching+0x15/0xb0 [ 191.235793][T14831] do_syscall_64+0xf3/0x230 [ 191.235807][T14831] ? clear_bhb_loop+0x35/0x90 [ 191.235825][T14831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.235842][T14831] RIP: 0033:0x7f269a18cd29 [ 191.235856][T14831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.235870][T14831] RSP: 002b:00007f269b057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.235888][T14831] RAX: ffffffffffffffda RBX: 00007f269a3a5fa0 RCX: 00007f269a18cd29 [ 191.235900][T14831] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 191.235910][T14831] RBP: 00007f269b057090 R08: 0000000000000000 R09: 0000000000000000 [ 191.235920][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.235929][T14831] R13: 0000000000000000 R14: 00007f269a3a5fa0 R15: 00007fff0c525118 [ 191.235947][T14831] [ 191.237324][T14836] ax25_connect(): syz.2.2741 uses autobind, please contact jreuter@yaina.de [ 191.609059][T14852] Timeout policy `syz0' can only be used by L3 protocol number 16559 [ 191.649941][T14861] netlink: 'syz.2.2749': attribute type 2 has an invalid length. [ 191.667753][T14861] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 191.777644][T14875] FAULT_INJECTION: forcing a failure. [ 191.777644][T14875] name failslab, interval 1, probability 0, space 0, times 0 [ 191.800992][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.4.2753 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 191.801016][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.801025][T14875] Call Trace: [ 191.801030][T14875] [ 191.801036][T14875] dump_stack_lvl+0x241/0x360 [ 191.801060][T14875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.801078][T14875] ? __pfx__printk+0x10/0x10 [ 191.801095][T14875] ? lock_release+0xbf/0xa30 [ 191.801117][T14875] should_fail_ex+0x3b0/0x4e0 [ 191.801132][T14875] should_failslab+0xac/0x100 [ 191.801151][T14875] ? skb_clone+0x20c/0x390 [ 191.801166][T14875] kmem_cache_alloc_noprof+0x70/0x380 [ 191.801187][T14875] skb_clone+0x20c/0x390 [ 191.801204][T14875] __netlink_deliver_tap+0x3cc/0x7f0 [ 191.801224][T14875] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.801239][T14875] netlink_deliver_tap+0x19d/0x1b0 [ 191.801254][T14875] netlink_unicast+0x7c4/0x990 [ 191.801270][T14875] ? __pfx_netlink_unicast+0x10/0x10 [ 191.801282][T14875] ? __virt_addr_valid+0x45f/0x530 [ 191.801301][T14875] ? __phys_addr_symbol+0x2f/0x70 [ 191.801318][T14875] ? __check_object_size+0x47a/0x730 [ 191.801340][T14875] netlink_sendmsg+0x8e4/0xcb0 [ 191.801360][T14875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.801378][T14875] ? aa_sock_msg_perm+0x91/0x160 [ 191.801396][T14875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.801410][T14875] __sock_sendmsg+0x221/0x270 [ 191.801431][T14875] ____sys_sendmsg+0x52a/0x7e0 [ 191.801450][T14875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.801465][T14875] ? __fget_files+0x2a/0x410 [ 191.801485][T14875] ? __fget_files+0x2a/0x410 [ 191.801507][T14875] __sys_sendmsg+0x269/0x350 [ 191.801523][T14875] ? bpf_lsm_file_permission+0x9/0x10 [ 191.801540][T14875] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.801559][T14875] ? do_sys_openat2+0x17a/0x1d0 [ 191.801589][T14875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.801609][T14875] ? rcu_is_watching+0x15/0xb0 [ 191.801630][T14875] ? rcu_is_watching+0x15/0xb0 [ 191.801650][T14875] do_syscall_64+0xf3/0x230 [ 191.801665][T14875] ? clear_bhb_loop+0x35/0x90 [ 191.801683][T14875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.801697][T14875] RIP: 0033:0x7f269a18cd29 [ 191.801711][T14875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.801725][T14875] RSP: 002b:00007f269b057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.801743][T14875] RAX: ffffffffffffffda RBX: 00007f269a3a5fa0 RCX: 00007f269a18cd29 [ 191.801754][T14875] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 191.801763][T14875] RBP: 00007f269b057090 R08: 0000000000000000 R09: 0000000000000000 [ 191.801772][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.801781][T14875] R13: 0000000000000000 R14: 00007f269a3a5fa0 R15: 00007fff0c525118 [ 191.801810][T14875] [ 191.850147][T14886] lo speed is unknown, defaulting to 1000 [ 191.878864][T14885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 191.917282][T14886] lo speed is unknown, defaulting to 1000 [ 191.938693][T14889] ax25_connect(): syz.4.2757 uses autobind, please contact jreuter@yaina.de [ 191.983158][T14886] lo speed is unknown, defaulting to 1000 [ 192.170864][T14894] netlink: 'syz.4.2759': attribute type 10 has an invalid length. [ 192.219010][T14894] team0: Port device geneve0 added [ 192.299002][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.317553][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.318752][T14900] netlink: 'syz.0.2760': attribute type 7 has an invalid length. [ 192.333678][T14886] infiniband syz0: set active [ 192.339240][T14886] infiniband syz0: added lo [ 192.339376][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.353151][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.373978][ T5830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 192.379985][ T5915] lo speed is unknown, defaulting to 1000 [ 192.387682][T14886] RDS/IB: syz0: added [ 192.391181][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.391789][T14886] smc: adding ib device syz0 with port count 1 [ 192.409771][T14886] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 192.428399][ T5915] lo speed is unknown, defaulting to 1000 [ 192.457100][T14886] lo speed is unknown, defaulting to 1000 [ 192.527238][T14898] lo speed is unknown, defaulting to 1000 [ 192.584692][T14886] lo speed is unknown, defaulting to 1000 [ 192.624255][T14917] ax25_connect(): syz.4.2768 uses autobind, please contact jreuter@yaina.de [ 192.793781][T14898] lo speed is unknown, defaulting to 1000 [ 192.817978][T14936] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0 [ 192.848202][T14941] xt_l2tp: invalid flags combination: c [ 192.852756][T14942] xt_l2tp: invalid flags combination: c [ 192.902000][T14886] lo speed is unknown, defaulting to 1000 [ 193.083302][T14964] ax25_connect(): syz.3.2779 uses autobind, please contact jreuter@yaina.de [ 193.112636][T14898] chnl_net:caif_netlink_parms(): no params data found [ 193.190995][T14886] lo speed is unknown, defaulting to 1000 [ 193.262534][T14898] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.285417][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.302644][T14983] xt_bpf: check failed: parse error [ 193.304868][T14898] bridge_slave_0: entered allmulticast mode [ 193.318902][T14898] bridge_slave_0: entered promiscuous mode [ 193.327879][T14898] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.335130][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.357522][T14987] netlink: 'syz.0.2785': attribute type 2 has an invalid length. [ 193.360787][T14898] bridge_slave_1: entered allmulticast mode [ 193.371412][T14988] netlink: 'syz.0.2785': attribute type 2 has an invalid length. [ 193.382580][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.383499][T14898] bridge_slave_1: entered promiscuous mode [ 193.409231][T14886] lo speed is unknown, defaulting to 1000 [ 193.412274][T14984] gre0: left promiscuous mode [ 193.424997][T14984] gretap0: left promiscuous mode [ 193.453067][T14984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.536026][T14898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.559710][T15005] ax25_connect(): syz.3.2791 uses autobind, please contact jreuter@yaina.de [ 193.590764][T14898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.668342][T14898] team0: Port device team_slave_0 added [ 193.674170][T15009] batadv_slave_0: entered promiscuous mode [ 193.681400][T15009] batadv_slave_1: entered promiscuous mode [ 193.695541][T14898] team0: Port device team_slave_1 added [ 193.878835][T14898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.896324][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.946188][T14898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.951046][T15034] ax25_connect(): syz.4.2803 uses autobind, please contact jreuter@yaina.de [ 193.967580][T14898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.985246][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.019593][T14898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.031468][T15009] batadv_slave_1: left promiscuous mode [ 194.040357][T15009] batadv_slave_0: left promiscuous mode [ 194.140996][T14898] hsr_slave_0: entered promiscuous mode [ 194.158604][T14898] hsr_slave_1: entered promiscuous mode [ 194.178579][T14898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.196702][T14898] Cannot create hsr debugfs directory [ 194.212007][T15048] __nla_validate_parse: 23 callbacks suppressed [ 194.212026][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 194.385222][T15058] ax25_connect(): syz.4.2813 uses autobind, please contact jreuter@yaina.de [ 194.486928][ T5843] Bluetooth: hci5: command tx timeout [ 194.513349][T15068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2814'. [ 194.518321][T15070] dccp_invalid_packet: P.Data Offset(0) too small [ 194.569190][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.703763][T14898] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.704110][T15074] FAULT_INJECTION: forcing a failure. [ 194.704110][T15074] name failslab, interval 1, probability 0, space 0, times 0 [ 194.723358][T14898] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.737626][T15074] CPU: 0 UID: 0 PID: 15074 Comm: syz.3.2817 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 194.737650][T15074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 194.737660][T15074] Call Trace: [ 194.737666][T15074] [ 194.737673][T15074] dump_stack_lvl+0x241/0x360 [ 194.737700][T15074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.737720][T15074] ? __pfx__printk+0x10/0x10 [ 194.737744][T15074] should_fail_ex+0x3b0/0x4e0 [ 194.737763][T15074] should_failslab+0xac/0x100 [ 194.737784][T15074] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 194.737807][T15074] ? nf_ct_ext_add+0x1a2/0x3e0 [ 194.737827][T15074] ? nf_ct_ext_add+0x1a2/0x3e0 [ 194.737844][T15074] krealloc_noprof+0x10f/0x2f0 [ 194.737865][T15074] nf_ct_ext_add+0x1a2/0x3e0 [ 194.737884][T15074] ? ctnetlink_new_conntrack+0x7d5/0x2250 [ 194.737904][T15074] ctnetlink_new_conntrack+0x13a3/0x2250 [ 194.737924][T15074] ? __pfx___mutex_trylock_common+0x10/0x10 [ 194.737949][T15074] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 194.737967][T15074] ? rcu_is_watching+0x15/0xb0 [ 194.737988][T15074] ? trace_contention_end+0x3c/0x120 [ 194.738009][T15074] ? __mutex_lock+0x397/0x1010 [ 194.738031][T15074] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 194.738049][T15074] ? rcu_is_watching+0x15/0xb0 [ 194.738069][T15074] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 194.738087][T15074] ? lock_release+0xbf/0xa30 [ 194.738105][T15074] ? nfnetlink_rcv_msg+0xa5c/0x1180 [ 194.738127][T15074] ? __pfx_lock_release+0x10/0x10 [ 194.738149][T15074] ? __nla_parse+0x40/0x60 [ 194.738167][T15074] ? nfnetlink_rcv_msg+0x225/0x1180 [ 194.738187][T15074] nfnetlink_rcv_msg+0xbec/0x1180 [ 194.738207][T15074] ? nfnetlink_rcv_msg+0x225/0x1180 [ 194.738236][T15074] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.738255][T15074] ? stack_trace_save+0x118/0x1d0 [ 194.738290][T15074] ? dev_hard_start_xmit+0x27a/0x7d0 [ 194.738307][T15074] ? __dev_queue_xmit+0x1b73/0x3f50 [ 194.738323][T15074] ? __netlink_deliver_tap+0x56b/0x7f0 [ 194.738344][T15074] ? netlink_deliver_tap+0x19d/0x1b0 [ 194.738360][T15074] ? netlink_unicast+0x7c4/0x990 [ 194.738373][T15074] ? netlink_sendmsg+0x8e4/0xcb0 [ 194.738390][T15074] ? __sock_sendmsg+0x221/0x270 [ 194.738410][T15074] ? ____sys_sendmsg+0x52a/0x7e0 [ 194.738426][T15074] ? __sys_sendmsg+0x269/0x350 [ 194.738448][T15074] netlink_rcv_skb+0x1e3/0x430 [ 194.738466][T15074] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.738487][T15074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.738509][T15074] ? apparmor_capable+0x13b/0x1b0 [ 194.738529][T15074] ? bpf_lsm_capable+0x9/0x10 [ 194.738546][T15074] ? security_capable+0x7e/0x2d0 [ 194.738565][T15074] nfnetlink_rcv+0x297/0x2ab0 [ 194.738587][T15074] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.738605][T15074] ? __dev_queue_xmit+0x2f4/0x3f50 [ 194.738624][T15074] ? __dev_queue_xmit+0x1775/0x3f50 [ 194.738641][T15074] ? kasan_save_track+0x51/0x80 [ 194.738661][T15074] ? ____sys_sendmsg+0x52a/0x7e0 [ 194.738679][T15074] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.738698][T15074] ? __dev_queue_xmit+0x2f4/0x3f50 [ 194.738717][T15074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 194.738742][T15074] ? ref_tracker_free+0x643/0x7e0 [ 194.738758][T15074] ? __asan_memcpy+0x40/0x70 [ 194.738774][T15074] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.738792][T15074] ? rcu_is_watching+0x15/0xb0 [ 194.738813][T15074] ? lock_release+0xbf/0xa30 [ 194.738834][T15074] ? skb_clone+0x240/0x390 [ 194.738851][T15074] ? __pfx_lock_release+0x10/0x10 [ 194.738870][T15074] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 194.738890][T15074] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.738908][T15074] netlink_unicast+0x7f6/0x990 [ 194.738927][T15074] ? __pfx_netlink_unicast+0x10/0x10 [ 194.738942][T15074] ? __virt_addr_valid+0x45f/0x530 [ 194.738961][T15074] ? __phys_addr_symbol+0x2f/0x70 [ 194.738980][T15074] ? __check_object_size+0x47a/0x730 [ 194.739002][T15074] netlink_sendmsg+0x8e4/0xcb0 [ 194.739025][T15074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.739043][T15074] ? aa_sock_msg_perm+0x91/0x160 [ 194.739063][T15074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.739079][T15074] __sock_sendmsg+0x221/0x270 [ 194.739100][T15074] ____sys_sendmsg+0x52a/0x7e0 [ 194.739121][T15074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.739138][T15074] ? __fget_files+0x2a/0x410 [ 194.739159][T15074] ? __fget_files+0x2a/0x410 [ 194.739183][T15074] __sys_sendmsg+0x269/0x350 [ 194.739200][T15074] ? bpf_lsm_file_permission+0x9/0x10 [ 194.739217][T15074] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.739239][T15074] ? do_sys_openat2+0x17a/0x1d0 [ 194.739277][T15074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.739297][T15074] ? rcu_is_watching+0x15/0xb0 [ 194.739318][T15074] ? rcu_is_watching+0x15/0xb0 [ 194.739340][T15074] do_syscall_64+0xf3/0x230 [ 194.739356][T15074] ? clear_bhb_loop+0x35/0x90 [ 194.739374][T15074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.739390][T15074] RIP: 0033:0x7f40fd98cd29 [ 194.739404][T15074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.739418][T15074] RSP: 002b:00007f40fe890038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.739437][T15074] RAX: ffffffffffffffda RBX: 00007f40fdba5fa0 RCX: 00007f40fd98cd29 [ 194.739448][T15074] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 194.739458][T15074] RBP: 00007f40fe890090 R08: 0000000000000000 R09: 0000000000000000 [ 194.739468][T15074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.739477][T15074] R13: 0000000000000000 R14: 00007f40fdba5fa0 R15: 00007fff106c0038 [ 194.739494][T15074] [ 195.348098][T14898] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.364640][T14898] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.421046][T14898] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.431690][T14898] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.436697][T15088] netlink: 'syz.3.2823': attribute type 16 has an invalid length. [ 195.459214][T15091] ax25_connect(): syz.2.2824 uses autobind, please contact jreuter@yaina.de [ 195.472110][T15088] netlink: 'syz.3.2823': attribute type 17 has an invalid length. [ 195.532187][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 195.588050][T14898] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.598687][T14898] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.617177][T15096] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 195.696818][T14898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.705234][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 195.724309][T14898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.749447][T14898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.777738][T14898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.949774][T15138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2842'. [ 195.963400][T14898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.988348][T14898] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.998784][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'. [ 196.001495][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.014865][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.048501][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.055711][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.177900][T14898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.214270][T14898] veth0_vlan: entered promiscuous mode [ 196.225694][T14898] veth1_vlan: entered promiscuous mode [ 196.271709][T14898] veth0_macvtap: entered promiscuous mode [ 196.282824][T14898] veth1_macvtap: entered promiscuous mode [ 196.291975][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2847'. [ 196.315831][T14898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.331721][T14898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.343019][T14898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.354101][T14898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.379514][T14898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.389601][T14898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.408533][T14898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.427256][T14898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.508688][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.538430][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.559847][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.566388][ T5843] Bluetooth: hci5: command tx timeout [ 196.588332][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.860717][T15183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2853'. [ 197.053177][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 197.071689][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 197.305671][T15226] xt_hashlimit: size too large, truncated to 1048576 [ 197.341789][T15230] ax25_connect(): syz.4.2870 uses autobind, please contact jreuter@yaina.de [ 197.438174][T15235] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 197.476767][ T5843] block nbd4: Receive control failed (result -107) [ 197.669022][T15256] erspan0: entered promiscuous mode [ 197.687032][T15256] macsec1: entered allmulticast mode [ 197.703385][T15256] erspan0: entered allmulticast mode [ 197.712419][T15256] erspan0: left allmulticast mode [ 197.728837][T15256] erspan0: left promiscuous mode [ 197.815066][T15266] syzkaller1: entered promiscuous mode [ 197.822938][T15266] syzkaller1: entered allmulticast mode [ 197.863790][T15269] ax25_connect(): syz.0.2882 uses autobind, please contact jreuter@yaina.de [ 198.220624][T15307] ax25_connect(): syz.3.2895 uses autobind, please contact jreuter@yaina.de [ 198.583497][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.591666][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.600046][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.609469][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.617665][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.624957][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.646409][ T5830] Bluetooth: hci5: command tx timeout [ 198.657387][T15336] lo speed is unknown, defaulting to 1000 [ 198.707574][T15343] ax25_connect(): syz.2.2909 uses autobind, please contact jreuter@yaina.de [ 198.731263][T15336] lo speed is unknown, defaulting to 1000 [ 198.967930][T15336] chnl_net:caif_netlink_parms(): no params data found [ 198.991959][T15369] ip_vti0: entered promiscuous mode [ 199.012197][T15369] bridge6: entered promiscuous mode [ 199.019451][T15369] bridge6: entered allmulticast mode [ 199.115888][T15384] ax25_connect(): syz.0.2921 uses autobind, please contact jreuter@yaina.de [ 199.149496][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.178930][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.191740][T15336] bridge_slave_0: entered allmulticast mode [ 199.205933][T15336] bridge_slave_0: entered promiscuous mode [ 199.222477][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.231371][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.239052][T15336] bridge_slave_1: entered allmulticast mode [ 199.245887][T15336] bridge_slave_1: entered promiscuous mode [ 199.252410][T15398] __nla_validate_parse: 24 callbacks suppressed [ 199.252421][T15398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2927'. [ 199.295329][T15336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.308799][T15336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.319279][T15402] netlink: 'syz.1.2928': attribute type 11 has an invalid length. [ 199.372780][T15336] team0: Port device team_slave_0 added [ 199.379345][T15404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2929'. [ 199.391662][T15336] team0: Port device team_slave_1 added [ 199.398277][T15410] netlink: 'syz.1.2931': attribute type 10 has an invalid length. [ 199.464693][T15414] netlink: 'syz.2.2933': attribute type 2 has an invalid length. [ 199.473530][T15414] netlink: 'syz.2.2933': attribute type 9 has an invalid length. [ 199.491800][T15414] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2933'. [ 199.503212][T15336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.510437][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.537630][T15336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.552024][T15336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.556790][T15417] ax25_connect(): syz.1.2934 uses autobind, please contact jreuter@yaina.de [ 199.560877][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.596918][T15336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.645854][T15336] hsr_slave_0: entered promiscuous mode [ 199.654587][T15336] hsr_slave_1: entered promiscuous mode [ 199.661357][T15336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.669436][T15336] Cannot create hsr debugfs directory [ 199.677244][T15424] netlink: 'syz.2.2937': attribute type 11 has an invalid length. [ 199.698696][T15422] syzkaller1: entered promiscuous mode [ 199.704253][T15422] syzkaller1: entered allmulticast mode [ 199.858178][T15336] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.939406][T15336] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.977924][T15440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2945'. [ 199.980375][T15438] syzkaller1: entered promiscuous mode [ 199.992566][T15438] syzkaller1: entered allmulticast mode [ 200.001497][T15444] ax25_connect(): syz.4.2944 uses autobind, please contact jreuter@yaina.de [ 200.011819][T15336] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.073206][T15336] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.115014][T15456] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.158568][T15336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.173641][T15336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.184149][T15336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.200854][T15336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.223430][T15456] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.271349][T15456] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.313572][T15456] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.329622][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'. [ 200.344720][T15336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.360287][T15336] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.381265][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.388409][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.410914][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.418051][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.462619][T15456] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.507702][T15456] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.522347][T15456] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.561341][T15456] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.575638][T15480] syzkaller1: entered promiscuous mode [ 200.582640][T15480] syzkaller1: entered allmulticast mode [ 200.592539][T15478] lo speed is unknown, defaulting to 1000 [ 200.647316][ T5830] Bluetooth: hci0: command tx timeout [ 200.664006][T15484] ax25_connect(): syz.4.2955 uses autobind, please contact jreuter@yaina.de [ 200.727392][ T5830] Bluetooth: hci5: command tx timeout [ 200.743950][T15478] lo speed is unknown, defaulting to 1000 [ 200.760524][T15481] syzkaller1: entered promiscuous mode [ 200.766034][T15481] syzkaller1: entered allmulticast mode [ 200.853055][T15499] netlink: 'syz.4.2959': attribute type 12 has an invalid length. [ 200.870912][T15336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.895872][T15497] syzkaller1: entered promiscuous mode [ 200.903536][T15497] syzkaller1: entered allmulticast mode [ 200.941744][T15336] veth0_vlan: entered promiscuous mode [ 200.952956][T15336] veth1_vlan: entered promiscuous mode [ 200.978259][T15503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.982933][T15336] veth0_macvtap: entered promiscuous mode [ 200.998309][T15336] veth1_macvtap: entered promiscuous mode [ 201.013794][T15503] netlink: zone id is out of range [ 201.023260][T15336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.044188][T15336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.055709][T15336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.068372][T15336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.079029][T15336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.089619][T15505] netlink: 'syz.4.2959': attribute type 2 has an invalid length. [ 201.097690][T15336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.110883][T15336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.118303][T15503] netlink: set zone limit has 4 unknown bytes [ 201.122217][T15336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.149532][T15505] Tq€!7: entered promiscuous mode [ 201.162189][T15507] lo speed is unknown, defaulting to 1000 [ 201.162924][T15336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.178585][T15336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.187806][T15336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.196851][T15336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.290974][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.311281][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.334702][T15507] lo speed is unknown, defaulting to 1000 [ 201.345339][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.359702][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.434237][T15513] bridge0: port 3(ipvlan2) entered blocking state [ 201.457566][T15513] bridge0: port 3(ipvlan2) entered disabled state [ 201.464314][T15513] ipvlan2: entered allmulticast mode [ 201.470358][T15513] bridge0: entered allmulticast mode [ 201.477207][T15513] ipvlan2: left allmulticast mode [ 201.485829][T15513] bridge0: left allmulticast mode [ 201.496532][T15515] netdevsim netdevsim1 »»»»»»: renamed from netdevsim0 (while UP) [ 201.533241][T15515] siw: device registration error -23 [ 201.544359][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2961'. [ 201.555831][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2961'. [ 201.934617][T15531] syzkaller1: entered promiscuous mode [ 201.942183][T15531] syzkaller1: entered allmulticast mode [ 202.105785][T15534] ax25_connect(): syz.1.2966 uses autobind, please contact jreuter@yaina.de [ 202.156893][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.164140][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.171728][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.187354][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.204508][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.212167][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.237941][T15536] lo speed is unknown, defaulting to 1000 [ 202.313354][T15536] lo speed is unknown, defaulting to 1000 [ 202.320391][T15542] syzkaller1: entered promiscuous mode [ 202.356998][T15542] syzkaller1: entered allmulticast mode [ 202.645869][T15536] chnl_net:caif_netlink_parms(): no params data found [ 202.726782][ T5843] Bluetooth: hci0: command tx timeout [ 202.748183][T15536] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.755341][T15536] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.765530][T15536] bridge_slave_0: entered allmulticast mode [ 202.773120][T15536] bridge_slave_0: entered promiscuous mode [ 202.786657][T15536] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.793793][T15536] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.804965][T15536] bridge_slave_1: entered allmulticast mode [ 202.813332][T15536] bridge_slave_1: entered promiscuous mode [ 202.849774][T15536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.863115][T15536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.877695][T15564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.904683][T15536] team0: Port device team_slave_0 added [ 202.916778][T15536] team0: Port device team_slave_1 added [ 202.921516][T15573] ax25_connect(): syz.4.2976 uses autobind, please contact jreuter@yaina.de [ 202.932456][T15570] delete_channel: no stack [ 202.961823][T15536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.982258][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.008903][T15536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.022074][T15536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.031630][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.062077][T15536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.098556][T15583] syzkaller1: entered promiscuous mode [ 203.104239][T15583] syzkaller1: entered allmulticast mode [ 203.125730][T15536] hsr_slave_0: entered promiscuous mode [ 203.132467][T15536] hsr_slave_1: entered promiscuous mode [ 203.139778][T15536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.148303][T15536] Cannot create hsr debugfs directory [ 203.377239][T15590] syzkaller1: entered promiscuous mode [ 203.383182][T15590] syzkaller1: entered allmulticast mode [ 203.455412][T15536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.468254][T15536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.488175][T15536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.508688][T15536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.531253][T15594] ax25_connect(): syz.0.2986 uses autobind, please contact jreuter@yaina.de [ 203.585597][T15536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.613985][T15536] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.627440][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.634588][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.649588][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.656731][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.719963][T15608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2988'. [ 203.732959][T15608] sctp: [Deprecated]: syz.0.2988 (pid 15608) Use of int in maxseg socket option. [ 203.732959][T15608] Use struct sctp_assoc_value instead [ 203.752013][T15608] sctp: [Deprecated]: syz.0.2988 (pid 15608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.752013][T15608] Use struct sctp_sack_info instead [ 203.793650][T15536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.835928][T15536] veth0_vlan: entered promiscuous mode [ 203.847120][T15536] veth1_vlan: entered promiscuous mode [ 203.880789][T15536] veth0_macvtap: entered promiscuous mode [ 203.889889][T15536] veth1_macvtap: entered promiscuous mode [ 203.904438][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.914983][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.925098][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.936637][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.949093][T15536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.965071][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.975885][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.987431][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.999259][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.009357][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.020416][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.031380][T15536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.043859][T15536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.053016][T15536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.062338][T15536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.071967][T15536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.123867][T15625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2995'. [ 204.133477][T15625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2995'. [ 204.148061][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.165606][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.187751][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.196061][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.247191][ T5843] Bluetooth: hci2: command tx timeout [ 204.261824][T15632] bridge0: entered promiscuous mode [ 204.267251][T15632] macsec1: entered promiscuous mode [ 204.272605][T15632] macsec1: entered allmulticast mode [ 204.279634][T15632] bridge0: entered allmulticast mode [ 204.285988][T15632] bridge0: port 3(macsec1) entered blocking state [ 204.293121][T15632] bridge0: port 3(macsec1) entered disabled state [ 204.294491][T15634] ax25_connect(): syz.3.2997 uses autobind, please contact jreuter@yaina.de [ 204.312083][T15632] bridge0: left allmulticast mode [ 204.320664][T15632] bridge0: left promiscuous mode [ 204.351865][T15638] syz1: rxe_newlink: already configured on team_slave_0 [ 204.578875][T15648] ax25_connect(): syz.2.3001 uses autobind, please contact jreuter@yaina.de [ 204.714065][T15663] syzkaller1: entered promiscuous mode [ 204.719757][T15663] syzkaller1: entered allmulticast mode [ 204.723270][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.738000][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.745270][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.753989][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.762752][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.770498][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.797316][T15664] lo speed is unknown, defaulting to 1000 [ 204.807864][ T5843] Bluetooth: hci0: command tx timeout [ 204.883241][T15664] lo speed is unknown, defaulting to 1000 [ 204.929181][T15674] __nla_validate_parse: 1 callbacks suppressed [ 204.929199][T15674] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3011'. [ 204.935548][T15671] lo speed is unknown, defaulting to 1000 [ 204.945889][T15674] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 205.011408][T15678] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3013'. [ 205.115413][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 205.223475][T15671] lo speed is unknown, defaulting to 1000 [ 205.262079][T15664] chnl_net:caif_netlink_parms(): no params data found [ 205.369638][T15664] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.377281][T15664] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.384562][T15664] bridge_slave_0: entered allmulticast mode [ 205.391587][T15664] bridge_slave_0: entered promiscuous mode [ 205.407488][T15664] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.423561][T15664] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.441664][T15664] bridge_slave_1: entered allmulticast mode [ 205.460428][T15664] bridge_slave_1: entered promiscuous mode [ 205.534406][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3019'. [ 205.551170][T15664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.563184][T15664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.585447][T15712] syzkaller1: entered promiscuous mode [ 205.594012][T15712] syzkaller1: entered allmulticast mode [ 205.603543][T15664] team0: Port device team_slave_0 added [ 205.613757][T15664] team0: Port device team_slave_1 added [ 205.633479][T15714] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 205.662406][T15664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.669807][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.697293][T15664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.709813][T15664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.717567][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.760482][T15664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.883124][ T29] audit: type=1804 audit(1737790469.769:3): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3023" name="/newroot/531/cgroup.controllers" dev="tmpfs" ino=2732 res=1 errno=0 [ 205.922134][ T29] audit: type=1800 audit(1737790469.799:4): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3023" name="cgroup.controllers" dev="tmpfs" ino=2732 res=0 errno=0 [ 205.934447][T15664] hsr_slave_0: entered promiscuous mode [ 205.950471][T15664] hsr_slave_1: entered promiscuous mode [ 205.956536][T15664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.964624][T15664] Cannot create hsr debugfs directory [ 206.097109][T15664] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.117698][T15731] tipc: Enabled bearer , priority 0 [ 206.154122][T15731] syzkaller0: entered promiscuous mode [ 206.160655][T15731] syzkaller0: entered allmulticast mode [ 206.170399][T15731] tipc: Resetting bearer [ 206.181784][T15664] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.201964][ T1082] tipc: Resetting bearer [ 206.213871][T15736] syzkaller1: entered promiscuous mode [ 206.219989][T15736] syzkaller1: entered allmulticast mode [ 206.228392][T15730] tipc: Resetting bearer [ 206.250388][T15738] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3032'. [ 206.261969][T15738] nbd: nbd1 already in use [ 206.294206][T15730] tipc: Disabling bearer [ 206.308404][T15664] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.332246][ T5843] Bluetooth: hci2: command tx timeout [ 206.401039][T15664] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.544282][T15664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.555666][T15664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.581078][T15664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.594317][T15664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.631304][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.683331][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.711386][T15664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.735723][T15664] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.758307][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.765442][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.780256][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.787526][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.807570][ T5843] Bluetooth: hci1: command tx timeout [ 206.851874][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.887001][ T5843] Bluetooth: hci0: command tx timeout [ 206.934874][T15771] syzkaller1: entered promiscuous mode [ 206.943872][T15771] syzkaller1: entered allmulticast mode [ 206.953897][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.963985][ T12] netdevsim netdevsim1 »»»»»» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.975116][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.990637][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.001431][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.009636][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.017688][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.055958][T15773] lo speed is unknown, defaulting to 1000 [ 207.125856][ T12] bridge_slave_1: left allmulticast mode [ 207.133014][T15782] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 207.145441][ T12] bridge_slave_1: left promiscuous mode [ 207.152156][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.162482][ T12] bridge_slave_0: left allmulticast mode [ 207.169123][ T12] bridge_slave_0: left promiscuous mode [ 207.174850][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.340675][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.351106][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.360954][ T12] bond0 (unregistering): Released all slaves [ 207.389574][T15773] lo speed is unknown, defaulting to 1000 [ 207.415940][T15664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.577750][T15790] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 207.609050][T15803] tap0: tun_chr_ioctl cmd 1074025677 [ 207.614562][T15803] tap0: linktype set to 256 [ 207.929220][T15773] chnl_net:caif_netlink_parms(): no params data found [ 208.003911][T15820] pimreg: entered allmulticast mode [ 208.030025][ T12] hsr_slave_0: left promiscuous mode [ 208.035831][ T12] hsr_slave_1: left promiscuous mode [ 208.047235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.064547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.077583][T15833] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:0 [ 208.084526][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3060'. [ 208.095908][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.107151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.122897][ T12] veth1_macvtap: left promiscuous mode [ 208.129003][ T12] veth0_macvtap: left promiscuous mode [ 208.134761][ T12] veth1_vlan: left promiscuous mode [ 208.145011][ T12] veth0_vlan: left promiscuous mode [ 208.210793][T15664] veth0_vlan: entered promiscuous mode [ 208.289636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.303115][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.327936][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 208.366972][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 208.406380][ T5830] Bluetooth: hci2: command tx timeout [ 208.432621][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 208.460417][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.468280][T15773] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.475503][T15773] bridge_slave_0: entered allmulticast mode [ 208.482558][T15773] bridge_slave_0: entered promiscuous mode [ 208.494896][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 208.527831][T15664] veth1_vlan: entered promiscuous mode [ 208.537672][T15773] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.545099][T15773] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.552992][T15773] bridge_slave_1: entered allmulticast mode [ 208.559873][T15773] bridge_slave_1: entered promiscuous mode [ 208.605329][T15773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.630716][T15773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.701081][T15773] team0: Port device team_slave_0 added [ 208.709925][T15773] team0: Port device team_slave_1 added [ 208.842209][T15880] netlink: 'syz.2.3072': attribute type 2 has an invalid length. [ 208.851038][T15773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.858142][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.885108][T15773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.893102][ T5830] Bluetooth: hci1: command tx timeout [ 208.897442][T15773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.909289][T15773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.936504][T15773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.999439][T15773] hsr_slave_0: entered promiscuous mode [ 209.005773][T15773] hsr_slave_1: entered promiscuous mode [ 209.014176][T15773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.024963][T15773] Cannot create hsr debugfs directory [ 209.047562][ T5830] Bluetooth: hci3: command tx timeout [ 209.125942][T15664] veth0_macvtap: entered promiscuous mode [ 209.134674][T15664] veth1_macvtap: entered promiscuous mode [ 209.220259][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.232588][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.243335][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.254437][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.265889][T15664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.305799][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.320652][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.331509][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.342773][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.353185][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.364330][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.378436][T15664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.405844][T15664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.417231][T15664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.426677][T15664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.435397][T15664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.460606][T15919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.469890][T15919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.479384][T15919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.488622][T15919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.500286][T15919] vxlan0: entered promiscuous mode [ 209.505446][T15919] vxlan0: entered allmulticast mode [ 209.512568][T15919] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.521803][T15919] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.531638][T15919] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.541377][T15919] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.583478][T15924] lo speed is unknown, defaulting to 1000 [ 209.656780][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.664625][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.710369][T15928] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 209.719513][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.738932][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.827157][T15924] lo speed is unknown, defaulting to 1000 [ 210.036078][T15773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.077858][T15946] __nla_validate_parse: 23 callbacks suppressed [ 210.077876][T15946] netlink: 770 bytes leftover after parsing attributes in process `syz.2.3084'. [ 210.165967][T15773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.178301][T15773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.210786][T15955] netlink: 'syz.0.3087': attribute type 1 has an invalid length. [ 210.220603][T15955] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3087'. [ 210.239403][T15773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.414928][T15773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.467227][T15773] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.486526][ T5830] Bluetooth: hci2: command tx timeout [ 210.542218][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3093'. [ 210.543837][T15969] syzkaller0: entered promiscuous mode [ 210.561580][T15969] syzkaller0: entered allmulticast mode [ 210.569785][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3096'. [ 210.594560][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.601747][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.614279][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3098'. [ 210.669526][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.676735][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.908675][T15998] lo speed is unknown, defaulting to 1000 [ 210.920677][T16001] lo speed is unknown, defaulting to 1000 [ 210.942735][T15773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.966668][ T5830] Bluetooth: hci1: command tx timeout [ 210.999645][T15773] veth0_vlan: entered promiscuous mode [ 211.010474][T15773] veth1_vlan: entered promiscuous mode [ 211.012990][T16003] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3103'. [ 211.030884][T15773] veth0_macvtap: entered promiscuous mode [ 211.044753][T15773] veth1_macvtap: entered promiscuous mode [ 211.052527][T16003] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3103'. [ 211.070356][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.081147][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.091075][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.101742][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.111987][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.123179][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.133676][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 211.142001][T15773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.151597][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.162829][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.172800][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.183551][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.193450][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.203975][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.214494][T15773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.225072][T15773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.235888][T15773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.244338][T15998] lo speed is unknown, defaulting to 1000 [ 211.258830][T15773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.276201][T15773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.287274][T15773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.306257][T15773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.385485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.405625][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.415639][T16001] lo speed is unknown, defaulting to 1000 [ 211.431175][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.441584][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.650546][T16015] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3106'. [ 211.727383][T16026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.743326][T16026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.895400][T16041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'. [ 211.924273][T16037] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 211.958476][T16046] FAULT_INJECTION: forcing a failure. [ 211.958476][T16046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.000394][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.4.3114 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 212.000421][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.000431][T16046] Call Trace: [ 212.000437][T16046] [ 212.000444][T16046] dump_stack_lvl+0x241/0x360 [ 212.000471][T16046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.000492][T16046] ? __pfx__printk+0x10/0x10 [ 212.000511][T16046] ? __pfx_lock_release+0x10/0x10 [ 212.000530][T16046] ? sb_end_write+0xe9/0x1c0 [ 212.000553][T16046] should_fail_ex+0x3b0/0x4e0 [ 212.000571][T16046] _copy_from_user+0x2d/0xb0 [ 212.000592][T16046] __sys_bpf+0x1a4/0x810 [ 212.000609][T16046] ? __pfx___sys_bpf+0x10/0x10 [ 212.000631][T16046] ? ksys_write+0x251/0x2b0 [ 212.000647][T16046] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.000667][T16046] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.000686][T16046] ? rcu_is_watching+0x15/0xb0 [ 212.000717][T16046] __x64_sys_bpf+0x7c/0x90 [ 212.000732][T16046] do_syscall_64+0xf3/0x230 [ 212.000748][T16046] ? clear_bhb_loop+0x35/0x90 [ 212.000766][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.000782][T16046] RIP: 0033:0x7f0c29f8cd29 [ 212.000796][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.000810][T16046] RSP: 002b:00007f0c27df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.000828][T16046] RAX: ffffffffffffffda RBX: 00007f0c2a1a5fa0 RCX: 00007f0c29f8cd29 [ 212.000840][T16046] RDX: 0000000000000018 RSI: 0000000020000140 RDI: 0000000000000006 [ 212.000851][T16046] RBP: 00007f0c27df6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.000861][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.000871][T16046] R13: 0000000000000000 R14: 00007f0c2a1a5fa0 R15: 00007fff5ef55968 [ 212.000890][T16046] [ 212.110272][T16039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'. [ 212.237604][T16052] syzkaller1: entered promiscuous mode [ 212.243108][T16052] syzkaller1: entered allmulticast mode [ 212.341548][T16058] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 212.481217][T16072] sock: sock_set_timeout: `syz.4.3122' (pid 16072) tries to set negative timeout [ 212.494463][T16063] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.752673][T16091] syzkaller1: entered promiscuous mode [ 212.759406][T16091] syzkaller1: entered allmulticast mode [ 212.810518][T16095] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 213.035646][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.046816][ T5843] Bluetooth: hci1: command tx timeout [ 213.058221][T16107] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.205002][T16119] netlink: 'syz.2.3136': attribute type 15 has an invalid length. [ 213.214830][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.223304][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.230662][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.257093][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.264533][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.271836][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.306128][T16120] lo speed is unknown, defaulting to 1000 [ 213.325509][T16129] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 213.349465][T16129] team0: Port device netdevsim0 added [ 213.373365][T16120] lo speed is unknown, defaulting to 1000 [ 213.376210][T16129] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 213.451394][T16129] team0: Port device netdevsim0 removed [ 213.463049][T16129] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 213.472331][T16132] syzkaller1: entered promiscuous mode [ 213.482467][T16132] syzkaller1: entered allmulticast mode [ 213.639487][T16120] chnl_net:caif_netlink_parms(): no params data found [ 213.732193][T16147] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 213.829377][T16120] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.852854][T16120] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.860735][T16120] bridge_slave_0: entered allmulticast mode [ 213.867941][T16120] bridge_slave_0: entered promiscuous mode [ 213.875416][T16120] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.882726][T16120] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.890121][T16120] bridge_slave_1: entered allmulticast mode [ 213.897456][T16120] bridge_slave_1: entered promiscuous mode [ 213.912864][T16155] nft_compat: unsupported protocol 0 [ 213.947577][T16120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.968944][T16120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.071995][T16120] team0: Port device team_slave_0 added [ 214.096088][T16120] team0: Port device team_slave_1 added [ 214.130868][T16120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.154864][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.190806][T16120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.220929][T16120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.234592][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.324243][T16120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.370245][T16120] hsr_slave_0: entered promiscuous mode [ 214.376693][T16120] hsr_slave_1: entered promiscuous mode [ 214.382818][T16120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.390920][T16120] Cannot create hsr debugfs directory [ 214.400686][T16171] bridge1: entered promiscuous mode [ 214.406043][T16171] bridge1: entered allmulticast mode [ 214.573530][T16179] ax25_connect(): syz.4.3155 uses autobind, please contact jreuter@yaina.de [ 214.614613][T16180] syzkaller1: entered promiscuous mode [ 214.622805][T16180] syzkaller1: entered allmulticast mode [ 214.647263][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.744004][T16191] lo speed is unknown, defaulting to 1000 [ 214.795716][T16191] lo speed is unknown, defaulting to 1000 [ 214.900102][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.981393][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.069139][T16191] lo speed is unknown, defaulting to 1000 [ 215.081788][ T53] bridge_slave_1: left allmulticast mode [ 215.094343][ T53] bridge_slave_1: left promiscuous mode [ 215.117146][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.141146][ T53] bridge_slave_0: left allmulticast mode [ 215.155712][ T53] bridge_slave_0: left promiscuous mode [ 215.162048][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.213495][T16191] lo speed is unknown, defaulting to 1000 [ 215.287792][ T5830] Bluetooth: hci3: command tx timeout [ 215.363103][T16216] ax25_connect(): syz.0.3167 uses autobind, please contact jreuter@yaina.de [ 215.382997][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.403430][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.424539][ T53] bond0 (unregistering): Released all slaves [ 215.450718][T16222] syzkaller1: entered promiscuous mode [ 215.456433][T16222] syzkaller1: entered allmulticast mode [ 215.662077][T16235] ax25_connect(): syz.2.3176 uses autobind, please contact jreuter@yaina.de [ 215.675233][T16237] __nla_validate_parse: 7 callbacks suppressed [ 215.675249][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 215.795774][T16244] lo speed is unknown, defaulting to 1000 [ 215.861437][T16246] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3175'. [ 215.905667][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3175'. [ 215.942466][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3175'. [ 215.960961][ T53] hsr_slave_0: left promiscuous mode [ 215.967434][ T53] hsr_slave_1: left promiscuous mode [ 215.977342][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.995104][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.003599][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.012139][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.028132][ T53] veth1_macvtap: left promiscuous mode [ 216.038124][T16252] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3179'. [ 216.038145][ T53] veth0_macvtap: left promiscuous mode [ 216.067940][ T53] veth1_vlan: left promiscuous mode [ 216.078884][ T53] veth0_vlan: left promiscuous mode [ 216.182144][T16250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.190095][T16250] team0: Port device bond2 added [ 216.198080][T16252] 0·: renamed from hsr_slave_1 (while UP) [ 216.207882][T16252] 0·: entered allmulticast mode [ 216.213147][T16252] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 216.230628][T16244] lo speed is unknown, defaulting to 1000 [ 216.247728][T16246] syzkaller1: entered promiscuous mode [ 216.259681][T16246] syzkaller1: entered allmulticast mode [ 216.425856][ T53] team0 (unregistering): Port device team_slave_1 removed [ 216.443515][ T53] team0 (unregistering): Port device team_slave_0 removed [ 216.562132][T16263] ax25_connect(): syz.0.3181 uses autobind, please contact jreuter@yaina.de [ 216.710667][T16120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.745557][T16120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.762949][T16120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.788252][T16120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.931490][T16120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.963711][T16120] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.979550][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.986687][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.021098][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.028214][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.114261][T16120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.127328][T16120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.367663][ T5830] Bluetooth: hci3: command tx timeout [ 217.390563][T16120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.424542][T16120] veth0_vlan: entered promiscuous mode [ 217.436805][T16120] veth1_vlan: entered promiscuous mode [ 217.481036][T16120] veth0_macvtap: entered promiscuous mode [ 217.499844][T16120] veth1_macvtap: entered promiscuous mode [ 217.519277][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.534351][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.544589][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.558401][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.572614][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.590913][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.604372][T16120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.628667][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.643771][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.644065][T16295] ax25_connect(): syz.3.3192 uses autobind, please contact jreuter@yaina.de [ 217.655550][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.676418][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.689651][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.700976][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.712452][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.724300][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.735552][T16120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.760186][T16120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.778792][T16120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.788226][T16120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.797114][T16120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.885809][T16303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3194'. [ 217.914806][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.933490][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.958623][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.983651][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.008787][T16311] netlink: 'syz.3.3196': attribute type 1 has an invalid length. [ 218.037576][T16311] bond23: entered promiscuous mode [ 218.043067][T16311] bond23: entered allmulticast mode [ 218.054366][T16311] batadv1: entered allmulticast mode [ 218.061514][T16311] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 218.070160][T16311] bond23: (slave batadv1): making interface the new active one [ 218.078377][T16311] batadv1: entered promiscuous mode [ 218.085160][T16311] bond23: (slave batadv1): Enslaving as an active interface with an up link [ 218.101155][T16308] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.109102][ T8] IPVS: starting estimator thread 0... [ 218.148762][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 218.170691][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3201'. [ 218.206416][T16319] IPVS: using max 45 ests per chain, 108000 per kthread [ 218.210297][T16330] ax25_connect(): syz.4.3203 uses autobind, please contact jreuter@yaina.de [ 218.293814][T16334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3205'. [ 218.471773][T16350] netlink: 'syz.4.3211': attribute type 21 has an invalid length. [ 218.500219][T16350] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 218.535400][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 218.553259][T16358] erspan0: entered promiscuous mode [ 218.558934][T16358] macvtap1: entered promiscuous mode [ 218.564342][T16358] macvtap1: entered allmulticast mode [ 218.570836][T16358] erspan0: entered allmulticast mode [ 218.578115][T16360] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 218.588236][T16358] erspan0: left allmulticast mode [ 218.593454][T16358] erspan0: left promiscuous mode [ 218.604333][T16345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.695513][T16364] ax25_connect(): syz.4.3215 uses autobind, please contact jreuter@yaina.de [ 218.934438][T16381] Cannot find add_set index 0 as target [ 219.143744][T16395] ax25_connect(): syz.2.3226 uses autobind, please contact jreuter@yaina.de [ 219.262166][T16408] netlink: 'syz.2.3231': attribute type 3 has an invalid length. [ 219.287284][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.499353][T16421] lo speed is unknown, defaulting to 1000 [ 219.619208][T16429] ax25_connect(): syz.4.3238 uses autobind, please contact jreuter@yaina.de [ 219.652855][T16421] lo speed is unknown, defaulting to 1000 [ 219.747373][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.755530][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.770655][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.779054][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.787077][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.794665][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.895739][T16432] lo speed is unknown, defaulting to 1000 [ 219.985792][T16432] lo speed is unknown, defaulting to 1000 [ 220.155666][T16432] chnl_net:caif_netlink_parms(): no params data found [ 220.223555][T16476] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 220.239251][T16476] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 220.287851][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.299160][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.322695][T16432] bridge_slave_0: entered allmulticast mode [ 220.337128][T16432] bridge_slave_0: entered promiscuous mode [ 220.345121][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.353149][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.360655][T16432] bridge_slave_1: entered allmulticast mode [ 220.367543][T16432] bridge_slave_1: entered promiscuous mode [ 220.403215][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.425954][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.457260][T16487] ax25_connect(): syz.3.3253 uses autobind, please contact jreuter@yaina.de [ 220.469685][T16432] team0: Port device team_slave_0 added [ 220.482101][T16432] team0: Port device team_slave_1 added [ 220.505218][T16489] ax25_connect(): syz.2.3254 uses autobind, please contact jreuter@yaina.de [ 220.522508][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.549340][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.556421][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.584674][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.597588][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.604635][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.630781][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.664638][T16432] hsr_slave_0: entered promiscuous mode [ 220.671211][T16432] hsr_slave_1: entered promiscuous mode [ 220.679135][T16432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.687751][T16432] Cannot create hsr debugfs directory [ 220.772493][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.843346][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.972557][ T12] bridge_slave_1: left allmulticast mode [ 220.982985][ T12] bridge_slave_1: left promiscuous mode [ 220.996516][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.016311][ T12] bridge_slave_0: left allmulticast mode [ 221.026300][ T12] bridge_slave_0: left promiscuous mode [ 221.031994][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.115242][T16501] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.124710][T16501] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.134364][T16501] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.140114][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.143689][T16501] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.154438][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.161754][T16501] vxlan0: entered promiscuous mode [ 221.166970][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.174473][T16501] vxlan0: entered allmulticast mode [ 221.180511][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.191725][T16501] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.192097][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.201890][T16501] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.209173][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.218287][T16501] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.234124][T16501] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.331718][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.342074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.352843][ T12] bond0 (unregistering): Released all slaves [ 221.391841][T16506] lo speed is unknown, defaulting to 1000 [ 221.444943][T16520] ax25_connect(): syz.4.3265 uses autobind, please contact jreuter@yaina.de [ 221.505279][T16522] __nla_validate_parse: 8 callbacks suppressed [ 221.505298][T16522] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3266'. [ 221.529033][T16506] lo speed is unknown, defaulting to 1000 [ 221.656125][T16533] netlink: 'syz.0.3269': attribute type 1 has an invalid length. [ 221.685316][T16533] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3269'. [ 221.704362][T16533] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3269'. [ 221.848306][ T5830] Bluetooth: hci3: command tx timeout [ 221.895688][ T12] hsr_slave_0: left promiscuous mode [ 221.910614][ T12] hsr_slave_1: left promiscuous mode [ 221.927467][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.946934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.954577][T16547] ax25_connect(): syz.3.3277 uses autobind, please contact jreuter@yaina.de [ 221.967514][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.986903][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.998315][ T12] veth1_macvtap: left promiscuous mode [ 222.003838][ T12] veth0_macvtap: left promiscuous mode [ 222.026992][ T12] veth1_vlan: left promiscuous mode [ 222.036772][ T12] veth0_vlan: left promiscuous mode [ 222.173289][ T12] team0 (unregistering): Port device team_slave_1 removed [ 222.186037][ T12] team0 (unregistering): Port device team_slave_0 removed [ 222.249212][T16556] lo speed is unknown, defaulting to 1000 [ 222.274746][T16432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.285437][T16432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.312030][T16506] chnl_net:caif_netlink_parms(): no params data found [ 222.347715][T16432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.393184][T16432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.428105][T16556] lo speed is unknown, defaulting to 1000 [ 222.484694][T16561] lo speed is unknown, defaulting to 1000 [ 222.552432][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.568388][T16506] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.575728][T16506] bridge_slave_0: entered allmulticast mode [ 222.582925][T16506] bridge_slave_0: entered promiscuous mode [ 222.604302][T16506] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.612191][T16506] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.619770][T16506] bridge_slave_1: entered allmulticast mode [ 222.626678][T16506] bridge_slave_1: entered promiscuous mode [ 222.672649][T16506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.710813][T16506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.730571][T16561] lo speed is unknown, defaulting to 1000 [ 222.772665][T16506] team0: Port device team_slave_0 added [ 222.783738][T16506] team0: Port device team_slave_1 added [ 222.803290][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.832122][T16506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.844004][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.874986][T16506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.892878][T16506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.900448][T16506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.932007][T16506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.970395][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.999115][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.034087][T16506] hsr_slave_0: entered promiscuous mode [ 223.041033][T16506] hsr_slave_1: entered promiscuous mode [ 223.048273][T16506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.055967][T16506] Cannot create hsr debugfs directory [ 223.081044][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.088158][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.114508][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.176762][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.183898][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.286893][ T5830] Bluetooth: hci2: command tx timeout [ 223.293146][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.379857][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.424102][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 223.441719][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.492517][T16585] sctp: [Deprecated]: syz.0.3286 (pid 16585) Use of int in max_burst socket option. [ 223.492517][T16585] Use struct sctp_assoc_value instead [ 223.519164][T16432] veth0_vlan: entered promiscuous mode [ 223.531503][T16432] veth1_vlan: entered promiscuous mode [ 223.542398][T16585] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3286'. [ 223.608823][T16432] veth0_macvtap: entered promiscuous mode [ 223.637017][ T12] bridge_slave_1: left allmulticast mode [ 223.642785][ T12] bridge_slave_1: left promiscuous mode [ 223.658222][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.677094][ T12] bridge_slave_0: left allmulticast mode [ 223.682777][ T12] bridge_slave_0: left promiscuous mode [ 223.702036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.750963][T16600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3292'. [ 223.803551][T16432] veth1_macvtap: entered promiscuous mode [ 223.832160][T16598] netlink: 'syz.4.3291': attribute type 10 has an invalid length. [ 223.927500][ T5830] Bluetooth: hci3: command tx timeout [ 223.968306][T16603] netlink: 'syz.4.3291': attribute type 10 has an invalid length. [ 223.976282][T16603] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3291'. [ 224.023941][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.038374][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.049177][ T12] bond0 (unregistering): Released all slaves [ 224.060487][ T12] bond1 (unregistering): Released all slaves [ 224.077649][ T12] team0: Port device bond2 removed [ 224.084003][ T12] bond2 (unregistering): Released all slaves [ 224.098512][T16602] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.107979][T16602] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.117535][T16602] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.126964][T16602] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.139373][T16602] vxlan0: entered promiscuous mode [ 224.144508][T16602] vxlan0: entered allmulticast mode [ 224.153892][T16602] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.163405][T16602] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.173491][T16602] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.183471][T16602] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.216972][T16598] batman_adv: batadv0: Adding interface: team0 [ 224.223193][T16598] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.259474][T16598] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 224.280996][T16603] team0: entered promiscuous mode [ 224.299738][T16603] team_slave_0: entered promiscuous mode [ 224.306045][T16603] team_slave_1: entered promiscuous mode [ 224.317624][T16603] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.324545][T16603] batman_adv: batadv0: Interface activated: team0 [ 224.350806][T16603] batman_adv: batadv0: Interface deactivated: team0 [ 224.358903][T16607] ax25_connect(): syz.0.3293 uses autobind, please contact jreuter@yaina.de [ 224.387649][T16603] batman_adv: batadv0: Removing interface: team0 [ 224.394889][T16603] bridge0: port 3(team0) entered blocking state [ 224.414769][T16603] bridge0: port 3(team0) entered disabled state [ 224.424471][T16603] team0: entered allmulticast mode [ 224.429994][T16603] team_slave_0: entered allmulticast mode [ 224.435953][T16603] team_slave_1: entered allmulticast mode [ 224.447747][T16603] bridge0: port 3(team0) entered blocking state [ 224.454088][T16603] bridge0: port 3(team0) entered forwarding state [ 224.485861][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.502333][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.513205][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.524047][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.533925][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.544425][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.558554][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.568908][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.582302][ T12] IPVS: stopping master sync thread 16360 ... [ 224.585612][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.599323][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.610356][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.620266][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.630821][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.640690][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.652985][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.666101][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.675888][T16612] netlink: 'syz.0.3295': attribute type 4 has an invalid length. [ 224.712945][T16432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.736362][T16432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.745116][T16432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.756088][T16432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.768064][ T9] IPVS: starting estimator thread 0... [ 224.781814][T16629] FAULT_INJECTION: forcing a failure. [ 224.781814][T16629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.804632][T16629] CPU: 0 UID: 0 PID: 16629 Comm: syz.3.3300 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 224.804655][T16629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 224.804665][T16629] Call Trace: [ 224.804671][T16629] [ 224.804677][T16629] dump_stack_lvl+0x241/0x360 [ 224.804706][T16629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.804725][T16629] ? __pfx__printk+0x10/0x10 [ 224.804742][T16629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.804760][T16629] ? __pfx_lock_release+0x10/0x10 [ 224.804783][T16629] should_fail_ex+0x3b0/0x4e0 [ 224.804800][T16629] _copy_from_iter+0x1e9/0x1c20 [ 224.804826][T16629] ? __pfx__copy_from_iter+0x10/0x10 [ 224.804846][T16629] ? __virt_addr_valid+0x183/0x530 [ 224.804863][T16629] ? __virt_addr_valid+0x183/0x530 [ 224.804880][T16629] ? __virt_addr_valid+0x45f/0x530 [ 224.804898][T16629] ? __phys_addr_symbol+0x2f/0x70 [ 224.804917][T16629] ? __check_object_size+0x47a/0x730 [ 224.804938][T16629] kernfs_fop_write_iter+0x1a9/0x500 [ 224.804963][T16629] vfs_write+0xaeb/0xd30 [ 224.804980][T16629] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 224.805002][T16629] ? __pfx_vfs_write+0x10/0x10 [ 224.805017][T16629] ? do_sys_openat2+0x17a/0x1d0 [ 224.805038][T16629] ? __fget_files+0x2a/0x410 [ 224.805059][T16629] ? __fget_files+0x2a/0x410 [ 224.805082][T16629] ksys_write+0x18f/0x2b0 [ 224.805099][T16629] ? __pfx_ksys_write+0x10/0x10 [ 224.805115][T16629] ? rcu_is_watching+0x15/0xb0 [ 224.805137][T16629] ? rcu_is_watching+0x15/0xb0 [ 224.805158][T16629] do_syscall_64+0xf3/0x230 [ 224.805174][T16629] ? clear_bhb_loop+0x35/0x90 [ 224.805191][T16629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.805206][T16629] RIP: 0033:0x7fee06f8cd29 [ 224.805219][T16629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.805232][T16629] RSP: 002b:00007fee07e95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.805250][T16629] RAX: ffffffffffffffda RBX: 00007fee071a5fa0 RCX: 00007fee06f8cd29 [ 224.805261][T16629] RDX: 0000000000000009 RSI: 0000000020000280 RDI: 0000000000000005 [ 224.805271][T16629] RBP: 00007fee07e95090 R08: 0000000000000000 R09: 0000000000000000 [ 224.805281][T16629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.805290][T16629] R13: 0000000000000000 R14: 00007fee071a5fa0 R15: 00007ffd32fdc3d8 [ 224.805308][T16629] [ 224.857135][T16627] IPVS: using max 45 ests per chain, 108000 per kthread [ 224.908186][T16506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.101043][T16506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.120577][T16506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.145922][T16506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.152085][T16647] ax25_connect(): syz.4.3304 uses autobind, please contact jreuter@yaina.de [ 225.245522][T16652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3306'. [ 225.255170][T16652] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3306'. [ 225.366627][ T5830] Bluetooth: hci2: command tx timeout [ 226.016320][ T5830] Bluetooth: hci3: command tx timeout [ 227.446327][ T5830] Bluetooth: hci2: command tx timeout [ 228.086879][ T5830] Bluetooth: hci3: command tx timeout [ 229.526892][ T5830] Bluetooth: hci2: command tx timeout [ 230.408425][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.796305][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.807392][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.814650][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.825524][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.833782][ T5144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.837053][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.848686][ T5144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.849310][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 240.864633][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.872142][ T5144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.879648][ T5144] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 240.881918][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.887193][ T5144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.902818][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.910460][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.919157][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.928778][ T5830] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 240.936033][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.886701][ T5830] Bluetooth: hci5: command tx timeout [ 242.966384][ T5830] Bluetooth: hci7: command tx timeout [ 242.970573][ T5844] Bluetooth: hci6: command tx timeout [ 244.966518][ T5844] Bluetooth: hci5: command tx timeout [ 245.046339][ T5844] Bluetooth: hci7: command tx timeout [ 245.047658][ T5830] Bluetooth: hci6: command tx timeout [ 247.046798][ T5830] Bluetooth: hci5: command tx timeout [ 247.126399][ T5844] Bluetooth: hci7: command tx timeout [ 247.129973][ T5830] Bluetooth: hci6: command tx timeout [ 249.126506][ T5830] Bluetooth: hci5: command tx timeout [ 249.206332][ T5830] Bluetooth: hci7: command tx timeout [ 249.209835][ T5844] Bluetooth: hci6: command tx timeout [ 280.034643][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.042251][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.049793][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.057417][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.064862][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.072909][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.054330][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.062977][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.070414][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.078370][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.085797][ T5844] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 282.093739][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 282.101049][ T5844] Bluetooth: hci0: command tx timeout [ 284.166544][ T5844] Bluetooth: hci0: command tx timeout [ 284.166927][ T5830] Bluetooth: hci8: command tx timeout [ 286.246432][ T5830] Bluetooth: hci8: command tx timeout [ 286.256369][ T5830] Bluetooth: hci0: command tx timeout [ 288.326363][ T5830] Bluetooth: hci0: command tx timeout [ 288.331291][ T5844] Bluetooth: hci8: command tx timeout [ 290.409480][ T5844] Bluetooth: hci8: command tx timeout [ 300.722159][ T5830] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 300.729654][ T5830] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 300.741376][ T5830] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 300.751089][ T5830] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 300.754663][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 300.762528][ T5830] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 300.765918][ T5843] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 300.773687][ T5830] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 300.779830][ T5843] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 300.794825][ T5843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 300.802457][ T5843] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 300.809925][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 301.157007][ T5144] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 301.164443][ T5144] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 301.172042][ T5144] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 301.179747][ T5144] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 301.188504][ T5144] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 301.195843][ T5144] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 302.806375][ T5843] Bluetooth: hci9: command tx timeout [ 302.886385][ T5843] Bluetooth: hci10: command tx timeout [ 303.206484][ T5843] Bluetooth: hci11: command tx timeout [ 304.886756][ T5843] Bluetooth: hci9: command tx timeout [ 304.967278][ T5843] Bluetooth: hci10: command tx timeout [ 305.286533][ T5843] Bluetooth: hci11: command tx timeout [ 306.966367][ T5843] Bluetooth: hci9: command tx timeout [ 307.046351][ T5843] Bluetooth: hci10: command tx timeout [ 307.366400][ T5843] Bluetooth: hci11: command tx timeout [ 309.046326][ T5843] Bluetooth: hci9: command tx timeout [ 309.127032][ T5843] Bluetooth: hci10: command tx timeout [ 309.447368][ T5843] Bluetooth: hci11: command tx timeout [ 329.766366][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 341.202921][ T5144] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 341.210651][ T5144] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 341.218220][ T5144] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 341.226465][ T5144] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 341.234398][ T5144] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 341.241733][ T5144] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 342.201644][ T5144] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 342.209559][ T5144] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 342.217097][ T5144] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 342.224858][ T5144] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 342.233006][ T5144] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 342.240479][ T5144] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 343.286386][ T5844] Bluetooth: hci12: command tx timeout [ 344.326365][ T5844] Bluetooth: hci13: command tx timeout [ 345.126354][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 345.126893][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 345.366872][ T5144] Bluetooth: hci12: command tx timeout [ 346.416793][ T5144] Bluetooth: hci13: command tx timeout [ 347.446805][ T5144] Bluetooth: hci12: command tx timeout [ 348.167728][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.486414][ T5144] Bluetooth: hci13: command tx timeout [ 349.526853][ T5144] Bluetooth: hci12: command tx timeout [ 350.567398][ T5144] Bluetooth: hci13: command tx timeout [ 361.380214][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 361.397235][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 361.407555][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 361.415240][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 361.423399][ T5843] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 361.431364][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 361.439475][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 361.444469][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 361.450412][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 361.455159][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 361.462125][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 361.474029][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 361.476888][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 361.484431][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 361.491312][ T5844] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 361.498618][ T5843] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 361.505217][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 361.519517][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 363.527540][ T5836] Bluetooth: hci14: command tx timeout [ 363.528165][ T5844] Bluetooth: hci15: command tx timeout [ 363.606586][ T5844] Bluetooth: hci16: command tx timeout [ 365.606375][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 365.607747][T16706] Bluetooth: hci14: command tx timeout [ 365.612543][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 365.618376][T16706] Bluetooth: hci15: command tx timeout [ 365.624311][ T5836] Bluetooth: hci7: command 0x0406 tx timeout [ 365.686915][ T5843] Bluetooth: hci16: command tx timeout [ 367.686461][ T5830] Bluetooth: hci14: command tx timeout [ 367.688017][ T5843] Bluetooth: hci15: command tx timeout [ 367.766343][ T5843] Bluetooth: hci16: command tx timeout [ 369.766456][ T5843] Bluetooth: hci15: command tx timeout [ 369.767161][ T5830] Bluetooth: hci14: command tx timeout [ 369.846963][ T5830] Bluetooth: hci16: command tx timeout [ 379.527032][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 379.534719][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 379.542396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.551490][ T30] task:kworker/u8:1 state:D stack:21008 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 379.561802][ T30] Workqueue: netns cleanup_net [ 379.566783][ T30] Call Trace: [ 379.570081][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.573050][ T30] __schedule+0x186c/0x4be0 [ 379.577683][ T30] ? schedule+0x90/0x320 [ 379.581947][ T30] ? schedule+0x90/0x320 [ 379.586267][ T30] ? __pfx___schedule+0x10/0x10 [ 379.591234][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.596364][ T30] ? rcu_is_watching+0x15/0xb0 [ 379.601220][ T30] ? kthread_data+0x52/0xd0 [ 379.605750][ T30] ? schedule+0x90/0x320 [ 379.610486][ T30] ? wq_worker_sleeping+0x66/0x240 [ 379.615631][ T30] ? schedule+0x90/0x320 [ 379.620004][ T30] schedule+0x14b/0x320 [ 379.624182][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.629759][ T30] __mutex_lock+0x817/0x1010 [ 379.634371][ T30] ? __mutex_lock+0x602/0x1010 [ 379.639222][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 379.645744][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.651008][ T30] ? __pfx___might_resched+0x10/0x10 [ 379.656368][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 379.662904][ T30] ? rcu_is_watching+0x15/0xb0 [ 379.667848][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 379.674550][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 379.680996][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.687493][ T30] ? rcu_is_watching+0x15/0xb0 [ 379.692283][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 379.699130][ T30] ? __pfx_call_rcu+0x10/0x10 [ 379.703833][ T30] ? vlan_vid_del+0x630/0x770 [ 379.708633][ T30] vlan_device_event+0x1da7/0x1de0 [ 379.714113][ T30] ? _raw_spin_unlock+0x28/0x50 [ 379.719159][ T30] ? br_device_event+0x279/0xa00 [ 379.724127][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 379.730133][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 379.735622][ T30] ? __pfx_br_device_event+0x10/0x10 [ 379.741373][ T30] ? raw_notifier+0x9d/0x740 [ 379.745993][ T30] ? isotp_notifier+0xa4/0x6b0 [ 379.753745][ T30] ? cgw_notifier+0xd8/0x3b0 [ 379.758774][ T30] ? packet_notifier+0x76/0xa30 [ 379.763654][ T30] notifier_call_chain+0x1a5/0x3f0 [ 379.803094][ T30] unregister_netdevice_many_notify+0x1091/0x2030 [ 379.809737][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 379.816845][ T30] ? rcu_is_watching+0x15/0xb0 [ 379.821640][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.826735][ T30] unregister_netdevice_queue+0x303/0x370 [ 379.832498][ T30] ? __pfx_up_write+0x10/0x10 [ 379.837234][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 379.843599][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 379.849460][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 379.855120][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 379.861030][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 379.867418][ T30] ? rcu_is_watching+0x15/0xb0 [ 379.872204][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 379.877602][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 379.883161][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 379.889373][ T30] hwsim_exit_net+0x5c1/0x670 [ 379.894074][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 379.899315][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 379.905144][ T30] cleanup_net+0x812/0xd60 [ 379.909639][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 379.914589][ T30] ? rcu_is_watching+0x15/0xb0 [ 379.919632][ T30] ? process_scheduled_works+0x976/0x1840 [ 379.925371][ T30] process_scheduled_works+0xa66/0x1840 [ 379.931110][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.937157][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 379.942717][ T30] ? assign_work+0x364/0x3d0 [ 379.947359][ T30] worker_thread+0x870/0xd30 [ 379.951970][ T30] ? __kthread_parkme+0x169/0x1d0 [ 379.957004][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.962102][ T30] kthread+0x7a9/0x920 [ 379.966333][ T30] ? __pfx_kthread+0x10/0x10 [ 379.970938][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.976036][ T30] ? __pfx_kthread+0x10/0x10 [ 379.980665][ T30] ? __pfx_kthread+0x10/0x10 [ 379.985262][ T30] ? __pfx_kthread+0x10/0x10 [ 379.989867][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.995059][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 380.000266][ T30] ? __pfx_kthread+0x10/0x10 [ 380.004891][ T30] ret_from_fork+0x4b/0x80 [ 380.009556][ T30] ? __pfx_kthread+0x10/0x10 [ 380.014164][ T30] ret_from_fork_asm+0x1a/0x30 [ 380.019091][ T30] [ 380.022156][ T30] INFO: task kworker/u8:4:63 blocked for more than 143 seconds. [ 380.029836][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 380.037150][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.046026][ T30] task:kworker/u8:4 state:D stack:22960 pid:63 tgid:63 ppid:2 flags:0x00004000 [ 380.056292][ T30] Workqueue: events_unbound linkwatch_event [ 380.062208][ T30] Call Trace: [ 380.065562][ T30] [ 380.068541][ T30] __schedule+0x186c/0x4be0 [ 380.073056][ T30] ? schedule+0x90/0x320 [ 380.077336][ T30] ? schedule+0x90/0x320 [ 380.081587][ T30] ? __pfx___schedule+0x10/0x10 [ 380.086683][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.091817][ T30] ? rcu_is_watching+0x15/0xb0 [ 380.096644][ T30] ? kthread_data+0x52/0xd0 [ 380.101162][ T30] ? schedule+0x90/0x320 [ 380.105497][ T30] ? wq_worker_sleeping+0x66/0x240 [ 380.110631][ T30] ? schedule+0x90/0x320 [ 380.114867][ T30] schedule+0x14b/0x320 [ 380.119073][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.124764][ T30] __mutex_lock+0x817/0x1010 [ 380.129476][ T30] ? __mutex_lock+0x602/0x1010 [ 380.134258][ T30] ? linkwatch_event+0xe/0x60 [ 380.139044][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.144072][ T30] ? __pv_queued_spin_lock_slowpath+0xb8a/0xdb0 [ 380.150337][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 380.156366][ T30] ? rcu_is_watching+0x15/0xb0 [ 380.161176][ T30] ? process_scheduled_works+0x976/0x1840 [ 380.167215][ T30] linkwatch_event+0xe/0x60 [ 380.171915][ T30] process_scheduled_works+0xa66/0x1840 [ 380.177494][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.183480][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 380.189101][ T30] ? assign_work+0x364/0x3d0 [ 380.193734][ T30] worker_thread+0x870/0xd30 [ 380.198402][ T30] ? __kthread_parkme+0x169/0x1d0 [ 380.203424][ T30] ? __pfx_worker_thread+0x10/0x10 [ 380.208602][ T30] kthread+0x7a9/0x920 [ 380.212683][ T30] ? __pfx_kthread+0x10/0x10 [ 380.217301][ T30] ? __pfx_worker_thread+0x10/0x10 [ 380.222403][ T30] ? __pfx_kthread+0x10/0x10 [ 380.227336][ T30] ? __pfx_kthread+0x10/0x10 [ 380.231947][ T30] ? __pfx_kthread+0x10/0x10 [ 380.236575][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.241783][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 380.248368][ T30] ? __pfx_kthread+0x10/0x10 [ 380.252984][ T30] ret_from_fork+0x4b/0x80 [ 380.257426][ T30] ? __pfx_kthread+0x10/0x10 [ 380.262005][ T30] ret_from_fork_asm+0x1a/0x30 [ 380.266818][ T30] [ 380.269888][ T30] INFO: task kworker/u8:5:1082 blocked for more than 144 seconds. [ 380.277847][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 380.285284][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.293993][ T30] task:kworker/u8:5 state:D stack:23440 pid:1082 tgid:1082 ppid:2 flags:0x00004000 [ 380.304217][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 380.310232][ T30] Call Trace: [ 380.313502][ T30] [ 380.316483][ T30] __schedule+0x186c/0x4be0 [ 380.321040][ T30] ? schedule+0x90/0x320 [ 380.325463][ T30] ? schedule+0x90/0x320 [ 380.329757][ T30] ? __pfx___schedule+0x10/0x10 [ 380.334608][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.339678][ T30] ? rcu_is_watching+0x15/0xb0 [ 380.344453][ T30] ? kthread_data+0x52/0xd0 [ 380.348999][ T30] ? schedule+0x90/0x320 [ 380.353261][ T30] ? wq_worker_sleeping+0x66/0x240 [ 380.358428][ T30] ? schedule+0x90/0x320 [ 380.362665][ T30] schedule+0x14b/0x320 [ 380.366936][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.372406][ T30] __mutex_lock+0x817/0x1010 [ 380.377154][ T30] ? __mutex_lock+0x602/0x1010 [ 380.381913][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 380.387144][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.392194][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 380.397413][ T30] addrconf_dad_work+0x10e/0x16a0 [ 380.402427][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.407548][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 380.413018][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.419392][ T30] ? rcu_is_watching+0x15/0xb0 [ 380.424169][ T30] ? process_scheduled_works+0x976/0x1840 [ 380.430151][ T30] process_scheduled_works+0xa66/0x1840 [ 380.435719][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.441837][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 380.447538][ T30] ? assign_work+0x364/0x3d0 [ 380.452144][ T30] worker_thread+0x870/0xd30 [ 380.456797][ T30] ? __kthread_parkme+0x169/0x1d0 [ 380.461852][ T30] ? __pfx_worker_thread+0x10/0x10 [ 380.467015][ T30] kthread+0x7a9/0x920 [ 380.471168][ T30] ? __pfx_kthread+0x10/0x10 [ 380.475795][ T30] ? __pfx_worker_thread+0x10/0x10 [ 380.480955][ T30] ? __pfx_kthread+0x10/0x10 [ 380.485547][ T30] ? __pfx_kthread+0x10/0x10 [ 380.490198][ T30] ? __pfx_kthread+0x10/0x10 [ 380.494803][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.500205][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 380.505412][ T30] ? __pfx_kthread+0x10/0x10 [ 380.510023][ T30] ret_from_fork+0x4b/0x80 [ 380.514432][ T30] ? __pfx_kthread+0x10/0x10 [ 380.519059][ T30] ret_from_fork_asm+0x1a/0x30 [ 380.523823][ T30] [ 380.526968][ T30] INFO: task syz-executor:16432 blocked for more than 144 seconds. [ 380.535018][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 380.542472][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.551166][ T30] task:syz-executor state:D stack:21360 pid:16432 tgid:16432 ppid:1 flags:0x00004006 [ 380.561450][ T30] Call Trace: [ 380.564722][ T30] [ 380.567945][ T30] __schedule+0x186c/0x4be0 [ 380.572481][ T30] ? schedule+0x90/0x320 [ 380.576791][ T30] ? schedule+0x90/0x320 [ 380.581051][ T30] ? __pfx___schedule+0x10/0x10 [ 380.585917][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.590983][ T30] ? rcu_is_watching+0x15/0xb0 [ 380.595774][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.601814][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.608216][ T30] ? schedule+0x90/0x320 [ 380.612507][ T30] schedule+0x14b/0x320 [ 380.616691][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.622157][ T30] __mutex_lock+0x817/0x1010 [ 380.626854][ T30] ? __mutex_lock+0x602/0x1010 [ 380.631632][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 380.637962][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.643004][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.649033][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 380.655037][ T30] wiphy_register+0x1be5/0x27b0 [ 380.659924][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 380.665234][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 380.670369][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 380.676477][ T30] ieee80211_register_hw+0x354e/0x4240 [ 380.681948][ T30] ? ieee80211_register_hw+0x15f1/0x4240 [ 380.687612][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 380.693432][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 380.699271][ T30] ? __asan_memset+0x23/0x50 [ 380.703849][ T30] ? __hrtimer_init+0x170/0x250 [ 380.708814][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 380.714570][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 380.720857][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 380.725981][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 380.731732][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.737464][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 380.743829][ T30] genl_rcv_msg+0xb14/0xec0 [ 380.748365][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.753434][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 380.758689][ T30] ? kasan_save_track+0x51/0x80 [ 380.763545][ T30] ? __sys_sendto+0x363/0x4c0 [ 380.768249][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 380.773279][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.778856][ T30] ? __pfx___might_resched+0x10/0x10 [ 380.784139][ T30] netlink_rcv_skb+0x1e3/0x430 [ 380.788950][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.793986][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.799422][ T30] ? lock_release+0xbf/0xa30 [ 380.804029][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 380.811521][ T30] genl_rcv+0x28/0x40 [ 380.815534][ T30] netlink_unicast+0x7f6/0x990 [ 380.820644][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 380.825948][ T30] ? __virt_addr_valid+0x45f/0x530 [ 380.832182][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 380.838162][ T30] ? __check_object_size+0x47a/0x730 [ 380.843563][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 380.848808][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.854152][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 380.859425][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.864730][ T30] __sock_sendmsg+0x221/0x270 [ 380.869820][ T30] __sys_sendto+0x363/0x4c0 [ 380.874351][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 380.879577][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.885930][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.892378][ T30] ? rcu_is_watching+0x15/0xb0 [ 380.897247][ T30] __x64_sys_sendto+0xde/0x100 [ 380.902039][ T30] do_syscall_64+0xf3/0x230 [ 380.906581][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.911374][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.917745][ T30] RIP: 0033:0x7fe80bd8ebbc [ 380.922201][ T30] RSP: 002b:00007ffe17758e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 380.930658][ T30] RAX: ffffffffffffffda RBX: 00007fe80cad4620 RCX: 00007fe80bd8ebbc [ 380.938778][ T30] RDX: 0000000000000024 RSI: 00007fe80cad4670 RDI: 0000000000000003 [ 380.947107][ T30] RBP: 0000000000000000 R08: 00007ffe17758ee4 R09: 000000000000000c [ 380.955095][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 380.963111][ T30] R13: 0000000000000000 R14: 00007fe80cad4670 R15: 0000000000000000 [ 380.971123][ T30] [ 380.974145][ T30] INFO: task syz-executor:16506 blocked for more than 144 seconds. [ 380.982061][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 380.989353][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.998089][ T30] task:syz-executor state:D stack:21296 pid:16506 tgid:16506 ppid:1 flags:0x00000004 [ 381.008303][ T30] Call Trace: [ 381.011576][ T30] [ 381.014495][ T30] __schedule+0x186c/0x4be0 [ 381.019099][ T30] ? schedule+0x90/0x320 [ 381.023379][ T30] ? schedule+0x90/0x320 [ 381.027678][ T30] ? __pfx___schedule+0x10/0x10 [ 381.032548][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.037621][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.042614][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.048685][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.055127][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.059961][ T30] ? schedule+0x90/0x320 [ 381.064231][ T30] schedule+0x14b/0x320 [ 381.068438][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.073909][ T30] __mutex_lock+0x817/0x1010 [ 381.078539][ T30] ? __mutex_lock+0x602/0x1010 [ 381.083338][ T30] ? genl_rcv_msg+0x121/0xec0 [ 381.088035][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.093051][ T30] ? 0xffffffffa00007d8 [ 381.097243][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.103418][ T30] ? kernel_text_address+0xa7/0xe0 [ 381.108546][ T30] ? __kernel_text_address+0xd/0x40 [ 381.113749][ T30] ? radix_tree_lookup+0x238/0x290 [ 381.118919][ T30] genl_rcv_msg+0x121/0xec0 [ 381.123452][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.128766][ T30] ? stack_trace_save+0x118/0x1d0 [ 381.133787][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 381.139397][ T30] ? stack_depot_save_flags+0x37/0x940 [ 381.145084][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.150006][ T30] ? lock_acquire+0xe3/0x550 [ 381.154770][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 381.159839][ T30] ? __pfx___might_resched+0x10/0x10 [ 381.165234][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.170049][ T30] ? lock_acquire+0xe3/0x550 [ 381.174672][ T30] netlink_rcv_skb+0x1e3/0x430 [ 381.179494][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.184628][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.189973][ T30] ? lock_release+0xbf/0xa30 [ 381.194575][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 381.199978][ T30] ? net_generic+0x1f/0x240 [ 381.204489][ T30] genl_rcv+0x28/0x40 [ 381.208784][ T30] netlink_unicast+0x7f6/0x990 [ 381.213581][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 381.218999][ T30] ? __virt_addr_valid+0x45f/0x530 [ 381.224144][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 381.229192][ T30] ? __check_object_size+0x47a/0x730 [ 381.234475][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 381.239451][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.244730][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 381.249821][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.255114][ T30] __sock_sendmsg+0x221/0x270 [ 381.259817][ T30] __sys_sendto+0x363/0x4c0 [ 381.264308][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 381.269355][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.275674][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.282028][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.287317][ T30] __x64_sys_sendto+0xde/0x100 [ 381.292226][ T30] do_syscall_64+0xf3/0x230 [ 381.296772][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.301555][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.307590][ T30] RIP: 0033:0x7f64b318ebbc [ 381.312026][ T30] RSP: 002b:00007ffefe34d620 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 381.320482][ T30] RAX: ffffffffffffffda RBX: 00007f64b3ed4620 RCX: 00007f64b318ebbc [ 381.328571][ T30] RDX: 0000000000000024 RSI: 00007f64b3ed4670 RDI: 0000000000000005 [ 381.336609][ T30] RBP: 0000000000000000 R08: 00007ffefe34d674 R09: 000000000000000c [ 381.344625][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 381.352769][ T30] R13: 00007ffefe34d6c8 R14: 00007f64b3ed4670 R15: 0000000000000000 [ 381.360796][ T30] [ 381.363817][ T30] INFO: task syz.3.3302:16636 blocked for more than 145 seconds. [ 381.371616][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 381.378924][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.387634][ T30] task:syz.3.3302 state:D stack:24976 pid:16636 tgid:16636 ppid:15336 flags:0x00004002 [ 381.397883][ T30] Call Trace: [ 381.401174][ T30] [ 381.404107][ T30] __schedule+0x186c/0x4be0 [ 381.408668][ T30] ? schedule+0x90/0x320 [ 381.412920][ T30] ? schedule+0x90/0x320 [ 381.417191][ T30] ? __pfx___schedule+0x10/0x10 [ 381.422034][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.427088][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.433071][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.439446][ T30] ? schedule+0x90/0x320 [ 381.443706][ T30] schedule+0x14b/0x320 [ 381.449533][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.455177][ T30] __mutex_lock+0x817/0x1010 [ 381.459808][ T30] ? __mutex_lock+0x602/0x1010 [ 381.464582][ T30] ? tun_chr_close+0x3b/0x1b0 [ 381.469287][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.474309][ T30] ? __pfx_call_rcu+0x10/0x10 [ 381.479019][ T30] tun_chr_close+0x3b/0x1b0 [ 381.483518][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 381.488648][ T30] __fput+0x23c/0xa50 [ 381.492653][ T30] task_work_run+0x24f/0x310 [ 381.497292][ T30] ? __pfx_task_work_run+0x10/0x10 [ 381.502418][ T30] ? switch_task_namespaces+0xe4/0x110 [ 381.507982][ T30] do_exit+0xa2a/0x28e0 [ 381.512126][ T30] ? preempt_schedule_common+0x84/0xd0 [ 381.517621][ T30] ? __pfx_do_exit+0x10/0x10 [ 381.522216][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.527267][ T30] ? zap_other_threads+0x37e/0x3e0 [ 381.532382][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.538751][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 381.544133][ T30] do_group_exit+0x207/0x2c0 [ 381.548751][ T30] __x64_sys_exit_group+0x3f/0x40 [ 381.554063][ T30] x64_sys_call+0x26a8/0x26b0 [ 381.558821][ T30] do_syscall_64+0xf3/0x230 [ 381.563346][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.568123][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.574022][ T30] RIP: 0033:0x7fee06f8cd29 [ 381.578479][ T30] RSP: 002b:00007ffd32fdbf38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 381.586980][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fee06f8cd29 [ 381.594970][ T30] RDX: 00007fee06f44347 RSI: 0000000000000000 RDI: 000000000000000b [ 381.603045][ T30] RBP: 00007fee071a624c R08: 00007ffd32fdc3d7 R09: 000000000000000b [ 381.611248][ T30] R10: 00007fee071a5fa0 R11: 0000000000000246 R12: 0000000000000003 [ 381.619264][ T30] R13: 00007fee071a6240 R14: 0000000000000003 R15: 0000000000001b53 [ 381.627287][ T30] [ 381.630316][ T30] INFO: task syz.4.3306:16652 blocked for more than 145 seconds. [ 381.638069][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 381.645353][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.654045][ T30] task:syz.4.3306 state:D stack:25264 pid:16652 tgid:16650 ppid:15664 flags:0x00000004 [ 381.664408][ T30] Call Trace: [ 381.667722][ T30] [ 381.670645][ T30] __schedule+0x186c/0x4be0 [ 381.675142][ T30] ? schedule+0x90/0x320 [ 381.679433][ T30] ? schedule+0x90/0x320 [ 381.683704][ T30] ? __pfx___schedule+0x10/0x10 [ 381.688618][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.693658][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.698462][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.704386][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.710759][ T30] ? schedule+0x90/0x320 [ 381.714989][ T30] schedule+0x14b/0x320 [ 381.719191][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.724666][ T30] __mutex_lock+0x817/0x1010 [ 381.729372][ T30] ? __mutex_lock+0x602/0x1010 [ 381.734159][ T30] ? rtnl_newlink+0xce2/0x2210 [ 381.738980][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.744022][ T30] ? ns_capable+0x8a/0xf0 [ 381.748398][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 381.754197][ T30] rtnl_newlink+0xce2/0x2210 [ 381.759015][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.764135][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 381.769730][ T30] ? netlink_deliver_tap+0x19d/0x1b0 [ 381.775017][ T30] ? netlink_unicast+0x7c4/0x990 [ 381.780048][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 381.784977][ T30] ? __sock_sendmsg+0x221/0x270 [ 381.789844][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 381.794780][ T30] ? __sys_sendmsg+0x269/0x350 [ 381.799597][ T30] ? do_syscall_64+0xf3/0x230 [ 381.804288][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.810431][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.816818][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.821626][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.826631][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.833089][ T30] ? lock_release+0xbf/0xa30 [ 381.837737][ T30] ? nlmon_xmit+0xaf/0x100 [ 381.842169][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.846991][ T30] ? rcu_is_watching+0x15/0xb0 [ 381.851856][ T30] ? lock_release+0xbf/0xa30 [ 381.856494][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 381.862377][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.867444][ T30] ? bpf_lsm_capable+0x9/0x10 [ 381.872202][ T30] ? security_capable+0x7e/0x2d0 [ 381.877269][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.882318][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 381.887308][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 381.892431][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.897941][ T30] ? ref_tracker_free+0x643/0x7e0 [ 381.902976][ T30] netlink_rcv_skb+0x1e3/0x430 [ 381.907774][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.913240][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.918573][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.923779][ T30] netlink_unicast+0x7f6/0x990 [ 381.928624][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 381.933954][ T30] ? __virt_addr_valid+0x45f/0x530 [ 381.939118][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 381.944158][ T30] ? __check_object_size+0x47a/0x730 [ 381.949463][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 381.954245][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.959575][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 381.964680][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.970013][ T30] __sock_sendmsg+0x221/0x270 [ 381.974712][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 381.979503][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.984779][ T30] ? __fget_files+0x2a/0x410 [ 381.989387][ T30] ? __fget_files+0x2a/0x410 [ 381.993977][ T30] __sys_sendmsg+0x269/0x350 [ 381.998610][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.003728][ T30] ? lock_release+0xbf/0xa30 [ 382.008484][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.014816][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.019645][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.024431][ T30] do_syscall_64+0xf3/0x230 [ 382.029060][ T30] ? clear_bhb_loop+0x35/0x90 [ 382.033733][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.039666][ T30] RIP: 0033:0x7f0c29f8cd29 [ 382.044085][ T30] RSP: 002b:00007f0c27df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.052528][ T30] RAX: ffffffffffffffda RBX: 00007f0c2a1a5fa0 RCX: 00007f0c29f8cd29 [ 382.060551][ T30] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 382.068777][ T30] RBP: 00007f0c2a00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.076845][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.084829][ T30] R13: 0000000000000000 R14: 00007f0c2a1a5fa0 R15: 00007fff5ef55968 [ 382.093089][ T30] [ 382.096165][ T30] INFO: task syz.0.3307:16654 blocked for more than 145 seconds. [ 382.103887][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 382.111218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.119905][ T30] task:syz.0.3307 state:D stack:27760 pid:16654 tgid:16651 ppid:5838 flags:0x00000004 [ 382.130116][ T30] Call Trace: [ 382.133391][ T30] [ 382.136353][ T30] __schedule+0x186c/0x4be0 [ 382.140879][ T30] ? schedule+0x90/0x320 [ 382.145119][ T30] ? schedule+0x90/0x320 [ 382.149397][ T30] ? __pfx___schedule+0x10/0x10 [ 382.154236][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.159295][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.164065][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.170361][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.176795][ T30] ? schedule+0x90/0x320 [ 382.181055][ T30] schedule+0x14b/0x320 [ 382.185199][ T30] schedule_preempt_disabled+0x13/0x30 [ 382.190704][ T30] __mutex_lock+0x817/0x1010 [ 382.195300][ T30] ? __mutex_lock+0x602/0x1010 [ 382.200099][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 382.205219][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 382.210296][ T30] ? bpf_lsm_capable+0x9/0x10 [ 382.214962][ T30] ? security_capable+0x7e/0x2d0 [ 382.219930][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 382.224860][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 382.230025][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.235506][ T30] ? ref_tracker_free+0x643/0x7e0 [ 382.240653][ T30] netlink_rcv_skb+0x1e3/0x430 [ 382.245428][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.251186][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.256528][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.261778][ T30] netlink_unicast+0x7f6/0x990 [ 382.266603][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 382.272059][ T30] ? __virt_addr_valid+0x45f/0x530 [ 382.277233][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 382.282282][ T30] ? __check_object_size+0x47a/0x730 [ 382.287598][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 382.292358][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.297684][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 382.302849][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.308230][ T30] __sock_sendmsg+0x221/0x270 [ 382.312930][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 382.317756][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.323045][ T30] ? __fget_files+0x2a/0x410 [ 382.327839][ T30] ? __fget_files+0x2a/0x410 [ 382.332445][ T30] __sys_sendmsg+0x269/0x350 [ 382.337113][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.342240][ T30] ? __se_sys_futex+0x3f9/0x480 [ 382.347134][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.353618][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.358429][ T30] ? rcu_is_watching+0x15/0xb0 [ 382.363213][ T30] do_syscall_64+0xf3/0x230 [ 382.367786][ T30] ? clear_bhb_loop+0x35/0x90 [ 382.372476][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.378740][ T30] RIP: 0033:0x7fd4ef98cd29 [ 382.383176][ T30] RSP: 002b:00007fd4f0731038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.391611][ T30] RAX: ffffffffffffffda RBX: 00007fd4efba6080 RCX: 00007fd4ef98cd29 [ 382.399623][ T30] RDX: 0000000000008840 RSI: 0000000020000740 RDI: 0000000000000004 [ 382.407648][ T30] RBP: 00007fd4efa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.415801][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.423806][ T30] R13: 0000000000000000 R14: 00007fd4efba6080 R15: 00007fffaa384788 [ 382.431860][ T30] [ 382.434916][ T30] INFO: lockdep is turned off. [ 382.439820][ T30] NMI backtrace for cpu 1 [ 382.439843][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 382.439862][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 382.439873][ T30] Call Trace: [ 382.439880][ T30] [ 382.439888][ T30] dump_stack_lvl+0x241/0x360 [ 382.439915][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.439937][ T30] ? __pfx__printk+0x10/0x10 [ 382.439958][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 382.439983][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 382.440006][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 382.440024][ T30] ? _printk+0xd5/0x120 [ 382.440046][ T30] ? __pfx__printk+0x10/0x10 [ 382.440066][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.440084][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 382.440106][ T30] watchdog+0xff6/0x1040 [ 382.440131][ T30] ? watchdog+0x1ea/0x1040 [ 382.440152][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.440170][ T30] kthread+0x7a9/0x920 [ 382.440189][ T30] ? __pfx_kthread+0x10/0x10 [ 382.440209][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.440226][ T30] ? __pfx_kthread+0x10/0x10 [ 382.440244][ T30] ? __pfx_kthread+0x10/0x10 [ 382.440264][ T30] ? __pfx_kthread+0x10/0x10 [ 382.440283][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.440302][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 382.440323][ T30] ? __pfx_kthread+0x10/0x10 [ 382.440342][ T30] ret_from_fork+0x4b/0x80 [ 382.440359][ T30] ? __pfx_kthread+0x10/0x10 [ 382.440378][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.440400][ T30] [ 382.440407][ T30] Sending NMI from CPU 1 to CPUs 0: [ 382.601664][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 382.602635][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 382.617605][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 382.627767][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 382.637834][ T30] Call Trace: [ 382.641152][ T30] [ 382.644102][ T30] dump_stack_lvl+0x241/0x360 [ 382.648871][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 382.653888][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.659082][ T30] ? __pfx__printk+0x10/0x10 [ 382.663684][ T30] ? vscnprintf+0x5d/0x90 [ 382.668007][ T30] panic+0x349/0x880 [ 382.671901][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.678055][ T30] ? __pfx_panic+0x10/0x10 [ 382.682550][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 382.687930][ T30] ? __irq_work_queue_local+0x137/0x410 [ 382.693470][ T30] ? irq_work_queue+0xca/0x150 [ 382.698226][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.704201][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.710175][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.716147][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 382.722400][ T30] watchdog+0x1035/0x1040 [ 382.726786][ T30] ? watchdog+0x1ea/0x1040 [ 382.731227][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.735901][ T30] kthread+0x7a9/0x920 [ 382.739966][ T30] ? __pfx_kthread+0x10/0x10 [ 382.744571][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.749263][ T30] ? __pfx_kthread+0x10/0x10 [ 382.753859][ T30] ? __pfx_kthread+0x10/0x10 [ 382.758467][ T30] ? __pfx_kthread+0x10/0x10 [ 382.763065][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.768266][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 382.773467][ T30] ? __pfx_kthread+0x10/0x10 [ 382.778061][ T30] ret_from_fork+0x4b/0x80 [ 382.782668][ T30] ? __pfx_kthread+0x10/0x10 [ 382.787388][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.792154][ T30] [ 382.795448][ T30] Kernel Offset: disabled [ 382.799855][ T30] Rebooting in 86400 seconds..