last executing test programs: 12.3549285s ago: executing program 1 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000000000000007fffffff00", @ANYRES32=0x0, @ANYBLOB="e3220000000000002400128009000100626f6e6400000000140002800500010001"], 0x44}}, 0x0) 12.012792903s ago: executing program 1 (id=248): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000080)={r2}, 0x8) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'veth0_to_bridge\x00'}, 0x18) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRESDEC=r4, @ANYRESOCT], 0x58}}, 0x0) (async) accept4(r4, 0x0, &(0x7f0000000100), 0x80800) 12.006611769s ago: executing program 2 (id=251): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x248, 0x2e8, 0x2e8, 0x248, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "80a18cb784bb203c43561c2c18422f72b0a800"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7fff, 0x5, 0x9, 'snmp_trap\x00', 'syz1\x00', {0x42aa6dc4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x298, 0x330, 0x298, 0x330, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, '\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2f, 0x1, 0x1a}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x1cf2e08519ed5d7a, 0xff000000, 0xff, 0xffffffff], 0x9, 0x2, {0x7}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x330}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x2, 0x5, 0x1, 0x3], 0x2, 0x6}, {0x4, [0x5, 0x2, 0x2, 0x1, 0x1], 0x5, 0x1}}}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x3, 0x0, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x20, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x40840) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r13, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x59e74105b6fee776}, 0x8000) sendmsg$nl_route_sched(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) close(r5) 11.500359348s ago: executing program 1 (id=254): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7820, 0x8000, 0x0, 0xfff, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x1c, 0xa, 0x0, 0x4, [0x8, 0x6, 0x0, 0x0, 0x2, 0x6a]}, @timestamp_addr={0x44, 0x34, 0x9f, 0x1, 0x9, [{@empty, 0xfffffb0e}, {@remote, 0x6}, {@rand_addr=0x64010100}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010102, 0x200}, {@local, 0x1}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "06e5"}]}, @timestamp_addr={0x44, 0x2c, 0xef, 0x1, 0xe, [{@private=0xa010101}, {@broadcast, 0x7}, {@remote, 0x5b3}, {@empty, 0x2}, {@local, 0x6}]}, @end, @generic={0x44, 0x3, 'r'}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004080) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004080) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x65f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x80}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000c0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x65f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x80}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000c0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r4, &(0x7f0000000400)="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", 0x1000, 0x8000, 0x0, 0x0) shutdown(r3, 0x0) socketpair(0x11, 0x5, 0x400, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001440)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r6, &(0x7f0000001440)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0xa8, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x11}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) socketpair(0x1f, 0x5, 0x5, &(0x7f0000001640)) (async) socketpair(0x1f, 0x5, 0x5, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000016c0), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040881}, 0x80) sendmmsg(r5, &(0x7f00000020c0)=[{{&(0x7f00000017c0)=@llc={0x1a, 0x303, 0x2, 0x9, 0xc, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)="c54f34d38eb9320cbfd3d0d0724109f4600066439ac974360d0a3c537c115a13e64a569cb581190bc6868f5eb01be7618fa0c4634f3396f8261fe31a42d51c44bb74fb92d23f9b55732be8c4cd51f5c49c5d91cfcfd6327c239fd69a0da8f68b9753d3dedb", 0x65}, {&(0x7f00000018c0)}], 0x2, &(0x7f0000001940)=[{0x70, 0x10c, 0x101, "80f331882b0d0cc24ced26e60813655e6829ff3571feadb787576a26c33fb8ac2f48c3cbf9f98794b73fd56d8ce9b38dc58c1082b1090f9bf1f4438ec757c0c116c5a6ffb0aa1995615c32ec0277159b60a8a62b1c1ab5673c500c"}, {0x48, 0x109, 0x5, "a47053adc76d16876a5e74857519f3ba0ac565cc8fd309f31012c1d9585d0e77af796c4e3662b5db98120fd4fcd1895dc8"}, {0x70, 0x101, 0x9, "e935646a2ac75e97ec0035e87cd8e78cf238ffb0099acc1c74f628edacc8380341e0680f0965efcbfc5d6e84a666a9e2890e46995f0b480141eec1ca3aff3461dc6f1e4e317f39933634d9f47af25296403abadd91733bfcc2"}], 0x128}}, {{&(0x7f0000001a80)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x6, 0x7, "c5ea61b4a4c0beba94b06877ce64a89dab19c7c817ab47e7df7804e0191e51917353d81d4cae8741509b6a3de628b461b577208aed83513c2c7a9190105a5c", 0x1e}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001b00)="1bfe7d6c7e5e2697b6bd80ae610495ef7d30e67f226585af3e1078bf1264749386d0aa5028562254b096d68fa6fb369dbb80eb9f72e55a759da09499f336796aad5f4a709ad8ddd4c07354827674558d2b0b550822248e229bc8a87a42b378dda9107280a9fb390042c5d193662e0e19541340250f7d7c0f5636588daec791229559f3324121af3fefc073892df3379a1d8f446688a44b770d59a3ce4ee20c7e2e1eabb0464b53ded8be035f3335480f998829e458410fbe52cb8b4e26891370f85c0dd2ad29f0d32582f5b58257f2413846a49625c04aef62d5c0a1d37f334ce2bb7fbd", 0xe4}, {&(0x7f0000001c00)="065038445061d24215c2c545843554e6004c97f9459d2a536099a376b8c515a0900ccb38f8a27ce179a75ab72a9bc622f191b0441465a1d9027c66e47344af750861482013b007a7025add916c67eefc22045ab06cf0022e23a0339587ff1b8b", 0x60}, {&(0x7f0000001c80)="55fcd644422232513619623c32de0664e3a82f3de26b159569c98d973d81dca68e0e47d18682d0b923335902584878f23e3ee19c90c4f4ed254ff90b4f056d1e406e33790482a0196d4d1b76851a6ab61f0a752d291f17f576d059c1a3fb80a826bf43450bfa2af756aef127b462e73daece5c91a3cdb6ff310b6e6788a91e5d148c90144adeaaf7906fae1c473f04a5bb89ecb630e7bc2a993bd7607a2881d611bc64fb119c7678f7048a0a786eeec80aeaf9ab087b0b10", 0xb8}, {&(0x7f0000001d40)="108c6eb67f79c7e41390dd2ecffb2c7eb0765535cc89f38d52e559470c0354d5b48eea093df72cf4dea6b91c9ab875e6978792540fd062644b71e5e98392f321df0e860f88acec996a94bf34fa9081295ab65810d3d37a7328295d21b0beb47888d4e99b861345acc52d5f9cfb148c2e13477c92", 0x74}, {&(0x7f0000001dc0)="72bb650c527b094c897c5608df4e81e539183a4c44e08c98345481eca501b834a5ade3b1e2ea890825f84b458dbf38967fcbbb552b6cfe99f4e7e33fc428226972bc22b40b9c7700a92b28f728b9d014fd6aaaf8e0f6244189ea77dfdf77ebc2542236df379e29d2905e5c3600772ee97c23514e76009122df22d7888224a45f9e70793fba22283d50dde8502cf1273e2042bba10335f57ea284cfdf3a41ce9f50", 0xa1}], 0x5, &(0x7f0000001f00)=[{0x20, 0x3a, 0x400, "4a7f941da0eca2291420a4f1"}, {0x88, 0x112, 0x10001, "75479ed7cb98603135a76033ab2e07c74808df5a1e08cd4917ecca2d62aab35596caebc22349cc76f754a2d0b8d8da597b9a7a6699e09b79e786c8a9c6806e593ba41ca8c5b36916a81abec0eae4e7703a859e5a638fbb72e8683bda80d9678cb3c0da13a5fbfd8e79e7cf16031804eb4458d6"}, {0x100, 0x108, 0x9, "94368c303269bfe55336693af93ef36d2ecfd0020274a0e967f7b2b08d2f9ee606451e4cd8efe4fe20e61e3b58a4d6f8a5eb44481578c7ed1f82a416a6436844ecd1eae3821e5831a8e4e8a5a96aa33711d11a650440d08edbc083cfc40f71a1354063e52a2ded3c4ece5eb39bd52e81caaa50c49dae884293b46fc27b66504739277a8a8f4925c7d18543c6bcc3a1016ca0e27eeeb58ca0d58359dd3d226c44d08f7bd7d47796d998d0b25da8c9f9fd5ed731050c1f208fac3c59c9dcaeeaddbc2cb00e0a8483a4910d8f588d40e4437ef655f0c23670b79615cd611900a7437cd70950490caee20f7c"}], 0x1a8}}], 0x2, 0x20004000) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000002140)={0x3, 0x3, 0x12}) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000002180)={"068626b5016fd1fb6ed54285c5d2c6c2", 0x0, 0x0, {0x7, 0x81}, {0xfffffffffffffff0, 0x7f}, 0x8, [0x1, 0x3, 0x6, 0x5, 0x200, 0x1, 0x8, 0x9, 0x380000000, 0x714, 0x389be33e, 0x3, 0x58c7, 0xfffffffffffffffc, 0x378a, 0x98]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000002300)={0x0, 0x7, 0x0, [0x400, 0x9, 0x0, 0xad, 0x4], [0x5c, 0x5, 0x7, 0xfbb1, 0x80000001, 0x3, 0x2, 0x5, 0x7, 0x9, 0x2, 0x0, 0x7, 0x8, 0x7f, 0x7fffffff, 0x5, 0x9, 0xbf, 0x100000001, 0x10, 0xfffffffffffffffd, 0x3, 0x67f, 0x9, 0x6, 0x9, 0x5, 0x100, 0x6, 0x6000000000000000, 0xd, 0x5, 0x8, 0x5, 0x4, 0x3, 0x4, 0x0, 0x5a0, 0x4a94, 0x0, 0x3500000000000000, 0x0, 0x5, 0x2, 0x4, 0xfff, 0x7, 0x8, 0xf34, 0x8000, 0x0, 0x3, 0x7fffffff, 0xb594, 0x7, 0x231, 0x10, 0x36ad, 0x7, 0x7, 0x3, 0x3, 0x8, 0x1, 0x81, 0x4, 0xc, 0x3, 0xc407, 0x0, 0xf36b, 0xfd7, 0x7ff, 0x0, 0x9, 0x1000, 0x8, 0x2, 0x0, 0x5, 0x4, 0x8, 0xfffffffffffffbff, 0x80000001, 0x6, 0x6, 0x2, 0x10001, 0x3, 0x8000, 0x800, 0x3, 0x3, 0xd38, 0x7fffffffffffffff, 0x0, 0x2, 0x7f, 0xb, 0x80000001, 0x10000, 0x4, 0x7, 0x7, 0x8000000000000001, 0x2, 0x5, 0x4, 0xf0f, 0x6, 0x426, 0x9, 0x5, 0x3d8ab00a, 0xff, 0x3bb, 0x7, 0x2e7, 0x7]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000002300)={0x0, 0x7, 0x0, [0x400, 0x9, 0x0, 0xad, 0x4], [0x5c, 0x5, 0x7, 0xfbb1, 0x80000001, 0x3, 0x2, 0x5, 0x7, 0x9, 0x2, 0x0, 0x7, 0x8, 0x7f, 0x7fffffff, 0x5, 0x9, 0xbf, 0x100000001, 0x10, 0xfffffffffffffffd, 0x3, 0x67f, 0x9, 0x6, 0x9, 0x5, 0x100, 0x6, 0x6000000000000000, 0xd, 0x5, 0x8, 0x5, 0x4, 0x3, 0x4, 0x0, 0x5a0, 0x4a94, 0x0, 0x3500000000000000, 0x0, 0x5, 0x2, 0x4, 0xfff, 0x7, 0x8, 0xf34, 0x8000, 0x0, 0x3, 0x7fffffff, 0xb594, 0x7, 0x231, 0x10, 0x36ad, 0x7, 0x7, 0x3, 0x3, 0x8, 0x1, 0x81, 0x4, 0xc, 0x3, 0xc407, 0x0, 0xf36b, 0xfd7, 0x7ff, 0x0, 0x9, 0x1000, 0x8, 0x2, 0x0, 0x5, 0x4, 0x8, 0xfffffffffffffbff, 0x80000001, 0x6, 0x6, 0x2, 0x10001, 0x3, 0x8000, 0x800, 0x3, 0x3, 0xd38, 0x7fffffffffffffff, 0x0, 0x2, 0x7f, 0xb, 0x80000001, 0x10000, 0x4, 0x7, 0x7, 0x8000000000000001, 0x2, 0x5, 0x4, 0xf0f, 0x6, 0x426, 0x9, 0x5, 0x3d8ab00a, 0xff, 0x3bb, 0x7, 0x2e7, 0x7]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000002740)={{r10}, r11, 0x1a, @inherit={0x78, &(0x7f0000002280)={0x0, 0x6, 0x6, 0x5, {0x23, 0xf01d, 0x4, 0xfffffffffffffc88, 0x80000001}, [0x2, 0x0, 0x4, 0x95a, 0xf, 0x1]}}, @devid=r12}) openat$tun(0xffffff9c, &(0x7f0000003740), 0x40, 0x0) getpeername$inet6(r6, &(0x7f0000003780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000037c0)=0x1c) bind$netlink(r8, &(0x7f0000003800)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000004040)=@nat={'nat\x00', 0x19, 0x5, 0x7a6, [0x20003880, 0x0, 0x0, 0x20003b64, 0x20003d0a], 0x0, &(0x7f0000003840), &(0x7f0000003880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x8, 0xaa9e, 'batadv_slave_0\x00', 'veth1_to_hsr\x00', 'batadv_slave_1\x00', 'wg2\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff], 0xde, 0x166, 0x19e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0xf9, 0xe009, 0x3, @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xa, 0x200, 0x1b, 0x4, @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0x5917c967eb1e0dc5], 0x4e20, 0x4e23, 0x1, 0x7fff, 0x101, 0x2, 0xfbff, 0x2, 0xe1, 0x1}, 0x667, 0x200}}}], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}, @common=@log={'log\x00', 0x28, {{0x6, "ff50b7050c7d14f158d6035aba56ed9e370be8adadcb656057fe8f18f9bc"}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xffffffffffffffff}}}}, {0x9, 0x40, 0x1a, 'ipvlan1\x00', 'veth0_vlan\x00', 'team_slave_0\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x45113d4c0d9dec85, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@random="46b3cec6b92a", 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x40, 0x9, 'veth0_to_bond\x00', 'veth0_to_team\x00', 'veth0_to_batadv\x00', 'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff], 0x12e, 0x12e, 0x176, [@stp={{'stp\x00', 0x0, 0x48}, {{0x9, {0xf, 0x1, 0x1, @remote, [0xff, 0xff, 0xff, 0xff], 0x8, 0x8, 0xab09, 0x7f, @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x4e20, 0x4e24, 0x6, 0x9, 0x3, 0x8, 0x1, 0x2, 0x6, 0x4a}, 0x4, 0x9a}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'snmp\x00'}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"b1630f21e1a66b7560f97baf827022bc69e600754c574f92c039bbc859a4"}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x0, 0x42, 0x8914, 'wlan0\x00', 'batadv0\x00', 'lo\x00', 'bridge_slave_0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0x101], @remote, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x10e, 0x10e, 0x15e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xfe, 0xcc, 0x5, 0x1}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0xa7, {0x81, 0x8, 0x5, @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], 0x2, 0x4, 0x1ff, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, [0xff, 0x0, 0x0, 0xff, 0x0, 0x7f], 0x4e24, 0x4e21, 0x8, 0x6, 0x0, 0xfc00, 0x1, 0x45, 0x0, 0x4}, 0x48, 0x684}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x7}}}}}, {0x9, 0x1d, 0x88ca, 'veth1_macvtap\x00', 'team0\x00', 'dvmrp0\x00', 'vlan0\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0x156, 0x18e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1, 0x1}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x1, {0x6}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0xdfc4, 0x1000, 0x0, 0x0, 0x0, "df4ac6aa32507495b850a069f205d7472d15d86ce105438a060a36fb84868a42c74de7cb3cd47a46476a4d375cf7ee81593773b25840b8101071a97beed29c46"}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xfffffffffffffffe}}}}]}]}, 0x81e) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x1c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040815}, 0x4080) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x1c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040815}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f00000041c0)=0x7) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 11.499624715s ago: executing program 2 (id=255): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)={'filter\x00', 0x0, [0x0, 0x6, 0x8]}, 0x0) shutdown(r1, 0x2) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa4", @typed={0x9d, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d73882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a8"}, @nested={0x21, 0x0, 0x0, 0x1, [@generic="53e255d911da357ba323a96d7596fa3e07c0c48d86230d400e710116c6"]}]}, 0xe0}], 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x0, @loopback}}) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x3f, 0x2, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x4008000) 11.459908503s ago: executing program 4 (id=256): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x20}, 0x1, 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket(0x6, 0x800, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="010c26bd7000fbdbdf250a00000008000600ffffffff04000180100001800c0007000000000020000000080005"], 0x80}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r7, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x3, r10, 0x1, 0x1, 0x6, @local}, 0x14) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f0000000000950000000000000021c1386999b887f84fcf0d099bdf14fdb325884036b1060791cf874e09ea197460cddcb1ebcb07f70767352df86280928e2884ce7acb9e08b6224237077fa168e537bf0139fc23f54f9bd6b4e6482fc55ffeda40b873e890e47e01ce77e6ce43e53dd373e3d896d5a739cf0a4e267aa350999beb331bcdc70266"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYRES8=r13, @ANYRES32=r11, @ANYBLOB="766aee8f41090065d0f061eba3ebf76b1ea0be64c53b8f082b0b25a9ca99b8aeee9ca11eac92232555c01ce9b1e0ed8c06556e62c77fc30f900259f7a0e2776917504e172737e94cea65754c5c8039eebf99fcc351d73630ca9f69722b6197774bf96d934feaeb07dd541b6e80829a37e5749b669fa8e457c94259ba6e011133a69b11b6e65c934f42d83bf5"], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r5, 0x0, 0x0) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100040000000040001807"], 0x114}], 0x1}, 0x0) 10.856869847s ago: executing program 1 (id=257): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r1 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 64) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b", 0x3b, 0x8084, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @broadcast}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r7, 0x3, 0x6}, 0x10) (rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="000017"], 0x44}}, 0x0) 10.491802925s ago: executing program 4 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000d9ffffff00", @ANYRES32=0x0, @ANYBLOB="e3220000000000002400128009000100626f6e6400000000140002800500010001"], 0x44}}, 0x0) 10.055670664s ago: executing program 4 (id=260): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x28, r3, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x28}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) unshare(0x68060200) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) ioctl$FICLONE(r7, 0x40049409, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) 8.900677473s ago: executing program 0 (id=263): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_FLAGS={0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1400e6fffc608d6591991ca4a3999b1df01ad4e9aecd953f991249bc261d7c5d551bd796c6a6af94ebf3e44b2631ea41ac8d757a252e1179139e1c79cb5ae3dff82ebc102b696750deaa4268bbe3190c2af20b64076d8c75f8e5e756943a0a3186c745ff8fd453787b2f1794dc29dd965f8b20e6566c2958d6f61c09ffce4d9d55d1217b67b0aa1aff98bdfe0222701b3dd1fe55fc91451efd4b5f05b39da47637f9f1f710ca8d6eec53db2765ba2643472473be995b99a7", 0x14}], 0x64}, 0x0) 8.000800305s ago: executing program 3 (id=265): r0 = socket$inet(0x2, 0x8080c, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x30, 0x29, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xc, 0xfff1}, {0x2, 0x2}}, [@tclass_kind_options=@c_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000200)=""/186, 0xba}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, &(0x7f0000001340)=""/185, 0xb9}, 0x8000}, {{&(0x7f0000001400)=@tipc=@name, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/20, 0x14}], 0x1, &(0x7f0000001500)=""/131, 0x83}, 0x5}], 0x2, 0x102, &(0x7f0000001640)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001680)=0x6, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000016c0)={0x5, 0x6, 0x1, 0x2, 0x5}) getsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000001700), &(0x7f0000001740)=0x4) bind$inet6(r2, &(0x7f0000001780)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x44, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001940)={0x0, 0x1c08, 0x2, [0x3, 0x5]}, &(0x7f0000001980)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000019c0)={r5, 0x2c}, &(0x7f0000001a00)=0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a80), r1) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}}, 0x24000000) syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100240}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x58, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "9ab23d559f69fe45e2cedf"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0802060694"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db67b8637e419329f6f162c19d"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000001d80)=[{0x0, 0x1, {0x0, 0xf0, 0x2}, {0x2, 0x1, 0x1}, 0x0, 0x1}, {0x0, 0x2, {0x2, 0x0, 0x1}, {0x1, 0xe, 0x3}, 0xfd, 0x1}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x0, 0xf0}}], 0x60) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001e00)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000001e40)=r9) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e80)='memory.swap.current\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002040)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002200)={0xffffffffffffffff, 0x20, &(0x7f00000021c0)={&(0x7f0000002100)=""/30, 0x1e, 0x0, &(0x7f0000002140)=""/92, 0x5c}}, 0x10) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x1a, &(0x7f0000002240)=@raw=[@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0x2, 0x0, 0x1, 0x80, 0x10}, @exit], &(0x7f0000002340)='syzkaller\x00', 0x4, 0xd3, &(0x7f0000002380)=""/211, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000024c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, 0x1], &(0x7f0000002500)=[{0x3, 0x5, 0xc, 0x9}, {0x4, 0x3, 0x7, 0x1}], 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002680)={{0x1, 0xffffffffffffffff}, &(0x7f0000002600), &(0x7f0000002640)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x1, 0x22, &(0x7f0000001ec0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @generic={0x0, 0x3, 0x7, 0x2, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0xc, 0x2, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000002000)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000020c0)={0x1, 0xc, 0x9, 0x6}, 0x10, r12, r13, 0x1, &(0x7f0000002780)=[r14, 0xffffffffffffffff, r0], &(0x7f00000027c0)=[{0x3, 0x2, 0xd, 0x7}], 0x10, 0x2, @void, @value}, 0x94) 7.822915335s ago: executing program 2 (id=266): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200e5ffffffffffffff00000000000000000000000000000000000000000000000000000200000a00000000000000", @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c00000000000000640101020000000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000003200000002"], 0x23c}, 0x1, 0x0, 0x0, 0xc095}, 0xa0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 7.681688207s ago: executing program 0 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835e0000000000000000020000000200fe0200000000080004"], 0x2c}, 0x1, 0xffffff7f}, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@short={0xb, @dev, @netrom, 0x1, @bcast}, &(0x7f00000002c0)=0x1c, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x2, 0x1, 0x2}}, 0x2e) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e310000000000000000140001"], 0x48}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) 7.409381888s ago: executing program 3 (id=268): r0 = socket(0x2, 0x6, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'macsec0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x11, &(0x7f0000000140)={0x11, 0x2, r2}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[], 0x0) 7.272448816s ago: executing program 0 (id=269): r0 = socket$inet(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x100}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0xc0) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000580)=""/34, 0x22}], 0x6, 0x7fff, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001800)=ANY=[@ANYBLOB="4800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0103000000000000080028000000000008001300", @ANYRES32=r6, @ANYBLOB="040010000000000008001c00", @ANYRES32=r7, @ANYBLOB="0800290028c801000000168000000180000006000b0000000900000000020002000001800000060001000000030000000500000000000a00ffffffff000000005908000000000000000001000200000000000000000000000000000000000000000000000000000000000000000000000000090049c4000007000000000001800000030008000000ffffffff00001c00", @ANYRES32=r7, @ANYBLOB="caa1a55a7576feaff74199d978017dea065c7af0abd3f19a37ebcf0bf9421d55f97059f10d00d502502a77a6a56fc7284a6686086b18da7b70212c83e892499bb92f7f30ab551230e22eb0d72e0b608a39caa4b50a00f37e7455dba7e58cdc7883dbfd57da9605ab767fb9755fe980efc6dc8e85c98f040c814c6d32ca8cdc87c00f5e64f7333bc04c4afe1311"], 0x48}}, 0x0) 7.168386887s ago: executing program 2 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000eaffffff00", @ANYRES32=0x0, @ANYBLOB="e3220000000000002400128009000100626f6e6400000000140002800500010001"], 0x44}}, 0x0) 7.01724564s ago: executing program 3 (id=271): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfffc}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/29, 0x1d}], 0x1}}], 0x2, 0x12000, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x5865, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e00030010000000028000001294", 0x2e}], 0x1}, 0x0) 6.794889262s ago: executing program 0 (id=272): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x0, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'pim6reg1\x00'}, 0x0, 0x118, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'gre0\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x0, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'pim6reg1\x00'}, 0x0, 0x118, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'gre0\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) 6.497421441s ago: executing program 2 (id=273): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000300), 0x4) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000100)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x24) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r5, 0x101, 0x70bd29, 0xffffffff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x14}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000001}]}, 0x44}}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1007, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f20018060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200e705a7f40005020000"], 0x0) 6.397035238s ago: executing program 4 (id=274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000200)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x10, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x69) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250100000005000200140000000500030033000000050002000200000014000900fc000000000000000000000000000001050004000200000008000600ffffffff08000b00", @ANYRES32=r10, @ANYBLOB="94f52d4ca9daacc153437796294bc53b2b707cd394f827aecbead78a12c1de17c464fd470c90917527b708f882364adcc638cd87c3ec3fe94d5d31360c05c82ecaff4527dc0a12b3f47fc3dc8f31669b1735b22a7bd53c65343e4bb9967f557b"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x5267ac3bc6a0c973) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000000)={0x43, 0x9}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010400000000000000000500000005000100070000000500040000000000140007800500150000000000080012400000000005000500020000000900020073797a3000001e0011000300686173683a69702c706f7274"], 0x60}}, 0x0) 6.266077957s ago: executing program 1 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4, 0x0, @void, @value}, 0x20) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0x6, [@restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x1, 0x3, 0x70}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @datasec={0x9, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x4}, {0x1, 0x10, 0x8}, {0x3, 0x7, 0x7}, {0x3, 0x9}, {0x5, 0x5, 0xa000000}, {0x1, 0x6, 0x1}, {0x1, 0x9, 0x1af8}], 'b'}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/5, 0xf2, 0x5, 0x1, 0x8, 0x10000, @value}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x130, 0x98, 0x0, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x3ff, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="95000000fffffffd199d677cfd157c94997c7726cd7d474e5f61fb5a1747580c7b9b5ad62cbc78ef25232bd99872000e029abbc960c89ad71bacfbf862b2072874e465d292e1b2e8c6ade5672ae8be0000000000003264a254c48928241e5dd776f100000000000000000000830eb907abd9c52cac89a56a6c597c4e18760a482d3dd61adf0dde6073cf8e98d640849c82241ff33a0ef79fe5f53dc860fcb6811d0904272041983170239bafad0a69954aa41ae23657257c61e3efacad4ead86bca2ebd86eeb6defbfc62a0028946bf1bb456f64dbcb9997fe9874ce954f1d394847eb5cee8148acb3e95e5dc2fc04d838b03b9450718194a05bd87932907a6971dd8632eaacfa1602a957ba5c5405711286e42f1a0d3af2e0f8ae7a99b25406945100"/301], &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0x0, &(0x7f0000000140), 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x1, 0xfb, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r6, 0xffffffffffffffff], &(0x7f0000000440), 0x10, 0x9e3e, @void, @value}, 0x94) 6.046410138s ago: executing program 0 (id=276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000ac00070000000000000000000000000000000001ffffffff0000000000000000000000004e1f00004e2300040a00208087000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="bc0900000000000000040000000000004000000000000000fcffffffffffffff0000000000000000040000000000000002000000000000002d030000000000001400000000000000030000000000000001000000000000000500000000000000d0bce5681aaf1e52020100000000000008000c"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xc, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8953, &(0x7f0000000c40)={'wg1\x00', {0x2, 0x0, @empty}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000400)={0x0, r1, 0x4, 0x68da, 0x2, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000cd000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00511ff44500b01ff80787a2e7be0000130005", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00511ff44500b01ff80787a2e7be0000130005", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2dc, r7, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x5}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x29c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x57, 0x0, "f894b14eee2de675d8a0374a35782ae8c8cee805dde23ed40d78f6b9440016c1eaab3699ed01a114c8fb987a5afcd90ba66f1c1286d6cf50d18652c704cd7c3698a69045d1e17f68ba117e6a699cfb76e6147a"}, @NL80211_BAND_6GHZ={0x9c, 0x3, "2a67ba4b4779b953704bb68777565a31c87e4d7d50e33c59b922dc3955f20ef9cb6c31e9eadfcf48edaa3c165a1e4fb461bfe1940292b1071552d214ba6b3326321c63f5c7a0ce2af855bc72c2b932489a9bb8cb7669a3265cb045a8fb6c69b5dbe01a0ca35204ba08953b0a0eb180574a142ffc83fe51c698db08717703aaebda325598158ab45b3f84769350009073cb918c228b46f07d"}, @NL80211_BAND_5GHZ={0xa6, 0x1, "0270ab1a9a4f712d2c7472d57418840740aefdceadcaeeaa6b0069631f315033238bb771bda7eb6b3205ada5a31eaa79c6369b15d429ad53d317bc24ec8ebc85acea9adfc878e8b621452ffd360e59d48f492e62be1b8210904345c5e7193f16207dc3b54bc66ef02e50336a7f66d3417e274a0be840d77c63db93689b30c4e100f0d24716ad68570aebd5fa398d5c627395de6a18116ad0b32092dd193bdb8d0dae"}, @NL80211_BAND_5GHZ={0x27, 0x1, "9164ee7bc2029ad6f49bd7d8f5108133968ab6322cfa67d68181251556cd5d24ea582d"}, @NL80211_BAND_2GHZ={0xc8, 0x0, "522c977b02a5d6f7deb7bbb44cbf622bb85a4ad92e548c72532177a0917469edfe143bdc78567e7f742d5bac999e3136a28011280460e59da1da4b499346691c266d96436b834e2a2acd71f7d15c4e5f8cd386e5b99c492fa91c797a9770e0c9770a1bfcec493cfb010d6c50d5ad98c2f5a948ef1f544c86af5cb729b388931a398710b69be752fd9931f91c395b33ffa082c6550351d50924f593b315ffb4eec1b50eeac4f156b9fd39384762a5a74ff71e0450e85798670e112c559dd2d8aafc884da2"}, @NL80211_BAND_5GHZ={0xb, 0x1, "e781105dac34fa"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xf4}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4040001}, 0x20044001) 5.933341866s ago: executing program 2 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x84) (rerun: 32) 5.899342454s ago: executing program 4 (id=278): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 5.752887018s ago: executing program 3 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@newtclass={0x44, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff2}, {0x10, 0x7}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2}}, @tclass_kind_options=@c_cbs={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 5.617317105s ago: executing program 1 (id=280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x0) 5.493259095s ago: executing program 3 (id=281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x1, 0xc, 0x4, 0x4, 0x50, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=[{0x4, 0x2, 0x4, 0x5}], 0x10, 0x10000, @void, @value}, 0x94) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000240)=0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x400, 0x10, 0x300, 0xe60, 0x5, 0x4, 0xd}, &(0x7f00000003c0)=0x9c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000400)={r3, 0x3b7, 0x5, [0x200, 0x80, 0x5, 0x1, 0x1]}, 0x12) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000440)={0x0, "e3524877d73195c5e1c64558ad3f2bca"}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001440)={r5, 0x57, 0x100000001}) r6 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r6, &(0x7f0000002000)={&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f00000018c0)=""/57, 0x39}, {&(0x7f0000001900)=""/51, 0x33}, {&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/205, 0xcd}, {&(0x7f0000001a80)=""/193, 0xc1}, {&(0x7f0000001b80)=""/193, 0xc1}, {&(0x7f0000001c80)=""/140, 0x8c}, {&(0x7f0000001d40)=""/119, 0x77}, {&(0x7f0000001dc0)=""/19, 0x13}, {&(0x7f0000001e00)=""/2, 0x2}], 0xa, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x1) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r12, 0x113, 0x3, &(0x7f0000002040), &(0x7f0000002080)=0x4) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000020c0)={r3}, &(0x7f0000002100)=0x8) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000002140)=0x10, 0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000002180)={r13, 0x9, 0x4, [0x1000, 0x0, 0x941b, 0x3]}, 0x10) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f00000021c0)={r2, 0x1, 0x6, 0x100, 0x1534, 0x40}, &(0x7f0000002200)=0x14) r15 = accept4$nfc_llcp(r9, &(0x7f0000002240), &(0x7f00000022c0)=0x60, 0x800) getsockopt$bt_hci(r15, 0x0, 0x2, &(0x7f0000002300)=""/169, &(0x7f00000023c0)=0xa9) ioctl$int_out(r9, 0x2a30, &(0x7f0000002400)) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000002680)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002500)={0x13c, r16, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b61fba008f7b444ec1ed9c6016c9a11319088922ff2a021b"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7532e11327364935db9828f1eb285ca986e82283f7d76c11"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "77711f5890860a71fbe604fdd84bd33975fc1a9eb6ff0151"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f00000026c0)={r13, 0x3a, "8bf98a1970ddde616b96f1a69de2aeaab8eef6626a500c995d0fed154a3f36bb94a648d47b60b1a2380ce06b79bfdf81f556b1904cefcfd34d09"}, &(0x7f0000002740)=0x42) r18 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r18, 0x117, 0x5, 0x0, 0x3ff) socket$unix(0x1, 0x1, 0x0) shutdown(r14, 0x0) 5.430250825s ago: executing program 4 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006640)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="ab"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x0, 0x0, 0x0, 0x0, {0x2}, 0x400}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x1, 0x0, {0xffffffffffffffff, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x1, 0x1}}]}, 0x68}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000002c0)) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) readv(r4, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 5.221430586s ago: executing program 3 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000edffffff00", @ANYRES32=0x0, @ANYBLOB="e3220000000000002400128009000100626f6e6400000000140002800500010001"], 0x44}}, 0x0) 0s ago: executing program 0 (id=284): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xf}]}]}, {0x0, [0x30, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/69, 0x59, 0x45, 0x1, 0xa, 0x10000, @value=r3}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000bac48344792fe72a00000008000300", @ANYRES32=r2], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 51.044910][ T5216] cgroup: Unknown subsys name 'net' [ 51.191781][ T5216] cgroup: Unknown subsys name 'cpuset' [ 51.200167][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.452886][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.382107][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.391232][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.392383][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.399317][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.407484][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.414401][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.428233][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.436049][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.443678][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.451994][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.455825][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.459492][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.467042][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.475128][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.481424][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.488670][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.495545][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.509256][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.512082][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.516604][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.540064][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.551799][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.559757][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.567644][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.578448][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.585873][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.598032][ T4622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.607103][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.614871][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.622823][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.929614][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 57.005065][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 57.100304][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 57.161167][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 57.202278][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.210199][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.217633][ T5235] bridge_slave_0: entered allmulticast mode [ 57.224830][ T5235] bridge_slave_0: entered promiscuous mode [ 57.248116][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.255480][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.263067][ T5235] bridge_slave_1: entered allmulticast mode [ 57.270018][ T5235] bridge_slave_1: entered promiscuous mode [ 57.291524][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.298708][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.305910][ T5227] bridge_slave_0: entered allmulticast mode [ 57.312795][ T5227] bridge_slave_0: entered promiscuous mode [ 57.321108][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.328396][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.335635][ T5227] bridge_slave_1: entered allmulticast mode [ 57.342510][ T5227] bridge_slave_1: entered promiscuous mode [ 57.349615][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 57.392116][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.432512][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.489882][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.502532][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.517622][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.525188][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.532528][ T5226] bridge_slave_0: entered allmulticast mode [ 57.539642][ T5226] bridge_slave_0: entered promiscuous mode [ 57.556571][ T5235] team0: Port device team_slave_0 added [ 57.577983][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.587072][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.594852][ T5226] bridge_slave_1: entered allmulticast mode [ 57.602080][ T5226] bridge_slave_1: entered promiscuous mode [ 57.624998][ T5235] team0: Port device team_slave_1 added [ 57.643341][ T5227] team0: Port device team_slave_0 added [ 57.661809][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.671214][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.679804][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.686971][ T5233] bridge_slave_0: entered allmulticast mode [ 57.693703][ T5233] bridge_slave_0: entered promiscuous mode [ 57.709522][ T5227] team0: Port device team_slave_1 added [ 57.731780][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.741277][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.748876][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.756033][ T5233] bridge_slave_1: entered allmulticast mode [ 57.762857][ T5233] bridge_slave_1: entered promiscuous mode [ 57.789669][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.796797][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.804565][ T5245] bridge_slave_0: entered allmulticast mode [ 57.811294][ T5245] bridge_slave_0: entered promiscuous mode [ 57.844377][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.851369][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.877895][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.890015][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.896990][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.923326][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.934890][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.942452][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.949869][ T5245] bridge_slave_1: entered allmulticast mode [ 57.956525][ T5245] bridge_slave_1: entered promiscuous mode [ 57.971354][ T5226] team0: Port device team_slave_0 added [ 57.994436][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.001728][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.028129][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.045569][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.052696][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.079007][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.100323][ T5226] team0: Port device team_slave_1 added [ 58.114973][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.127716][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.139842][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.171867][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.231250][ T5233] team0: Port device team_slave_0 added [ 58.241075][ T5245] team0: Port device team_slave_0 added [ 58.250665][ T5235] hsr_slave_0: entered promiscuous mode [ 58.257800][ T5235] hsr_slave_1: entered promiscuous mode [ 58.274560][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.281770][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.307820][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.320582][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.327541][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.353679][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.365772][ T5233] team0: Port device team_slave_1 added [ 58.381603][ T5245] team0: Port device team_slave_1 added [ 58.396475][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.403519][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.429577][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.445440][ T5227] hsr_slave_0: entered promiscuous mode [ 58.451954][ T5227] hsr_slave_1: entered promiscuous mode [ 58.457989][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.465837][ T5227] Cannot create hsr debugfs directory [ 58.491871][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.501790][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.528099][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.561952][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.569052][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.596179][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.606715][ T5232] Bluetooth: hci3: command tx timeout [ 58.618367][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.625385][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.651474][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.668709][ T5243] Bluetooth: hci1: command tx timeout [ 58.674470][ T5243] Bluetooth: hci4: command tx timeout [ 58.676614][ T5232] Bluetooth: hci0: command tx timeout [ 58.680211][ T4622] Bluetooth: hci2: command tx timeout [ 58.745537][ T5226] hsr_slave_0: entered promiscuous mode [ 58.752778][ T5226] hsr_slave_1: entered promiscuous mode [ 58.759801][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.767408][ T5226] Cannot create hsr debugfs directory [ 58.783503][ T5233] hsr_slave_0: entered promiscuous mode [ 58.790863][ T5233] hsr_slave_1: entered promiscuous mode [ 58.796906][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.804909][ T5233] Cannot create hsr debugfs directory [ 58.824094][ T5245] hsr_slave_0: entered promiscuous mode [ 58.830643][ T5245] hsr_slave_1: entered promiscuous mode [ 58.836559][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.844268][ T5245] Cannot create hsr debugfs directory [ 59.136873][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.153659][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.165831][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.174963][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.224829][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.234011][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.248745][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.257765][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.324934][ T5227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.337280][ T5227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.347485][ T5227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.365150][ T5227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.450482][ T5245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.460542][ T5245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.470935][ T5245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.482934][ T5245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.514479][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.608090][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.616154][ T5233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.626566][ T5233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.643322][ T957] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.650808][ T957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.662569][ T5233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.672737][ T5233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.692880][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.699980][ T957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.722484][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.773236][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.796889][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.804045][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.835020][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.842185][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.869497][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.904617][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.922318][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.947161][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.954321][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.971426][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.987160][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.994323][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.029406][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.036547][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.047511][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.054668][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.173373][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.266210][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.297223][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.304627][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.340865][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.348004][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.396260][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.433394][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.566412][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.597706][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.610868][ T5235] veth0_vlan: entered promiscuous mode [ 60.647043][ T5226] veth0_vlan: entered promiscuous mode [ 60.671172][ T5235] veth1_vlan: entered promiscuous mode [ 60.680083][ T4622] Bluetooth: hci3: command tx timeout [ 60.711488][ T5226] veth1_vlan: entered promiscuous mode [ 60.740593][ T5245] veth0_vlan: entered promiscuous mode [ 60.748599][ T4622] Bluetooth: hci4: command tx timeout [ 60.750116][ T5243] Bluetooth: hci2: command tx timeout [ 60.754013][ T4622] Bluetooth: hci0: command tx timeout [ 60.759555][ T5232] Bluetooth: hci1: command tx timeout [ 60.804134][ T5226] veth0_macvtap: entered promiscuous mode [ 60.833409][ T5226] veth1_macvtap: entered promiscuous mode [ 60.845580][ T5245] veth1_vlan: entered promiscuous mode [ 60.877499][ T5235] veth0_macvtap: entered promiscuous mode [ 60.897514][ T5235] veth1_macvtap: entered promiscuous mode [ 60.922888][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.939201][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.961399][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.970745][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.979783][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.989931][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.010202][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.054023][ T5245] veth0_macvtap: entered promiscuous mode [ 61.063488][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.074693][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.085955][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.124158][ T5245] veth1_macvtap: entered promiscuous mode [ 61.140849][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.151894][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.163535][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.193638][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.203521][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.212737][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.223460][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.236264][ T5227] veth0_vlan: entered promiscuous mode [ 61.288078][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.291599][ T5233] veth0_vlan: entered promiscuous mode [ 61.301230][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.313424][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.324301][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.334946][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.345905][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.357975][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.367969][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.379139][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.389614][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.402126][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.413338][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.429404][ T5227] veth1_vlan: entered promiscuous mode [ 61.447669][ T5233] veth1_vlan: entered promiscuous mode [ 61.483639][ T5245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.493377][ T5245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.502722][ T5245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.511588][ T5245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.556872][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.569834][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.577703][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.585978][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.645164][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.674031][ T5226] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.674059][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.715052][ T5227] veth0_macvtap: entered promiscuous mode [ 61.735838][ T5233] veth0_macvtap: entered promiscuous mode [ 61.756887][ T5233] veth1_macvtap: entered promiscuous mode [ 61.774215][ T5227] veth1_macvtap: entered promiscuous mode [ 61.862411][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.876161][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.886911][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.897561][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.907506][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.921012][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.935048][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.949614][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.963296][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.975210][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.998703][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.006364][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.028249][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.057639][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.069436][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.079849][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.094162][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.105680][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.117249][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.127966][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.138231][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.149342][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.159778][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.170360][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.181789][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.193222][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.203967][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.214197][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.226513][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.236415][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.247266][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.259065][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.277543][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.289426][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.347947][ T5233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.357764][ T5233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.374723][ T5233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.383714][ T5233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.404117][ T5227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.418053][ T5227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.428131][ T5227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.437926][ T5227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.490813][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.508503][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.582165][ T5329] netlink: 'syz.0.9': attribute type 21 has an invalid length. [ 62.595847][ T5329] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.693915][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.734591][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.754630][ T4622] Bluetooth: hci3: command tx timeout [ 62.820444][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.821784][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.829054][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.836387][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.851414][ T4622] Bluetooth: hci0: command tx timeout [ 62.857795][ T4622] Bluetooth: hci2: command tx timeout [ 62.863772][ T4622] Bluetooth: hci1: command tx timeout [ 62.869518][ T4622] Bluetooth: hci4: command tx timeout [ 62.995230][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.008666][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.259690][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.496976][ T5361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 63.514734][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 63.575888][ T5359] Zero length message leads to an empty skb [ 63.711565][ T5371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.884147][ T5379] netlink: 76 bytes leftover after parsing attributes in process `syz.0.22'. [ 63.900710][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 64.159478][ T5404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 64.175910][ T5406] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.305784][ T5412] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.30'. [ 64.322397][ T5412] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 64.381063][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 64.470944][ T5417] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 64.478720][ T5417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.32'. [ 64.829944][ T5237] Bluetooth: hci3: command tx timeout [ 64.910632][ T5237] Bluetooth: hci4: command tx timeout [ 64.910694][ T4622] Bluetooth: hci1: command tx timeout [ 64.916674][ T5237] Bluetooth: hci2: command tx timeout [ 64.921756][ T4622] Bluetooth: hci0: command tx timeout [ 65.173258][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 65.506971][ T5471] netlink: 'syz.1.47': attribute type 11 has an invalid length. [ 65.679117][ T5476] openvswitch: netlink: Actions may not be safe on all matching packets [ 65.697605][ T5477] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 65.733212][ T5478] netlink: zone id is out of range [ 65.929079][ T5487] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.997083][ T5492] trusted_key: syz.4.54 sent an empty control message without MSG_MORE. [ 66.243932][ T5508] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 66.447785][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.456877][ T5516] team0: Port device bond0 added [ 66.463908][ T5529] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 66.481661][ T5527] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 66.527251][ T5527] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 66.629715][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.643763][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.654991][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.666347][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.680608][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.691519][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.701688][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.713165][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.723094][ T5529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.734184][ T5529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.176632][ T5563] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 67.206094][ T5561] openvswitch: netlink: Message has 225 unknown bytes. [ 67.207223][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.213238][ T5561] openvswitch: netlink: Actions may not be safe on all matching packets [ 67.297345][ T5564] bond1: entered allmulticast mode [ 67.307101][ T5564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.428426][ T5569] netlink: 'syz.2.79': attribute type 8 has an invalid length. [ 67.713558][ T5591] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 67.897272][ T5598] IPVS: persistence engine module ip_vs_pe_À not found [ 68.054867][ T5609] dccp_close: ABORT with 32 bytes unread [ 68.512723][ T5624] __nla_validate_parse: 78 callbacks suppressed [ 68.512743][ T5624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'. [ 68.528422][ T5627] netlink: 48 bytes leftover after parsing attributes in process `syz.2.98'. [ 68.637895][ T5635] netlink: 'syz.1.101': attribute type 20 has an invalid length. [ 68.683746][ T5635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.101'. [ 68.712304][ C0] Unknown status report in ack skb [ 69.040233][ T5660] tls_set_device_offload: netdev not found [ 69.379475][ T5674] netlink: 'syz.0.112': attribute type 4 has an invalid length. [ 69.389679][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 69.405890][ T5674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.816534][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 69.857623][ T5705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.989649][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'. [ 70.062618][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 70.144055][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 70.311644][ T5744] hsr_slave_0: left promiscuous mode [ 70.373414][ T5744] hsr_slave_1: left promiscuous mode [ 70.572081][ T5753] ebtables: ebtables: counters copy to user failed while replacing table [ 70.651818][ T5769] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.737418][ T5775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 70.820647][ T5781] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 70.830609][ T5781] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.142'. [ 70.882222][ T5788] xt_l2tp: missing protocol rule (udp|l2tpip) [ 70.997767][ T5796] team_slave_0: entered promiscuous mode [ 71.003734][ T5796] team_slave_1: entered promiscuous mode [ 71.024314][ T5796] macvtap1: entered promiscuous mode [ 71.034237][ T5796] team0: entered promiscuous mode [ 71.057175][ T5796] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 71.439457][ T5822] macvlan2: entered promiscuous mode [ 71.463723][ T5822] macvlan2: entered allmulticast mode [ 71.505206][ T5822] bridge0: port 3(syz_tun) entered blocking state [ 71.526330][ T5822] bridge0: port 3(syz_tun) entered disabled state [ 71.550418][ T5822] syz_tun: entered allmulticast mode [ 71.569736][ T5822] syz_tun: entered promiscuous mode [ 71.604912][ T5822] bridge0: port 3(syz_tun) entered blocking state [ 71.612249][ T5822] bridge0: port 3(syz_tun) entered forwarding state [ 71.721044][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.727581][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.232680][ T5865] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 72.555106][ T5865] batman_adv: batadv0: Adding interface: team0 [ 72.562231][ T5865] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.598075][ T5865] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 72.861296][ T5897] xt_TCPMSS: Only works on TCP SYN packets [ 73.090334][ T5909] netlink: 'syz.1.180': attribute type 6 has an invalid length. [ 73.127492][ T5913] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.316608][ T5921] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 73.550109][ T5901] syz.4.176[5901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.550210][ T5901] syz.4.176[5901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.561765][ T5901] syz.4.176[5901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.987737][ T5938] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 75.024667][ T5938] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 75.031267][ T5945] __nla_validate_parse: 8 callbacks suppressed [ 75.031285][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 75.071058][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 75.084232][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 75.103324][ T5950] netlink: 'syz.2.191': attribute type 2 has an invalid length. [ 75.133562][ T5949] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 75.189533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.216862][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.697921][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 75.767326][ T5984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.202'. [ 75.848975][ T5990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.203'. [ 75.894595][ T5993] bridge3: entered promiscuous mode [ 76.003906][ T5997] macvtap0: entered promiscuous mode [ 76.010824][ T5997] macvtap0: left promiscuous mode [ 76.294365][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 76.337936][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 76.347779][ T6022] bridge_slave_1: left allmulticast mode [ 76.354743][ T6022] bridge_slave_1: left promiscuous mode [ 76.360673][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.374539][ T6022] bridge_slave_0: left allmulticast mode [ 76.381421][ T6022] bridge_slave_0: left promiscuous mode [ 76.387090][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.483230][ T6029] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 76.494444][ T6029] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.214'. [ 76.837111][ T936] cfg80211: failed to load regulatory.db [ 77.860826][ T6041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.219'. [ 78.110239][ T6069] bond2: entered allmulticast mode [ 78.153898][ T6069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.461669][ T6086] netlink: 'syz.1.231': attribute type 3 has an invalid length. [ 78.581770][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.602635][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.650991][ T6098] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 78.974308][ T6112] bond1: entered allmulticast mode [ 79.016765][ T6112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.351561][ T6137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.409384][ T6144] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 79.432098][ T6146] Cannot find del_set index 4 as target [ 79.448550][ T6136] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 79.550448][ T6140] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 79.993648][ T6162] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 80.127637][ T6162] __nla_validate_parse: 13 callbacks suppressed [ 80.127657][ T6162] netlink: 256 bytes leftover after parsing attributes in process `syz.4.256'. [ 80.848404][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 80.970831][ T6170] bond1: entered allmulticast mode [ 81.006221][ T6170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.047606][ T6173] netlink: 'syz.0.258': attribute type 1 has an invalid length. [ 81.161184][ T6173] netlink: 636 bytes leftover after parsing attributes in process `syz.0.258'. [ 81.602116][ T6176] netlink: 'syz.4.260': attribute type 4 has an invalid length. [ 83.658698][ T6256] netlink: 388 bytes leftover after parsing attributes in process `syz.2.266'. [ 83.716169][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 83.815931][ T6256] netem: change failed [ 84.180659][ T6268] netlink: 'syz.0.269': attribute type 16 has an invalid length. [ 84.245814][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 84.419452][ T6271] bond1: entered allmulticast mode [ 84.478719][ T6271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.601799][ T6279] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 84.822568][ T6281] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 85.206947][ T6288] x_tables: duplicate underflow at hook 3 [ 85.366607][ T6291] netlink: 192 bytes leftover after parsing attributes in process `syz.0.276'. [ 95.971739][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.988029][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.998276][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.006363][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.016241][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.028565][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.088175][ C0] sched: DL replenish lagged too much [ 97.245652][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.256102][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.264790][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.273364][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.281072][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.298434][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.532517][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.541663][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.550487][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.570410][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.603552][ T4622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.611826][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.619293][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.638279][ T4622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.646430][ T4622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.656564][ T4622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.678631][ T4622] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.687370][ T4622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.108662][ T4622] Bluetooth: hci4: command tx timeout [ 99.388408][ T4622] Bluetooth: hci5: command tx timeout [ 99.708563][ T4622] Bluetooth: hci6: command tx timeout [ 99.788506][ T4622] Bluetooth: hci7: command tx timeout [ 100.188498][ T4622] Bluetooth: hci4: command tx timeout [ 101.468407][ T4622] Bluetooth: hci5: command tx timeout [ 101.788371][ T4622] Bluetooth: hci6: command tx timeout [ 101.868525][ T4622] Bluetooth: hci7: command tx timeout [ 102.229274][ T5243] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 102.238603][ T5243] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 102.246637][ T5243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 102.259433][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 102.268427][ T5232] Bluetooth: hci4: command tx timeout [ 102.273944][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 102.283802][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 103.548339][ T5243] Bluetooth: hci5: command tx timeout [ 103.868376][ T5243] Bluetooth: hci6: command tx timeout [ 103.948382][ T5243] Bluetooth: hci7: command tx timeout [ 104.348514][ T4622] Bluetooth: hci8: command tx timeout [ 104.354639][ T4622] Bluetooth: hci4: command tx timeout [ 105.628799][ T4622] Bluetooth: hci5: command tx timeout [ 105.948406][ T4622] Bluetooth: hci6: command tx timeout [ 106.028353][ T4622] Bluetooth: hci7: command tx timeout [ 106.428487][ T4622] Bluetooth: hci8: command tx timeout [ 108.508429][ T4622] Bluetooth: hci8: command tx timeout [ 110.588508][ T4622] Bluetooth: hci8: command tx timeout [ 133.151376][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157754][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 156.537821][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.547091][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.556166][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.565036][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.584352][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.593216][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.857538][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 157.015100][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.026089][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.041815][ T6348] bridge_slave_0: entered allmulticast mode [ 157.052468][ T6348] bridge_slave_0: entered promiscuous mode [ 157.066189][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.078867][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.086119][ T6348] bridge_slave_1: entered allmulticast mode [ 157.101081][ T6348] bridge_slave_1: entered promiscuous mode [ 157.194614][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.236329][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.462443][ T6348] team0: Port device team_slave_0 added [ 157.529754][ T6348] team0: Port device team_slave_1 added [ 157.716365][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.774807][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.914663][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.996902][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.029072][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.166473][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.263650][ T5243] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 158.279695][ T5243] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 158.288011][ T5243] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 158.302787][ T5243] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 158.310901][ T5243] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 158.328799][ T5243] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 158.414464][ T4622] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 158.424728][ T4622] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 158.433490][ T4622] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 158.443029][ T4622] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 158.451319][ T4622] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 158.459036][ T4622] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 158.518290][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 158.535425][ T5243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 158.556010][ T5243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 158.564217][ T5243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 158.580193][ T5243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 158.587681][ T5243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 158.649304][ T6348] hsr_slave_0: entered promiscuous mode [ 158.668478][ T5243] Bluetooth: hci2: command tx timeout [ 158.676045][ T6348] hsr_slave_1: entered promiscuous mode [ 158.971969][ T6348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.245936][ T6348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.428341][ T5243] Bluetooth: hci9: command tx timeout [ 160.508577][ T5243] Bluetooth: hci10: command tx timeout [ 160.668480][ T5243] Bluetooth: hci11: command tx timeout [ 160.748502][ T5243] Bluetooth: hci2: command tx timeout [ 162.508275][ T5243] Bluetooth: hci9: command tx timeout [ 162.598370][ T5243] Bluetooth: hci10: command tx timeout [ 162.748382][ T5243] Bluetooth: hci11: command tx timeout [ 162.814072][ T4622] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 162.828595][ T4622] Bluetooth: hci2: command tx timeout [ 162.837045][ T5232] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 162.845235][ T5232] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 162.855137][ T5232] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 162.863340][ T5232] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 162.881555][ T5232] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 164.588407][ T5232] Bluetooth: hci9: command tx timeout [ 164.668630][ T5232] Bluetooth: hci10: command tx timeout [ 164.828352][ T5232] Bluetooth: hci11: command tx timeout [ 164.908631][ T5243] Bluetooth: hci2: command tx timeout [ 164.914148][ T5232] Bluetooth: hci12: command tx timeout [ 166.678420][ T5232] Bluetooth: hci9: command tx timeout [ 166.748580][ T5232] Bluetooth: hci10: command tx timeout [ 166.908320][ T5232] Bluetooth: hci11: command tx timeout [ 166.988512][ T5232] Bluetooth: hci12: command tx timeout [ 169.068604][ T5232] Bluetooth: hci12: command tx timeout [ 171.148553][ T5232] Bluetooth: hci12: command tx timeout [ 181.313279][ T4622] Bluetooth: hci3: command 0x0406 tx timeout [ 181.319553][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 194.591796][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.598611][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.666956][ T5243] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 218.683722][ T5243] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 218.692158][ T5243] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 218.700465][ T5243] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 218.708443][ T5243] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 218.719674][ T5243] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 219.434131][ T5243] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 219.444217][ T5243] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 219.453066][ T5243] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 219.469024][ T5243] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 219.476800][ T5243] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 219.488323][ T5243] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 219.664529][ T5232] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 219.673883][ T5232] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 219.682649][ T5232] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 219.693838][ T5232] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 219.702018][ T5232] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 219.709819][ T5232] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 219.728854][ T5243] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 219.739164][ T5243] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 219.764398][ T5243] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 219.774615][ T5243] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 219.785921][ T5243] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 219.795414][ T5243] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 220.828585][ T5239] Bluetooth: hci13: command tx timeout [ 221.548379][ T5239] Bluetooth: hci14: command tx timeout [ 221.788374][ T5239] Bluetooth: hci15: command tx timeout [ 221.868263][ T5239] Bluetooth: hci16: command tx timeout [ 222.281152][ T5244] Bluetooth: hci7: command 0x0406 tx timeout [ 222.287225][ T5244] Bluetooth: hci4: command 0x0406 tx timeout [ 222.294004][ T5239] Bluetooth: hci6: command 0x0406 tx timeout [ 222.300238][ T5244] Bluetooth: hci5: command 0x0406 tx timeout [ 222.925572][ T5243] Bluetooth: hci13: command tx timeout [ 223.092540][ T5232] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 223.101723][ T5232] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 223.113020][ T5232] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 223.123432][ T5232] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 223.132819][ T5232] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 223.140655][ T5232] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 223.628289][ T5243] Bluetooth: hci14: command tx timeout [ 223.868334][ T5243] Bluetooth: hci15: command tx timeout [ 223.948383][ T5243] Bluetooth: hci16: command tx timeout [ 224.988429][ T5243] Bluetooth: hci13: command tx timeout [ 225.228474][ T5243] Bluetooth: hci17: command tx timeout [ 225.708262][ T5243] Bluetooth: hci14: command tx timeout [ 225.948472][ T5243] Bluetooth: hci15: command tx timeout [ 226.028289][ T5243] Bluetooth: hci16: command tx timeout [ 227.068987][ T5243] Bluetooth: hci13: command tx timeout [ 227.308438][ T5243] Bluetooth: hci17: command tx timeout [ 227.393020][ T5243] Bluetooth: hci8: command 0x0406 tx timeout [ 227.788290][ T5232] Bluetooth: hci14: command tx timeout [ 228.028253][ T5232] Bluetooth: hci15: command tx timeout [ 228.108346][ T5232] Bluetooth: hci16: command tx timeout [ 229.388459][ T5232] Bluetooth: hci17: command tx timeout [ 231.468542][ T5232] Bluetooth: hci17: command tx timeout [ 234.910090][ T30] INFO: task kworker/u8:16:6217 blocked for more than 143 seconds. [ 234.925030][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 234.936356][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.974667][ T30] task:kworker/u8:16 state:D stack:24912 pid:6217 tgid:6217 ppid:2 flags:0x00004000 [ 235.020703][ T30] Workqueue: netns cleanup_net [ 235.025576][ T30] Call Trace: [ 235.108219][ T30] [ 235.111222][ T30] __schedule+0x1895/0x4b30 [ 235.116303][ T30] ? __pfx___schedule+0x10/0x10 [ 235.188175][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.193279][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 235.256209][ T30] ? kthread_data+0x52/0xd0 [ 235.275303][ T30] ? schedule+0x90/0x320 [ 235.298318][ T30] ? wq_worker_sleeping+0x66/0x240 [ 235.303506][ T30] ? schedule+0x90/0x320 [ 235.307870][ T30] schedule+0x14b/0x320 [ 235.357382][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.374760][ T30] __mutex_lock+0x6a7/0xd70 [ 235.383779][ T30] ? __mutex_lock+0x52a/0xd70 [ 235.396198][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 235.402375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.407445][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.421716][ T30] ? mpls_net_exit+0x78/0x2a0 [ 235.426455][ T30] ? kfree+0x1a0/0x440 [ 235.435523][ T30] ? mpls_net_exit+0x78/0x2a0 [ 235.443206][ T30] mpls_net_exit+0x7d/0x2a0 [ 235.447763][ T30] cleanup_net+0x802/0xcc0 [ 235.457411][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 235.465024][ T30] ? process_scheduled_works+0x976/0x1850 [ 235.476126][ T30] process_scheduled_works+0xa63/0x1850 [ 235.484439][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.495182][ T30] ? assign_work+0x364/0x3d0 [ 235.503283][ T30] worker_thread+0x870/0xd30 [ 235.507951][ T30] ? __kthread_parkme+0x169/0x1d0 [ 235.519925][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.525103][ T30] kthread+0x2f0/0x390 [ 235.533989][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.542396][ T30] ? __pfx_kthread+0x10/0x10 [ 235.547039][ T30] ret_from_fork+0x4b/0x80 [ 235.560690][ T30] ? __pfx_kthread+0x10/0x10 [ 235.565343][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.576125][ T30] [ 235.581928][ T30] INFO: task syz.2.277:6293 blocked for more than 144 seconds. [ 235.594244][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 235.606291][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.622401][ T30] task:syz.2.277 state:D stack:25712 pid:6293 tgid:6292 ppid:5245 flags:0x00004002 [ 235.637368][ T30] Call Trace: [ 235.648306][ T30] [ 235.651284][ T30] __schedule+0x1895/0x4b30 [ 235.655839][ T30] ? __pfx___schedule+0x10/0x10 [ 235.668195][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.673274][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 235.686134][ T30] ? schedule+0x90/0x320 [ 235.690565][ T30] schedule+0x14b/0x320 [ 235.694764][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.708330][ T30] __mutex_lock+0x6a7/0xd70 [ 235.713082][ T30] ? __mutex_lock+0x52a/0xd70 [ 235.717797][ T30] ? raw_release+0x1b8/0x8b0 [ 235.730386][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.735476][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.746566][ T30] raw_release+0x1b8/0x8b0 [ 235.753655][ T30] sock_close+0xbc/0x240 [ 235.757950][ T30] ? __pfx_sock_close+0x10/0x10 [ 235.767763][ T30] __fput+0x23f/0x880 [ 235.775714][ T30] task_work_run+0x24f/0x310 [ 235.785085][ T30] ? __pfx_task_work_run+0x10/0x10 [ 235.793458][ T30] ? switch_task_namespaces+0xe4/0x110 [ 235.804831][ T30] do_exit+0xa2f/0x28e0 [ 235.812700][ T30] ? __pfx_do_exit+0x10/0x10 [ 235.817434][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.828040][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.836713][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.851302][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 235.856480][ T30] do_group_exit+0x207/0x2c0 [ 235.865827][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.874750][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.884736][ T30] get_signal+0x176f/0x1810 [ 235.891872][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 235.897306][ T30] ? __pfx_get_signal+0x10/0x10 [ 235.908278][ T30] arch_do_signal_or_restart+0x96/0x860 [ 235.917595][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 235.927839][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.938711][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 235.944498][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 235.957051][ T30] do_syscall_64+0x100/0x230 [ 235.962026][ T30] ? clear_bhb_loop+0x35/0x90 [ 235.966748][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.979534][ T30] RIP: 0033:0x7f1a6097dff9 [ 235.984006][ T30] RSP: 002b:00007f1a61807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 235.999755][ T30] RAX: 0000000000000000 RBX: 00007f1a60b35f80 RCX: 00007f1a6097dff9 [ 236.007776][ T30] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 236.024230][ T30] RBP: 00007f1a609f0296 R08: 0000000000000000 R09: 0000000000000000 [ 236.037102][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.052316][ T30] R13: 0000000000000000 R14: 00007f1a60b35f80 R15: 00007ffdd1ded6c8 [ 236.062897][ T30] [ 236.066191][ T30] INFO: task syz.4.282:6309 blocked for more than 144 seconds. [ 236.081538][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 236.094730][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.111537][ T30] task:syz.4.282 state:D stack:25984 pid:6309 tgid:6308 ppid:5227 flags:0x00000004 [ 236.126429][ T30] Call Trace: [ 236.135237][ T30] [ 236.141921][ T30] __schedule+0x1895/0x4b30 [ 236.146503][ T30] ? __pfx___schedule+0x10/0x10 [ 236.155223][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.163950][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 236.174285][ T30] ? schedule+0x90/0x320 [ 236.182132][ T30] schedule+0x14b/0x320 [ 236.186349][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.203681][ T30] __mutex_lock+0x6a7/0xd70 [ 236.209873][ T30] ? __mutex_lock+0x52a/0xd70 [ 236.214608][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 236.228796][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.234303][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 236.249658][ T30] ? __nla_parse+0x40/0x60 [ 236.254134][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 236.267306][ T30] genl_rcv_msg+0xaaa/0xec0 [ 236.288227][ T30] ? mark_lock+0x9a/0x360 [ 236.292636][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.297715][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 236.313035][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 236.322766][ T30] ? __pfx_nl80211_set_interface+0x10/0x10 [ 236.334106][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 236.342172][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.347603][ T30] netlink_rcv_skb+0x1e3/0x430 [ 236.360990][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.366085][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.376473][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 236.385602][ T30] genl_rcv+0x28/0x40 [ 236.393299][ T30] netlink_unicast+0x7f6/0x990 [ 236.402850][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 236.411905][ T30] ? __virt_addr_valid+0x183/0x530 [ 236.417245][ T30] ? __check_object_size+0x48e/0x900 [ 236.427258][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 236.437366][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.446304][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 236.454914][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.464309][ T30] __sock_sendmsg+0x221/0x270 [ 236.473927][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 236.482442][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.487797][ T30] __sys_sendmsg+0x292/0x380 [ 236.496256][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.506093][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.516339][ T30] ? do_syscall_64+0x100/0x230 [ 236.524817][ T30] ? do_syscall_64+0xb6/0x230 [ 236.535370][ T30] do_syscall_64+0xf3/0x230 [ 236.544397][ T30] ? clear_bhb_loop+0x35/0x90 [ 236.553075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.562619][ T30] RIP: 0033:0x7ff752f7dff9 [ 236.567090][ T30] RSP: 002b:00007ff753d34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.584142][ T30] RAX: ffffffffffffffda RBX: 00007ff753135f80 RCX: 00007ff752f7dff9 [ 236.596160][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 236.608260][ T30] RBP: 00007ff752ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 236.616287][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.633073][ T30] R13: 0000000000000000 R14: 00007ff753135f80 R15: 00007ffe715a3808 [ 236.645063][ T30] [ 236.651755][ T30] INFO: task syz.4.282:6310 blocked for more than 145 seconds. [ 236.663014][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 236.676256][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.688646][ T30] task:syz.4.282 state:D stack:27056 pid:6310 tgid:6308 ppid:5227 flags:0x00000004 [ 236.706441][ T30] Call Trace: [ 236.710185][ T30] [ 236.713150][ T30] __schedule+0x1895/0x4b30 [ 236.717792][ T30] ? __pfx___schedule+0x10/0x10 [ 236.728608][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.735904][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 236.747437][ T30] ? schedule+0x90/0x320 [ 236.756408][ T30] schedule+0x14b/0x320 [ 236.766387][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.775671][ T30] __mutex_lock+0x6a7/0xd70 [ 236.784876][ T30] ? __mutex_lock+0x52a/0xd70 [ 236.792259][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 236.797340][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.808246][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 236.814546][ T30] ? __nla_parse+0x40/0x60 [ 236.825223][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 236.831561][ T30] genl_rcv_msg+0xaaa/0xec0 [ 236.837156][ T30] ? mark_lock+0x9a/0x360 [ 236.848132][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.853248][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 236.866106][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 236.871850][ T30] ? __pfx_nl80211_connect+0x10/0x10 [ 236.877174][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 236.888130][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.893480][ T30] netlink_rcv_skb+0x1e3/0x430 [ 236.906711][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.912714][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.924988][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 236.930592][ T30] genl_rcv+0x28/0x40 [ 236.934608][ T30] netlink_unicast+0x7f6/0x990 [ 236.947924][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 236.954955][ T30] ? __virt_addr_valid+0x183/0x530 [ 236.965967][ T30] ? __check_object_size+0x48e/0x900 [ 236.973943][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 236.984548][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.991446][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 236.996440][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.007700][ T30] __sock_sendmsg+0x221/0x270 [ 237.015009][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 237.025982][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.032783][ T30] __sys_sendmsg+0x292/0x380 [ 237.037505][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.051943][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.058029][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.067545][ T30] ? exc_page_fault+0x590/0x8c0 [ 237.079569][ T30] ? do_syscall_64+0xb6/0x230 [ 237.084302][ T30] do_syscall_64+0xf3/0x230 [ 237.095059][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.100251][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.106206][ T30] RIP: 0033:0x7ff752f7dff9 [ 237.118968][ T30] RSP: 002b:00007ff753d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.127445][ T30] RAX: ffffffffffffffda RBX: 00007ff753136058 RCX: 00007ff752f7dff9 [ 237.141683][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 237.154948][ T30] RBP: 00007ff752ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 237.165662][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.178343][ T30] R13: 0000000000000001 R14: 00007ff753136058 R15: 00007ffe715a3808 [ 237.186385][ T30] [ 237.196379][ T30] INFO: task syz.3.283:6312 blocked for more than 145 seconds. [ 237.205400][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 237.219615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.234177][ T30] task:syz.3.283 state:D stack:27136 pid:6312 tgid:6311 ppid:5235 flags:0x00000004 [ 237.254164][ T30] Call Trace: [ 237.257504][ T30] [ 237.262858][ T30] __schedule+0x1895/0x4b30 [ 237.267447][ T30] ? __pfx___schedule+0x10/0x10 [ 237.278788][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.283873][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 237.296328][ T30] ? schedule+0x90/0x320 [ 237.301172][ T30] schedule+0x14b/0x320 [ 237.305373][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.328246][ T30] __mutex_lock+0x6a7/0xd70 [ 237.332877][ T30] ? __mutex_lock+0x52a/0xd70 [ 237.337588][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 237.351982][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.357084][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 237.365478][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 237.376230][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.384289][ T30] ? ref_tracker_free+0x643/0x7e0 [ 237.395160][ T30] netlink_rcv_skb+0x1e3/0x430 [ 237.402628][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.413764][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.421688][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.426944][ T30] netlink_unicast+0x7f6/0x990 [ 237.436465][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 237.445597][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.456468][ T30] ? __check_object_size+0x48e/0x900 [ 237.464718][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 237.476228][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.484237][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 237.493963][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.502875][ T30] __sock_sendmsg+0x221/0x270 [ 237.507617][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 237.517107][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.525075][ T30] __sys_sendmsg+0x292/0x380 [ 237.534425][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.543593][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.560498][ T30] ? do_syscall_64+0x100/0x230 [ 237.565685][ T30] ? do_syscall_64+0xb6/0x230 [ 237.576377][ T30] do_syscall_64+0xf3/0x230 [ 237.583879][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.593284][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.601763][ T30] RIP: 0033:0x7f6e92d7dff9 [ 237.606393][ T30] RSP: 002b:00007f6e93bc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.623149][ T30] RAX: ffffffffffffffda RBX: 00007f6e92f35f80 RCX: 00007f6e92d7dff9 [ 237.636295][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 237.652450][ T30] RBP: 00007f6e92df0296 R08: 0000000000000000 R09: 0000000000000000 [ 237.662913][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.679397][ T30] R13: 0000000000000000 R14: 00007f6e92f35f80 R15: 00007ffe4f1a90f8 [ 237.687438][ T30] [ 237.696988][ T30] INFO: task syz.0.284:6318 blocked for more than 146 seconds. [ 237.707221][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 237.722643][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.733930][ T30] task:syz.0.284 state:D stack:24216 pid:6318 tgid:6317 ppid:5226 flags:0x00000004 [ 237.752391][ T30] Call Trace: [ 237.756756][ T30] [ 237.762451][ T30] __schedule+0x1895/0x4b30 [ 237.767023][ T30] ? __pfx___schedule+0x10/0x10 [ 237.780795][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.785943][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 237.797629][ T30] ? schedule+0x90/0x320 [ 237.805908][ T30] schedule+0x14b/0x320 [ 237.814987][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.823054][ T30] __mutex_lock+0x6a7/0xd70 [ 237.827599][ T30] ? __mutex_lock+0x52a/0xd70 [ 237.838213][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 237.843382][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.854507][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 237.860980][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 237.866143][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.880316][ T30] ? ref_tracker_free+0x643/0x7e0 [ 237.885409][ T30] netlink_rcv_skb+0x1e3/0x430 [ 237.896045][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.904099][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.915561][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.922380][ T30] netlink_unicast+0x7f6/0x990 [ 237.927203][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 237.938207][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.943373][ T30] ? __check_object_size+0x48e/0x900 [ 237.954788][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 237.961009][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.966352][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 237.979984][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.985329][ T30] __sock_sendmsg+0x221/0x270 [ 237.996075][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 238.003500][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.014674][ T30] __sys_sendmsg+0x292/0x380 [ 238.021203][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.026361][ T30] ? __schedule+0x189d/0x4b30 [ 238.038188][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.044572][ T30] ? do_syscall_64+0x100/0x230 [ 238.056383][ T30] ? do_syscall_64+0xb6/0x230 [ 238.061455][ T30] do_syscall_64+0xf3/0x230 [ 238.067020][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.080510][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.086462][ T30] RIP: 0033:0x7fe27037dff9 [ 238.094749][ T30] RSP: 002b:00007fe26fdff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.107857][ T30] RAX: ffffffffffffffda RBX: 00007fe270535f80 RCX: 00007fe27037dff9 [ 238.125064][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 238.135041][ T30] RBP: 00007fe2703f0296 R08: 0000000000000000 R09: 0000000000000000 [ 238.148483][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.156508][ T30] R13: 0000000000000000 R14: 00007fe270535f80 R15: 00007fff95a25fd8 [ 238.173130][ T30] [ 238.176250][ T30] INFO: task syz.0.284:6319 blocked for more than 146 seconds. [ 238.186836][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 238.202549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.214890][ T30] task:syz.0.284 state:D stack:27136 pid:6319 tgid:6317 ppid:5226 flags:0x00000004 [ 238.228209][ T30] Call Trace: [ 238.231542][ T30] [ 238.234495][ T30] __schedule+0x1895/0x4b30 [ 238.247233][ T30] ? __pfx___schedule+0x10/0x10 [ 238.252541][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.257620][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 238.275299][ T30] ? schedule+0x90/0x320 [ 238.282487][ T30] schedule+0x14b/0x320 [ 238.286706][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.299717][ T30] __mutex_lock+0x6a7/0xd70 [ 238.304288][ T30] ? __mutex_lock+0x52a/0xd70 [ 238.314919][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.321736][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.326825][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.338207][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 238.343487][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.367648][ T30] ? ref_tracker_free+0x643/0x7e0 [ 238.375210][ T30] netlink_rcv_skb+0x1e3/0x430 [ 238.386207][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.393209][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.405523][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.412348][ T30] netlink_unicast+0x7f6/0x990 [ 238.417172][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 238.428215][ T30] ? __virt_addr_valid+0x183/0x530 [ 238.433380][ T30] ? __check_object_size+0x48e/0x900 [ 238.447085][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 238.452262][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.457596][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 238.468188][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.477521][ T30] __sock_sendmsg+0x221/0x270 [ 238.484467][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 238.494814][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.502766][ T30] __sys_sendmsg+0x292/0x380 [ 238.507409][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.518394][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.524465][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.538614][ T30] ? exc_page_fault+0x590/0x8c0 [ 238.543527][ T30] ? do_syscall_64+0xb6/0x230 [ 238.555182][ T30] do_syscall_64+0xf3/0x230 [ 238.560188][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.564928][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.578226][ T30] RIP: 0033:0x7fe27037dff9 [ 238.582721][ T30] RSP: 002b:00007fe26fdde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.599018][ T30] RAX: ffffffffffffffda RBX: 00007fe270536058 RCX: 00007fe27037dff9 [ 238.607065][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 238.622302][ T30] RBP: 00007fe2703f0296 R08: 0000000000000000 R09: 0000000000000000 [ 238.633855][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.646788][ T30] R13: 0000000000000001 R14: 00007fe270536058 R15: 00007fff95a25fd8 [ 238.657459][ T30] [ 238.665370][ T30] INFO: task syz.0.284:6320 blocked for more than 147 seconds. [ 238.677383][ T30] Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 238.694055][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.705569][ T30] task:syz.0.284 state:D stack:25008 pid:6320 tgid:6317 ppid:5226 flags:0x00000004 [ 238.718470][ T30] Call Trace: [ 238.721788][ T30] [ 238.724742][ T30] __schedule+0x1895/0x4b30 [ 238.736630][ T30] ? __pfx___schedule+0x10/0x10 [ 238.741881][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.746969][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 238.758682][ T30] ? schedule+0x90/0x320 [ 238.763079][ T30] schedule+0x14b/0x320 [ 238.767266][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.786336][ T30] __mutex_lock+0x6a7/0xd70 [ 238.791710][ T30] ? __mutex_lock+0x52a/0xd70 [ 238.796839][ T30] ? nl802154_pre_doit+0xb5/0xac0 [ 238.811009][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.816102][ T30] nl802154_pre_doit+0xb5/0xac0 [ 238.826957][ T30] ? __nla_parse+0x40/0x60 [ 238.835312][ T30] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 238.846769][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 238.854642][ T30] genl_rcv_msg+0xaaa/0xec0 [ 238.865130][ T30] ? mark_lock+0x9a/0x360 [ 238.872176][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.877272][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.888168][ T30] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 238.893689][ T30] ? __pfx_nl802154_set_max_associations+0x10/0x10 [ 238.908059][ T30] ? __pfx_nl802154_post_doit+0x10/0x10 [ 238.926067][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.932903][ T30] netlink_rcv_skb+0x1e3/0x430 [ 238.937732][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.948158][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.953532][ T30] genl_rcv+0x28/0x40 [ 238.957541][ T30] netlink_unicast+0x7f6/0x990 [ 238.970281][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 238.975626][ T30] ? __virt_addr_valid+0x183/0x530 [ 238.987706][ T30] ? __check_object_size+0x48e/0x900 [ 238.994534][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 239.006569][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.014182][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 239.025008][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.032900][ T30] __sock_sendmsg+0x221/0x270 [ 239.037634][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 239.048182][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.053543][ T30] __sys_sendmsg+0x292/0x380 [ 239.065682][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.073903][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.087319][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.094667][ T30] ? exc_page_fault+0x590/0x8c0 [ 239.106894][ T30] ? do_syscall_64+0xb6/0x230 [ 239.113147][ T30] do_syscall_64+0xf3/0x230 [ 239.117690][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.128201][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.134335][ T30] RIP: 0033:0x7fe27037dff9 [ 239.146438][ T30] RSP: 002b:00007fe26fdbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.157132][ T30] RAX: ffffffffffffffda RBX: 00007fe270536130 RCX: 00007fe27037dff9 [ 239.173321][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 239.182865][ T30] RBP: 00007fe2703f0296 R08: 0000000000000000 R09: 0000000000000000 [ 239.197912][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.214619][ T30] R13: 0000000000000001 R14: 00007fe270536130 R15: 00007fff95a25fd8 [ 239.224274][ T30] [ 239.227411][ T30] [ 239.227411][ T30] Showing all locks held in the system: [ 239.244083][ T30] 7 locks held by kworker/0:1/9: [ 239.251619][ T30] 1 lock held by khungtaskd/30: [ 239.256498][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 239.274810][ T30] 3 locks held by kworker/u8:3/52: [ 239.280453][ T30] #0: ffff88802dcfa948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.298224][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.322331][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 239.337636][ T30] 3 locks held by kworker/0:2/936: [ 239.345921][ T30] 3 locks held by kworker/1:2/939: [ 239.355703][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.374991][ T30] #1: ffffc90003a2fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.386484][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 239.417470][ T30] 2 locks held by getty/4982: [ 239.422560][ T30] #0: ffff88814b9d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 239.439504][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 239.456874][ T30] 3 locks held by kworker/0:3/5231: [ 239.462955][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.479600][ T30] #1: ffffc90003ba7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.498464][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 239.515509][ T30] 1 lock held by syz-executor/5245: [ 239.522233][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 239.538593][ T30] 4 locks held by kworker/u8:16/6217: [ 239.544014][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.562406][ T30] #1: ffffc9003710fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.577172][ T30] #2: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 239.591498][ T30] #3: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 239.606365][ T30] 3 locks held by kworker/u8:22/6237: [ 239.615832][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.631448][ T30] #1: ffffc90016a27d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.647433][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 239.660179][ T30] 2 locks held by syz.2.277/6293: [ 239.665246][ T30] #0: ffff8880780e8e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 239.684117][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 239.693533][ T30] 2 locks held by syz.4.282/6309: [ 239.707747][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 239.727062][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 239.737976][ T30] 2 locks held by syz.4.282/6310: [ 239.750502][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 239.763435][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 239.776494][ T30] 1 lock held by syz.3.283/6312: [ 239.786276][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.805559][ T30] 1 lock held by syz.0.284/6318: [ 239.811966][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.829112][ T30] 1 lock held by syz.0.284/6319: [ 239.834093][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.852065][ T30] 3 locks held by syz.0.284/6320: [ 239.857134][ T30] #0: ffffffff8fd387b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 239.874709][ T30] #1: ffffffff8fd38668 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 239.884130][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nl802154_pre_doit+0xb5/0xac0 [ 239.898531][ T30] 1 lock held by syz-executor/6328: [ 239.903830][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.922158][ T30] 1 lock held by syz-executor/6333: [ 239.927484][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.942079][ T30] 1 lock held by syz-executor/6336: [ 239.947404][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.963987][ T30] 1 lock held by syz-executor/6337: [ 239.969399][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 239.986890][ T30] 1 lock held by syz-executor/6341: [ 239.992571][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.009405][ T30] 8 locks held by syz-executor/6348: [ 240.014756][ T30] #0: ffff88802f4e0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 240.031844][ T30] #1: ffff888079cd8888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 240.046419][ T30] #2: ffff888027221e18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 240.060219][ T30] #3: ffffffff8f5710c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 240.076586][ T30] #4: ffff888030bce0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 240.089852][ T30] #5: ffff888030bcf250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 240.106136][ T30] #6: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 240.123543][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 240.142717][ T30] 1 lock held by syz-executor/6362: [ 240.147980][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.164968][ T30] 1 lock held by syz-executor/6364: [ 240.173898][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.188324][ T30] 1 lock held by syz-executor/6366: [ 240.193577][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.211709][ T30] 1 lock held by syz-executor/6369: [ 240.218059][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.236655][ T30] 1 lock held by syz-executor/6381: [ 240.246653][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.258256][ T30] 1 lock held by syz-executor/6388: [ 240.263493][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.281633][ T30] 1 lock held by syz-executor/6391: [ 240.286888][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.301476][ T30] 1 lock held by syz-executor/6392: [ 240.306716][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.322365][ T30] 1 lock held by syz-executor/6398: [ 240.327622][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 240.341373][ T30] [ 240.343828][ T30] ============================================= [ 240.343828][ T30] [ 240.361654][ T30] NMI backtrace for cpu 1 [ 240.366050][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 240.376237][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.386325][ T30] Call Trace: [ 240.389626][ T30] [ 240.392589][ T30] dump_stack_lvl+0x241/0x360 [ 240.397308][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.402544][ T30] ? __pfx__printk+0x10/0x10 [ 240.407177][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 240.412146][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.417654][ T30] ? _printk+0xd5/0x120 [ 240.421844][ T30] ? __pfx__printk+0x10/0x10 [ 240.426460][ T30] ? __wake_up_klogd+0xcc/0x110 [ 240.431342][ T30] ? __pfx__printk+0x10/0x10 [ 240.435958][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 240.441019][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 240.447033][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 240.453049][ T30] watchdog+0xff4/0x1040 [ 240.457318][ T30] ? watchdog+0x1ea/0x1040 [ 240.461761][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.466465][ T30] kthread+0x2f0/0x390 [ 240.470643][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.475341][ T30] ? __pfx_kthread+0x10/0x10 [ 240.479960][ T30] ret_from_fork+0x4b/0x80 [ 240.484404][ T30] ? __pfx_kthread+0x10/0x10 [ 240.489014][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.493815][ T30] [ 240.497708][ T30] Sending NMI from CPU 1 to CPUs 0: [ 240.503327][ C0] NMI backtrace for cpu 0 [ 240.503342][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 240.503361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.503371][ C0] RIP: 0010:mark_lock+0x151/0x360 [ 240.503391][ C0] Code: 42 80 3c 28 00 74 08 48 89 df e8 5a dd 8d 00 41 bc 01 00 00 00 44 85 33 74 16 44 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 cc cc cc cc e8 94 3b ff ff 85 c0 0f 84 3d 01 00 00 45 89 f6 [ 240.503409][ C0] RSP: 0018:ffffc90000157620 EFLAGS: 00000082 [ 240.503424][ C0] RAX: 0000000000000001 RBX: ffff88801d2c64c0 RCX: ffffffff8170892a [ 240.503436][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9426e8a8 [ 240.503447][ C0] RBP: 0000000000000008 R08: ffffffff9426e8af R09: 1ffffffff284dd15 [ 240.503458][ C0] R10: dffffc0000000000 R11: fffffbfff284dd16 R12: ffff88801d2c5a00 [ 240.503469][ C0] R13: ffff88801d2c64d8 R14: 0000000000000000 R15: ffff88801d2c6500 [ 240.503481][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 240.503494][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.503505][ C0] CR2: 00007ff753d33f98 CR3: 000000000e734000 CR4: 00000000003506f0 [ 240.503519][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.503528][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.503538][ C0] Call Trace: [ 240.503544][ C0] [ 240.503550][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 240.503569][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 240.503592][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.503615][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 240.503635][ C0] ? nmi_handle+0x14f/0x5a0 [ 240.503650][ C0] ? nmi_handle+0x2a/0x5a0 [ 240.503665][ C0] ? mark_lock+0x151/0x360 [ 240.503678][ C0] ? default_do_nmi+0x63/0x160 [ 240.503703][ C0] ? exc_nmi+0x123/0x1f0 [ 240.503720][ C0] ? end_repeat_nmi+0xf/0x53 [ 240.503736][ C0] ? mark_lock+0x9a/0x360 [ 240.503750][ C0] ? mark_lock+0x151/0x360 [ 240.503764][ C0] ? mark_lock+0x151/0x360 [ 240.503778][ C0] ? mark_lock+0x151/0x360 [ 240.503792][ C0] [ 240.503797][ C0] [ 240.503802][ C0] __lock_acquire+0xc35/0x2050 [ 240.503829][ C0] lock_acquire+0x1ed/0x550 [ 240.503849][ C0] ? process_backlog+0x33b/0x15b0 [ 240.503872][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 240.503893][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.503916][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.503937][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 240.503959][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.503980][ C0] process_backlog+0x358/0x15b0 [ 240.503999][ C0] ? process_backlog+0x33b/0x15b0 [ 240.504019][ C0] ? process_backlog+0x33b/0x15b0 [ 240.504041][ C0] ? __pfx_process_backlog+0x10/0x10 [ 240.504060][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.504082][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.504105][ C0] __napi_poll+0xcb/0x490 [ 240.504124][ C0] net_rx_action+0x89b/0x1240 [ 240.504149][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 240.504169][ C0] ? rcu_qs+0xf1/0x190 [ 240.504188][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.504214][ C0] handle_softirqs+0x2c5/0x980 [ 240.504236][ C0] ? run_ksoftirqd+0xca/0x130 [ 240.504258][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 240.504280][ C0] run_ksoftirqd+0xca/0x130 [ 240.504301][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 240.504321][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 240.504343][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 240.504364][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 240.504384][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 240.504403][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 240.504423][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 240.504444][ C0] smpboot_thread_fn+0x544/0xa30 [ 240.504464][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 240.504485][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 240.504505][ C0] kthread+0x2f0/0x390 [ 240.504519][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 240.504538][ C0] ? __pfx_kthread+0x10/0x10 [ 240.504552][ C0] ret_from_fork+0x4b/0x80 [ 240.504573][ C0] ? __pfx_kthread+0x10/0x10 [ 240.504587][ C0] ret_from_fork_asm+0x1a/0x30 [ 240.504613][ C0] [ 240.960417][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 240.967315][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11503-gd505d3593b52 #0 [ 240.977492][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.987571][ T30] Call Trace: [ 240.990863][ T30] [ 240.993816][ T30] dump_stack_lvl+0x241/0x360 [ 240.998533][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.003859][ T30] ? __pfx__printk+0x10/0x10 [ 241.008486][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.014590][ T30] ? vscnprintf+0x5d/0x90 [ 241.018942][ T30] panic+0x349/0x880 [ 241.022863][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 241.029040][ T30] ? __pfx_panic+0x10/0x10 [ 241.033478][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 241.038867][ T30] ? __irq_work_queue_local+0x137/0x410 [ 241.044434][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 241.049829][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 241.056001][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 241.062177][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 241.068360][ T30] watchdog+0x1033/0x1040 [ 241.072743][ T30] ? watchdog+0x1ea/0x1040 [ 241.077193][ T30] ? __pfx_watchdog+0x10/0x10 [ 241.081889][ T30] kthread+0x2f0/0x390 [ 241.085974][ T30] ? __pfx_watchdog+0x10/0x10 [ 241.090676][ T30] ? __pfx_kthread+0x10/0x10 [ 241.095281][ T30] ret_from_fork+0x4b/0x80 [ 241.099715][ T30] ? __pfx_kthread+0x10/0x10 [ 241.104319][ T30] ret_from_fork_asm+0x1a/0x30 [ 241.109113][ T30] [ 241.112262][ T30] Kernel Offset: disabled [ 241.116578][ T30] Rebooting in 86400 seconds..