last executing test programs: 3.841342975s ago: executing program 1 (id=1000): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x3, 0x1fffefff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delchain={0x28c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x234, 0x2, [@TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1a4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="166dd093aa", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="03fec46370fa", @TCF_META_TYPE_VAR="bd2b85", @TCF_META_TYPE_VAR='O', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="f3ba6f", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="2210c2244f264701", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="43fefa1ddadc69f433", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_META={0xb8, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1}, {0xe597, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="4d81eae8e9", @TCF_META_TYPE_VAR="902307e190de436032ef", @TCF_META_TYPE_VAR="a433a0dbfb6b8ad56e", @TCF_META_TYPE_VAR="7f83b4e05907d673ac", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="54936f18d4", @TCF_META_TYPE_VAR="91b3f4151dded3d2"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="8e90fa0429b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9df72972fcb5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xc, 0xa3, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\vil', @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x22, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x1000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x4, 0x581, 0xa, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x9}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x393}, {0xf5f, 0xc, 0xdfbf, 0x7, 0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x28c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa532080005"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800e0001006970366772657461700000000800028004"], 0x3c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c00000400000014000180080016000000000006000600800a00000800"], 0x1034}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf257700000008000300", @ANYRES32=r6, @ANYBLOB="0800ef00000400000500ee00040000000500ee00020000000500ee00000000000500ee0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080c0}, 0x11) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.548883819s ago: executing program 3 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003840), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003880)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x5, @multicast1, @multicast1}, "040022eb00000000"}}}}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$packet(r4, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 3.368101324s ago: executing program 4 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x44, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) 3.297904969s ago: executing program 2 (id=1003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x80000) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 3.042965017s ago: executing program 4 (id=1004): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 2.819985746s ago: executing program 2 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x850d57aaabab29ab}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x434, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80, 0x9}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x114d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x3ba, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @from_mac=@device_b, {0x6, 0x2}}, 0x2, @random=0x6, 0x80, @void, @val={0x1, 0x3, [{0x60, 0x1}, {0x18}, {0x90e5c95d4b52dc94, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x81, "559b1eab3525b1a6c4c53d92bd992bbd5f8ec59a60d46fc840cadf5b078e9c9c6c106184cf3222e802e75e1d6a632bcfd2e16f6e47e3ffa54cb4485f44f14f4aaf4fe83639fc2b609b53ba6874cf7325425013d0082b326c40b21276d508f3c52f4b812415712928d4c5aca269345dbd3634a358b74687364cc7ebb8c17812f8f0"}, {0xdd, 0x35, "709bc6b02a654520514351ac4ea81b9ee5dfec80f39424255cb11c19a91bec92112ef92dcccb62beab235a9d715f28c02fd613810e"}, {0xdd, 0x4e, "d7231a16437a4333724ef8f0b2ac05741fd2633e1a4b9fb7fcfaaed0058abd37bbf5bfa546c2053afdbf1f9c7d611dc044a7a6c9855ab5a7d02180ebe0a118a29cf85ab0995642e6c92d828817f7"}, {0xdd, 0x4b, "358d57c7cbac4a4346c924afb0a8a7e469e28d70317cee4f28ffee8e4044b9577b79e29c884065617b32afbf6c21167ba57670d7232e540955e10250566181a71007bdd2afc742f7d81556"}, {0xdd, 0xca, "7ca307d0e3ba320c905b52cd0d512431e96b1100a3a16437d82b3169d43988169385dc1e2cd5e8af92e65e154474f6634dfdcfcdb7c7ad5baff6a5f73f58a6d850dfe2dad577dfe65dccfbe190a77d21b0bc9721a3c7449b695d89ec98693f7e0db9e66ad3f6e930caecb1cf5c5bb979825342376c6c6ff3dd0958b03e7e16659dca94ed06891f6207b7ba3f89344231246c862215fa788736900acc710cdc1700725a9e38289c61cd6d735793724d07b7f5b11b10d5e30382816f86494be92459379e2b18b458609651"}, {0xdd, 0xa5, "d0eb0184afcaec0718e5d58abed276b74b390f588fb6ba7a8180f8082b7c2fb786c7ee5e6d3a14dfe864156d57a8954ca94782209209f35c58f05afc68a97ed91b30ff7a16cec52f727fcd6d64cb1b0ed73080397808ad6cb302e9070b4e1a6cbb98a681f6b1abf00d4556f675e60462f8bc56a73e4d197c07afe394ac21069292130e4d2053081c268ab0ee89fe682142baf4f6b9af5d50ee4868b1db87b2c05e16e2e742"}, {0xdd, 0xb5, "079a42e71173e81c2347723bfa653a27c51db76378d009dba3c337b6e11b413bafa4bd48e7a43a321d58688ed5889fcc30e60a99648938993d6e9ac224ccf70f97505d90a380f565c1308adfdb0fc75e8b181775d1796039f5515e442b9adc4564530f5d90ffc03ac48d22bd7a6f6f32ca1e20d24add6ef31869fa53ff357f40d43728c92aab6710589f6a8b56c7ebad362a4adf9bda31ad438bcc76552060ba28053a9d4332cd2e89c4d8e3e3f95c3561ef6e1c95"}]}}, @NL80211_ATTR_FRAME={0x3e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @from_mac, {0x8, 0x518}, @value=@ver_80211n={0x0, 0x200, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @tdls_chsw_req={0xc, 0x5, {0x74, 0xc, @void, {0x65, 0x12, {@initial, @device_a, @device_b}}, {0x68, 0x4, {0x9}}}}}}]}, 0x434}, 0x1, 0x0, 0x0, 0x44800}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) (async) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = socket$key(0xf, 0x3, 0x2) close(r11) (async) close(r11) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 2.739326076s ago: executing program 0 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRESDEC=r0, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030000000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350076657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 2.515477638s ago: executing program 3 (id=1007): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x4c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa4000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000001780)={0x1400, 0x10, 0x200, 0x70bd2c, 0x25dfdbfe, {0xd}, [@nested={0x100c, 0x139, 0x0, 0x1, [@generic="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", @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0xce, 0x139, 0x0, 0x0, @binary="1aa7d5003f421cb9743127e5d7763ad17bdb3a081da3c5d607e8fcbb348a8fddbef9b561fb8cbac9e3f67a19792403d358d85a9163e387fd11a1da0160447ae35016aa641d6b8c5e15f6d1b249c69953c49ae4c3264b31e21ec95e1159a05a94186c98b33e8a8b94e7ff58def03e6d78a7b0c67ff30cdbb2b3d468021ce3e5ac66a433515ab9b35d359eda85369913ad59f22212c8bcbcedbb79e942a0cd487e2ddcef7521703a01c960d9c3e05a86e78f1e2a296289c1b6ab70340ac27c15527c36c834ee70b36a09ef"}, @nested={0x301, 0x75, 0x0, 0x1, [@generic="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", @typed={0x52, 0x3f, 0x0, 0x0, @binary="09e49a1c703ea9d07340322bd3551ffb8879dd9f00983f3f39b609ea8cb887c31573629b131184eabd0db81b00049468e1dfc81c96932cd0c888b95d37bbcb4c87346764f6a82d9bfae484a68523"}, @generic="32887e0c915d5c813569d52459912eeae091af103caa472ac9fb8ae1dd5710f6056f98cfd86cc6e8c93316fd08ca4bb22ecd865454836fa173121ea7195d0bc77371d83b414eeb079b899a2c27c79661318778a9864f193680ed83469e4a2ed90350f540a8444a4df508545cd3d82aae9e4a5df7f214737143d1dd1f9f8dc159606f614783a6a9ddc8dddd908b3f36b49764e838c30077405f4dd0acbcfc748bd73c9e2e05decfb159fcf9a1e11fef8176bfca3b8bd683fed399a50b0a82cdddbc3d8627fd4f2fa74c448f20c5e853a07f5b1f26ce57e0324c15793d6e85a86c5d9026d666f3d5ec0971b7ff72d120bc253b1ec0033ea6", @generic="10275887482ebd81572b4c50a4ba4727c103e05f5caeeecc0ca7cba8413c61ef90f8360a504051bdbb1e3f681492d9d6f8cdd15620ff6973b2db4fe59535b1e9b043e58c1e13ae1e5f2e96a202e1aa76cc702932980e5f95df8b45978050124afcdc055c92e212064d892c5fb0499da762cf1212233257080eba3291cf3b47399ced809f2e82fa2123052d8b6ae3c915e2522eaccba8a1bff2b57d2946a6be2b21aeadd4f898296d915ff7681d803ba8db78ff"]}, @typed={0x9, 0x5f, 0x0, 0x0, @str='l2tp\x00'}]}, 0x1400}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @loopback}, 0x2, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x2c}}, 0x0) 2.468036097s ago: executing program 1 (id=1008): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="fdaf00000000000000000e0000ff08000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c001}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x1}, &(0x7f0000000080)=0x8) bind$packet(r3, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r10, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 2.208949318s ago: executing program 0 (id=1009): getpeername$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @netrom, @rose, @remote, @remote, @netrom, @remote, @default]}, &(0x7f0000000080)=0x48) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$netrom(r0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x9) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r2, 0x2, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0xb, 0x7f, 0x7, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8, 0x7808, 0x280000, 0x1}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x7, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x5}, 0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xd955, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x12, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@exit, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x3, 0x2, 0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0xe1, &(0x7f0000000580)=""/225, 0x41000, 0x48, '\x00', r5, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xe, 0x630, 0x3}, 0x10, r6, r1, 0x7, &(0x7f00000009c0)=[r7, r8, r9, r10, r11, 0x1, 0x1], &(0x7f0000000a00)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x5, 0x3, 0x7}, {0x0, 0x4, 0xa, 0xc}, {0x1, 0x2, 0x3, 0xc}, {0x3, 0x1, 0x4, 0x2}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x3, 0xc, 0x6}], 0x10, 0xff, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) sendto$unix(r0, &(0x7f0000000b80)="d8c67ebab5484f7cd8ea0b3ae525c9b8a25f925a5f7d40d9bd907227a9b7440870c030a357189da9be3d025bc1532e4982", 0x31, 0x20041080, &(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}]}]}, @NFT_MSG_NEWCHAIN={0x110, 0x3, 0xa, 0x85, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff987}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xb5, 0xc, "140448cf624ef5240288b5df658032e80dda3e39f45961da08e3a446e96ee6dcfb85cba41b7cb460591e5a1575ef96896cd2d67a1f2fb6b7f746d89a0a66dd08fc7fc678ac2f2159bb2c60befc9acc67ca14a08f5c65ebd9f34ae736cc2269ea8ce55dca64385377fb96e55d1b6e2e962dbc79c29006fbbb217efe3db4c41871e6d06fc533683d4441a488b567d566054a5802fec274198944d1cc36a052c04ab7da93f2fc1cf48db01145f5540a6dc3e4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x801}, 0x2400c815) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r11) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r13, &(0x7f0000001200)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x234, r14, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="abdb678628195eb0e6ee2d740e5d25aa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d514c9abd1089e35"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="58a498fa5b2b84af88006f68ada27beb18a92883ab3711ddac3cf333e4585453"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa733efd876df208"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="99dbc54f99934b1168f2a073b0d982aeddf9b900d44e92075e415511001aff46"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4229787707cbcb30d884840dac7e91c4b509b70daa8681f01afab716618fe57f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="953cd3c76767e7d6492782a63faa1872"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cb273eaad19bb88d"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1c9fb36301ae18228844a12d3b25f5b5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4ac68c44b10f2d2047250b02d9ded2230aedad5abd7d9b8a54246e49b7be17b2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5e88ddc99127539b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1c0684ecb9817e082f12627c490f967591b664a7eca1c457"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a49c4a948712ef693370b2ba40bea26ac220bb43eeefc4a4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="31ef6cfe7def6d7ca7230a3600383d2379c9ca385183a5c4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09aa5ec27b6d6be4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="360be87ec61b0b97a087c46ea0be4650a2c881c93e598d90"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8def4ed4a2ae0dfd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b31cd925607e714e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cbb7c4c0c79528ec9a7165bac6e5b0a4ccda53c4465b80c75bd9a9823f8ed17c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3000000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x63a}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fde4b1f628420d42"}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001240)={0x9}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0xfefb57206f08c75f}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x140d, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x301f533a39698452) sendmsg$nl_route(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)=@ipv4_deladdr={0x68, 0x15, 0x10, 0x70bd29, 0x25dfdbfb, {0x2, 0x1f, 0xa8, 0x0, r12}, [@IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008084}, 0x40010) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r2, 0x7581c000) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', r8, 0x4000, r3}, 0x18) 2.091081111s ago: executing program 4 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000002a00090000000000000000000400002c34001880d26f71d0dd5521a283b207d8784bf60916fb192d7a26ab94442a4f70cae2bb97dab1ace8d95cd836e197a0f4ab55b2ef"], 0x48}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f00000086c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x9, @loopback, 0x8001}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0xd0}}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) 2.011548086s ago: executing program 3 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0xc061, 0x6, 0x510, 0x2a0, 0x370, 0xd0, 0x370, 0x2a0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [0x0, 0xff, 0xff000000], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@ipv6={@remote, @dev, [], [0x0, 0x0, 0x0, 0xffffffff], 'macvlan1\x00', 'batadv0\x00', {}, {}, 0x67}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast2, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 1.965615857s ago: executing program 2 (id=1012): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r3, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000408c}, 0x4) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r4, 0x120, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5eabab9848417c37}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24044084}, 0x40000000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)={0x38, r10, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfa, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100130}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r10, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5005}, 0x20000000) syz_emit_ethernet(0x379, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x343, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x22, "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"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140020001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a310000000030000000030a01010000000000000000010000000900010073797a310000000008000a400000000308000b4000000000140000001000010000000000000000000000000a"], 0x78}}, 0x0) 1.771970305s ago: executing program 0 (id=1013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='$'], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000014e24b3900000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b27, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r2}, &(0x7f0000000300), &(0x7f0000001040)}, 0x20) 1.627928511s ago: executing program 4 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r7, 0x0, 0x1, 0x0, &(0x7f00000010c0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8051}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x30, r4, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000180)="15f2d4afa16ba8da39bf636dffc0b6ccaacb1ead6d21840573af6ea2b683009d6da5dc8f8c74a55573d960ed4b07d37d5e6063cbc9dd4140829b00a30cc8e0960dfd6d2966721c8c45c5efe60c0fb2aed7d44075c36d7de76f4bdac12d513d05358c586e5271fddc5b768c4c1c3c38dea2765586fa8b632c9bdecc5ea4283dbf7a8d1b937a555c1f41e03349bac5c247e78e8b61b29eaa44a8f8d14aa61c80a58a926468790f12888dfc41ac68d4bb7ec4b643383f02c9bfd543c3f23a046ac17b90538a2d138b53bd005dcb", 0xcc, 0x20040010, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6bb3f3a9b4210c7b}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x40000) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, 0x0, 0x1e8) socket$nl_route(0x10, 0x3, 0x0) bind$rds(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="006777f7f1c271f8ac3a0fc2e32c3276b697"], 0x24}}, 0x0) 1.271864534s ago: executing program 0 (id=1015): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000030a01010000000004000000010000000900010073797a300000000028000480080002400000000008000140000000050400040076657468315f746f5f62617461647600090003"], 0xa4}}, 0x0) 1.238416744s ago: executing program 2 (id=1016): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000002a40)=""/4081, 0xff1}], 0x2}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getpeername$inet6(r2, 0x0, &(0x7f0000000100)) write(r1, &(0x7f0000000100)="1400000016004f7fb3e4bf80a000080040030000", 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffeaa) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000040)=r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}]}}}}}}}, 0x0) sendmsg$AUDIT_GET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x2000a880) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.123583882s ago: executing program 3 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10a681, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xbe3) (async) getpeername$qrtr(r1, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0x8001}) 1.120425002s ago: executing program 1 (id=1018): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063011000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000001100)=[{r1, 0x7202}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) listen(r5, 0xff) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0400"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r1, 0x8, 0x0, 0xfffffda6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072013204220000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000008000304619708cb42897a4a64cc88226406abbd164e5c7953f7f01299f5094230bcc5e79aa3256a998870377b5bfbd93da03851f385294394bf420c79839ba5025e7aa005a5a778d9c4f821bf0e", @ANYRES32=r8, @ANYBLOB="05000700000000000500080000000000"], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000100)={r11}, &(0x7f00000002c0)=0x8) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r9, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x802) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 911.790326ms ago: executing program 4 (id=1019): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000004e40)=[{{&(0x7f00000004c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000540)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="14000000000009"], 0x18}}], 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x8902, &(0x7f0000000080)={@loopback={0x8000000000}, @loopback, @empty}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x8902, &(0x7f0000000080)={@loopback={0x8000000000}, @loopback, @empty}) socket$tipc(0x1e, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x80) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x74, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf40}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8bc}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc5bf}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc87}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x44090) 844.777539ms ago: executing program 2 (id=1020): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 832.040089ms ago: executing program 3 (id=1021): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xb0}}, 0x0) 752.120949ms ago: executing program 0 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xe, 0x4d032, 0xffffffffffffffff, 0x0) 641.499424ms ago: executing program 4 (id=1023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x48040) 551.769599ms ago: executing program 1 (id=1024): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff08000400000000", 0x38}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="060000000100000345000000250000723bc7081b0d35a50002000000000097c2edd000000000f93132000000000097480001000000ea1366f64c9f716b9042abc26ad7d31b00000ff5eb38c0d748872f5915ae20c54d0d5427de47a151628a5bec9038006a9482015315751e9db3f778361fdafd30", 0x75}], 0x1) socketpair(0x26, 0x4, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @loopback}}, 0x1e) 487.843349ms ago: executing program 3 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f0000000680)=0x1e) (async) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0010990400000004000500fe808178a8001500030001400200000901ac040098027f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4) (async) connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x3, @mcast1, 0xfffffffc, 0x2}, 0x20) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="00012bbd7000fbdbdf251100000014000180060002002c0000000800050004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048815}, 0x20000000) (async) recvmmsg$unix(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010100000000000000000100000048000000030a01010000000000000000010000020900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002400000000014000000020a36be27704f99d8915df307d637830108000000000000000000000000140000001100"], 0x98}}, 0x0) 431.77279ms ago: executing program 0 (id=1026): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delchain={0x28c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x234, 0x2, [@TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1a4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="166dd093aa", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="03fec46370fa", @TCF_META_TYPE_VAR="bd2b85", @TCF_META_TYPE_VAR='O', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="f3ba6f", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="2210c2244f264701", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="43fefa1ddadc69f433", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_META={0xb8, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1}, {0xe597, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="4d81eae8e9", @TCF_META_TYPE_VAR="902307e190de436032ef", @TCF_META_TYPE_VAR="a433a0dbfb6b8ad56e", @TCF_META_TYPE_VAR="7f83b4e05907d673ac", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="54936f18d4", @TCF_META_TYPE_VAR="91b3f4151dded3d2"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="8e90fa0429b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9df72972fcb5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xc, 0xa3, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\vil', @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x22, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x1000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x4, 0x581, 0xa, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x9}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x393}, {0xf5f, 0xc, 0xdfbf, 0x7, 0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x28c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=0x8) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'ip_vti0\x00', {0xb}, 0x33b}) 293.16738ms ago: executing program 1 (id=1027): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x10, r1, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000692000/0x2000)=nil, 0x2000, 0x1000009, 0x12, r2, 0x6000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000012, 0x1fe05ee569ad10bb, 0xffffffffffffffff, 0x0) 206.042189ms ago: executing program 2 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000025c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090029bd70000000deff1600000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000a001a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 0s ago: executing program 1 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xed, 0x20}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 8.429893][ T6452] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 128.466012][ T6452] batman_adv: batadv1: Removing interface: netdevsim0 [ 128.492471][ T6452] batman_adv: batadv2: Adding interface: netdevsim0 [ 128.510073][ T6452] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.575557][ T6452] batman_adv: batadv2: Interface activated: netdevsim0 [ 128.714131][ T6469] tipc: Enabled bearer , priority 10 [ 128.738433][ T6469] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 129.247332][ T6481] team0: Port device team_slave_0 removed [ 129.376759][ T6506] batman_adv: batadv2: Adding interface: netdevsim0 [ 129.383428][ T6506] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.426445][ T6506] batman_adv: batadv2: Interface activated: netdevsim0 [ 129.494081][ T6510] netlink: 'syz.0.421': attribute type 2 has an invalid length. [ 129.694793][ T6521] __nla_validate_parse: 9 callbacks suppressed [ 129.694816][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 129.839102][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 129.885910][ T6521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.425'. [ 130.019563][ T6543] team0: Device sit2 is of different type [ 130.175016][ T6550] syzkaller0: entered promiscuous mode [ 130.190472][ T6550] syzkaller0: entered allmulticast mode [ 130.211156][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 130.531156][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 132.125919][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 132.192699][ T6583] team0: Port device netdevsim0 removed [ 132.224880][ T6583] batman_adv: batadv0: Adding interface: netdevsim0 [ 132.231914][ T6583] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.258033][ T6583] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 132.376986][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 132.487596][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 132.641845][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 132.683972][ T6624] trusted_key: syz.2.454 sent an empty control message without MSG_MORE. [ 132.822677][ T6624] syzkaller0: entered promiscuous mode [ 132.828487][ T6624] syzkaller0: entered allmulticast mode [ 132.836445][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 132.880663][ T6627] batman_adv: batadv0: Removing interface: netdevsim0 [ 132.939348][ T6627] batman_adv: batadv1: Adding interface: netdevsim0 [ 132.966118][ T6627] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.020353][ T6627] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 133.048606][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055128][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.190206][ T6645] netlink: 'syz.3.461': attribute type 96 has an invalid length. [ 135.665788][ T6683] __nla_validate_parse: 2 callbacks suppressed [ 135.672305][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 135.694020][ T6686] batman_adv: batadv4: Interface deactivated: netdevsim0 [ 135.715974][ T6686] batman_adv: batadv4: Removing interface: netdevsim0 [ 135.739415][ T6686] batman_adv: batadv5: Adding interface: netdevsim0 [ 135.746342][ T6686] batman_adv: batadv5: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.784316][ T6686] batman_adv: batadv5: Interface activated: netdevsim0 [ 135.925456][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 135.982341][ T6709] netlink: 56 bytes leftover after parsing attributes in process `syz.1.480'. [ 136.008914][ T6713] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 136.064341][ T6710] ip6gre1: entered allmulticast mode [ 136.167443][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.485'. [ 136.201244][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 136.230989][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.485'. [ 136.267495][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.485'. [ 136.326638][ T6712] team0 (unregistering): Port device team_slave_0 removed [ 136.339863][ T6712] team0 (unregistering): Port device team_slave_1 removed [ 136.554658][ T8] IPVS: starting estimator thread 0... [ 136.666261][ T6742] IPVS: using max 15 ests per chain, 36000 per kthread [ 136.718291][ T6745] dvmrp0: entered allmulticast mode [ 136.749472][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 136.760101][ T6752] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 136.796523][ T6749] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 136.806377][ T6749] batman_adv: batadv2: Removing interface: netdevsim0 [ 136.838805][ T6749] batman_adv: batadv3: Adding interface: netdevsim0 [ 136.845478][ T6749] batman_adv: batadv3: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.905999][ T6749] batman_adv: batadv3: Interface activated: netdevsim0 [ 136.944115][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 137.208336][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.3.500'. [ 137.563734][ T6788] x_tables: ip_tables: osf match: only valid for protocol 6 [ 137.588971][ T6794] net_ratelimit: 19 callbacks suppressed [ 137.588992][ T6794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.724370][ T6798] openvswitch: netlink: Unknown key attributes 2 [ 137.928663][ T6818] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 138.035256][ T6825] nft_compat: unsupported protocol 1 [ 138.201971][ T6831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.236138][ T6834] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.439512][ T6847] netlink: 'syz.2.526': attribute type 3 has an invalid length. [ 138.453304][ T6845] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 138.532673][ T6849] batman_adv: batadv1: Adding interface: netdevsim0 [ 138.544633][ T6849] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.573878][ T6849] batman_adv: batadv1: Interface activated: netdevsim0 [ 139.330091][ T6865] bridge2: entered promiscuous mode [ 139.352927][ T6865] bridge2: entered allmulticast mode [ 139.393304][ T6865] team0: Port device bridge2 added [ 139.408826][ T6883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.655351][ T6894] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 139.766346][ T6894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.873147][ T6900] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 140.042121][ T6917] netlink: 'syz.0.547': attribute type 4 has an invalid length. [ 140.409714][ T6924] syzkaller0: entered promiscuous mode [ 140.423836][ T6924] syzkaller0: entered allmulticast mode [ 142.462372][ T6960] bridge0: port 3(syz_tun) entered blocking state [ 142.480308][ T6960] bridge0: port 3(syz_tun) entered disabled state [ 142.494522][ T6960] syz_tun: entered allmulticast mode [ 142.513681][ T6960] syz_tun: entered promiscuous mode [ 142.533179][ T6960] bridge0: port 3(syz_tun) entered blocking state [ 142.540931][ T6960] bridge0: port 3(syz_tun) entered forwarding state [ 142.688950][ T6972] __nla_validate_parse: 11 callbacks suppressed [ 142.688970][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 142.819450][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 142.953613][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 143.062759][ T6998] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 143.078619][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 143.101611][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 143.144509][ T7001] batman_adv: batadv5: Interface deactivated: netdevsim0 [ 143.164425][ T7001] batman_adv: batadv5: Removing interface: netdevsim0 [ 143.202237][ T7001] batman_adv: batadv6: Adding interface: netdevsim0 [ 143.228027][ T7001] batman_adv: batadv6: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.254560][ T7010] openvswitch: netlink: Actions may not be safe on all matching packets [ 143.279884][ T7001] batman_adv: batadv6: Interface activated: netdevsim0 [ 143.319150][ T7014] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 143.680883][ T7033] batadv_slave_1: entered promiscuous mode [ 143.698624][ T7033] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 144.058361][ T7030] batadv_slave_1: left promiscuous mode [ 144.182378][ T7046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.553016][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 144.638096][ T7059] batman_adv: batadv1: Removing interface: netdevsim0 [ 144.724710][ T7059] batman_adv: batadv2: Adding interface: netdevsim0 [ 144.732996][ T7059] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.770895][ T7059] batman_adv: batadv2: Not using interface netdevsim0 (retrying later): interface not active [ 145.227242][ T7089] netlink: 240 bytes leftover after parsing attributes in process `syz.3.598'. [ 145.353698][ T7091] syzkaller0: entered promiscuous mode [ 145.372583][ T7091] syzkaller0: entered allmulticast mode [ 145.413024][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 147.370322][ T7106] syzkaller0: entered promiscuous mode [ 147.377452][ T7106] syzkaller0: entered allmulticast mode [ 147.399866][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 147.494753][ T7111] batman_adv: batadv6: Interface deactivated: netdevsim0 [ 147.503077][ T7111] batman_adv: batadv6: Removing interface: netdevsim0 [ 147.517423][ T7111] batman_adv: batadv7: Adding interface: netdevsim0 [ 147.524077][ T7111] batman_adv: batadv7: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.596314][ T7111] batman_adv: batadv7: Interface activated: netdevsim0 [ 153.141030][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 153.800676][ T7253] syzkaller0: entered promiscuous mode [ 153.879878][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 154.102584][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 154.113129][ T7253] syzkaller0: entered allmulticast mode [ 184.247016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.528138][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.534539][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.526031][ T5251] Bluetooth: hci1: command 0x0406 tx timeout [ 198.532124][ T5251] Bluetooth: hci2: command 0x0406 tx timeout [ 198.555873][ T5251] Bluetooth: hci3: command 0x0406 tx timeout [ 256.006314][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.013706][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.625889][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 291.765938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.916277][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.922653][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.949870][ T7303] syzkaller0: entered promiscuous mode [ 339.955415][ T7303] syzkaller0: entered allmulticast mode [ 340.206922][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.226962][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.234701][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.242712][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.251303][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.345879][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.618912][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.628245][ T5247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.636223][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.644205][ T5247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.652371][ T5247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.663075][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.800247][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.836519][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.858422][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.879485][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.887250][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.894635][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.009259][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.023885][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.032004][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.085992][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.109441][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.118031][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.173997][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.183111][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.191212][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.199926][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.211183][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.234899][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.409027][ T5247] Bluetooth: hci1: command tx timeout [ 342.725918][ T5247] Bluetooth: hci5: command tx timeout [ 342.792200][ T5240] bridge0: port 3(syz_tun) entered disabled state [ 342.830715][ T5240] syz_tun (unregistering): left allmulticast mode [ 342.837582][ T5240] syz_tun (unregistering): left promiscuous mode [ 342.846128][ T5240] bridge0: port 3(syz_tun) entered disabled state [ 342.989954][ T5247] Bluetooth: hci0: command tx timeout [ 343.123828][ T1309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.257959][ T1309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.286127][ T5247] Bluetooth: hci3: command tx timeout [ 343.292044][ T5247] Bluetooth: hci6: command tx timeout [ 343.344797][ T1309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.434990][ T7315] chnl_net:caif_netlink_parms(): no params data found [ 343.460132][ T1309] batman_adv: batadv2: Removing interface: netdevsim0 [ 343.468379][ T1309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.711428][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 343.856295][ T1309] bridge_slave_1: left allmulticast mode [ 343.862274][ T1309] bridge_slave_1: left promiscuous mode [ 343.882023][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.909001][ T1309] bridge_slave_0: left allmulticast mode [ 343.914745][ T1309] bridge_slave_0: left promiscuous mode [ 343.930848][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.233524][ T1309] bond2 (unregistering): (slave bridge1): Releasing active interface [ 344.370584][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.382861][ T1309] bond0 (unregistering): Released all slaves [ 344.400304][ T1309] bond1 (unregistering): Released all slaves [ 344.490727][ T5247] Bluetooth: hci1: command tx timeout [ 344.512772][ T1309] bond2 (unregistering): Released all slaves [ 344.595165][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 344.614346][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.627923][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.635197][ T7315] bridge_slave_0: entered allmulticast mode [ 344.642501][ T7315] bridge_slave_0: entered promiscuous mode [ 344.672393][ T1309] tipc: Left network mode [ 344.691540][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.699756][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.707370][ T7315] bridge_slave_1: entered allmulticast mode [ 344.714503][ T7315] bridge_slave_1: entered promiscuous mode [ 344.731590][ T7324] chnl_net:caif_netlink_parms(): no params data found [ 344.761541][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.768958][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.776982][ T7319] bridge_slave_0: entered allmulticast mode [ 344.784162][ T7319] bridge_slave_0: entered promiscuous mode [ 344.792973][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.800338][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.807591][ T5247] Bluetooth: hci5: command tx timeout [ 344.813623][ T7319] bridge_slave_1: entered allmulticast mode [ 344.823217][ T7319] bridge_slave_1: entered promiscuous mode [ 344.888263][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 344.921149][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.985141][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.997794][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.052010][ T5247] Bluetooth: hci0: command tx timeout [ 345.074346][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.114347][ T7315] team0: Port device team_slave_0 added [ 345.192514][ T7315] team0: Port device team_slave_1 added [ 345.239500][ T7319] team0: Port device team_slave_0 added [ 345.288227][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.295232][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.323782][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.336966][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.344103][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.351611][ T7326] bridge_slave_0: entered allmulticast mode [ 345.359584][ T7326] bridge_slave_0: entered promiscuous mode [ 345.366500][ T5237] Bluetooth: hci3: command tx timeout [ 345.368475][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.371988][ T5247] Bluetooth: hci6: command tx timeout [ 345.379321][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.391853][ T7326] bridge_slave_1: entered allmulticast mode [ 345.399292][ T7326] bridge_slave_1: entered promiscuous mode [ 345.417076][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.424212][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.433325][ T7324] bridge_slave_0: entered allmulticast mode [ 345.440862][ T7324] bridge_slave_0: entered promiscuous mode [ 345.459885][ T7319] team0: Port device team_slave_1 added [ 345.488888][ T1309] hsr_slave_0: left promiscuous mode [ 345.494938][ T1309] hsr_slave_1: left promiscuous mode [ 345.515519][ T1309] veth1_macvtap: left promiscuous mode [ 345.522477][ T1309] veth0_macvtap: left promiscuous mode [ 345.528515][ T1309] veth1_vlan: left promiscuous mode [ 345.534099][ T1309] veth0_vlan: left promiscuous mode [ 346.058165][ T1309] team0 (unregistering): Port device team_slave_1 removed [ 346.104450][ T1309] team0 (unregistering): Port device team_slave_0 removed [ 346.518417][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.525430][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.552863][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.587752][ T5247] Bluetooth: hci1: command tx timeout [ 346.597716][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.604899][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.612349][ T7324] bridge_slave_1: entered allmulticast mode [ 346.627219][ T7324] bridge_slave_1: entered promiscuous mode [ 346.728650][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.748685][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.782367][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.795149][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.802307][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.828960][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.863911][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.886097][ T5247] Bluetooth: hci5: command tx timeout [ 346.896886][ T7315] hsr_slave_0: entered promiscuous mode [ 346.903570][ T7315] hsr_slave_1: entered promiscuous mode [ 346.910001][ T7315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.917761][ T7315] Cannot create hsr debugfs directory [ 346.927887][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.963207][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.986270][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.993410][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.001819][ T7322] bridge_slave_0: entered allmulticast mode [ 347.023831][ T7322] bridge_slave_0: entered promiscuous mode [ 347.032569][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.039997][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.048764][ T7322] bridge_slave_1: entered allmulticast mode [ 347.056073][ T7322] bridge_slave_1: entered promiscuous mode [ 347.064697][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.126426][ T5247] Bluetooth: hci0: command tx timeout [ 347.162641][ T7324] team0: Port device team_slave_0 added [ 347.225328][ T7324] team0: Port device team_slave_1 added [ 347.257350][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.274499][ T7326] team0: Port device team_slave_0 added [ 347.326740][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.340347][ T1309] IPVS: stop unused estimator thread 0... [ 347.357604][ T7326] team0: Port device team_slave_1 added [ 347.376963][ T7319] hsr_slave_0: entered promiscuous mode [ 347.386471][ T7319] hsr_slave_1: entered promiscuous mode [ 347.415630][ T7319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.423664][ T7319] Cannot create hsr debugfs directory [ 347.437194][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.444188][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.484823][ T5247] Bluetooth: hci6: command tx timeout [ 347.490488][ T5237] Bluetooth: hci3: command tx timeout [ 347.490653][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.556083][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.563087][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.589801][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.605562][ T7322] team0: Port device team_slave_0 added [ 347.617131][ T7322] team0: Port device team_slave_1 added [ 347.706239][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.713302][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.739550][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.752433][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.759691][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.785977][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.852139][ T7324] hsr_slave_0: entered promiscuous mode [ 347.858853][ T7324] hsr_slave_1: entered promiscuous mode [ 347.867290][ T7324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.874897][ T7324] Cannot create hsr debugfs directory [ 347.895148][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.902200][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.929055][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.994234][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.001531][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.037499][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.104643][ T7315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.158721][ T1309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.201583][ T7326] hsr_slave_0: entered promiscuous mode [ 348.208334][ T7326] hsr_slave_1: entered promiscuous mode [ 348.214535][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.226205][ T7326] Cannot create hsr debugfs directory [ 348.255239][ T7315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.308424][ T1309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.395199][ T7315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.439411][ T7322] hsr_slave_0: entered promiscuous mode [ 348.446151][ T7322] hsr_slave_1: entered promiscuous mode [ 348.452366][ T7322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.461168][ T7322] Cannot create hsr debugfs directory [ 348.489542][ T1309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.525098][ T7315] batman_adv: batadv7: Interface deactivated: netdevsim0 [ 348.555447][ T7315] batman_adv: batadv7: Removing interface: netdevsim0 [ 348.563143][ T7315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.613848][ T1309] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 348.646504][ T5237] Bluetooth: hci1: command tx timeout [ 348.676911][ T1309] batman_adv: batadv3: Removing interface: netdevsim0 [ 348.684755][ T1309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.859446][ T7319] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.954625][ T7319] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.966669][ T5237] Bluetooth: hci5: command tx timeout [ 349.043481][ T7319] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.129126][ T7319] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 349.148728][ T7319] batman_adv: batadv2: Removing interface: netdevsim0 [ 349.156698][ T7319] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.206038][ T5237] Bluetooth: hci0: command tx timeout [ 349.256587][ T1309] bridge_slave_1: left allmulticast mode [ 349.262298][ T1309] bridge_slave_1: left promiscuous mode [ 349.281893][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.291842][ T1309] bridge_slave_0: left allmulticast mode [ 349.299355][ T1309] bridge_slave_0: left promiscuous mode [ 349.305101][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.319757][ T1309] bridge_slave_1: left allmulticast mode [ 349.325479][ T1309] bridge_slave_1: left promiscuous mode [ 349.340674][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.350522][ T1309] bridge_slave_0: left allmulticast mode [ 349.356493][ T1309] bridge_slave_0: left promiscuous mode [ 349.362218][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.373856][ T1309] bridge_slave_1: left allmulticast mode [ 349.380497][ T1309] bridge_slave_1: left promiscuous mode [ 349.387176][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.396191][ T1309] bridge_slave_0: left allmulticast mode [ 349.401968][ T1309] bridge_slave_0: left promiscuous mode [ 349.408959][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.525906][ T5237] Bluetooth: hci3: command tx timeout [ 349.526065][ T5247] Bluetooth: hci6: command tx timeout [ 350.029049][ T1309] dvmrp0 (unregistering): left allmulticast mode [ 350.130968][ T1309] team0: Port device bridge0 removed [ 350.137572][ T1309] bridge0 (unregistering): left allmulticast mode [ 350.237428][ T1309] team0: Port device bridge2 removed [ 350.646568][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.659241][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.671142][ T1309] bond0 (unregistering): Released all slaves [ 350.804320][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.816703][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.830324][ T1309] bond0 (unregistering): Released all slaves [ 350.847557][ T1309] bond1 (unregistering): Released all slaves [ 350.972920][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.984670][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.996290][ T1309] bond0 (unregistering): Released all slaves [ 351.130982][ T7319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.161514][ T7319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.191718][ T1309] tipc: Disabling bearer [ 351.211870][ T1309] tipc: Left network mode [ 351.293779][ T7324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.311933][ T7319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.322781][ T7319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.332440][ T7315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.344441][ T7315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.403836][ T7324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.428892][ T7315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.442226][ T7315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.491029][ T7324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.587166][ T7324] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 351.607741][ T7324] batman_adv: batadv1: Removing interface: netdevsim0 [ 351.615627][ T7324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.859063][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.978265][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.001198][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.008369][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.049572][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.056765][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.131465][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.180766][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.254238][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.261387][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.309271][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.316453][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.347173][ T1309] hsr_slave_0: left promiscuous mode [ 352.369480][ T1309] hsr_slave_1: left promiscuous mode [ 352.376561][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.384145][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.392652][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.401181][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.414124][ T1309] hsr_slave_0: left promiscuous mode [ 352.420320][ T1309] hsr_slave_1: left promiscuous mode [ 352.426517][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.433969][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.443657][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.451863][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.461810][ T1309] hsr_slave_0: left promiscuous mode [ 352.468263][ T1309] hsr_slave_1: left promiscuous mode [ 352.474300][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.481959][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.490043][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.497672][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.542102][ T1309] veth1_macvtap: left promiscuous mode [ 352.549387][ T1309] veth0_macvtap: left promiscuous mode [ 352.555080][ T1309] veth1_vlan: left promiscuous mode [ 352.563285][ T1309] veth0_vlan: left promiscuous mode [ 352.571206][ T1309] veth1_macvtap: left promiscuous mode [ 352.577374][ T1309] veth0_macvtap: left promiscuous mode [ 352.583022][ T1309] veth1_vlan: left promiscuous mode [ 352.588441][ T1309] veth0_vlan: left promiscuous mode [ 352.596114][ T1309] veth1_macvtap: left promiscuous mode [ 352.601666][ T1309] veth0_macvtap: left promiscuous mode [ 353.255849][ T1309] team0 (unregistering): Port device team_slave_1 removed [ 353.299437][ T1309] team0 (unregistering): Port device team_slave_0 removed [ 354.133018][ T1309] team0 (unregistering): Port device team_slave_1 removed [ 354.175232][ T1309] team0 (unregistering): Port device team_slave_0 removed [ 355.200091][ T7319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.507760][ T7324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.532529][ T7324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.616602][ T7324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.638208][ T7324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.709007][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.730877][ T7326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.755305][ T7326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.770197][ T7326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.795914][ T7326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.829518][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.941166][ T7315] veth0_vlan: entered promiscuous mode [ 356.002119][ T7322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.013749][ T7315] veth1_vlan: entered promiscuous mode [ 356.049325][ T7322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.095063][ T7322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.108567][ T7322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.205601][ T7319] veth0_vlan: entered promiscuous mode [ 356.282358][ T7319] veth1_vlan: entered promiscuous mode [ 356.301257][ T7315] veth0_macvtap: entered promiscuous mode [ 356.318776][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.340786][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.370365][ T7315] veth1_macvtap: entered promiscuous mode [ 356.394168][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.440621][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.471528][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.478697][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.496593][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.507412][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.520496][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.564114][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.571260][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.587685][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.594773][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.605537][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.613453][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.631865][ T7315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.642591][ T7315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.654130][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.681379][ T7319] veth0_macvtap: entered promiscuous mode [ 356.691459][ T7319] veth1_macvtap: entered promiscuous mode [ 356.712109][ T7315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.728251][ T7315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.737032][ T7315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.746489][ T7315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.783146][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.806994][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.817763][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.830577][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.841100][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.852195][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.863176][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.874246][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.884169][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.895017][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.907829][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.951090][ T7319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.961008][ T7319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.971212][ T7319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.980032][ T7319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.029948][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.101646][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.108845][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.119776][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.127050][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.261562][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.285418][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.327702][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.335588][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.433838][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.460557][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.468902][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.477190][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.611630][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.640966][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.710010][ T7384] caif0: entered promiscuous mode [ 357.715206][ T7384] caif0: entered allmulticast mode [ 357.810442][ T7326] veth0_vlan: entered promiscuous mode [ 357.834093][ T7326] veth1_vlan: entered promiscuous mode [ 357.908493][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.947386][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 357.961816][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 357.987202][ T7390] dummy0: entered promiscuous mode [ 358.002338][ T7390] bond0: entered promiscuous mode [ 358.011245][ T7390] bond_slave_0: entered promiscuous mode [ 358.017508][ T7390] bond_slave_1: entered promiscuous mode [ 358.034219][ T7326] veth0_macvtap: entered promiscuous mode [ 358.061937][ T7394] tipc: Started in network mode [ 358.075223][ T7394] tipc: Node identity f7, cluster identity 4711 [ 358.085138][ T7394] tipc: Node number set to 247 [ 358.101128][ T7326] veth1_macvtap: entered promiscuous mode [ 358.193922][ T7322] veth0_vlan: entered promiscuous mode [ 358.209515][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.221179][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.235976][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.247592][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.257520][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.271683][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.283951][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 358.302574][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.322351][ T7324] veth0_vlan: entered promiscuous mode [ 358.353196][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.364488][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.374709][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.393812][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.424059][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.445814][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.457401][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.499914][ T7322] veth1_vlan: entered promiscuous mode [ 358.530865][ T7326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.551267][ T7326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.560246][ T7326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.570393][ T7326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.593618][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 358.634563][ T7324] veth1_vlan: entered promiscuous mode [ 358.744248][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.767420][ T7322] veth0_macvtap: entered promiscuous mode [ 358.775959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.787144][ T7322] veth1_macvtap: entered promiscuous mode [ 358.864264][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.870633][ T7324] veth0_macvtap: entered promiscuous mode [ 358.878165][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.915545][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.926797][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.937244][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.948112][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.958300][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.969339][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.979454][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.990108][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.001583][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.032554][ T7324] veth1_macvtap: entered promiscuous mode [ 359.055545][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.072742][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.096427][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.115700][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.127918][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.139144][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.154193][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.164847][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.179350][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.239857][ T7322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.257347][ T7322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.273415][ T7322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.283133][ T7322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.310054][ T7430] syz.0.703 (7430) used greatest stack depth: 17952 bytes left [ 359.378732][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.426753][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.453801][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.479844][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.500428][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.511625][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.526953][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.539017][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.550501][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.561121][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.574624][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.594251][ T7447] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.627449][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.639788][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.652614][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.664134][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.680550][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.693822][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.703752][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.719766][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.729702][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.741803][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.753466][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.788656][ T7324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.801629][ T7324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.810462][ T7324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.819497][ T7324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.879454][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.892872][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.954280][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.970791][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.028869][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.052975][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.127725][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.154631][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.533811][ T7480] veth0_to_hsr: invalid flags given to default FDB implementation [ 360.810751][ T7495] netlink: zone id is out of range [ 360.956648][ T7502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.188551][ T7515] netlink: 830 bytes leftover after parsing attributes in process `syz.1.726'. [ 361.312814][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 361.558126][ T7526] Bluetooth: MGMT ver 1.23 [ 361.683325][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.733'. [ 361.784365][ T7533] netlink: 'syz.1.734': attribute type 6 has an invalid length. [ 361.810953][ T7535] tipc: Started in network mode [ 361.818963][ T7535] tipc: Node identity ba3e17618432, cluster identity 4711 [ 361.826932][ T7535] tipc: Enabled bearer , priority 0 [ 361.838689][ T7535] syzkaller0: MTU too low for tipc bearer [ 361.844491][ T7535] tipc: Disabling bearer [ 361.913497][ T7536] xt_CT: No such helper "pptp" [ 361.914732][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 361.931143][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.734'. [ 362.014502][ T7543] dccp_invalid_packet: pskb_may_pull failed [ 362.821951][ T7586] netlink: 'syz.1.746': attribute type 4 has an invalid length. [ 363.591104][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 363.611721][ T7626] macsec0: entered promiscuous mode [ 364.710801][ T7664] netlink: 72 bytes leftover after parsing attributes in process `syz.3.762'. [ 364.804849][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.763'. [ 364.984898][ T7680] openvswitch: netlink: Missing key (keys=40, expected=100) [ 365.066080][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 365.257339][ T7688] netlink: 4088 bytes leftover after parsing attributes in process `syz.0.769'. [ 365.281275][ T7688] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.295002][ T7695] netlink: 80 bytes leftover after parsing attributes in process `syz.3.770'. [ 365.479808][ T7710] netlink: 'syz.3.774': attribute type 4 has an invalid length. [ 365.643254][ T7718] netlink: 'syz.1.780': attribute type 11 has an invalid length. [ 365.971808][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 365.983848][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 366.091507][ T7738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.784'. [ 366.121341][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 366.519309][ T7751] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 366.815872][ T5237] Bluetooth: hci3: command 0x0405 tx timeout [ 367.160585][ T7783] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 367.744747][ T7808] netlink: 'syz.4.807': attribute type 11 has an invalid length. [ 368.470596][ T7833] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 368.558883][ T7836] FAULT_INJECTION: forcing a failure. [ 368.558883][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 368.575915][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.3.815 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 368.586581][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 368.596698][ T7836] Call Trace: [ 368.597108][ T7837] __nla_validate_parse: 6 callbacks suppressed [ 368.597127][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 368.599992][ T7836] [ 368.617933][ T7836] dump_stack_lvl+0x241/0x360 [ 368.622670][ T7836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.627920][ T7836] ? __pfx__printk+0x10/0x10 [ 368.632569][ T7836] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 368.638605][ T7836] ? __pfx___might_resched+0x10/0x10 [ 368.643943][ T7836] ? kasan_save_track+0x51/0x80 [ 368.648840][ T7836] ? __kasan_kmalloc+0x98/0xb0 [ 368.653671][ T7836] should_fail_ex+0x3b0/0x4e0 [ 368.658407][ T7836] should_failslab+0xac/0x100 [ 368.663137][ T7836] ? __alloc_skb+0x1c3/0x440 [ 368.667771][ T7836] kmem_cache_alloc_node_noprof+0x71/0x320 [ 368.673640][ T7836] __alloc_skb+0x1c3/0x440 [ 368.678193][ T7836] ? __pfx___alloc_skb+0x10/0x10 [ 368.683179][ T7836] _sctp_make_chunk+0x58/0x460 [ 368.687992][ T7836] sctp_make_datafrag_empty+0xa6/0x510 [ 368.693494][ T7836] ? sctp_assoc_add_peer+0x1e0/0x15c0 [ 368.698916][ T7836] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 368.704510][ T7836] ? sctp_auth_send_cid+0x69/0x250 [ 368.709674][ T7836] sctp_datamsg_from_user+0x740/0xf20 [ 368.715113][ T7836] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 368.720460][ T7836] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.726494][ T7836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.726770][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.814'. [ 368.732861][ T7836] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 368.732901][ T7836] ? __local_bh_enable_ip+0x168/0x200 [ 368.752877][ T7836] ? sctp_sendmsg+0xbb9/0x3520 [ 368.757685][ T7836] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 368.763458][ T7836] ? sctp_sendmsg_check_sflags+0x181/0x2c0 [ 368.769315][ T7836] sctp_sendmsg+0x1bc3/0x3520 [ 368.774056][ T7836] ? aa_sk_perm+0x96d/0xab0 [ 368.778604][ T7836] ? __pfx_sctp_sendmsg+0x10/0x10 [ 368.783680][ T7836] ? __pfx_aa_sk_perm+0x10/0x10 [ 368.788570][ T7836] ? inet_sendmsg+0x330/0x390 [ 368.793298][ T7836] __sock_sendmsg+0x1a6/0x270 [ 368.798035][ T7836] __sys_sendto+0x39b/0x4f0 [ 368.802590][ T7836] ? __pfx___sys_sendto+0x10/0x10 [ 368.807660][ T7836] ? __mutex_unlock_slowpath+0x21d/0x750 [ 368.813376][ T7836] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.819434][ T7836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.825823][ T7836] __x64_sys_sendto+0xde/0x100 [ 368.830640][ T7836] do_syscall_64+0xf3/0x230 [ 368.835202][ T7836] ? clear_bhb_loop+0x35/0x90 [ 368.839932][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.845906][ T7836] RIP: 0033:0x7f0033b7dff9 [ 368.850395][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.870057][ T7836] RSP: 002b:00007f00335ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 368.872082][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 368.878520][ T7836] RAX: ffffffffffffffda RBX: 00007f0033d35f80 RCX: 00007f0033b7dff9 [ 368.878546][ T7836] RDX: 0000000000034000 RSI: 0000000020000040 RDI: 0000000000000003 [ 368.878563][ T7836] RBP: 00007f00335ff090 R08: 0000000000000000 R09: 0000000000000044 [ 368.878579][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.878595][ T7836] R13: 0000000000000000 R14: 00007f0033d35f80 R15: 00007ffcb6e30e88 [ 368.878627][ T7836] [ 368.884770][ T7841] FAULT_INJECTION: forcing a failure. [ 368.884770][ T7841] name failslab, interval 1, probability 0, space 0, times 0 [ 368.944629][ T7844] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 368.982830][ T7841] CPU: 1 UID: 0 PID: 7841 Comm: syz.4.818 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 368.993517][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 369.003635][ T7841] Call Trace: [ 369.006966][ T7841] [ 369.009943][ T7841] dump_stack_lvl+0x241/0x360 [ 369.014700][ T7841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.019956][ T7841] ? __pfx__printk+0x10/0x10 [ 369.023712][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 369.024599][ T7841] should_fail_ex+0x3b0/0x4e0 [ 369.038209][ T7841] should_failslab+0xac/0x100 [ 369.042944][ T7841] ? sctp_add_bind_addr+0x89/0x3a0 [ 369.048115][ T7841] __kmalloc_cache_noprof+0x6c/0x2c0 [ 369.053496][ T7841] sctp_add_bind_addr+0x89/0x3a0 [ 369.058501][ T7841] sctp_copy_local_addr_list+0x311/0x500 [ 369.064284][ T7841] ? sctp_copy_local_addr_list+0xab/0x500 [ 369.070064][ T7841] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 369.076289][ T7841] ? sctp_v4_is_any+0x35/0x60 [ 369.081035][ T7841] sctp_bind_addr_copy+0xad/0x3b0 [ 369.086126][ T7841] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 369.092526][ T7841] sctp_connect_new_asoc+0x2f3/0x6c0 [ 369.097897][ T7841] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 369.103753][ T7841] ? sctp_sendmsg+0xbb9/0x3520 [ 369.108544][ T7841] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 369.114386][ T7841] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 369.120296][ T7841] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 369.125864][ T7841] sctp_sendmsg+0x219a/0x3520 [ 369.130579][ T7841] ? aa_sk_perm+0x96d/0xab0 [ 369.135091][ T7841] ? __pfx_sctp_sendmsg+0x10/0x10 [ 369.140140][ T7841] ? __pfx_aa_sk_perm+0x10/0x10 [ 369.145019][ T7841] ? inet_sendmsg+0x330/0x390 [ 369.149720][ T7841] __sock_sendmsg+0x1a6/0x270 [ 369.154422][ T7841] __sys_sendto+0x39b/0x4f0 [ 369.158956][ T7841] ? __pfx___sys_sendto+0x10/0x10 [ 369.164006][ T7841] ? __mutex_unlock_slowpath+0x21d/0x750 [ 369.169681][ T7841] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 369.175689][ T7841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.182047][ T7841] __x64_sys_sendto+0xde/0x100 [ 369.186830][ T7841] do_syscall_64+0xf3/0x230 [ 369.191350][ T7841] ? clear_bhb_loop+0x35/0x90 [ 369.196057][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.201973][ T7841] RIP: 0033:0x7f8c3b57dff9 [ 369.206409][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.226055][ T7841] RSP: 002b:00007f8c3c2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 369.234507][ T7841] RAX: ffffffffffffffda RBX: 00007f8c3b736058 RCX: 00007f8c3b57dff9 [ 369.242495][ T7841] RDX: 000000000000ffca RSI: 00000000200000c0 RDI: 0000000000000003 [ 369.250483][ T7841] RBP: 00007f8c3c2d2090 R08: 00000000200001c0 R09: 0000000000000010 [ 369.258472][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.266479][ T7841] R13: 0000000000000001 R14: 00007f8c3b736058 R15: 00007ffe4e207d08 [ 369.274509][ T7841] [ 369.561526][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 369.596703][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.614673][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.626235][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.647630][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 369.665413][ T7865] batman_adv: batadv1: Adding interface: netdevsim0 [ 369.673941][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.683550][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 369.684048][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 369.695369][ T7865] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.700939][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 369.727131][ T7865] batman_adv: batadv1: Interface activated: netdevsim0 [ 369.742684][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.754292][ T7860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.823'. [ 370.178853][ T7862] chnl_net:caif_netlink_parms(): no params data found [ 370.216830][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 370.284228][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.295234][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.304919][ T7862] bridge_slave_0: entered allmulticast mode [ 370.320257][ T7862] bridge_slave_0: entered promiscuous mode [ 370.329443][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.336787][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.344265][ T7862] bridge_slave_1: entered allmulticast mode [ 370.358338][ T7862] bridge_slave_1: entered promiscuous mode [ 370.448787][ T7862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.520365][ T7862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.662820][ T7862] team0: Port device team_slave_0 added [ 370.690214][ T7862] team0: Port device team_slave_1 added [ 370.835096][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.854665][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.922362][ T7862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.954420][ T7918] FAULT_INJECTION: forcing a failure. [ 370.954420][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 370.993742][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.0.840 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 371.004421][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.014524][ T7918] Call Trace: [ 371.017847][ T7918] [ 371.020818][ T7918] dump_stack_lvl+0x241/0x360 [ 371.025548][ T7918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.030797][ T7918] ? __pfx__printk+0x10/0x10 [ 371.035508][ T7918] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 371.041102][ T7918] ? __pfx___might_resched+0x10/0x10 [ 371.046425][ T7918] should_fail_ex+0x3b0/0x4e0 [ 371.051248][ T7918] ? _sctp_make_chunk+0x161/0x460 [ 371.056316][ T7918] should_failslab+0xac/0x100 [ 371.061039][ T7918] ? _sctp_make_chunk+0x161/0x460 [ 371.066116][ T7918] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 371.071546][ T7918] _sctp_make_chunk+0x161/0x460 [ 371.076453][ T7918] sctp_make_datafrag_empty+0xa6/0x510 [ 371.081969][ T7918] ? sctp_assoc_add_peer+0x1e0/0x15c0 [ 371.087384][ T7918] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 371.092952][ T7918] ? sctp_auth_send_cid+0x69/0x250 [ 371.098103][ T7918] sctp_datamsg_from_user+0x740/0xf20 [ 371.103541][ T7918] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 371.108876][ T7918] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 371.114888][ T7918] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 371.121282][ T7918] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 371.127035][ T7918] ? __local_bh_enable_ip+0x168/0x200 [ 371.132421][ T7918] ? sctp_sendmsg+0xbb9/0x3520 [ 371.137197][ T7918] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 371.142947][ T7918] ? sctp_sendmsg_check_sflags+0x181/0x2c0 [ 371.148798][ T7918] sctp_sendmsg+0x1bc3/0x3520 [ 371.153543][ T7918] ? aa_sk_perm+0x96d/0xab0 [ 371.158085][ T7918] ? __pfx_sctp_sendmsg+0x10/0x10 [ 371.163156][ T7918] ? __pfx_aa_sk_perm+0x10/0x10 [ 371.168047][ T7918] ? inet_sendmsg+0x330/0x390 [ 371.172794][ T7918] __sock_sendmsg+0x1a6/0x270 [ 371.177537][ T7918] __sys_sendto+0x39b/0x4f0 [ 371.182105][ T7918] ? __pfx___sys_sendto+0x10/0x10 [ 371.187179][ T7918] ? __mutex_unlock_slowpath+0x21d/0x750 [ 371.192894][ T7918] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 371.198952][ T7918] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 371.205360][ T7918] __x64_sys_sendto+0xde/0x100 [ 371.210182][ T7918] do_syscall_64+0xf3/0x230 [ 371.214746][ T7918] ? clear_bhb_loop+0x35/0x90 [ 371.219483][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.225469][ T7918] RIP: 0033:0x7f78a877dff9 [ 371.229934][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.249591][ T7918] RSP: 002b:00007f78a9498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.258066][ T7918] RAX: ffffffffffffffda RBX: 00007f78a8935f80 RCX: 00007f78a877dff9 [ 371.266091][ T7918] RDX: 0000000000034000 RSI: 0000000020000040 RDI: 0000000000000003 [ 371.274119][ T7918] RBP: 00007f78a9498090 R08: 0000000000000000 R09: 0000000000000044 [ 371.282143][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.290161][ T7918] R13: 0000000000000000 R14: 00007f78a8935f80 R15: 00007fffbecb2a98 [ 371.298198][ T7918] [ 371.319223][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.344219][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.371045][ T7862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.492165][ T7927] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 371.507162][ T7862] hsr_slave_0: entered promiscuous mode [ 371.522745][ T7862] hsr_slave_1: entered promiscuous mode [ 371.597477][ T7937] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 371.614074][ T7927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 371.672314][ T7927] wg2: entered promiscuous mode [ 371.690201][ T7927] wg2: entered allmulticast mode [ 371.846378][ T5247] Bluetooth: hci2: command tx timeout [ 371.949522][ T7862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.041972][ T7955] FAULT_INJECTION: forcing a failure. [ 372.041972][ T7955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.075489][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz.3.851 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 372.086157][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.096416][ T7955] Call Trace: [ 372.099744][ T7955] [ 372.102718][ T7955] dump_stack_lvl+0x241/0x360 [ 372.107449][ T7955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.112717][ T7955] ? __pfx__printk+0x10/0x10 [ 372.117336][ T7955] ? __pfx_lock_release+0x10/0x10 [ 372.122486][ T7955] should_fail_ex+0x3b0/0x4e0 [ 372.127210][ T7955] _copy_from_iter+0x1ed/0x1d60 [ 372.132147][ T7955] ? __virt_addr_valid+0x183/0x530 [ 372.137288][ T7955] ? __pfx_lock_release+0x10/0x10 [ 372.142345][ T7955] ? _sctp_make_chunk+0x161/0x460 [ 372.147393][ T7955] ? __pfx__copy_from_iter+0x10/0x10 [ 372.152694][ T7955] ? _sctp_make_chunk+0x161/0x460 [ 372.157736][ T7955] ? __virt_addr_valid+0x183/0x530 [ 372.162859][ T7955] ? __virt_addr_valid+0x183/0x530 [ 372.167984][ T7955] ? __virt_addr_valid+0x45f/0x530 [ 372.173106][ T7955] ? __phys_addr_symbol+0x2f/0x70 [ 372.178150][ T7955] ? __check_object_size+0x48e/0x900 [ 372.183472][ T7955] sctp_user_addto_chunk+0x8c/0x220 [ 372.188690][ T7955] sctp_datamsg_from_user+0x760/0xf20 [ 372.194093][ T7955] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 372.199410][ T7955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.205414][ T7955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.211765][ T7955] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 372.217503][ T7955] ? __local_bh_enable_ip+0x168/0x200 [ 372.222912][ T7955] ? sctp_sendmsg+0xbb9/0x3520 [ 372.227695][ T7955] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 372.233437][ T7955] ? sctp_sendmsg_check_sflags+0x181/0x2c0 [ 372.239271][ T7955] sctp_sendmsg+0x1bc3/0x3520 [ 372.243975][ T7955] ? aa_sk_perm+0x96d/0xab0 [ 372.248485][ T7955] ? __pfx_sctp_sendmsg+0x10/0x10 [ 372.253532][ T7955] ? __pfx_aa_sk_perm+0x10/0x10 [ 372.258400][ T7955] ? inet_sendmsg+0x330/0x390 [ 372.263099][ T7955] __sock_sendmsg+0x1a6/0x270 [ 372.267802][ T7955] __sys_sendto+0x39b/0x4f0 [ 372.272317][ T7955] ? __pfx___sys_sendto+0x10/0x10 [ 372.277358][ T7955] ? __mutex_unlock_slowpath+0x21d/0x750 [ 372.283024][ T7955] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.289043][ T7955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.295429][ T7955] __x64_sys_sendto+0xde/0x100 [ 372.300210][ T7955] do_syscall_64+0xf3/0x230 [ 372.304735][ T7955] ? clear_bhb_loop+0x35/0x90 [ 372.309424][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.315349][ T7955] RIP: 0033:0x7f0033b7dff9 [ 372.319779][ T7955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.339416][ T7955] RSP: 002b:00007f00335ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.347855][ T7955] RAX: ffffffffffffffda RBX: 00007f0033d35f80 RCX: 00007f0033b7dff9 [ 372.355845][ T7955] RDX: 0000000000034000 RSI: 0000000020000040 RDI: 0000000000000003 [ 372.363846][ T7955] RBP: 00007f00335ff090 R08: 0000000000000000 R09: 0000000000000044 [ 372.371858][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.379849][ T7955] R13: 0000000000000000 R14: 00007f0033d35f80 R15: 00007ffcb6e30e88 [ 372.387868][ T7955] [ 372.403351][ T7862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.561203][ T7862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.692389][ T7862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.910111][ T7979] geneve2: entered promiscuous mode [ 372.915404][ T7979] geneve2: entered allmulticast mode [ 373.080089][ T7862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.116446][ T7862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.148763][ T7862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.204680][ T7862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.280619][ T7996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.292374][ T7996] batadv_slave_0: entered promiscuous mode [ 373.314831][ T7999] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 373.340642][ T8002] batman_adv: batadv1: Adding interface: netdevsim0 [ 373.370675][ T8002] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.445104][ T8002] batman_adv: batadv1: Interface activated: netdevsim0 [ 373.712814][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.774467][ T7862] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.851913][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.859135][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.926200][ T5247] Bluetooth: hci2: command tx timeout [ 373.970868][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.978084][ T7615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.083547][ T8039] __nla_validate_parse: 7 callbacks suppressed [ 374.083571][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 374.277416][ T8050] FAULT_INJECTION: forcing a failure. [ 374.277416][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.306582][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.3.884 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 374.317255][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.327441][ T8050] Call Trace: [ 374.330756][ T8050] [ 374.333733][ T8050] dump_stack_lvl+0x241/0x360 [ 374.338459][ T8050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.343712][ T8050] ? __pfx__printk+0x10/0x10 [ 374.348364][ T8050] ? snprintf+0xda/0x120 [ 374.352658][ T8050] should_fail_ex+0x3b0/0x4e0 [ 374.357405][ T8050] _copy_to_user+0x2f/0xb0 [ 374.361870][ T8050] simple_read_from_buffer+0xca/0x150 [ 374.367296][ T8050] proc_fail_nth_read+0x1e9/0x250 [ 374.372377][ T8050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.377985][ T8050] ? rw_verify_area+0x55e/0x6f0 [ 374.382886][ T8050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.388495][ T8050] vfs_read+0x201/0xbc0 [ 374.392705][ T8050] ? __pfx_lock_release+0x10/0x10 [ 374.397788][ T8050] ? __pfx_vfs_read+0x10/0x10 [ 374.398466][ T8054] netlink: 88 bytes leftover after parsing attributes in process `syz.0.886'. [ 374.402498][ T8050] ? __fget_files+0x3f3/0x470 [ 374.402540][ T8050] ? fdget_pos+0x24e/0x320 [ 374.402571][ T8050] ksys_read+0x183/0x2b0 [ 374.424823][ T8050] ? __pfx_ksys_read+0x10/0x10 [ 374.429627][ T8050] ? do_syscall_64+0x100/0x230 [ 374.434446][ T8050] ? do_syscall_64+0xb6/0x230 [ 374.439171][ T8050] do_syscall_64+0xf3/0x230 [ 374.443718][ T8050] ? clear_bhb_loop+0x35/0x90 [ 374.448437][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.454383][ T8050] RIP: 0033:0x7f0033b7ca3c [ 374.458841][ T8050] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 374.478512][ T8050] RSP: 002b:00007f00335ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.486983][ T8050] RAX: ffffffffffffffda RBX: 00007f0033d35f80 RCX: 00007f0033b7ca3c [ 374.494989][ T8050] RDX: 000000000000000f RSI: 00007f00335ff0a0 RDI: 0000000000000003 [ 374.502995][ T8050] RBP: 00007f00335ff090 R08: 0000000000000000 R09: 0000000000000000 [ 374.511001][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.519016][ T8050] R13: 0000000000000000 R14: 00007f0033d35f80 R15: 00007ffcb6e30e88 [ 374.520061][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 374.527019][ T8050] [ 374.587670][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 374.708861][ T7862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.820580][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 374.979541][ T7862] veth0_vlan: entered promiscuous mode [ 375.028691][ T7862] veth1_vlan: entered promiscuous mode [ 375.077688][ T8072] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 375.124689][ T7862] veth0_macvtap: entered promiscuous mode [ 375.141579][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 375.159696][ T7862] veth1_macvtap: entered promiscuous mode [ 375.195572][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.209924][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.220123][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.230936][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.240873][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.251394][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.263818][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.278639][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 375.285861][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.305885][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.319918][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.332056][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.359738][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.371738][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.382101][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.393271][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.403653][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.416869][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.427694][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.444467][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.456395][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.466979][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.476935][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.488708][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.502102][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.545499][ T7862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.565824][ T7862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.574643][ T7862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.587710][ T7862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.758162][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.789743][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.836558][ T8101] delete_channel: no stack [ 375.854540][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.874010][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.008457][ T5247] Bluetooth: hci2: command tx timeout [ 376.040653][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 376.164680][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 376.507537][ T8132] delete_channel: no stack [ 376.547385][ T8133] bridge1: entered promiscuous mode [ 376.566301][ T8133] bridge1: entered allmulticast mode [ 376.591516][ T8133] team0: Port device bridge1 added [ 376.618954][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 376.651392][ T8133] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 376.669317][ T8133] batman_adv: batadv1: Removing interface: netdevsim0 [ 376.691483][ T8133] batman_adv: batadv2: Adding interface: netdevsim0 [ 376.715944][ T8133] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.773536][ T8133] batman_adv: batadv2: Interface activated: netdevsim0 [ 376.834846][ T8143] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 376.841087][ T8152] FAULT_INJECTION: forcing a failure. [ 376.841087][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 376.910494][ T8152] CPU: 1 UID: 0 PID: 8152 Comm: syz.0.916 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 376.921250][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.931345][ T8152] Call Trace: [ 376.934656][ T8152] [ 376.937623][ T8152] dump_stack_lvl+0x241/0x360 [ 376.942345][ T8152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.947585][ T8152] ? __pfx__printk+0x10/0x10 [ 376.952239][ T8152] should_fail_ex+0x3b0/0x4e0 [ 376.956968][ T8152] should_failslab+0xac/0x100 [ 376.961686][ T8152] ? sctp_add_bind_addr+0x89/0x3a0 [ 376.966841][ T8152] __kmalloc_cache_noprof+0x6c/0x2c0 [ 376.972180][ T8152] sctp_add_bind_addr+0x89/0x3a0 [ 376.977181][ T8152] sctp_copy_local_addr_list+0x311/0x500 [ 376.982892][ T8152] ? sctp_copy_local_addr_list+0xab/0x500 [ 376.988645][ T8152] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 376.994825][ T8152] ? sctp_v4_is_any+0x35/0x60 [ 376.999532][ T8152] sctp_bind_addr_copy+0xad/0x3b0 [ 377.004574][ T8152] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 377.010927][ T8152] sctp_connect_new_asoc+0x2f3/0x6c0 [ 377.016234][ T8152] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 377.022054][ T8152] ? sctp_sendmsg+0xbb9/0x3520 [ 377.026837][ T8152] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 377.032659][ T8152] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 377.038568][ T8152] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 377.044144][ T8152] sctp_sendmsg+0x219a/0x3520 [ 377.048872][ T8152] ? aa_sk_perm+0x96d/0xab0 [ 377.053392][ T8152] ? __pfx_sctp_sendmsg+0x10/0x10 [ 377.058440][ T8152] ? __pfx_aa_sk_perm+0x10/0x10 [ 377.063305][ T8152] ? inet_sendmsg+0x330/0x390 [ 377.068007][ T8152] __sock_sendmsg+0x1a6/0x270 [ 377.072708][ T8152] __sys_sendto+0x39b/0x4f0 [ 377.077225][ T8152] ? __pfx___sys_sendto+0x10/0x10 [ 377.082259][ T8152] ? __mutex_unlock_slowpath+0x21d/0x750 [ 377.087923][ T8152] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 377.093952][ T8152] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.100304][ T8152] __x64_sys_sendto+0xde/0x100 [ 377.105081][ T8152] do_syscall_64+0xf3/0x230 [ 377.109599][ T8152] ? clear_bhb_loop+0x35/0x90 [ 377.114289][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.120204][ T8152] RIP: 0033:0x7f78a877dff9 [ 377.124636][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.144257][ T8152] RSP: 002b:00007f78a81ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 377.152702][ T8152] RAX: ffffffffffffffda RBX: 00007f78a8936058 RCX: 00007f78a877dff9 [ 377.160706][ T8152] RDX: 000000000000ffca RSI: 00000000200000c0 RDI: 0000000000000003 [ 377.168696][ T8152] RBP: 00007f78a81ff090 R08: 00000000200001c0 R09: 0000000000000010 [ 377.176716][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.184697][ T8152] R13: 0000000000000001 R14: 00007f78a8936058 R15: 00007fffbecb2a98 [ 377.192715][ T8152] [ 377.233215][ T8155] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 377.440957][ T8168] netem: unknown loss type 0 [ 377.449460][ T8168] netem: change failed [ 377.639680][ T8181] delete_channel: no stack [ 377.692411][ T8184] FAULT_INJECTION: forcing a failure. [ 377.692411][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.739159][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.4.926 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 377.749920][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.760029][ T8184] Call Trace: [ 377.763344][ T8184] [ 377.766303][ T8184] dump_stack_lvl+0x241/0x360 [ 377.771015][ T8184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.776235][ T8184] ? __pfx__printk+0x10/0x10 [ 377.780872][ T8184] ? snprintf+0xda/0x120 [ 377.785163][ T8184] should_fail_ex+0x3b0/0x4e0 [ 377.789899][ T8184] _copy_to_user+0x2f/0xb0 [ 377.794366][ T8184] simple_read_from_buffer+0xca/0x150 [ 377.799801][ T8184] proc_fail_nth_read+0x1e9/0x250 [ 377.804880][ T8184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.810480][ T8184] ? rw_verify_area+0x55e/0x6f0 [ 377.815374][ T8184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.820975][ T8184] vfs_read+0x201/0xbc0 [ 377.825192][ T8184] ? __pfx_lock_release+0x10/0x10 [ 377.830409][ T8184] ? __pfx_vfs_read+0x10/0x10 [ 377.835144][ T8184] ? __fget_files+0x3f3/0x470 [ 377.839882][ T8184] ? fdget_pos+0x24e/0x320 [ 377.844357][ T8184] ksys_read+0x183/0x2b0 [ 377.848664][ T8184] ? __pfx_ksys_read+0x10/0x10 [ 377.853478][ T8184] ? do_syscall_64+0x100/0x230 [ 377.858284][ T8184] ? do_syscall_64+0xb6/0x230 [ 377.863004][ T8184] do_syscall_64+0xf3/0x230 [ 377.867549][ T8184] ? clear_bhb_loop+0x35/0x90 [ 377.872268][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.878320][ T8184] RIP: 0033:0x7f8c3b57ca3c [ 377.882777][ T8184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 377.902437][ T8184] RSP: 002b:00007f8c3c2d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.910902][ T8184] RAX: ffffffffffffffda RBX: 00007f8c3b736058 RCX: 00007f8c3b57ca3c [ 377.918917][ T8184] RDX: 000000000000000f RSI: 00007f8c3c2d20a0 RDI: 0000000000000004 [ 377.926948][ T8184] RBP: 00007f8c3c2d2090 R08: 0000000000000000 R09: 0000000000000044 [ 377.934998][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.943013][ T8184] R13: 0000000000000000 R14: 00007f8c3b736058 R15: 00007ffe4e207d08 [ 377.951043][ T8184] [ 378.105877][ T5247] Bluetooth: hci2: command tx timeout [ 378.322799][ T8207] x_tables: duplicate underflow at hook 1 [ 378.576134][ T8226] FAULT_INJECTION: forcing a failure. [ 378.576134][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 378.625788][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.3.939 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 378.636453][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.646525][ T8226] Call Trace: [ 378.649817][ T8226] [ 378.652783][ T8226] dump_stack_lvl+0x241/0x360 [ 378.657506][ T8226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.662735][ T8226] ? __pfx__printk+0x10/0x10 [ 378.667369][ T8226] should_fail_ex+0x3b0/0x4e0 [ 378.672178][ T8226] should_failslab+0xac/0x100 [ 378.676882][ T8226] ? sctp_add_bind_addr+0x89/0x3a0 [ 378.682018][ T8226] __kmalloc_cache_noprof+0x6c/0x2c0 [ 378.687352][ T8226] sctp_add_bind_addr+0x89/0x3a0 [ 378.692312][ T8226] sctp_copy_local_addr_list+0x311/0x500 [ 378.697980][ T8226] ? sctp_copy_local_addr_list+0xab/0x500 [ 378.703737][ T8226] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 378.709909][ T8226] ? sctp_v4_is_any+0x35/0x60 [ 378.714615][ T8226] sctp_bind_addr_copy+0xad/0x3b0 [ 378.719670][ T8226] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 378.726032][ T8226] sctp_connect_new_asoc+0x2f3/0x6c0 [ 378.731339][ T8226] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 378.737160][ T8226] ? sctp_sendmsg+0xbb9/0x3520 [ 378.741947][ T8226] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 378.747779][ T8226] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 378.753689][ T8226] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 378.759251][ T8226] sctp_sendmsg+0x219a/0x3520 [ 378.763957][ T8226] ? aa_sk_perm+0x96d/0xab0 [ 378.768468][ T8226] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.773515][ T8226] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.778379][ T8226] ? inet_sendmsg+0x330/0x390 [ 378.783261][ T8226] __sock_sendmsg+0x1a6/0x270 [ 378.787980][ T8226] __sys_sendto+0x39b/0x4f0 [ 378.792514][ T8226] ? __pfx___sys_sendto+0x10/0x10 [ 378.797557][ T8226] ? __mutex_unlock_slowpath+0x21d/0x750 [ 378.803232][ T8226] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.809242][ T8226] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.815599][ T8226] __x64_sys_sendto+0xde/0x100 [ 378.821074][ T8226] do_syscall_64+0xf3/0x230 [ 378.825588][ T8226] ? clear_bhb_loop+0x35/0x90 [ 378.830280][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.836197][ T8226] RIP: 0033:0x7f0033b7dff9 [ 378.840623][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.860241][ T8226] RSP: 002b:00007f00335de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 378.868690][ T8226] RAX: ffffffffffffffda RBX: 00007f0033d36058 RCX: 00007f0033b7dff9 [ 378.876678][ T8226] RDX: 000000000000ffca RSI: 00000000200000c0 RDI: 0000000000000003 [ 378.884661][ T8226] RBP: 00007f00335de090 R08: 00000000200001c0 R09: 0000000000000010 [ 378.892651][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.900637][ T8226] R13: 0000000000000001 R14: 00007f0033d36058 R15: 00007ffcb6e30e88 [ 378.908644][ T8226] [ 378.926165][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.932532][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.372596][ T8245] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 379.716309][ T8260] __nla_validate_parse: 4 callbacks suppressed [ 379.716332][ T8260] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.951'. [ 379.732748][ T8260] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 381.204603][ T8252] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 381.432359][ T8270] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 381.629469][ T8281] FAULT_INJECTION: forcing a failure. [ 381.629469][ T8281] name failslab, interval 1, probability 0, space 0, times 0 [ 381.645788][ T8281] CPU: 1 UID: 0 PID: 8281 Comm: syz.2.957 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 381.656444][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.666549][ T8281] Call Trace: [ 381.669862][ T8281] [ 381.672829][ T8281] dump_stack_lvl+0x241/0x360 [ 381.677556][ T8281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.682801][ T8281] ? __pfx__printk+0x10/0x10 [ 381.687463][ T8281] should_fail_ex+0x3b0/0x4e0 [ 381.692208][ T8281] should_failslab+0xac/0x100 [ 381.696937][ T8281] ? sctp_add_bind_addr+0x89/0x3a0 [ 381.701563][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 381.702076][ T8281] __kmalloc_cache_noprof+0x6c/0x2c0 [ 381.716244][ T8281] sctp_add_bind_addr+0x89/0x3a0 [ 381.721233][ T8281] sctp_copy_local_addr_list+0x311/0x500 [ 381.726925][ T8281] ? sctp_copy_local_addr_list+0xab/0x500 [ 381.732752][ T8281] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 381.738956][ T8281] ? sctp_v4_is_any+0x35/0x60 [ 381.743655][ T8281] sctp_bind_addr_copy+0xad/0x3b0 [ 381.748739][ T8281] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 381.755527][ T8281] sctp_connect_new_asoc+0x2f3/0x6c0 [ 381.760839][ T8281] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 381.766667][ T8281] ? sctp_sendmsg+0xbb9/0x3520 [ 381.771453][ T8281] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 381.777279][ T8281] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 381.783186][ T8281] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 381.788763][ T8281] sctp_sendmsg+0x219a/0x3520 [ 381.793482][ T8281] ? aa_sk_perm+0x96d/0xab0 [ 381.798014][ T8281] ? __pfx_sctp_sendmsg+0x10/0x10 [ 381.803070][ T8281] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.807947][ T8281] ? inet_sendmsg+0x330/0x390 [ 381.812657][ T8281] __sock_sendmsg+0x1a6/0x270 [ 381.817363][ T8281] __sys_sendto+0x39b/0x4f0 [ 381.821970][ T8281] ? __pfx___sys_sendto+0x10/0x10 [ 381.827020][ T8281] ? __mutex_unlock_slowpath+0x21d/0x750 [ 381.832703][ T8281] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.838730][ T8281] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.845096][ T8281] __x64_sys_sendto+0xde/0x100 [ 381.849885][ T8281] do_syscall_64+0xf3/0x230 [ 381.854404][ T8281] ? clear_bhb_loop+0x35/0x90 [ 381.859162][ T8281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.865255][ T8281] RIP: 0033:0x7f37eaf7dff9 [ 381.869687][ T8281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.889307][ T8281] RSP: 002b:00007f37ebdcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 381.897740][ T8281] RAX: ffffffffffffffda RBX: 00007f37eb136058 RCX: 00007f37eaf7dff9 [ 381.905724][ T8281] RDX: 000000000000ffca RSI: 00000000200000c0 RDI: 0000000000000003 [ 381.913711][ T8281] RBP: 00007f37ebdcf090 R08: 00000000200001c0 R09: 0000000000000010 [ 381.921691][ T8281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.929674][ T8281] R13: 0000000000000001 R14: 00007f37eb136058 R15: 00007ffcacce7f48 [ 381.937667][ T8281] [ 382.267613][ T8305] FAULT_INJECTION: forcing a failure. [ 382.267613][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 382.301238][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.3.964 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 382.311909][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.322006][ T8305] Call Trace: [ 382.325324][ T8305] [ 382.328310][ T8305] dump_stack_lvl+0x241/0x360 [ 382.333049][ T8305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.338291][ T8305] ? __pfx__printk+0x10/0x10 [ 382.342943][ T8305] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 382.348550][ T8305] ? __pfx___might_resched+0x10/0x10 [ 382.353899][ T8305] should_fail_ex+0x3b0/0x4e0 [ 382.358631][ T8305] ? skb_clone+0x20c/0x390 [ 382.363080][ T8305] should_failslab+0xac/0x100 [ 382.367802][ T8305] ? skb_clone+0x20c/0x390 [ 382.372285][ T8305] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 382.377707][ T8305] skb_clone+0x20c/0x390 [ 382.381993][ T8305] dccp_connect+0x4ef/0x890 [ 382.386549][ T8305] dccp_v6_connect+0xd58/0x1480 [ 382.391456][ T8305] ? __pfx_dccp_v6_connect+0x10/0x10 [ 382.396800][ T8305] ? mark_lock+0x9a/0x360 [ 382.401165][ T8305] __inet_stream_connect+0x262/0xf30 [ 382.406495][ T8305] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.412877][ T8305] ? __local_bh_enable_ip+0x168/0x200 [ 382.418292][ T8305] ? lockdep_hardirqs_on+0x99/0x150 [ 382.423561][ T8305] ? __pfx___inet_stream_connect+0x10/0x10 [ 382.429412][ T8305] ? __local_bh_enable_ip+0x168/0x200 [ 382.434826][ T8305] ? inet_stream_connect+0x50/0xa0 [ 382.439982][ T8305] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 382.445763][ T8305] inet_stream_connect+0x65/0xa0 [ 382.450748][ T8305] ? __pfx_inet_stream_connect+0x10/0x10 [ 382.456426][ T8305] __sys_connect+0x2d1/0x300 [ 382.461056][ T8305] ? __pfx___sys_connect+0x10/0x10 [ 382.466225][ T8305] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.472607][ T8305] ? do_syscall_64+0x100/0x230 [ 382.477417][ T8305] __x64_sys_connect+0x7a/0x90 [ 382.482217][ T8305] do_syscall_64+0xf3/0x230 [ 382.486758][ T8305] ? clear_bhb_loop+0x35/0x90 [ 382.491477][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.497423][ T8305] RIP: 0033:0x7f0033b7dff9 [ 382.501871][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.521520][ T8305] RSP: 002b:00007f00335de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 382.530008][ T8305] RAX: ffffffffffffffda RBX: 00007f0033d36058 RCX: 00007f0033b7dff9 [ 382.538021][ T8305] RDX: 000000000000001c RSI: 0000000020000380 RDI: 0000000000000005 [ 382.546044][ T8305] RBP: 00007f00335de090 R08: 0000000000000000 R09: 0000000000000000 [ 382.554052][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.562057][ T8305] R13: 0000000000000000 R14: 00007f0033d36058 R15: 00007ffcb6e30e88 [ 382.570086][ T8305] [ 382.849997][ T8325] Bluetooth: MGMT ver 1.23 [ 383.480528][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.544760][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.652598][ T8352] netlink: 'syz.4.975': attribute type 4 has an invalid length. [ 383.678225][ T8353] FAULT_INJECTION: forcing a failure. [ 383.678225][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 383.691965][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.747371][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.1.978 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 383.758046][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.768147][ T8353] Call Trace: [ 383.771478][ T8353] [ 383.774444][ T8353] dump_stack_lvl+0x241/0x360 [ 383.779168][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.784413][ T8353] ? __pfx__printk+0x10/0x10 [ 383.789070][ T8353] should_fail_ex+0x3b0/0x4e0 [ 383.793831][ T8353] should_failslab+0xac/0x100 [ 383.798551][ T8353] ? sctp_add_bind_addr+0x89/0x3a0 [ 383.803698][ T8353] __kmalloc_cache_noprof+0x6c/0x2c0 [ 383.809042][ T8353] sctp_add_bind_addr+0x89/0x3a0 [ 383.814032][ T8353] sctp_copy_local_addr_list+0x311/0x500 [ 383.819711][ T8353] ? sctp_copy_local_addr_list+0xab/0x500 [ 383.825474][ T8353] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 383.831681][ T8353] ? sctp_v4_is_any+0x35/0x60 [ 383.836537][ T8353] sctp_bind_addr_copy+0xad/0x3b0 [ 383.841606][ T8353] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 383.847995][ T8353] sctp_connect_new_asoc+0x2f3/0x6c0 [ 383.853335][ T8353] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 383.859194][ T8353] ? sctp_sendmsg+0xbb9/0x3520 [ 383.864013][ T8353] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 383.869889][ T8353] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 383.875828][ T8353] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 383.881414][ T8353] sctp_sendmsg+0x219a/0x3520 [ 383.886214][ T8353] ? aa_sk_perm+0x96d/0xab0 [ 383.890756][ T8353] ? __pfx_sctp_sendmsg+0x10/0x10 [ 383.895831][ T8353] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.900722][ T8353] ? inet_sendmsg+0x330/0x390 [ 383.905457][ T8353] __sock_sendmsg+0x1a6/0x270 [ 383.910179][ T8353] __sys_sendto+0x39b/0x4f0 [ 383.914730][ T8353] ? __pfx___sys_sendto+0x10/0x10 [ 383.919789][ T8353] ? __mutex_unlock_slowpath+0x21d/0x750 [ 383.925511][ T8353] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.931549][ T8353] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.937928][ T8353] __x64_sys_sendto+0xde/0x100 [ 383.942736][ T8353] do_syscall_64+0xf3/0x230 [ 383.947275][ T8353] ? clear_bhb_loop+0x35/0x90 [ 383.952083][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.958045][ T8353] RIP: 0033:0x7f45f197dff9 [ 383.962496][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.982150][ T8353] RSP: 002b:00007f45f282e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 383.990626][ T8353] RAX: ffffffffffffffda RBX: 00007f45f1b36058 RCX: 00007f45f197dff9 [ 383.998640][ T8353] RDX: 000000000000ffca RSI: 00000000200000c0 RDI: 0000000000000003 [ 384.006653][ T8353] RBP: 00007f45f282e090 R08: 00000000200001c0 R09: 0000000000000010 [ 384.014662][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.022671][ T8353] R13: 0000000000000001 R14: 00007f45f1b36058 R15: 00007ffdc2a9fcf8 [ 384.030702][ T8353] [ 384.117502][ T8355] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 384.144907][ T8355] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.979'. [ 384.166040][ T8355] netlink: 'syz.3.979': attribute type 2 has an invalid length. [ 384.173744][ T8355] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 384.186146][ T8349] can: request_module (can-proto-0) failed. [ 384.792639][ T8370] FAULT_INJECTION: forcing a failure. [ 384.792639][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 384.905965][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.3.982 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 384.916641][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.926755][ T8370] Call Trace: [ 384.930075][ T8370] [ 384.933055][ T8370] dump_stack_lvl+0x241/0x360 [ 384.937785][ T8370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.943021][ T8370] ? __pfx__printk+0x10/0x10 [ 384.947662][ T8370] ? __pfx_lock_acquire+0x10/0x10 [ 384.952736][ T8370] ? nf_ct_pernet+0x45/0x270 [ 384.957373][ T8370] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.963416][ T8370] should_fail_ex+0x3b0/0x4e0 [ 384.968184][ T8370] ? __nf_conntrack_alloc+0x8f/0x380 [ 384.973520][ T8370] should_failslab+0xac/0x100 [ 384.978241][ T8370] ? __nf_conntrack_alloc+0x8f/0x380 [ 384.983590][ T8370] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 384.989017][ T8370] __nf_conntrack_alloc+0x8f/0x380 [ 384.994192][ T8370] init_conntrack+0x3c3/0x1310 [ 384.999011][ T8370] ? __pfx_init_conntrack+0x10/0x10 [ 385.004271][ T8370] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 385.010301][ T8370] ? __local_bh_enable_ip+0x168/0x200 [ 385.015721][ T8370] nf_conntrack_in+0xd5c/0x1890 [ 385.020643][ T8370] ? __pfx_nf_conntrack_in+0x10/0x10 [ 385.026007][ T8370] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 385.031771][ T8370] nf_hook_slow+0xc3/0x220 [ 385.036251][ T8370] ? __pfx_dst_output+0x10/0x10 [ 385.041145][ T8370] nf_hook+0x2c4/0x450 [ 385.045252][ T8370] ? nf_hook+0x9e/0x450 [ 385.049446][ T8370] ? __pfx_nf_hook+0x10/0x10 [ 385.054076][ T8370] ? __pfx_dst_output+0x10/0x10 [ 385.058985][ T8370] ip6_xmit+0xece/0x18b0 [ 385.063273][ T8370] ? __pfx_dst_output+0x10/0x10 [ 385.068186][ T8370] ? __pfx_ip6_xmit+0x10/0x10 [ 385.072931][ T8370] inet6_csk_xmit+0x468/0x710 [ 385.077651][ T8370] ? inet6_csk_xmit+0x1be/0x710 [ 385.082540][ T8370] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 385.087780][ T8370] ? dccp_v6_send_check+0x322/0x5c0 [ 385.093031][ T8370] dccp_transmit_skb+0xf41/0x16a0 [ 385.098131][ T8370] dccp_connect+0x4fa/0x890 [ 385.102691][ T8370] dccp_v6_connect+0xd58/0x1480 [ 385.107586][ T8370] ? __pfx_dccp_v6_connect+0x10/0x10 [ 385.112930][ T8370] ? mark_lock+0x9a/0x360 [ 385.117300][ T8370] __inet_stream_connect+0x262/0xf30 [ 385.122640][ T8370] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.129025][ T8370] ? __local_bh_enable_ip+0x168/0x200 [ 385.134465][ T8370] ? lockdep_hardirqs_on+0x99/0x150 [ 385.139717][ T8370] ? __pfx___inet_stream_connect+0x10/0x10 [ 385.145568][ T8370] ? __local_bh_enable_ip+0x168/0x200 [ 385.150984][ T8370] ? inet_stream_connect+0x50/0xa0 [ 385.156143][ T8370] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 385.161921][ T8370] inet_stream_connect+0x65/0xa0 [ 385.166905][ T8370] ? __pfx_inet_stream_connect+0x10/0x10 [ 385.172588][ T8370] __sys_connect+0x2d1/0x300 [ 385.177221][ T8370] ? __pfx___sys_connect+0x10/0x10 [ 385.182385][ T8370] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.188768][ T8370] ? do_syscall_64+0x100/0x230 [ 385.193574][ T8370] __x64_sys_connect+0x7a/0x90 [ 385.198377][ T8370] do_syscall_64+0xf3/0x230 [ 385.202924][ T8370] ? clear_bhb_loop+0x35/0x90 [ 385.207650][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.213593][ T8370] RIP: 0033:0x7f0033b7dff9 [ 385.218044][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.237700][ T8370] RSP: 002b:00007f00335de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 385.246167][ T8370] RAX: ffffffffffffffda RBX: 00007f0033d36058 RCX: 00007f0033b7dff9 [ 385.254184][ T8370] RDX: 000000000000001c RSI: 0000000020000380 RDI: 0000000000000005 [ 385.262201][ T8370] RBP: 00007f00335de090 R08: 0000000000000000 R09: 0000000000000000 [ 385.270218][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.278252][ T8370] R13: 0000000000000000 R14: 00007f0033d36058 R15: 00007ffcb6e30e88 [ 385.286283][ T8370] [ 386.041152][ T8385] netlink: 76 bytes leftover after parsing attributes in process `syz.1.988'. [ 386.127468][ T8386] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.988'. [ 386.220428][ T8386] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 388.032461][ T8432] netlink: 4088 bytes leftover after parsing attributes in process `syz.1.1000'. [ 388.133500][ T8432] openvswitch: netlink: Actions may not be safe on all matching packets [ 389.020583][ T8456] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1006'. [ 389.051829][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 389.223374][ T8461] sctp: [Deprecated]: syz.1.1008 (pid 8461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.223374][ T8461] Use struct sctp_sack_info instead [ 389.399792][ T8461] sctp: [Deprecated]: syz.1.1008 (pid 8461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.399792][ T8461] Use struct sctp_sack_info instead [ 389.666344][ T8472] Cannot find map_set index 0 as target [ 390.034018][ T8482] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 390.107426][ T8482] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 390.245166][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 390.364940][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 390.433873][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 390.489291][ T8494] x_tables: unsorted underflow at hook 4 [ 390.639544][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'. [ 400.135722][ C1] sched: DL replenish lagged too much [ 402.784185][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.800830][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.812336][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.820876][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.828893][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 402.836495][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.889429][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.906102][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.914506][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.922604][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.935870][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 402.943321][ T5247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 403.083051][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 403.092350][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 403.102527][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 403.110632][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 403.131620][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 403.140382][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 403.177344][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.189794][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.197833][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.207090][ T5237] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.214764][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 403.224565][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.250920][ T5237] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 403.263126][ T5237] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 403.273954][ T5237] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 403.282225][ T5237] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 403.291102][ T5237] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 403.298846][ T5237] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 404.886040][ T5237] Bluetooth: hci4: command tx timeout [ 405.050555][ T5237] Bluetooth: hci7: command tx timeout [ 405.206112][ T5237] Bluetooth: hci8: command tx timeout [ 405.286220][ T5237] Bluetooth: hci9: command tx timeout [ 405.366117][ T5237] Bluetooth: hci10: command tx timeout [ 406.970292][ T5237] Bluetooth: hci4: command tx timeout [ 407.126345][ T5237] Bluetooth: hci7: command tx timeout [ 407.286167][ T5237] Bluetooth: hci8: command tx timeout [ 407.367034][ T5237] Bluetooth: hci9: command tx timeout [ 407.446229][ T5237] Bluetooth: hci10: command tx timeout [ 409.046007][ T5237] Bluetooth: hci4: command tx timeout [ 409.205963][ T5237] Bluetooth: hci7: command tx timeout [ 409.366159][ T5237] Bluetooth: hci8: command tx timeout [ 409.446180][ T5237] Bluetooth: hci9: command tx timeout [ 409.526228][ T5237] Bluetooth: hci10: command tx timeout [ 411.126143][ T5237] Bluetooth: hci4: command tx timeout [ 411.286027][ T5237] Bluetooth: hci7: command tx timeout [ 411.446900][ T5237] Bluetooth: hci8: command tx timeout [ 411.526418][ T5237] Bluetooth: hci9: command tx timeout [ 411.606738][ T5237] Bluetooth: hci10: command tx timeout [ 438.140531][ T8511] team0 (unregistering): Port device team_slave_0 removed [ 438.327832][ T8511] team0 (unregistering): Port device team_slave_1 removed [ 438.518948][ T8511] team0 (unregistering): Port device bridge1 removed [ 440.336602][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.342946][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.640859][ T8537] chnl_net:caif_netlink_parms(): no params data found [ 441.922810][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.936183][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.943631][ T8537] bridge_slave_0: entered allmulticast mode [ 441.976074][ T8537] bridge_slave_0: entered promiscuous mode [ 441.987362][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.994527][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.026623][ T8537] bridge_slave_1: entered allmulticast mode [ 442.045944][ T8537] bridge_slave_1: entered promiscuous mode [ 442.237934][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.269694][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.411165][ T8537] team0: Port device team_slave_0 added [ 442.429966][ T8537] team0: Port device team_slave_1 added [ 442.524672][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.545815][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.593962][ T8537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.626128][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.633122][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.696040][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.810372][ T8537] hsr_slave_0: entered promiscuous mode [ 442.862553][ T8537] hsr_slave_1: entered promiscuous mode [ 442.900678][ T8537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.924406][ T8537] Cannot create hsr debugfs directory [ 443.306393][ T8537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.580617][ T8537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.963662][ T8537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.041210][ T8537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.832221][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 463.862021][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.871532][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.890972][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.987920][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.998467][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.006758][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.015610][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.024610][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.031971][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.040424][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.048653][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.058785][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 464.066334][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.090450][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.099382][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.108124][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.119557][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 464.136034][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.227444][ T8558] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 464.237854][ T8558] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.246867][ T8558] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.254642][ T8558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.262927][ T8558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.271377][ T8558] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 464.278814][ T8558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 464.305845][ T5250] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 464.314207][ T5250] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 464.322587][ T5250] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 464.330824][ T5250] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 464.338655][ T5250] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 466.166121][ T5250] Bluetooth: hci2: command tx timeout [ 466.172236][ T5250] Bluetooth: hci0: command tx timeout [ 466.178223][ T5247] Bluetooth: hci1: command tx timeout [ 466.326113][ T5250] Bluetooth: hci6: command tx timeout [ 466.406376][ T5250] Bluetooth: hci11: command tx timeout [ 468.246112][ T5250] Bluetooth: hci0: command tx timeout [ 468.251588][ T5250] Bluetooth: hci1: command tx timeout [ 468.257240][ T5247] Bluetooth: hci2: command tx timeout [ 468.406196][ T5250] Bluetooth: hci6: command tx timeout [ 468.486220][ T5250] Bluetooth: hci11: command tx timeout [ 470.326487][ T8558] Bluetooth: hci2: command tx timeout [ 470.333689][ T8558] Bluetooth: hci0: command tx timeout [ 470.342916][ T5250] Bluetooth: hci1: command tx timeout [ 470.486166][ T5250] Bluetooth: hci6: command tx timeout [ 470.566272][ T5250] Bluetooth: hci11: command tx timeout [ 472.406270][ T5250] Bluetooth: hci1: command tx timeout [ 472.411772][ T5250] Bluetooth: hci0: command tx timeout [ 472.417428][ T8558] Bluetooth: hci2: command tx timeout [ 472.566146][ T5250] Bluetooth: hci6: command tx timeout [ 472.646367][ T5250] Bluetooth: hci11: command tx timeout [ 483.291049][ T5250] Bluetooth: hci3: command 0x0405 tx timeout [ 501.698769][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.705160][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.696215][ T5250] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 525.707185][ T5250] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 525.715579][ T5250] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 525.725970][ T5250] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 525.737255][ T5250] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 525.744706][ T5250] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 526.573090][ T5250] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 526.585949][ T5250] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 526.606025][ T5250] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 526.614455][ T5250] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 526.622591][ T5250] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 526.630291][ T5250] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 526.680121][ T5247] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 526.690179][ T5247] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 526.699494][ T5247] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 526.708829][ T5247] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 526.716784][ T5247] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 526.724306][ T5247] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 526.822134][ T5250] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 526.831498][ T5250] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 526.839743][ T5250] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 526.847937][ T5250] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 526.859280][ T5250] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 526.867163][ T5250] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 527.389486][ T8578] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 527.406563][ T8578] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 527.415923][ T8578] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 527.424939][ T8578] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 527.432800][ T8578] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 527.440383][ T8578] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 527.766177][ T8578] Bluetooth: hci12: command tx timeout [ 528.726163][ T8578] Bluetooth: hci13: command tx timeout [ 528.806225][ T8578] Bluetooth: hci14: command tx timeout [ 528.886341][ T8578] Bluetooth: hci15: command tx timeout [ 529.371088][ T8578] Bluetooth: hci10: command 0x0406 tx timeout [ 529.377569][ T8576] Bluetooth: hci4: command 0x0406 tx timeout [ 529.383646][ T8576] Bluetooth: hci7: command 0x0406 tx timeout [ 529.390119][ T8578] Bluetooth: hci8: command 0x0406 tx timeout [ 529.396309][ T8576] Bluetooth: hci9: command 0x0406 tx timeout [ 529.525993][ T5251] Bluetooth: hci16: command tx timeout [ 529.846148][ T5250] Bluetooth: hci12: command tx timeout [ 530.805996][ T5250] Bluetooth: hci13: command tx timeout [ 530.886248][ T5250] Bluetooth: hci14: command tx timeout [ 530.966040][ T5250] Bluetooth: hci15: command tx timeout [ 531.606028][ T5250] Bluetooth: hci16: command tx timeout [ 531.926627][ T5250] Bluetooth: hci12: command tx timeout [ 532.886042][ T5250] Bluetooth: hci13: command tx timeout [ 532.966722][ T5250] Bluetooth: hci14: command tx timeout [ 533.126352][ T5250] Bluetooth: hci15: command tx timeout [ 533.686204][ T5250] Bluetooth: hci16: command tx timeout [ 534.006334][ T5250] Bluetooth: hci12: command tx timeout [ 534.966451][ T5250] Bluetooth: hci13: command tx timeout [ 535.046298][ T5247] Bluetooth: hci14: command tx timeout [ 535.206295][ T5247] Bluetooth: hci15: command tx timeout [ 535.766026][ T5247] Bluetooth: hci16: command tx timeout [ 563.143407][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.150037][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.941237][ T5250] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 585.952175][ T5250] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 585.963622][ T5250] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 585.971962][ T5250] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 585.979906][ T5250] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 585.987647][ T5250] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 586.575809][ T5250] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 586.584849][ T5250] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 586.593368][ T5250] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 586.604018][ T5250] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 586.611948][ T5250] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 586.619451][ T5250] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 586.663628][ T5251] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 586.672791][ T5251] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 586.680992][ T5251] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 586.689183][ T5251] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 586.706186][ T5251] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 586.714817][ T5251] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 586.806296][ T30] INFO: task dhcpcd:4903 blocked for more than 143 seconds. [ 586.813695][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 586.835775][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.844530][ T30] task:dhcpcd state:D stack:20608 pid:4903 tgid:4903 ppid:4902 flags:0x00004002 [ 586.892306][ T30] Call Trace: [ 586.915768][ T30] [ 586.918789][ T30] __schedule+0x1895/0x4b30 [ 586.923369][ T30] ? __pfx___schedule+0x10/0x10 [ 586.966567][ T30] ? __pfx_lock_release+0x10/0x10 [ 586.977424][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 586.982983][ T30] ? schedule+0x90/0x320 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 587.075748][ T30] schedule+0x14b/0x320 [ 587.080014][ T30] schedule_preempt_disabled+0x13/0x30 [ 587.085530][ T30] __mutex_lock+0x6a7/0xd70 [ 587.165890][ T30] ? __mutex_lock+0x52a/0xd70 [ 587.185845][ T30] ? dev_ioctl+0x706/0x1340 [ 587.190440][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 587.226005][ T30] ? dev_load+0x21/0x1f0 [ 587.230358][ T30] dev_ioctl+0x706/0x1340 [ 587.234739][ T30] sock_do_ioctl+0x240/0x460 [ 587.273891][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 587.291872][ T30] sock_ioctl+0x626/0x8e0 [ 587.326027][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 587.331325][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 587.366039][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 587.376622][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 587.381568][ T30] __se_sys_ioctl+0xf9/0x170 [ 587.415811][ T30] do_syscall_64+0xf3/0x230 [ 587.420397][ T30] ? clear_bhb_loop+0x35/0x90 [ 587.425145][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.495697][ T30] RIP: 0033:0x7f6d0c05cd49 [ 587.500213][ T30] RSP: 002b:00007fffa495b8f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.535734][ T30] RAX: ffffffffffffffda RBX: 00007f6d0bf8e6c0 RCX: 00007f6d0c05cd49 [ 587.543789][ T30] RDX: 00007fffa496bae8 RSI: 0000000000008922 RDI: 000000000000000e [ 587.616333][ T30] RBP: 00007fffa497bca8 R08: 00007fffa496baa8 R09: 00007fffa496ba58 [ 587.624399][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.683127][ T30] R13: 00007fffa496bae8 R14: 0000000000000028 R15: 0000000000008922 [ 587.715878][ T30] [ 587.735791][ T30] INFO: task kworker/0:6:5322 blocked for more than 144 seconds. [ 587.743583][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 587.795820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.804593][ T30] task:kworker/0:6 state:D stack:21336 pid:5322 tgid:5322 ppid:2 flags:0x00004000 [ 587.887990][ T30] Workqueue: events switchdev_deferred_process_work [ 587.894688][ T30] Call Trace: [ 587.919069][ T30] [ 587.922094][ T30] __schedule+0x1895/0x4b30 [ 587.944792][ T5250] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 587.954763][ T5250] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 587.963238][ T5250] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 587.974041][ T5250] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 587.982495][ T5250] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 587.993157][ T5250] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 588.005911][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 588.011184][ T30] ? schedule+0x90/0x320 [ 588.015505][ T30] ? __pfx___schedule+0x10/0x10 [ 588.055856][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.061956][ T30] ? __pfx_lock_release+0x10/0x10 [ 588.081195][ T5250] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 588.092927][ T5247] Bluetooth: hci17: command tx timeout [ 588.103756][ T5250] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 588.112544][ T5250] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 588.122099][ T5250] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 588.130237][ T5250] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 588.137817][ T5250] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 588.175879][ T30] ? kick_pool+0x45c/0x620 [ 588.180403][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.194979][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 588.205860][ T30] ? schedule+0x90/0x320 [ 588.210275][ T30] schedule+0x14b/0x320 [ 588.214506][ T30] schedule_preempt_disabled+0x13/0x30 [ 588.235523][ T30] __mutex_lock+0x6a7/0xd70 [ 588.240416][ T30] ? __mutex_lock+0x52a/0xd70 [ 588.245165][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 588.265929][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 588.271057][ T30] ? process_scheduled_works+0x976/0x1850 [ 588.285844][ T30] switchdev_deferred_process_work+0xe/0x20 [ 588.291819][ T30] process_scheduled_works+0xa63/0x1850 [ 588.315803][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 588.322156][ T30] ? assign_work+0x364/0x3d0 [ 588.335785][ T30] worker_thread+0x870/0xd30 [ 588.340570][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 588.355765][ T30] ? __kthread_parkme+0x169/0x1d0 [ 588.360876][ T30] ? __pfx_worker_thread+0x10/0x10 [ 588.375937][ T30] kthread+0x2f0/0x390 [ 588.380172][ T30] ? __pfx_worker_thread+0x10/0x10 [ 588.385335][ T30] ? __pfx_kthread+0x10/0x10 [ 588.405854][ T30] ret_from_fork+0x4b/0x80 [ 588.410446][ T30] ? __pfx_kthread+0x10/0x10 [ 588.415076][ T30] ret_from_fork_asm+0x1a/0x30 [ 588.435829][ T30] [ 588.439003][ T30] INFO: task kworker/u8:6:7375 blocked for more than 144 seconds. [ 588.455914][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 588.463614][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.491521][ T30] task:kworker/u8:6 state:D stack:22992 pid:7375 tgid:7375 ppid:2 flags:0x00004000 [ 588.515843][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 588.521954][ T30] Call Trace: [ 588.525436][ T30] [ 588.535808][ T30] __schedule+0x1895/0x4b30 [ 588.540416][ T30] ? __pfx___schedule+0x10/0x10 [ 588.545317][ T30] ? __pfx_lock_release+0x10/0x10 [ 588.565975][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 588.571510][ T30] ? kthread_data+0x52/0xd0 [ 588.585957][ T30] ? schedule+0x90/0x320 [ 588.590527][ T30] ? wq_worker_sleeping+0x66/0x240 [ 588.604385][ T30] ? schedule+0x90/0x320 [ 588.615846][ T30] schedule+0x14b/0x320 [ 588.620085][ T30] schedule_preempt_disabled+0x13/0x30 [ 588.641446][ T30] __mutex_lock+0x6a7/0xd70 [ 588.655817][ T30] ? mark_lock+0x9a/0x360 [ 588.660247][ T30] ? __mutex_lock+0x52a/0xd70 [ 588.664985][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 588.685312][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 588.690712][ T30] addrconf_dad_work+0xd0/0x16f0 [ 588.707135][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 588.712685][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.755773][ T5237] Bluetooth: hci18: command tx timeout [ 588.783840][ T30] ? process_scheduled_works+0x976/0x1850 [ 588.795759][ T30] process_scheduled_works+0xa63/0x1850 [ 588.801415][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 588.811253][ T5250] Bluetooth: hci19: command tx timeout [ 588.832074][ T30] ? assign_work+0x364/0x3d0 [ 588.845948][ T30] worker_thread+0x870/0xd30 [ 588.850639][ T30] ? __kthread_parkme+0x169/0x1d0 [ 588.865828][ T30] ? __pfx_worker_thread+0x10/0x10 [ 588.871019][ T30] kthread+0x2f0/0x390 [ 588.875124][ T30] ? __pfx_worker_thread+0x10/0x10 [ 588.895771][ T30] ? __pfx_kthread+0x10/0x10 [ 588.900449][ T30] ret_from_fork+0x4b/0x80 [ 588.904935][ T30] ? __pfx_kthread+0x10/0x10 [ 588.925876][ T30] ret_from_fork_asm+0x1a/0x30 [ 588.930744][ T30] [ 588.945816][ T30] INFO: task syz.4.1023:8511 blocked for more than 145 seconds. [ 588.953512][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 588.975810][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.984549][ T30] task:syz.4.1023 state:D stack:21944 pid:8511 tgid:8506 ppid:7324 flags:0x00004002 [ 589.014078][ T30] Call Trace: [ 589.017678][ T30] [ 589.020657][ T30] __schedule+0x1895/0x4b30 [ 589.025237][ T30] ? __pfx___schedule+0x10/0x10 [ 589.043923][ T30] ? __pfx_lock_release+0x10/0x10 [ 589.055796][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 589.061342][ T30] ? schedule+0x90/0x320 [ 589.075726][ T30] schedule+0x14b/0x320 [ 589.079973][ T30] schedule_preempt_disabled+0x13/0x30 [ 589.085494][ T30] __mutex_lock+0x6a7/0xd70 [ 589.105921][ T30] ? __mutex_lock+0x52a/0xd70 [ 589.110800][ T30] ? tun_chr_close+0x3b/0x1b0 [ 589.126373][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 589.131508][ T30] ? __pfx_call_rcu+0x10/0x10 [ 589.154380][ T30] tun_chr_close+0x3b/0x1b0 [ 589.159220][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 589.164393][ T30] __fput+0x23f/0x880 [ 589.175748][ T30] task_work_run+0x24f/0x310 [ 589.180408][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 589.201723][ T30] ? __pfx_task_work_run+0x10/0x10 [ 589.207349][ T30] ? do_exit+0xa2a/0x28e0 [ 589.211738][ T30] ? kmem_cache_free+0x1a2/0x420 [ 589.235758][ T30] ? do_exit+0xa2a/0x28e0 [ 589.240186][ T30] do_exit+0xa2f/0x28e0 [ 589.244402][ T30] ? __pfx_do_exit+0x10/0x10 [ 589.265907][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.272089][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.285952][ T30] ? cgroup_freezing+0x2a8/0x350 [ 589.290994][ T30] do_group_exit+0x207/0x2c0 [ 589.305834][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.311149][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 589.327028][ T30] get_signal+0x16a3/0x1740 [ 589.331628][ T30] ? __pfx_get_signal+0x10/0x10 [ 589.352582][ T30] arch_do_signal_or_restart+0x96/0x860 [ 589.358441][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 589.364655][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.395801][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 589.401629][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 589.423582][ T30] do_syscall_64+0x100/0x230 [ 589.428552][ T30] ? clear_bhb_loop+0x35/0x90 [ 589.433279][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.455788][ T30] RIP: 0033:0x7f8c3b57dff9 [ 589.460276][ T30] RSP: 002b:00007f8c3c2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.485884][ T30] RAX: 0000000000000020 RBX: 00007f8c3b736058 RCX: 00007f8c3b57dff9 [ 589.493925][ T30] RDX: 0000000000048040 RSI: 0000000020000080 RDI: 0000000000000003 [ 589.515749][ T30] RBP: 00007f8c3b5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 589.535681][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.543734][ T30] R13: 0000000000000000 R14: 00007f8c3b736058 R15: 00007ffe4e207d08 [ 589.565896][ T30] [ 589.574256][ T30] INFO: task syz.3.1025:8513 blocked for more than 146 seconds. [ 589.585892][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 589.593565][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.628409][ T30] task:syz.3.1025 state:D stack:24184 pid:8513 tgid:8510 ppid:7326 flags:0x00004006 [ 589.645745][ T30] Call Trace: [ 589.649084][ T30] [ 589.652072][ T30] __schedule+0x1895/0x4b30 [ 589.665822][ T30] ? __pfx___schedule+0x10/0x10 [ 589.670754][ T30] ? __pfx_lock_release+0x10/0x10 [ 589.685791][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 589.691353][ T30] ? schedule+0x90/0x320 [ 589.705743][ T30] schedule+0x14b/0x320 [ 589.709973][ T30] schedule_preempt_disabled+0x13/0x30 [ 589.715484][ T30] __mutex_lock+0x6a7/0xd70 [ 589.735802][ T30] ? __mutex_lock+0x52a/0xd70 [ 589.740548][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 589.762510][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 589.768106][ T30] ? read_word_at_a_time+0xe/0x20 [ 589.773184][ T30] ? sized_strscpy+0x8d/0x220 [ 589.793873][ T30] ip_tunnel_init_net+0x20e/0x720 [ 589.799315][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 589.805068][ T30] vti_init_net+0x2e/0xf0 [ 589.825316][ T30] ops_init+0x31e/0x590 [ 589.829840][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 589.854026][ T30] setup_net+0x287/0x9e0 [ 589.865749][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 589.871390][ T30] ? __pfx_setup_net+0x10/0x10 [ 589.885780][ T30] copy_net_ns+0x33f/0x570 [ 589.890331][ T30] create_new_namespaces+0x425/0x7b0 [ 589.905850][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 589.911660][ T30] ksys_unshare+0x57d/0xa70 [ 589.926102][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 589.935851][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.942251][ T30] ? exc_page_fault+0x590/0x8c0 [ 589.962817][ T30] __x64_sys_unshare+0x38/0x40 [ 589.975970][ T30] do_syscall_64+0xf3/0x230 [ 589.980779][ T30] ? clear_bhb_loop+0x35/0x90 [ 589.985506][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.006428][ T30] RIP: 0033:0x7f0033b7dff9 [ 590.010912][ T30] RSP: 002b:00007f00335de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 590.025689][ T30] RAX: ffffffffffffffda RBX: 00007f0033d36058 RCX: 00007f0033b7dff9 [ 590.033728][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 590.061877][ T30] RBP: 00007f0033bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 590.075881][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.084105][ T30] R13: 0000000000000001 R14: 00007f0033d36058 R15: 00007ffcb6e30e88 [ 590.092767][ T5250] Bluetooth: hci20: command tx timeout [ 590.175845][ T54] Bluetooth: hci21: command tx timeout [ 590.182054][ T54] Bluetooth: hci17: command tx timeout [ 590.215873][ T30] [ 590.225824][ T30] INFO: task syz.2.1028:8523 blocked for more than 146 seconds. [ 590.233514][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 590.255848][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.264579][ T30] task:syz.2.1028 state:D stack:21976 pid:8523 tgid:8521 ppid:7862 flags:0x00004002 [ 590.293244][ T30] Call Trace: [ 590.304961][ T30] [ 590.308304][ T30] __schedule+0x1895/0x4b30 [ 590.312895][ T30] ? __pfx___schedule+0x10/0x10 [ 590.325898][ T30] ? __pfx_lock_release+0x10/0x10 [ 590.335822][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 590.341352][ T30] ? schedule+0x90/0x320 [ 590.364014][ T30] schedule+0x14b/0x320 [ 590.368572][ T30] schedule_preempt_disabled+0x13/0x30 [ 590.374112][ T30] __mutex_lock+0x6a7/0xd70 [ 590.402137][ T30] ? __mutex_lock+0x52a/0xd70 [ 590.407410][ T30] ? tun_chr_close+0x3b/0x1b0 [ 590.412149][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 590.435221][ T30] ? __pfx_call_rcu+0x10/0x10 [ 590.440291][ T30] tun_chr_close+0x3b/0x1b0 [ 590.444855][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 590.465862][ T30] __fput+0x23f/0x880 [ 590.469961][ T30] task_work_run+0x24f/0x310 [ 590.478292][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 590.483650][ T30] ? __pfx_task_work_run+0x10/0x10 [ 590.506034][ T30] ? do_exit+0xa2a/0x28e0 [ 590.510455][ T30] ? kmem_cache_free+0x1a2/0x420 [ 590.515458][ T30] ? do_exit+0xa2a/0x28e0 [ 590.535777][ T30] do_exit+0xa2f/0x28e0 [ 590.540025][ T30] ? __pfx_do_exit+0x10/0x10 [ 590.544674][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 590.565953][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 590.574898][ T30] ? cgroup_freezing+0x2a8/0x350 [ 590.585881][ T30] do_group_exit+0x207/0x2c0 [ 590.590532][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.606302][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 590.611577][ T30] get_signal+0x16a3/0x1740 [ 590.625839][ T30] ? __pfx_get_signal+0x10/0x10 [ 590.630791][ T30] arch_do_signal_or_restart+0x96/0x860 [ 590.652421][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 590.665846][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 590.675828][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 590.681615][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 590.705944][ T30] do_syscall_64+0x100/0x230 [ 590.710620][ T30] ? clear_bhb_loop+0x35/0x90 [ 590.715343][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.735717][ T30] RIP: 0033:0x7f37eaf7dff9 [ 590.740203][ T30] RSP: 002b:00007f37ebdcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.765871][ T30] RAX: 0000000000000e6c RBX: 00007f37eb136058 RCX: 00007f37eaf7dff9 [ 590.774106][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 590.795757][ T30] RBP: 00007f37eaff0296 R08: 0000000000000000 R09: 0000000000000000 [ 590.803825][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.817082][ T5250] Bluetooth: hci1: command 0x0406 tx timeout [ 590.823142][ T5250] Bluetooth: hci11: command 0x0406 tx timeout [ 590.829978][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 590.836125][ T8578] Bluetooth: hci0: command 0x0406 tx timeout [ 590.842178][ T8578] Bluetooth: hci6: command 0x0406 tx timeout [ 590.848489][ T54] Bluetooth: hci18: command tx timeout [ 590.873841][ T30] R13: 0000000000000000 R14: 00007f37eb136058 R15: 00007ffcacce7f48 [ 590.894280][ T5250] Bluetooth: hci19: command tx timeout [ 590.905941][ T30] [ 590.912207][ T30] INFO: task syz-executor:8531 blocked for more than 147 seconds. [ 590.936173][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 590.943932][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.959607][ T30] task:syz-executor state:D stack:24128 pid:8531 tgid:8531 ppid:1 flags:0x00004004 [ 590.985783][ T30] Call Trace: [ 590.989128][ T30] [ 590.992136][ T30] __schedule+0x1895/0x4b30 [ 591.005487][ T30] ? __pfx___schedule+0x10/0x10 [ 591.015880][ T30] ? __pfx_lock_release+0x10/0x10 [ 591.020976][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 591.035895][ T30] ? schedule+0x90/0x320 [ 591.040222][ T30] schedule+0x14b/0x320 [ 591.044447][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.075916][ T30] __mutex_lock+0x6a7/0xd70 [ 591.080513][ T30] ? __mutex_lock+0x52a/0xd70 [ 591.085231][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 591.105755][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.110875][ T30] ip_tunnel_init_net+0x20e/0x720 [ 591.122815][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 591.135938][ T30] ? ops_init+0x75/0x590 [ 591.140286][ T30] ops_init+0x31e/0x590 [ 591.144510][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 591.158589][ T30] setup_net+0x287/0x9e0 [ 591.175937][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 591.181609][ T30] ? __pfx_setup_net+0x10/0x10 [ 591.195835][ T30] copy_net_ns+0x33f/0x570 [ 591.200372][ T30] create_new_namespaces+0x425/0x7b0 [ 591.215834][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 591.221653][ T30] ksys_unshare+0x57d/0xa70 [ 591.235806][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 591.240919][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 591.262704][ T30] ? do_syscall_64+0x100/0x230 [ 591.275926][ T30] __x64_sys_unshare+0x38/0x40 [ 591.280788][ T30] do_syscall_64+0xf3/0x230 [ 591.285338][ T30] ? clear_bhb_loop+0x35/0x90 [ 591.305761][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.311751][ T30] RIP: 0033:0x7fc83437f7f7 [ 591.325696][ T30] RSP: 002b:00007ffc077cc388 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 591.345712][ T30] RAX: ffffffffffffffda RBX: 00007fc834535f40 RCX: 00007fc83437f7f7 [ 591.353768][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 591.384321][ T30] RBP: 00007fc834536a38 R08: 0000000000000000 R09: 0000000000000000 [ 591.395866][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 591.403926][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 591.431621][ T30] [ 591.438663][ T30] INFO: task syz-executor:8533 blocked for more than 147 seconds. [ 591.455860][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 591.463558][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.495275][ T30] task:syz-executor state:D stack:24128 pid:8533 tgid:8533 ppid:1 flags:0x00004006 [ 591.525412][ T30] Call Trace: [ 591.529412][ T30] [ 591.532411][ T30] __schedule+0x1895/0x4b30 [ 591.545839][ T30] ? __pfx___schedule+0x10/0x10 [ 591.550775][ T30] ? __pfx_lock_release+0x10/0x10 [ 591.565988][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 591.585875][ T30] ? schedule+0x90/0x320 [ 591.590219][ T30] schedule+0x14b/0x320 [ 591.598433][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.603998][ T30] __mutex_lock+0x6a7/0xd70 [ 591.623018][ T30] ? __mutex_lock+0x52a/0xd70 [ 591.628059][ T30] ? register_nexthop_notifier+0x84/0x290 [ 591.633829][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.655555][ T30] ? __asan_memset+0x23/0x50 [ 591.660450][ T30] register_nexthop_notifier+0x84/0x290 [ 591.676500][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 591.682409][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 591.700998][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 591.715772][ T30] ? __asan_memset+0x23/0x50 [ 591.720457][ T30] ops_init+0x31e/0x590 [ 591.724682][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 591.745131][ T30] setup_net+0x287/0x9e0 [ 591.755874][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 591.761627][ T30] ? __pfx_setup_net+0x10/0x10 [ 591.775755][ T30] copy_net_ns+0x33f/0x570 [ 591.785948][ T30] create_new_namespaces+0x425/0x7b0 [ 591.791329][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 591.815168][ T30] ksys_unshare+0x57d/0xa70 [ 591.819962][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 591.825036][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 591.846010][ T30] ? do_syscall_64+0x100/0x230 [ 591.850853][ T30] __x64_sys_unshare+0x38/0x40 [ 591.865865][ T30] do_syscall_64+0xf3/0x230 [ 591.870451][ T30] ? clear_bhb_loop+0x35/0x90 [ 591.875174][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.895892][ T30] RIP: 0033:0x7f9cae17f7f7 [ 591.900413][ T30] RSP: 002b:00007ffca0c10258 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 591.924198][ T30] RAX: ffffffffffffffda RBX: 00007f9cae335f40 RCX: 00007f9cae17f7f7 [ 591.955707][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 591.963760][ T30] RBP: 00007f9cae336a38 R08: 0000000000000000 R09: 0000000000000000 [ 591.995597][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 592.003826][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 592.025893][ T30] [ 592.032215][ T30] INFO: task syz-executor:8535 blocked for more than 148 seconds. [ 592.055820][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 592.063524][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.100924][ T30] task:syz-executor state:D stack:24128 pid:8535 tgid:8535 ppid:1 flags:0x00004004 [ 592.125880][ T30] Call Trace: [ 592.129234][ T30] [ 592.132210][ T30] __schedule+0x1895/0x4b30 [ 592.145855][ T30] ? __pfx___schedule+0x10/0x10 [ 592.150803][ T30] ? __pfx_lock_release+0x10/0x10 [ 592.166184][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 592.171783][ T30] ? schedule+0x90/0x320 [ 592.188315][ T30] schedule+0x14b/0x320 [ 592.192579][ T30] schedule_preempt_disabled+0x13/0x30 [ 592.212876][ T30] __mutex_lock+0x6a7/0xd70 [ 592.217693][ T30] ? __mutex_lock+0x52a/0xd70 [ 592.222426][ T30] ? register_nexthop_notifier+0x84/0x290 [ 592.244621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 592.250439][ T8558] Bluetooth: hci20: command tx timeout [ 592.256186][ T5247] Bluetooth: hci17: command tx timeout [ 592.261734][ T5247] Bluetooth: hci21: command tx timeout [ 592.271508][ T30] ? __asan_memset+0x23/0x50 [ 592.285860][ T30] register_nexthop_notifier+0x84/0x290 [ 592.305867][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 592.311988][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 592.326032][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 592.335796][ T30] ? __asan_memset+0x23/0x50 [ 592.340477][ T30] ops_init+0x31e/0x590 [ 592.344694][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 592.365903][ T30] setup_net+0x287/0x9e0 [ 592.370249][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 592.386327][ T30] ? __pfx_setup_net+0x10/0x10 [ 592.405967][ T30] copy_net_ns+0x33f/0x570 [ 592.410486][ T30] create_new_namespaces+0x425/0x7b0 [ 592.425870][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 592.431713][ T30] ksys_unshare+0x57d/0xa70 [ 592.445867][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 592.451073][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 592.465839][ T30] ? do_syscall_64+0x100/0x230 [ 592.470689][ T30] __x64_sys_unshare+0x38/0x40 [ 592.486066][ T30] do_syscall_64+0xf3/0x230 [ 592.490655][ T30] ? clear_bhb_loop+0x35/0x90 [ 592.511911][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.525879][ T30] RIP: 0033:0x7fee34f7f7f7 [ 592.530375][ T30] RSP: 002b:00007ffdfab57f48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 592.545855][ T30] RAX: ffffffffffffffda RBX: 00007fee35135f40 RCX: 00007fee34f7f7f7 [ 592.553904][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 592.582800][ T30] RBP: 00007fee35136a38 R08: 0000000000000000 R09: 0000000000000000 [ 592.598098][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 592.615711][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 592.623986][ T30] [ 592.635750][ T30] INFO: task syz-executor:8538 blocked for more than 149 seconds. [ 592.643665][ T30] Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 592.665831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.674600][ T30] task:syz-executor state:D stack:24128 pid:8538 tgid:8538 ppid:1 flags:0x00004004 [ 592.705751][ T30] Call Trace: [ 592.709111][ T30] [ 592.712125][ T30] __schedule+0x1895/0x4b30 [ 592.735986][ T30] ? __pfx___schedule+0x10/0x10 [ 592.741149][ T30] ? __pfx_lock_release+0x10/0x10 [ 592.755841][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 592.761417][ T30] ? schedule+0x90/0x320 [ 592.775855][ T30] schedule+0x14b/0x320 [ 592.780119][ T30] schedule_preempt_disabled+0x13/0x30 [ 592.795854][ T30] __mutex_lock+0x6a7/0xd70 [ 592.803433][ T30] ? __mutex_lock+0x52a/0xd70 [ 592.815863][ T30] ? register_nexthop_notifier+0x84/0x290 [ 592.826269][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 592.831400][ T30] ? __asan_memset+0x23/0x50 [ 592.845726][ T30] register_nexthop_notifier+0x84/0x290 [ 592.851368][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 592.873735][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 592.886154][ T8558] Bluetooth: hci18: command tx timeout [ 592.892603][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 592.905312][ T30] ? __asan_memset+0x23/0x50 [ 592.915885][ T30] ops_init+0x31e/0x590 [ 592.920133][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 592.925569][ T30] setup_net+0x287/0x9e0 [ 592.945811][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 592.951448][ T30] ? __pfx_setup_net+0x10/0x10 [ 592.965859][ T8558] Bluetooth: hci19: command tx timeout [ 592.981849][ T30] copy_net_ns+0x33f/0x570 [ 592.995747][ T30] create_new_namespaces+0x425/0x7b0 [ 593.001143][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 593.015792][ T30] ksys_unshare+0x57d/0xa70 [ 593.020424][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 593.025517][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 593.053136][ T30] ? do_syscall_64+0x100/0x230 [ 593.065854][ T30] __x64_sys_unshare+0x38/0x40 [ 593.070705][ T30] do_syscall_64+0xf3/0x230 [ 593.075266][ T30] ? clear_bhb_loop+0x35/0x90 [ 593.095555][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.101722][ T30] RIP: 0033:0x7fa7eb97f7f7 [ 593.115725][ T30] RSP: 002b:00007fff71d3bba8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 593.124332][ T30] RAX: ffffffffffffffda RBX: 00007fa7ebb35f40 RCX: 00007fa7eb97f7f7 [ 593.153721][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 593.162479][ T30] RBP: 00007fa7ebb36a38 R08: 0000000000000000 R09: 0000000000000000 [ 593.185950][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 593.194094][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 593.215767][ T30] [ 593.219002][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 593.246108][ T30] [ 593.246108][ T30] Showing all locks held in the system: [ 593.253898][ T30] 3 locks held by kworker/u8:1/12: [ 593.286191][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 593.306402][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 593.335825][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 593.345137][ T30] 1 lock held by khungtaskd/30: [ 593.355755][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 593.385896][ T30] 4 locks held by kworker/u8:2/35: [ 593.391099][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 593.417348][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 593.435756][ T30] #2: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 593.455781][ T30] #3: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 593.465368][ T30] 4 locks held by kworker/u8:7/2934: [ 593.486227][ T30] 1 lock held by dhcpcd/4903: [ 593.490994][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 593.515850][ T30] 2 locks held by getty/4991: [ 593.523510][ T30] #0: ffff88814bc190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 593.545825][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 593.565891][ T30] 6 locks held by kworker/u9:2/5237: [ 593.571259][ T30] #0: ffff888036b4d948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 593.602750][ T30] #1: ffffc90003cf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 593.622012][ T30] #2: ffff88807d9f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 593.645910][ T30] #3: ffff88807d9f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 593.665700][ T30] #4: ffffffff8fe3e9e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 593.676037][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 593.703290][ T30] 3 locks held by kworker/1:5/5286: [ 593.708904][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 593.741219][ T30] #1: ffffc900044a7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 593.765916][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 593.785746][ T30] 6 locks held by kworker/1:6/5292: [ 593.791027][ T30] 3 locks held by kworker/0:6/5322: [ 593.805798][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 593.827491][ T30] #1: ffffc900045dfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 593.855889][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 593.875807][ T30] 3 locks held by kworker/u8:6/7375: [ 593.881165][ T30] #0: ffff88814b742948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 593.911282][ T30] #1: ffffc90003ec7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 593.926147][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 593.955118][ T30] 1 lock held by syz.4.1023/8511: [ 593.960514][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 593.985824][ T30] 2 locks held by syz.3.1025/8513: [ 593.990999][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 594.025846][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 594.046169][ T30] 2 locks held by syz.0.1026/8517: [ 594.051611][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 594.075904][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 594.105801][ T30] 1 lock held by syz.2.1028/8523: [ 594.110913][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 594.125701][ T30] 2 locks held by syz-executor/8531: [ 594.131042][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 594.161868][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 594.175866][ T30] 2 locks held by syz-executor/8533: [ 594.185789][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 594.195299][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 594.221922][ T30] 2 locks held by syz-executor/8535: [ 594.238011][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 594.255719][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 594.275732][ T30] 7 locks held by syz-executor/8537: [ 594.281079][ T30] #0: ffff88806889e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 594.305843][ T30] #1: ffff888069768888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 594.326031][ T8580] Bluetooth: hci20: command tx timeout [ 594.331754][ T8558] Bluetooth: hci21: command tx timeout [ 594.340560][ T5247] Bluetooth: hci17: command tx timeout [ 594.350375][ T30] #2: ffff8881447b8b48 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 594.376294][ T30] #3: ffffffff8f5701c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 594.395721][ T30] #4: ffff88806680b0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 594.415713][ T30] #5: ffff88806680f250 (&devlink->lock_key#11){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 594.435721][ T30] #6: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 594.463695][ T30] 2 locks held by syz-executor/8538: [ 594.475838][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 594.485376][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 594.514930][ T30] 1 lock held by syz-executor/8552: [ 594.525818][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.535430][ T30] 1 lock held by syz-executor/8553: [ 594.555861][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.575918][ T30] 1 lock held by syz-executor/8555: [ 594.581208][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.606225][ T30] 1 lock held by syz-executor/8559: [ 594.611501][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.636008][ T30] 1 lock held by syz-executor/8560: [ 594.641375][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.673222][ T30] 1 lock held by syz-executor/8568: [ 594.685921][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.695457][ T30] 1 lock held by syz-executor/8570: [ 594.715575][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.725455][ T30] 1 lock held by syz-executor/8572: [ 594.748440][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.765717][ T30] 1 lock held by syz-executor/8574: [ 594.771163][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.795991][ T30] 1 lock held by syz-executor/8577: [ 594.801263][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.833620][ T30] 1 lock held by syz-executor/8584: [ 594.839258][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.865778][ T30] 1 lock held by syz-executor/8586: [ 594.871040][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.895859][ T30] 1 lock held by syz-executor/8587: [ 594.901125][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.925794][ T30] 1 lock held by syz-executor/8592: [ 594.931082][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.953427][ T30] 1 lock held by syz-executor/8594: [ 594.966177][ T8580] Bluetooth: hci18: command tx timeout [ 594.971983][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 594.997864][ T30] [ 595.000259][ T30] ============================================= [ 595.000259][ T30] [ 595.015769][ T30] NMI backtrace for cpu 0 [ 595.020165][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 595.030748][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 595.040859][ T30] Call Trace: [ 595.044170][ T30] [ 595.047133][ T30] dump_stack_lvl+0x241/0x360 [ 595.051880][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.057218][ T30] ? __pfx__printk+0x10/0x10 [ 595.061882][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 595.066891][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 595.072425][ T30] ? _printk+0xd5/0x120 [ 595.076635][ T30] ? __pfx__printk+0x10/0x10 [ 595.081280][ T30] ? __wake_up_klogd+0xcc/0x110 [ 595.086185][ T30] ? __pfx__printk+0x10/0x10 [ 595.090845][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 595.095923][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 595.101949][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 595.107987][ T30] watchdog+0xff4/0x1040 [ 595.112287][ T30] ? watchdog+0x1ea/0x1040 [ 595.116767][ T30] ? __pfx_watchdog+0x10/0x10 [ 595.121495][ T30] kthread+0x2f0/0x390 [ 595.125601][ T30] ? __pfx_watchdog+0x10/0x10 [ 595.130327][ T30] ? __pfx_kthread+0x10/0x10 [ 595.134980][ T30] ret_from_fork+0x4b/0x80 [ 595.139448][ T30] ? __pfx_kthread+0x10/0x10 [ 595.144092][ T30] ret_from_fork_asm+0x1a/0x30 [ 595.148921][ T30] [ 595.153724][ T30] Sending NMI from CPU 0 to CPUs 1: [ 595.160883][ C1] NMI backtrace for cpu 1 [ 595.160899][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 595.160920][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 595.160931][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x10c/0x780 [ 595.160966][ C1] Code: 40 4c 89 f3 48 c1 eb 03 80 3c 13 00 74 12 4c 89 f7 e8 88 7e 8e 00 48 ba 00 00 00 00 00 fc ff df 48 c7 44 24 40 00 00 00 00 9c <8f> 44 24 40 80 3c 13 00 74 12 4c 89 f7 e8 72 7d 8e 00 48 ba 00 00 [ 595.160982][ C1] RSP: 0018:ffffc900001e7138 EFLAGS: 00000046 [ 595.161000][ C1] RAX: 0000000000000004 RBX: 1ffff9200003ce30 RCX: ffffffff9a3ce903 [ 595.161013][ C1] RDX: dffffc0000000000 RSI: ffffffff8c60fb00 RDI: ffffffff8c60fac0 [ 595.161027][ C1] RBP: ffffc900001e71e8 R08: ffffffff901cf2af R09: 1ffffffff2039e55 [ 595.161041][ C1] R10: dffffc0000000000 R11: fffffbfff2039e56 R12: dffffc0000000000 [ 595.161055][ C1] R13: 1ffff9200003ce48 R14: ffffc900001e7180 R15: 1ffff9200003ce2c [ 595.161081][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 595.161095][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.161107][ C1] CR2: 00007fe2c0036440 CR3: 000000000e734000 CR4: 00000000003526f0 [ 595.161121][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.161132][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.161142][ C1] Call Trace: [ 595.161148][ C1] [ 595.161156][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 595.161177][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 595.161203][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 595.161222][ C1] ? nmi_handle+0x2a/0x5a0 [ 595.161247][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 595.161270][ C1] ? nmi_handle+0x14f/0x5a0 [ 595.161286][ C1] ? nmi_handle+0x2a/0x5a0 [ 595.161304][ C1] ? lockdep_hardirqs_on_prepare+0x10c/0x780 [ 595.161328][ C1] ? default_do_nmi+0x63/0x160 [ 595.161350][ C1] ? exc_nmi+0x123/0x1f0 [ 595.161369][ C1] ? end_repeat_nmi+0xf/0x53 [ 595.161391][ C1] ? lockdep_hardirqs_on_prepare+0x10c/0x780 [ 595.161416][ C1] ? lockdep_hardirqs_on_prepare+0x10c/0x780 [ 595.161442][ C1] ? lockdep_hardirqs_on_prepare+0x10c/0x780 [ 595.161467][ C1] [ 595.161472][ C1] [ 595.161480][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 595.161507][ C1] ? rcu_is_watching+0x15/0xb0 [ 595.161527][ C1] trace_hardirqs_on+0x28/0x40 [ 595.161548][ C1] __local_bh_enable_ip+0x168/0x200 [ 595.161570][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 595.161591][ C1] ? ipt_do_table+0x312/0x1860 [ 595.161616][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 595.161642][ C1] ipt_do_table+0x1552/0x1860 [ 595.161697][ C1] ? ipt_do_table+0x312/0x1860 [ 595.161724][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 595.161752][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 595.161772][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 595.161802][ C1] nf_hook_slow+0xc3/0x220 [ 595.161826][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 595.161847][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 595.161867][ C1] NF_HOOK+0x29e/0x450 [ 595.161888][ C1] ? NF_HOOK+0x9a/0x450 [ 595.161906][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 595.161926][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 595.161950][ C1] ? ip_rcv_finish+0x406/0x560 [ 595.161970][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 595.161990][ C1] NF_HOOK+0x3a4/0x450 [ 595.162008][ C1] ? __lock_acquire+0x1384/0x2050 [ 595.162035][ C1] ? NF_HOOK+0x9a/0x450 [ 595.162054][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 595.162072][ C1] ? ip_rcv_core+0x801/0xd10 [ 595.162092][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 595.162116][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 595.162136][ C1] __netif_receive_skb+0x2bf/0x650 [ 595.162160][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 595.162186][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 595.162207][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 595.162233][ C1] ? __pfx_lock_release+0x10/0x10 [ 595.162259][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 595.162291][ C1] process_backlog+0x662/0x15b0 [ 595.162316][ C1] ? process_backlog+0x33b/0x15b0 [ 595.162343][ C1] ? __pfx_process_backlog+0x10/0x10 [ 595.162365][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 595.162393][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 595.162422][ C1] __napi_poll+0xcb/0x490 [ 595.162445][ C1] net_rx_action+0x89b/0x1240 [ 595.162478][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 595.162500][ C1] ? __run_timer_base+0x178/0x8e0 [ 595.162523][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 595.162565][ C1] handle_softirqs+0x2c5/0x980 [ 595.162591][ C1] ? run_ksoftirqd+0xca/0x130 [ 595.162618][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 595.162640][ C1] ? preempt_schedule+0xe1/0xf0 [ 595.162670][ C1] run_ksoftirqd+0xca/0x130 [ 595.162695][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 595.162719][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 595.162746][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 595.162771][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 595.162800][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 595.162823][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 595.162848][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 595.162872][ C1] smpboot_thread_fn+0x544/0xa30 [ 595.162896][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 595.162923][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 595.162948][ C1] kthread+0x2f0/0x390 [ 595.162964][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 595.162988][ C1] ? __pfx_kthread+0x10/0x10 [ 595.163005][ C1] ret_from_fork+0x4b/0x80 [ 595.163029][ C1] ? __pfx_kthread+0x10/0x10 [ 595.163047][ C1] ret_from_fork_asm+0x1a/0x30 [ 595.163078][ C1] [ 595.753682][ T5237] Bluetooth: hci19: command tx timeout [ 595.766090][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 595.773004][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00220-g25c12b459db8 #0 [ 595.783546][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 595.793650][ T30] Call Trace: [ 595.796977][ T30] [ 595.799944][ T30] dump_stack_lvl+0x241/0x360 [ 595.804670][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.809911][ T30] ? __pfx__printk+0x10/0x10 [ 595.814545][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 595.820580][ T30] ? vscnprintf+0x5d/0x90 [ 595.824949][ T30] panic+0x349/0x880 [ 595.828891][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 595.835090][ T30] ? __pfx_panic+0x10/0x10 [ 595.839554][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 595.844969][ T30] ? __irq_work_queue_local+0x137/0x410 [ 595.850558][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 595.855968][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 595.862166][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 595.868367][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 595.874566][ T30] watchdog+0x1033/0x1040 [ 595.878941][ T30] ? watchdog+0x1ea/0x1040 [ 595.883416][ T30] ? __pfx_watchdog+0x10/0x10 [ 595.888139][ T30] kthread+0x2f0/0x390 [ 595.892258][ T30] ? __pfx_watchdog+0x10/0x10 [ 595.896978][ T30] ? __pfx_kthread+0x10/0x10 [ 595.901608][ T30] ret_from_fork+0x4b/0x80 [ 595.906071][ T30] ? __pfx_kthread+0x10/0x10 [ 595.910697][ T30] ret_from_fork_asm+0x1a/0x30 [ 595.915561][ T30] [ 595.918970][ T30] Kernel Offset: disabled [ 595.923301][ T30] Rebooting in 86400 seconds..