last executing test programs: 1m17.662822404s ago: executing program 2 (id=7): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000c06010100000000000000000100000405"], 0x40}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x4e4db588659d18ff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}}, 0x24}}, 0x44800) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x1000000}]}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 1m17.167960054s ago: executing program 2 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200543a00fe8000000000000000000000000000bbff020000000000000000000300000001"], 0x0) 1m4.142142049s ago: executing program 2 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200543a00fe8000000000000000000000000000bbff020000000000000000000300000001"], 0x0) 52.075834863s ago: executing program 2 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200543a00fe8000000000000000000000000000bbff020000000000000000000300000001"], 0x0) 40.133486441s ago: executing program 2 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200543a00fe8000000000000000000000000000bbff020000000000000000000300000001"], 0x0) 26.590814112s ago: executing program 2 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200543a00fe8000000000000000000000000000bbff020000000000000000000300000001"], 0x0) 25.836851631s ago: executing program 0 (id=555): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000043000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 25.663926937s ago: executing program 0 (id=559): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendto$inet(r1, &(0x7f0000002640)="01a50f", 0x3, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x101, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="827be7271019b3fe048765ad", 0xc}, {&(0x7f00000005c0)="b8", 0x1}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="3800000000000000000000000700000000442400037f000001000000007f00000100000000ac1414bb00000000e0000001000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141427"], 0x58}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1701}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xcca1}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 24.798802011s ago: executing program 0 (id=565): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c000900080000ff", @ANYRES32=r3, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) 24.451697357s ago: executing program 0 (id=570): socket(0x25, 0x1, 0x0) (async) r0 = socket(0x25, 0x1, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updsa={0x10c, 0x1a, 0x1, 0x70bd2c, 0x35dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0x30, 0x0, 0x73}, {@in=@rand_addr=0x64010100, 0x4d2, 0x2b}, @in=@rand_addr=0x64010100, {0x7, 0xfe43, 0x6, 0x6, 0xfffffffffffffff9, 0x28f, 0xf, 0x4}, {0x4ef3c5a8, 0x7, 0x1, 0x8}, {0x101, 0xab1, 0x8}, 0x70bd27, 0x20000, 0x2, 0x0, 0x3, 0x28}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in=@remote}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40080) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updsa={0x10c, 0x1a, 0x1, 0x70bd2c, 0x35dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0x30, 0x0, 0x73}, {@in=@rand_addr=0x64010100, 0x4d2, 0x2b}, @in=@rand_addr=0x64010100, {0x7, 0xfe43, 0x6, 0x6, 0xfffffffffffffff9, 0x28f, 0xf, 0x4}, {0x4ef3c5a8, 0x7, 0x1, 0x8}, {0x101, 0xab1, 0x8}, 0x70bd27, 0x20000, 0x2, 0x0, 0x3, 0x28}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in=@remote}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40080) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={0x34, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="173499e67c67"}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={0x34, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="173499e67c67"}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a400fe0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x8, 0x5}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x4, 0x0, {0xffffffffffff5eff, 0x9, 0x0, 0xc3}, 0x300, 0x6}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40480a4}, 0x80) 24.243973228s ago: executing program 0 (id=573): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000068000100000000000080fe000a000000000000000600070008000000140006000000000000000000000000000000000108000500", @ANYRES32=r1, @ANYBLOB="28000880"], 0x64}}, 0x0) 24.113344002s ago: executing program 0 (id=575): r0 = socket$inet(0x2, 0x2, 0x1) unshare(0x42000000) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r1}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[], 0x444}, 0x1, 0x0, 0x0, 0x404c804}, 0x40) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4004051}], 0x49249249249253c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, r2, 0x761ac000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f00000000000000611148000000000006000000feffffff950000000000000009f81146f2ac9f390a1346705a045d7fdea61b584e1881572a9551a609968158d1531c48a01ba884b52d8222e380b150caf50ec6fa211f773b139b2ea1003d20f1a978decf441b363f"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd3, &(0x7f00000007c0)=""/211, 0x0, 0x11, '\x00', 0x0, @cgroup_sock, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000010", @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bd000000b70000000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x200000000000019e, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000500)={0x21, @multicast1, 0x4e22, 0x1, 'wrr\x00', 0x21, 0x6, 0x57}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000500)}, 0x20) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x40047452, &(0x7f0000000380)={0x18, 0x0, {0x0, @multicast, 'ip6erspan0\x00'}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x90280, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001439) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000863f602dd3eff1f87c0265bc73dabf9e3f263e86b2a699cc9270f8fe17737c2b0255897b8a75052fb40f1ad898d03e32b24e4082a703863eadbc3f7fb8ed1c4e0eb606797911dc48a5930d1e9d4002cb9b92630336ed1f69a7bc676f79b5f6c5b0f6bad4d761b3a36117f471af674cf4bc9e3d1d8fab81ae763965c4cfb465"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f00000001c0)) 19.76126071s ago: executing program 4 (id=605): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)=""/9, 0x8a, 0x9, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x41, 0x3, 0x2e0, 0x178, 0x0, 0x0, 0x178, 0x0, 0x248, 0x1f0, 0x1f0, 0x248, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x150, 0x178, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@remote, [], @ipv4=@loopback, [], @ipv4=@dev, [], @ipv4=@multicast2}}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="0708625b7ff70ed379f1194d52089f007b830f4cf63774379a4370d4910cd57dca47f2982037b2f35d1744cb039d50cd8efa1b2c472fa1aeefc6bb41d52323cb0ec217126939a5cb69c924bd325e06c1125e1661e13a1fd540", 0x59}], 0x1}}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001040)={0x1, 0x80000000, @status={[0x4, 0x1, 0x800, 0xffffffffffffffa7, 0x8, 0x4aa]}, [0x79, 0xffffffff, 0x7, 0x1, 0x40, 0xe5, 0x219b, 0x8000000000000000, 0x9, 0x7, 0x6, 0x3, 0x4, 0x8000000000000000, 0x2, 0x7, 0x3, 0x9c, 0xcc, 0x200, 0x200, 0x9, 0xfc, 0x3, 0x1, 0x1, 0x3, 0xdb, 0x6, 0x5, 0x2, 0x5, 0xffffffffffff9b25, 0x800, 0x2, 0x9, 0xffffffffffffffff, 0x1000, 0xde300, 0xc07b, 0x4, 0x40, 0x1, 0x3, 0x5, 0x2, 0x10000, 0xffff, 0x1, 0x10001, 0x2, 0x9, 0x5bd2, 0x5, 0x3, 0x3, 0x8001, 0x4, 0xfffffffffffffe00, 0x7, 0x17b, 0x6, 0x9, 0x9]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010084000000fbdbdf25250000000afe01007708006e300000000c002d000202aaaaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="05002e004e00000005002b0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x1, [0x4]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000001800170600000000000000201c140000fe000001"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x194, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x180, 0x1, [@m_connmark={0x88, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x2, 0x7ff, 0x7}, 0x4000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xff3, 0x1, 0x129e, 0x1}, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf4c4, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x194}}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f0000000740)=""/63, &(0x7f0000000780)=0x3f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) 19.171881275s ago: executing program 4 (id=607): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000120002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 18.944884436s ago: executing program 4 (id=609): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xc, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 18.584718779s ago: executing program 4 (id=612): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c000000020601020000000000000000000000000500040000004e000900020073797a3000000000100003006269746d317e3a706f727400140007800800094000000006060004400000000005000100070000000500040000000000050005000700000014000300686173683a69702c706f72742c697000120003006269746d61703a69702c6d616300000005000500020000000500040002000000"], 0x9c}}, 0x0) 18.323916942s ago: executing program 4 (id=615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000400)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}], 0x3, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 2) 17.877784614s ago: executing program 1 (id=616): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x1, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {"4b669a411cd5617d"}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x2, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r4, 0x11, 0x65, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000006800010000000000000000000a000000000000000600070008000000140006000000000000000000000000000000000108000500", @ANYRES32=r3, @ANYBLOB="28000880"], 0x64}}, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8850}, 0x0) 17.726898831s ago: executing program 3 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x44001) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904fbff000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d7000240002800800014000005f12100003800c0001004e36f8689c9b7e7f080002"], 0x88}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x100, 0x0, 0x0, 0x2001, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x0, 0x0, 0x25, 0x0, "2d13d1ea1c81890afc05ef7ab9597eb4649a62204ccbffb609fb960d98e32babaa0f296ed2fff9303286706a70778f4d53b6f30467246d756aedaa004e3f24d900ef11273bfae514659dd18d4c7e6df9"}, 0xd8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a7465616d30"], 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x217d27424d8b763d}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008000) 17.383360499s ago: executing program 1 (id=619): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000200002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 17.283801022s ago: executing program 4 (id=620): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x14}}, 0x80) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000018010000202070250000000000000000001af8ff00000000bfa100000000000007010000f8ffffffb703000008006d00b703000000000010e4c985805c2738d385f95fd19288b4ec128b00000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB="00000000000000f31788b9a97b2d474f01", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000300), &(0x7f0000000440)}, 0x20) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000e359882b8b7f6f939718b3bb0601e28389e01a3012d6ad2d7740c3e94da11e", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf2508000000800001802c0004001400010002004e21e000000200000000000000001400020002004e20ffffffff0000000000000000380004001400010002004e21ac1414aa0000000000000000200002000a004e220000000100000000000000000000ffffac14143a7403000008000300c10000000d0001007564703a73797a30000000001c00098008000200ff0f0000080001000900000008000200030000001400098008000200070000000800010004000000"], 0xc4}, 0x1, 0x0, 0x0, 0x80a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e08906000f4000631177fbac141445e000030394029f034d2f87e589ca6aab845013f286dd", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088082de0ffff200000000067004aac14140ce000000d49e832f0", 0x0, 0xffffff94, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000700000000000000bc2000000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0xfa, &(0x7f0000000680)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 17.276404146s ago: executing program 3 (id=621): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 17.104199786s ago: executing program 1 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010100001040000000000000000000000003d58482e27c1d0959465cc4d015cc76b98ad48c419d41e172953eaf8cc3ca68f0e290d81a706ed07a6c0205177a571299afb1b37d88a6bfb0ccf945e3f5b497e1d5c267db0c3b5183121d8a0ee92d43052c3db212502c2ac924a804846ca9051177c1b4e0ce06448e88a", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800290008c901000800280000000000"], 0x58}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000016c0), 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000001680), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000008107e0b6d0c935bb00", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES16=r0], 0x120}}, 0x0) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000040)=@isdn, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/229, 0xe5}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000001340)=""/184, 0xb8}, {&(0x7f0000001400)=""/85, 0x55}, {&(0x7f0000001480)=""/99, 0x63}, {&(0x7f0000001500)=""/165, 0xa5}], 0x7}, 0x2) 17.001706074s ago: executing program 3 (id=623): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "97e9cddb93ea4ed1e2ace5b0c90ad625"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x36) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3273], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$NFT_BATCH(r6, 0x0, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x90) syz_emit_ethernet(0xe46, &(0x7f0000000940)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0xb, 0x4, 0x3, 0x0, 0xe34, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xeb, [@multicast2, @multicast1, @rand_addr=0x64010101, @multicast1, @empty]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xce, 0xffff, [0x1, 0xd0f], "a48fa23449642bbef65bc82b560cb905f8adbee0b91f2b3116e7f3a267d0803d636769d821d2f0dff568b8b65da5920639c5b4ef5a5b15579746259dc3de73cb7479217d10efd1a32c48b9fa15786dad9c64b278ad04d1ffc8bd1d83d48a32b14b42e5e369b45693d408cbac024abac8e6f18ed1b109ea94bb28c0d3c487e541e324bad8702f4b1fe6d05bb7b9e6f9b43972abb90c796fd811fe8c5a6c6664c93f0795f256cec6cc797addea39c8c86982955d60a6f7d4e2190619388f7c3b8702c5d2f697c7b19ece617cd4c718"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7c9aee2d5353253055bc65acf8eb79c850467aebe8f70684ac0c1e220431664043c3108e248f36cb4ead2e03397b1368d622af898a4281f190da"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "ccfc1502583ebfebb884a19117f27940b270a9b441cea9f8a54988a8f9ec654a86533f7dca1b974738b07a018e046b1c24b071094d7390a639214f7941841a48684fc0ac6ecf43dfb64bbe2315e332e0ab268d642feedf5480c6b216ffa53798682f3b59cf9e742ed8fb76f052db2933bb0a220b8b878f5fb1fbe9d0d9bb5e3f2abb4407ebe1c7e23afd95d68fbd20af6038b8e199431696c358f70a72ae912b988799e3f329a8c13e072c56ca6b4c05716cdeeef22868f8522524a1e78bc0f2cf4b20f7c28381844e885f88f964dbbbae055c77bcef76bfb977574b287433ddbeada7bbb2d0bcd194f70bbfbda3847ddc4c923479dc"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x3, 0x0, 0x1, 0x2, 0x7}, 0x1, {0xc1}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x6, 0x1, 0x1, 0x0, 0x3, 0xd}, 0x2, {0xfd0000, 0x4757, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}, 0x0) 16.659803889s ago: executing program 3 (id=624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000110001000000000000000000ac141400000000000000000000000000003200000000000014000d0020"], 0x48}}, 0x0) 16.358784066s ago: executing program 3 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c010000160001000000000000000000ac141400000000000000000000000000fe800000000000000000000000000000000000dfffffff0000000000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000b1a0000008001600000000002c0028"], 0x12c}}, 0x0) 16.198463755s ago: executing program 3 (id=626): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000400)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @mcast1, 0xc}}, [0x8, 0x7, 0x10, 0xb91a, 0x2, 0x6, 0x4, 0x2, 0xff000000000, 0x0, 0xc3, 0x8b, 0x3, 0x2f74, 0x5]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x3, 0x10}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000d80)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x37, 0x30, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@cipso={0x86, 0x6, 0x1}]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x8}}}}}}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000200)) 16.039257911s ago: executing program 1 (id=627): r0 = socket$inet6(0xa, 0x80803, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@udp6=r2}, 0x20) close(r2) (async) syz_emit_ethernet(0x143, &(0x7f0000001380)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x2b, 0x4, 0x1, 0x1, 0x135, 0x64, 0x0, 0x5, 0x11, 0x0, @broadcast, @multicast2, {[@end, @ssrr={0x89, 0x13, 0x31, [@remote, @rand_addr=0x64010100, @multicast2, @local]}, @generic={0x86, 0x10, "5cd0adb2879f100eeb7e58c41db6"}, @lsrr={0x83, 0x2b, 0x89, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @end, @lsrr={0x83, 0x7, 0x3b, [@empty]}, @cipso={0x86, 0x6, 0x1}, @generic={0x44, 0xf, "d2fbb145e8b701f6608542553f"}, @generic={0x44, 0x5, 'tcT'}, @timestamp={0x44, 0x24, 0x41, 0x0, 0x7, [0xfffffe01, 0xd208, 0x4, 0x5, 0x2, 0x2, 0x5, 0x4]}]}}, {0x4e21, 0x4e24, 0x89, 0x0, @opaque="56feff68dc185ece5ad5a4cdd55d249de97f04769095db11d432817e16bbcf2d600a06f43b025e9fc68208763e9f721da0e416fa8ba498da06df7a3269dd61cf414ccf461a8984347696644fe6202bd1cb3e5c08fe30d7c0067690f5881394abb46f274974560122872e729e7842f046f111eb540ea728dcb5521c0f7c611d0390"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x8de, 0x75, 0xb8b, 0x256]}) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001280)={@local, @loopback, 0x0}, &(0x7f00000016c0)=0xc) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@var={0xa, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @enum64={0x2, 0x4, 0x0, 0x13, 0x0, 0xc, [{0x5, 0x6, 0x40}, {0x2, 0x800, 0x7d}, {0x9, 0x101, 0x2}, {0xf, 0x6, 0x9}]}]}, {0x0, [0x30]}}, &(0x7f0000001780)=""/48, 0x73, 0x30, 0x0, 0x3, 0x10000, @value}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0x20, &(0x7f0000001980)={&(0x7f0000001880)=""/70, 0x46, 0x0, &(0x7f0000001900)=""/65, 0x41}}, 0x10) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00100000000000120000d1850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a00)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x5, 0x1a, &(0x7f0000001500)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @generic={0xff, 0x5, 0x7, 0x3, 0x7e48e62}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x726}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x400}, @call={0x85, 0x0, 0x0, 0x11}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}], &(0x7f0000001240)='GPL\x00', 0x8, 0xb7, &(0x7f0000001600)=""/183, 0x41000, 0x36, '\x00', r5, @fallback=0xc, r6, 0x8, &(0x7f0000001800)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001840)={0x5, 0x10, 0x9, 0x5}, 0x10, r7, r8, 0x0, &(0x7f0000001a40)=[r3, r3, r9, 0xffffffffffffffff, r3], 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0xfffffffe, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5}}, 0xe8) (async) connect$inet6(r0, &(0x7f00000000c0), 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r10}, 0x4) 15.787974326s ago: executing program 1 (id=628): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac00000012000105000000000000014000000000000000000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 15.608748745s ago: executing program 1 (id=629): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7b8f088df699d6ea4c07c3a9399ad6bc79c09800206bf987", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000080001000300000004000c80"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x1, {0x1, 0x0, 0x4}}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000440)="db8b4cf8beb8d68a87ccce6ca71dd7d1b5b04368adadfb1e4d470c65eb8e31217b4e4c5089f509640cdcd1d169e7725775a1c8b1bc9f33de51ae0cd65160e6f409be3f7605ffa02fc0400fc7495f00efa6bff82b887251a916041015c2ab26061375edf5", 0x64}], 0x1, &(0x7f00000004c0)=[{0x28, 0x102, 0x80000000, "d04643451ecabd68da569f5a3b30ed9958fa"}, {0xf0, 0x10f, 0x8, "aced69e1853bcfbfedb6b61fa4994de47ccd2b49da6e5f4d938c6776d6b45c82d8484ad4cbad746d215553198ce939e6eceb6ef5c2d079c4a70c2e1fe918b89e3ef3554cf7c2334bb9d1a5f534dc4edcc6232fb08c92fa2eb07b1e3c81d81604ff9c6982d697e4819c28865604d2fe8d938ad07f767bf4a6881da75667ee618f649d9c3d216ef7091e1ae20195f997f097a17c3bda9cf7952e765c3b20f24325a2a9bf2719fa40e658d86faea2635495b403d4e6aab293634d6f60e4252c246fa0dba3a07eea27d2c255e64914503651a2e934a40bb0fe03b2a05f8c3e7281"}], 0x118}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000b40)={0x1d, r5, 0xfffffffffffffffe, {0x0, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f0000000080)={0x0}, 0x4}, 0x4c8c0) r6 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) sendmsg$can_bcm(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x2, 0xc21, 0x7, {0x77359400}, {0x77359400}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "b71778f0d77697d2"}}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x40010) 8.994486974s ago: executing program 32 (id=575): r0 = socket$inet(0x2, 0x2, 0x1) unshare(0x42000000) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r1}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[], 0x444}, 0x1, 0x0, 0x0, 0x404c804}, 0x40) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4004051}], 0x49249249249253c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, r2, 0x761ac000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f00000000000000611148000000000006000000feffffff950000000000000009f81146f2ac9f390a1346705a045d7fdea61b584e1881572a9551a609968158d1531c48a01ba884b52d8222e380b150caf50ec6fa211f773b139b2ea1003d20f1a978decf441b363f"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd3, &(0x7f00000007c0)=""/211, 0x0, 0x11, '\x00', 0x0, @cgroup_sock, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000010", @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bd000000b70000000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x200000000000019e, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000500)={0x21, @multicast1, 0x4e22, 0x1, 'wrr\x00', 0x21, 0x6, 0x57}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000500)}, 0x20) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x40047452, &(0x7f0000000380)={0x18, 0x0, {0x0, @multicast, 'ip6erspan0\x00'}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x90280, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001439) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000863f602dd3eff1f87c0265bc73dabf9e3f263e86b2a699cc9270f8fe17737c2b0255897b8a75052fb40f1ad898d03e32b24e4082a703863eadbc3f7fb8ed1c4e0eb606797911dc48a5930d1e9d4002cb9b92630336ed1f69a7bc676f79b5f6c5b0f6bad4d761b3a36117f471af674cf4bc9e3d1d8fab81ae763965c4cfb465"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f00000001c0)) 1.980624006s ago: executing program 33 (id=620): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x14}}, 0x80) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000018010000202070250000000000000000001af8ff00000000bfa100000000000007010000f8ffffffb703000008006d00b703000000000010e4c985805c2738d385f95fd19288b4ec128b00000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB="00000000000000f31788b9a97b2d474f01", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000300), &(0x7f0000000440)}, 0x20) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000e359882b8b7f6f939718b3bb0601e28389e01a3012d6ad2d7740c3e94da11e", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf2508000000800001802c0004001400010002004e21e000000200000000000000001400020002004e20ffffffff0000000000000000380004001400010002004e21ac1414aa0000000000000000200002000a004e220000000100000000000000000000ffffac14143a7403000008000300c10000000d0001007564703a73797a30000000001c00098008000200ff0f0000080001000900000008000200030000001400098008000200070000000800010004000000"], 0xc4}, 0x1, 0x0, 0x0, 0x80a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e08906000f4000631177fbac141445e000030394029f034d2f87e589ca6aab845013f286dd", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088082de0ffff200000000067004aac14140ce000000d49e832f0", 0x0, 0xffffff94, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000700000000000000bc2000000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0xfa, &(0x7f0000000680)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 953.883811ms ago: executing program 34 (id=626): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000400)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @mcast1, 0xc}}, [0x8, 0x7, 0x10, 0xb91a, 0x2, 0x6, 0x4, 0x2, 0xff000000000, 0x0, 0xc3, 0x8b, 0x3, 0x2f74, 0x5]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x3, 0x10}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000d80)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x37, 0x30, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@cipso={0x86, 0x6, 0x1}]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x8}}}}}}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000200)) 0s ago: executing program 35 (id=629): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7b8f088df699d6ea4c07c3a9399ad6bc79c09800206bf987", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000080001000300000004000c80"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x1, {0x1, 0x0, 0x4}}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000440)="db8b4cf8beb8d68a87ccce6ca71dd7d1b5b04368adadfb1e4d470c65eb8e31217b4e4c5089f509640cdcd1d169e7725775a1c8b1bc9f33de51ae0cd65160e6f409be3f7605ffa02fc0400fc7495f00efa6bff82b887251a916041015c2ab26061375edf5", 0x64}], 0x1, &(0x7f00000004c0)=[{0x28, 0x102, 0x80000000, "d04643451ecabd68da569f5a3b30ed9958fa"}, {0xf0, 0x10f, 0x8, "aced69e1853bcfbfedb6b61fa4994de47ccd2b49da6e5f4d938c6776d6b45c82d8484ad4cbad746d215553198ce939e6eceb6ef5c2d079c4a70c2e1fe918b89e3ef3554cf7c2334bb9d1a5f534dc4edcc6232fb08c92fa2eb07b1e3c81d81604ff9c6982d697e4819c28865604d2fe8d938ad07f767bf4a6881da75667ee618f649d9c3d216ef7091e1ae20195f997f097a17c3bda9cf7952e765c3b20f24325a2a9bf2719fa40e658d86faea2635495b403d4e6aab293634d6f60e4252c246fa0dba3a07eea27d2c255e64914503651a2e934a40bb0fe03b2a05f8c3e7281"}], 0x118}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000b40)={0x1d, r5, 0xfffffffffffffffe, {0x0, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f0000000080)={0x0}, 0x4}, 0x4c8c0) r6 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) sendmsg$can_bcm(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x2, 0xc21, 0x7, {0x77359400}, {0x77359400}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "b71778f0d77697d2"}}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x40010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 50.358586][ T5219] cgroup: Unknown subsys name 'net' [ 50.464968][ T5219] cgroup: Unknown subsys name 'cpuset' [ 50.472849][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.768371][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.910415][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.919108][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.928547][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.936932][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.945748][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.953814][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.960818][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.961151][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.976315][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.985596][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.986295][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.993271][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.003416][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.009984][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.014755][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.020787][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.035568][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.035681][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.050694][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.058048][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.066857][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.071553][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.075745][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.082073][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.088798][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.102553][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.105246][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.118241][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.126102][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.139374][ T4625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.420336][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 54.591061][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 54.647877][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.656058][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.664059][ T5231] bridge_slave_0: entered allmulticast mode [ 54.671280][ T5231] bridge_slave_0: entered promiscuous mode [ 54.708152][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.715375][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.722879][ T5231] bridge_slave_1: entered allmulticast mode [ 54.729419][ T5231] bridge_slave_1: entered promiscuous mode [ 54.756928][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.789135][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.796543][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.804091][ T5230] bridge_slave_0: entered allmulticast mode [ 54.810666][ T5230] bridge_slave_0: entered promiscuous mode [ 54.818317][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 54.828683][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.853369][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 54.864269][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 54.873679][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.880797][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.888272][ T5230] bridge_slave_1: entered allmulticast mode [ 54.895270][ T5230] bridge_slave_1: entered promiscuous mode [ 54.915983][ T5231] team0: Port device team_slave_0 added [ 54.924788][ T5231] team0: Port device team_slave_1 added [ 54.953541][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.996582][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.067825][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.075207][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.101856][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.139524][ T5230] team0: Port device team_slave_0 added [ 55.148706][ T5230] team0: Port device team_slave_1 added [ 55.155472][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.162783][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.188951][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.243418][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.250573][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.258098][ T5236] bridge_slave_0: entered allmulticast mode [ 55.265639][ T5236] bridge_slave_0: entered promiscuous mode [ 55.295014][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.302519][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.309902][ T5236] bridge_slave_1: entered allmulticast mode [ 55.317006][ T5236] bridge_slave_1: entered promiscuous mode [ 55.333112][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.340229][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.347551][ T5229] bridge_slave_0: entered allmulticast mode [ 55.354641][ T5229] bridge_slave_0: entered promiscuous mode [ 55.363188][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.370288][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.377658][ T5229] bridge_slave_1: entered allmulticast mode [ 55.384811][ T5229] bridge_slave_1: entered promiscuous mode [ 55.401088][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.408407][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.434560][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.453527][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.460702][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.468922][ T5239] bridge_slave_0: entered allmulticast mode [ 55.475877][ T5239] bridge_slave_0: entered promiscuous mode [ 55.518740][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.526508][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.552528][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.571654][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.578807][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.591886][ T5239] bridge_slave_1: entered allmulticast mode [ 55.598573][ T5239] bridge_slave_1: entered promiscuous mode [ 55.616186][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.628157][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.639819][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.651735][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.663432][ T5231] hsr_slave_0: entered promiscuous mode [ 55.670125][ T5231] hsr_slave_1: entered promiscuous mode [ 55.711048][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.742437][ T5236] team0: Port device team_slave_0 added [ 55.765222][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.789510][ T5230] hsr_slave_0: entered promiscuous mode [ 55.797798][ T5230] hsr_slave_1: entered promiscuous mode [ 55.804960][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.813304][ T5230] Cannot create hsr debugfs directory [ 55.820577][ T5236] team0: Port device team_slave_1 added [ 55.840830][ T5229] team0: Port device team_slave_0 added [ 55.899941][ T5229] team0: Port device team_slave_1 added [ 55.920314][ T5239] team0: Port device team_slave_0 added [ 55.928513][ T5239] team0: Port device team_slave_1 added [ 55.943286][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.950279][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.977292][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.990177][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.997260][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.023391][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.041953][ T5246] Bluetooth: hci1: command tx timeout [ 56.072226][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.079215][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.105169][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.124160][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.131156][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.157432][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.169948][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.176959][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.203117][ T4625] Bluetooth: hci2: command tx timeout [ 56.208767][ T4625] Bluetooth: hci3: command tx timeout [ 56.214400][ T53] Bluetooth: hci4: command tx timeout [ 56.220131][ T5246] Bluetooth: hci0: command tx timeout [ 56.220171][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.246408][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.253531][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.279522][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.323852][ T5236] hsr_slave_0: entered promiscuous mode [ 56.329969][ T5236] hsr_slave_1: entered promiscuous mode [ 56.336577][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.344593][ T5236] Cannot create hsr debugfs directory [ 56.414628][ T5239] hsr_slave_0: entered promiscuous mode [ 56.423045][ T5239] hsr_slave_1: entered promiscuous mode [ 56.429156][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.437742][ T5239] Cannot create hsr debugfs directory [ 56.515569][ T5229] hsr_slave_0: entered promiscuous mode [ 56.524662][ T5229] hsr_slave_1: entered promiscuous mode [ 56.530732][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.538430][ T5229] Cannot create hsr debugfs directory [ 56.710558][ T5231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.731915][ T5231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.753669][ T5231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.762749][ T5231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.828779][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.843434][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.862834][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.883126][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.918992][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.950625][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.976398][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.001182][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.028732][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.037765][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.051022][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.062960][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.164119][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.176974][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.195861][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.204590][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.239116][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.265654][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.293612][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.326203][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.333569][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.365844][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.378800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.386086][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.409718][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.416849][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.425927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.433145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.459418][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.479077][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.530218][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.558865][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.580203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.587400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.597603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.604769][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.657610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.664793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.733699][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.740833][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.768554][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.861309][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.880383][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.932720][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.939833][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.035890][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.043088][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.079412][ T5231] veth0_vlan: entered promiscuous mode [ 58.112641][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.121716][ T5246] Bluetooth: hci1: command tx timeout [ 58.148662][ T5231] veth1_vlan: entered promiscuous mode [ 58.166230][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.281747][ T5246] Bluetooth: hci0: command tx timeout [ 58.287232][ T5246] Bluetooth: hci2: command tx timeout [ 58.292838][ T4625] Bluetooth: hci3: command tx timeout [ 58.292896][ T4625] Bluetooth: hci4: command tx timeout [ 58.320257][ T5239] veth0_vlan: entered promiscuous mode [ 58.346849][ T5231] veth0_macvtap: entered promiscuous mode [ 58.359094][ T5231] veth1_macvtap: entered promiscuous mode [ 58.386762][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.428576][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.438197][ T5239] veth1_vlan: entered promiscuous mode [ 58.466621][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.506816][ T5231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.516103][ T5231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.528011][ T5231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.537104][ T5231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.577216][ T5239] veth0_macvtap: entered promiscuous mode [ 58.589829][ T5239] veth1_macvtap: entered promiscuous mode [ 58.627294][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.684877][ T5230] veth0_vlan: entered promiscuous mode [ 58.721157][ T5236] veth0_vlan: entered promiscuous mode [ 58.760957][ T5230] veth1_vlan: entered promiscuous mode [ 58.768613][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.786397][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.786465][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.805789][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.819086][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.830206][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.841020][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.854173][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.877226][ T5236] veth1_vlan: entered promiscuous mode [ 58.907535][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.916853][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.925854][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.934915][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.958257][ T5229] veth0_vlan: entered promiscuous mode [ 58.963426][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.967350][ T5230] veth0_macvtap: entered promiscuous mode [ 58.978788][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.995683][ T5230] veth1_macvtap: entered promiscuous mode [ 59.019029][ T5229] veth1_vlan: entered promiscuous mode [ 59.035779][ T5231] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.069023][ T5236] veth0_macvtap: entered promiscuous mode [ 59.078955][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.090260][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.100476][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.111246][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.125616][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.158841][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.182452][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.202442][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.214392][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.228425][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.237212][ T5236] veth1_macvtap: entered promiscuous mode [ 59.261102][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.271462][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.280193][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.289542][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.316497][ T5316] macvlan2: entered promiscuous mode [ 59.323747][ T5316] vlan0: entered promiscuous mode [ 59.340832][ T5317] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 59.348970][ T5317] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 59.379572][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.387584][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.418764][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.445015][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.511873][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.528191][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.538266][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.557495][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.567712][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.579869][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.590966][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.604863][ T5229] veth0_macvtap: entered promiscuous mode [ 59.645019][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.661688][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.671536][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.674490][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.685753][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.710711][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.721215][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.732404][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.745480][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.773910][ T5229] veth1_macvtap: entered promiscuous mode [ 59.814587][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.823664][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.833218][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.842730][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.872099][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.879977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.968282][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.975134][ T5326] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 59.991274][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.998089][ T5326] Cannot find add_set index 0 as target [ 60.002650][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.017570][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.027942][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.040654][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.051179][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.062294][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.076043][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.085319][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.097777][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.111047][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.119369][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.130829][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.157952][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.170570][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.189861][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.214111][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.231557][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.249407][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.300621][ T5326] tipc: Started in network mode [ 60.318724][ T5326] tipc: Node identity 4, cluster identity 4711 [ 60.330285][ T5326] tipc: Node number set to 4 [ 60.362581][ T5246] Bluetooth: hci4: command tx timeout [ 60.363215][ T53] Bluetooth: hci3: command tx timeout [ 60.368024][ T5246] Bluetooth: hci0: command tx timeout [ 60.373467][ T4625] Bluetooth: hci2: command tx timeout [ 60.423888][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.454027][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.464378][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.473291][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.564169][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.590848][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.610616][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.619888][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.628168][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.636476][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.645086][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.697111][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.731302][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.757854][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.836125][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.873921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.887501][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.943419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.966959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.058865][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.085715][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.095750][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.345125][ T5331] chnl_net:caif_netlink_parms(): no params data found [ 61.403014][ T5348] syz.1.2[5348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.403114][ T5348] syz.1.2[5348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.448903][ T5348] syz.1.2[5348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.469173][ T51] bridge_slave_1: left allmulticast mode [ 61.511871][ T51] bridge_slave_1: left promiscuous mode [ 61.518725][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.533127][ T5348] Bluetooth: MGMT ver 1.23 [ 61.549609][ T51] bridge_slave_0: left allmulticast mode [ 61.586450][ T51] bridge_slave_0: left promiscuous mode [ 61.597559][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.029737][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.053640][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.074247][ T51] bond0 (unregistering): Released all slaves [ 62.414409][ T5361] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.441700][ T5237] Bluetooth: hci0: command tx timeout [ 62.453460][ T5237] Bluetooth: hci3: command tx timeout [ 62.459024][ T4625] Bluetooth: hci4: command tx timeout [ 62.464630][ T53] Bluetooth: hci2: command tx timeout [ 62.599652][ T5366] bridge0: entered promiscuous mode [ 62.614931][ T5366] bridge0: entered allmulticast mode [ 62.662911][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.681877][ T53] Bluetooth: hci1: command tx timeout [ 62.703928][ T5331] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.731109][ T5331] bridge_slave_0: entered allmulticast mode [ 62.749666][ T5331] bridge_slave_0: entered promiscuous mode [ 62.759669][ T5356] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 63.040341][ T5331] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.049184][ T5331] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.059821][ T5331] bridge_slave_1: entered allmulticast mode [ 63.090986][ T5331] bridge_slave_1: entered promiscuous mode [ 63.091865][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 63.217991][ T5402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 63.315166][ T5331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.381114][ T5331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.611995][ T5246] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 63.639774][ T51] hsr_slave_0: left promiscuous mode [ 63.659566][ T51] hsr_slave_1: left promiscuous mode [ 63.684683][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.700674][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.740437][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.770093][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.828576][ T51] vlan0: left promiscuous mode [ 63.837557][ T51] veth1_macvtap: left promiscuous mode [ 63.850321][ T51] veth0_macvtap: left promiscuous mode [ 63.860184][ T51] veth1_vlan: left promiscuous mode [ 63.884115][ T51] veth0_vlan: left promiscuous mode [ 63.891117][ T5431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.088742][ T5429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.512485][ T51] team0 (unregistering): Port device team_slave_1 removed [ 64.530226][ T5246] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.560675][ T51] team0 (unregistering): Port device team_slave_0 removed [ 64.771761][ T5246] Bluetooth: hci1: command tx timeout [ 64.909394][ T5331] team0: Port device team_slave_0 added [ 64.964731][ T5411] tipc: Started in network mode [ 64.969655][ T5411] tipc: Node identity 4, cluster identity 4711 [ 64.986211][ T5411] tipc: Node number set to 4 [ 65.011778][ T5437] FAULT_INJECTION: forcing a failure. [ 65.011778][ T5437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.051055][ T5429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.066982][ T5437] CPU: 1 UID: 0 PID: 5437 Comm: syz.3.24 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 65.077538][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.087619][ T5437] Call Trace: [ 65.090910][ T5437] [ 65.093841][ T5437] dump_stack_lvl+0x241/0x360 [ 65.098582][ T5437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.103781][ T5437] ? __pfx__printk+0x10/0x10 [ 65.108376][ T5437] ? snprintf+0xda/0x120 [ 65.112628][ T5437] should_fail_ex+0x3b0/0x4e0 [ 65.117310][ T5437] _copy_to_user+0x2f/0xb0 [ 65.121729][ T5437] simple_read_from_buffer+0xca/0x150 [ 65.127104][ T5437] proc_fail_nth_read+0x1e9/0x250 [ 65.132139][ T5437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.137689][ T5437] ? rw_verify_area+0x55e/0x6f0 [ 65.142537][ T5437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.148092][ T5437] vfs_read+0x201/0xbc0 [ 65.152250][ T5437] ? __pfx_lock_release+0x10/0x10 [ 65.157282][ T5437] ? __pfx_vfs_read+0x10/0x10 [ 65.161966][ T5437] ? __fget_files+0x3f3/0x470 [ 65.166677][ T5437] ? fdget_pos+0x24e/0x320 [ 65.171094][ T5437] ksys_read+0x183/0x2b0 [ 65.175341][ T5437] ? __pfx_ksys_read+0x10/0x10 [ 65.180101][ T5437] ? do_syscall_64+0x100/0x230 [ 65.184869][ T5437] ? do_syscall_64+0xb6/0x230 [ 65.189551][ T5437] do_syscall_64+0xf3/0x230 [ 65.194080][ T5437] ? clear_bhb_loop+0x35/0x90 [ 65.198812][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.204729][ T5437] RIP: 0033:0x7fdec977d15c [ 65.209151][ T5437] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 65.228777][ T5437] RSP: 002b:00007fdeca564030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.237201][ T5437] RAX: ffffffffffffffda RBX: 00007fdec9935f80 RCX: 00007fdec977d15c [ 65.245432][ T5437] RDX: 000000000000000f RSI: 00007fdeca5640a0 RDI: 0000000000000006 [ 65.253421][ T5437] RBP: 00007fdeca564090 R08: 0000000000000000 R09: 0000000000000000 [ 65.261418][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.269413][ T5437] R13: 0000000000000000 R14: 00007fdec9935f80 R15: 00007ffc601d4148 [ 65.277404][ T5437] [ 65.345604][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 65.410856][ T5331] team0: Port device team_slave_1 added [ 65.477713][ T5441] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 65.533718][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.547455][ T5441] bond0: (slave team0): Enslaving as an active interface with an up link [ 65.657440][ T5446] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:5844:eeff:fee6:5805 error=-28 [ 65.725898][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.736785][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.771523][ T5331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.785343][ T5331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.792428][ T5331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.818662][ T5331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.008125][ T5331] hsr_slave_0: entered promiscuous mode [ 66.016693][ T5446] infiniband syz1: set active [ 66.032360][ T5331] hsr_slave_1: entered promiscuous mode [ 66.055775][ T5446] infiniband syz1: added team_slave_0 [ 66.074058][ T5470] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 66.106977][ T5446] syz1: rxe_create_cq: returned err = -12 [ 66.117212][ T5473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.169005][ T5446] infiniband syz1: Couldn't create ib_mad CQ [ 66.203622][ T5446] infiniband syz1: Couldn't open port 1 [ 66.233992][ T5470] tipc: Started in network mode [ 66.248837][ T5470] tipc: Node identity 4, cluster identity 4711 [ 66.254816][ T5446] RDS/IB: syz1: added [ 66.259549][ T5446] smc: adding ib device syz1 with port count 1 [ 66.278702][ T5446] smc: ib device syz1 port 1 has pnetid [ 66.291711][ T5470] tipc: Node number set to 4 [ 66.462507][ T5477] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.494780][ T5477] Zero length message leads to an empty skb [ 66.574475][ T5487] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 66.591395][ T5486] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 66.643304][ T5487] netlink: 'syz.0.38': attribute type 15 has an invalid length. [ 66.689111][ T5486] netlink: 'syz.0.38': attribute type 15 has an invalid length. [ 66.842900][ T5246] Bluetooth: hci1: command tx timeout [ 67.283725][ T5513] unsupported nla_type 40 [ 67.410566][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 67.419860][ T5518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.427504][ T5518] IPv6: NLM_F_CREATE should be set when creating new route [ 67.506878][ T5520] FAULT_INJECTION: forcing a failure. [ 67.506878][ T5520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.556980][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz.1.47 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 67.567548][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.577639][ T5520] Call Trace: [ 67.580946][ T5520] [ 67.583902][ T5520] dump_stack_lvl+0x241/0x360 [ 67.588620][ T5520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.593856][ T5520] ? __pfx__printk+0x10/0x10 [ 67.598503][ T5520] ? snprintf+0xda/0x120 [ 67.602788][ T5520] should_fail_ex+0x3b0/0x4e0 [ 67.607520][ T5520] _copy_to_user+0x2f/0xb0 [ 67.611971][ T5520] simple_read_from_buffer+0xca/0x150 [ 67.617370][ T5520] proc_fail_nth_read+0x1e9/0x250 [ 67.622406][ T5520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.627961][ T5520] ? rw_verify_area+0x55e/0x6f0 [ 67.632814][ T5520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.638364][ T5520] vfs_read+0x201/0xbc0 [ 67.642527][ T5520] ? __pfx_lock_release+0x10/0x10 [ 67.647645][ T5520] ? __pfx_vfs_read+0x10/0x10 [ 67.652345][ T5520] ? __fget_files+0x3f3/0x470 [ 67.657024][ T5520] ? fdget_pos+0x24e/0x320 [ 67.661445][ T5520] ksys_read+0x183/0x2b0 [ 67.665696][ T5520] ? __pfx_ksys_read+0x10/0x10 [ 67.670468][ T5520] ? do_syscall_64+0x100/0x230 [ 67.675240][ T5520] ? do_syscall_64+0xb6/0x230 [ 67.679922][ T5520] do_syscall_64+0xf3/0x230 [ 67.684437][ T5520] ? clear_bhb_loop+0x35/0x90 [ 67.689117][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.695096][ T5520] RIP: 0033:0x7f94d657d15c [ 67.699506][ T5520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 67.719113][ T5520] RSP: 002b:00007f94d7312030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.727527][ T5520] RAX: ffffffffffffffda RBX: 00007f94d6735f80 RCX: 00007f94d657d15c [ 67.735499][ T5520] RDX: 000000000000000f RSI: 00007f94d73120a0 RDI: 0000000000000007 [ 67.743465][ T5520] RBP: 00007f94d7312090 R08: 0000000000000000 R09: 0000000000000000 [ 67.751603][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.759680][ T5520] R13: 0000000000000000 R14: 00007f94d6735f80 R15: 00007ffef9bd37b8 [ 67.767676][ T5520] [ 68.056220][ T5534] netlink: 'syz.0.52': attribute type 10 has an invalid length. [ 68.084169][ T5534] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 68.289956][ T5331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.321712][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 68.336570][ T5331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.393909][ T5331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.410174][ T5331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.444258][ T5548] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 68.489133][ T5548] netlink: 'syz.3.54': attribute type 4 has an invalid length. [ 68.507344][ T5548] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.54'. [ 68.532240][ T5551] netlink: 'syz.3.54': attribute type 58 has an invalid length. [ 68.551026][ T5551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 68.801396][ T5561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57'. [ 68.857540][ T5331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.925329][ T5246] Bluetooth: hci1: command tx timeout [ 68.952580][ T5331] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.006899][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.014100][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.058240][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 69.081010][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.088188][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.095991][ T5566] block nbd0: not configured, cannot reconfigure [ 69.777729][ T5595] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 69.807094][ T5597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.63'. [ 69.917202][ T5331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.967797][ T5331] veth0_vlan: entered promiscuous mode [ 69.999401][ T5331] veth1_vlan: entered promiscuous mode [ 70.039011][ T5331] veth0_macvtap: entered promiscuous mode [ 70.050249][ T5331] veth1_macvtap: entered promiscuous mode [ 70.082492][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.104340][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.143799][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.164769][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.202620][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.216865][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.238703][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.268380][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.300979][ T5610] Illegal XDP return value 1540088969 on prog (id 27) dev N/A, expect packet loss! [ 70.323842][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.362313][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.399084][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.421640][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.449666][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.483512][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.501984][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.522330][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.541741][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.563886][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.584597][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 70.597528][ T5622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.604864][ T5622] IPv6: NLM_F_CREATE should be set when creating new route [ 70.673833][ T5331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.731617][ T5331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.741082][ T5331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.796590][ T5331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.060468][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 71.130596][ T5647] netlink: set zone limit has 4 unknown bytes [ 71.181629][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.196319][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.274165][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.306882][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.729623][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.738486][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.827745][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 72.718445][ T5722] IPv6: addrconf: prefix option has invalid lifetime [ 72.844534][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 73.216146][ T5752] delete_channel: no stack [ 73.234400][ T5752] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003 [ 73.320721][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.509841][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.625461][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 73.827266][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.837343][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.862866][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.873454][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.983235][ T5784] tipc: Enabling of bearer rejected, failed to enable media [ 74.041701][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.065445][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.132439][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.199253][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.816616][ T12] bridge_slave_1: left allmulticast mode [ 74.822569][ T12] bridge_slave_1: left promiscuous mode [ 74.828340][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.852338][ T12] bridge_slave_0: left allmulticast mode [ 74.855455][ T5818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 74.858020][ T12] bridge_slave_0: left promiscuous mode [ 74.873869][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.375314][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.391209][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.406621][ T12] bond0 (unregistering): Released all slaves [ 75.564549][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 75.658489][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 75.747933][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 75.852347][ T5848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.859638][ T5848] IPv6: NLM_F_CREATE should be set when creating new route [ 76.204655][ T53] Bluetooth: hci1: command tx timeout [ 76.258113][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.265533][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.305794][ T5777] bridge_slave_0: entered allmulticast mode [ 76.313022][ T5777] bridge_slave_0: entered promiscuous mode [ 76.395662][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 76.424527][ T5877] syzkaller0: entered promiscuous mode [ 76.431380][ T5877] syzkaller0: entered allmulticast mode [ 76.461710][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.469039][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.477672][ T5777] bridge_slave_1: entered allmulticast mode [ 76.484995][ T5777] bridge_slave_1: entered promiscuous mode [ 76.536497][ T3034] syzkaller0: tun_net_xmit 48 [ 76.551588][ T5888] tipc: Started in network mode [ 76.558348][ T5879] syzkaller0: create flow: hash 3934085903 index 2 [ 76.565622][ T5888] tipc: Node identity , cluster identity 4711 [ 76.580608][ T5888] tipc: Failed to set node id, please configure manually [ 76.588469][ T5879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 76.597988][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 76.606861][ T5879] netlink: 100 bytes leftover after parsing attributes in process `syz.4.134'. [ 76.617488][ T5877] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 76.636755][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 76.690206][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 76.713803][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.741087][ T12] hsr_slave_0: left promiscuous mode [ 76.764094][ T12] hsr_slave_1: left promiscuous mode [ 76.770529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.778317][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.787123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.795766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.815863][ T12] veth1_macvtap: left promiscuous mode [ 76.821619][ T12] veth0_macvtap: left promiscuous mode [ 76.827222][ T12] veth1_vlan: left promiscuous mode [ 76.832798][ T12] veth0_vlan: left promiscuous mode [ 76.850136][ T9] cfg80211: failed to load regulatory.db [ 77.206890][ T12] team0 (unregistering): Port device team_slave_1 removed [ 77.242291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.621048][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.768384][ T5777] team0: Port device team_slave_0 added [ 77.780600][ T5777] team0: Port device team_slave_1 added [ 77.820917][ T5872] syzkaller0: delete flow: hash 3934085903 index 2 [ 78.107151][ T5918] netlink: 'syz.1.149': attribute type 7 has an invalid length. [ 78.289505][ T53] Bluetooth: hci1: command tx timeout [ 79.324656][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.338573][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.387963][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.452624][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.472306][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.596278][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.958227][ T5777] hsr_slave_0: entered promiscuous mode [ 80.013602][ T5777] hsr_slave_1: entered promiscuous mode [ 80.126332][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 80.263785][ T5968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.271075][ T5968] IPv6: NLM_F_CREATE should be set when creating new route [ 80.362199][ T53] Bluetooth: hci1: command tx timeout [ 80.407692][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 80.464682][ T5983] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20000 [ 80.652400][ T5990] tipc: Enabling of bearer rejected, failed to enable media [ 81.088992][ T6012] nbd: device at index 4 is going down [ 81.327193][ T6021] netlink: 'syz.4.181': attribute type 11 has an invalid length. [ 81.339536][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.377827][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 81.389710][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.436800][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.467607][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.504589][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 81.773897][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.808963][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.853650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.860846][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.933093][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.940270][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.162506][ T6058] syz.1.194 uses obsolete (PF_INET,SOCK_PACKET) [ 82.435096][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.441831][ T53] Bluetooth: hci1: command tx timeout [ 82.519759][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 82.603319][ T6086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.610580][ T6086] IPv6: NLM_F_CREATE should be set when creating new route [ 82.688709][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 82.707801][ T5777] veth0_vlan: entered promiscuous mode [ 82.766613][ T5777] veth1_vlan: entered promiscuous mode [ 82.843285][ T6098] tipc: Enabling of bearer rejected, failed to enable media [ 82.895225][ T5777] veth0_macvtap: entered promiscuous mode [ 82.934165][ T5777] veth1_macvtap: entered promiscuous mode [ 83.059557][ T6109] xt_hashlimit: max too large, truncated to 1048576 [ 83.066725][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.083195][ T6109] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 83.100763][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.124329][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.135326][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.145276][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.168341][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.180234][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.194226][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.219338][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.264325][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.295235][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.328936][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.350048][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.372128][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.392864][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.414560][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.433855][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.457671][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.566205][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.608315][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.620581][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.645701][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.924527][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.961688][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.983429][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 83.995644][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 84.079141][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.107533][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.093379][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 85.214825][ T6209] netlink: 'syz.3.230': attribute type 7 has an invalid length. [ 85.228838][ T6209] netlink: 'syz.3.230': attribute type 8 has an invalid length. [ 85.596856][ T6228] tipc: Started in network mode [ 85.606158][ T6228] tipc: Node identity , cluster identity 4711 [ 85.613501][ T6228] tipc: Failed to set node id, please configure manually [ 85.638410][ T6228] tipc: Enabling of bearer rejected, failed to enable media [ 85.893556][ T6242] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20003 [ 86.245559][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.270551][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.302307][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.338536][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.372394][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.387700][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.398988][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.650653][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.687751][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'. [ 86.757610][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.787658][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 86.874596][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.995658][ T6292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 87.234925][ T35] bridge_slave_1: left allmulticast mode [ 87.240634][ T35] bridge_slave_1: left promiscuous mode [ 87.248210][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.259207][ T35] bridge_slave_0: left allmulticast mode [ 87.266893][ T35] bridge_slave_0: left promiscuous mode [ 87.277296][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.348040][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 87.378064][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.246'. [ 87.487889][ T6309] netlink: 100 bytes leftover after parsing attributes in process `syz.1.256'. [ 87.770968][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.784933][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.796585][ T35] bond0 (unregistering): Released all slaves [ 88.159095][ T6322] tipc: Started in network mode [ 88.180837][ T6322] tipc: Node identity 4, cluster identity 4711 [ 88.221663][ T6322] tipc: Node number set to 4 [ 88.451743][ T5246] Bluetooth: hci1: command tx timeout [ 88.899513][ T35] hsr_slave_0: left promiscuous mode [ 88.909757][ T35] hsr_slave_1: left promiscuous mode [ 88.921103][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.931797][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.941409][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.949322][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.970625][ T35] veth1_macvtap: left promiscuous mode [ 88.976803][ T35] veth0_macvtap: left promiscuous mode [ 88.983020][ T35] veth1_vlan: left promiscuous mode [ 88.988510][ T35] veth0_vlan: left promiscuous mode [ 89.038054][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 89.432975][ T35] team0 (unregistering): Port device team_slave_1 removed [ 89.469991][ T35] team0 (unregistering): Port device team_slave_0 removed [ 89.836643][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 89.931753][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 90.010228][ T6382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.017568][ T6382] IPv6: NLM_F_CREATE should be set when creating new route [ 90.163801][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 90.277202][ T6397] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 90.327176][ T6397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.280'. [ 90.379274][ T6397] netlink: 'syz.3.280': attribute type 3 has an invalid length. [ 90.522237][ T5246] Bluetooth: hci1: command tx timeout [ 90.580641][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.621630][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.629000][ T6261] bridge_slave_0: entered allmulticast mode [ 90.642607][ T6261] bridge_slave_0: entered promiscuous mode [ 90.674130][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.687217][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.714979][ T6261] bridge_slave_1: entered allmulticast mode [ 90.738900][ T6261] bridge_slave_1: entered promiscuous mode [ 90.873259][ T6425] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 90.899559][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.934754][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.134309][ T6261] team0: Port device team_slave_0 added [ 91.173577][ T6261] team0: Port device team_slave_1 added [ 91.275422][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.284723][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.372356][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.389386][ T6455] syz.4.299[6455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.389482][ T6455] syz.4.299[6455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.401788][ T6455] syz.4.299[6455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.407211][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.462351][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.528743][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.562418][ T6453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.569676][ T6453] IPv6: NLM_F_CREATE should be set when creating new route [ 91.758723][ T6261] hsr_slave_0: entered promiscuous mode [ 91.821908][ T6261] hsr_slave_1: entered promiscuous mode [ 92.253188][ T6488] __nla_validate_parse: 3 callbacks suppressed [ 92.253207][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 92.309772][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 92.351626][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.307'. [ 92.577164][ T6509] xt_nfacct: accounting object `sy' does not exists [ 92.604451][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 92.611597][ T5246] Bluetooth: hci1: command tx timeout [ 93.193125][ T6261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.227524][ T6261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.274200][ T6261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.334272][ T6261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.590646][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 93.658927][ T6564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.666269][ T6564] IPv6: NLM_F_CREATE should be set when creating new route [ 93.715359][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.747336][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.764875][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.772132][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.927115][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.934305][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.499818][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.607327][ T6261] veth0_vlan: entered promiscuous mode [ 94.652309][ T6261] veth1_vlan: entered promiscuous mode [ 94.682036][ T5246] Bluetooth: hci1: command tx timeout [ 94.712684][ T6261] veth0_macvtap: entered promiscuous mode [ 94.743907][ T6261] veth1_macvtap: entered promiscuous mode [ 94.771019][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.811647][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.851580][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.887158][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.897193][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.920314][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.940195][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.950897][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.045787][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.099629][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.136829][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.174149][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.175011][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 95.201817][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 95.231542][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.302320][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.346601][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.382300][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.393751][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.417347][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.465937][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 95.488405][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 95.565185][ T6261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.591718][ T6261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.616633][ T6261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.642085][ T6261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.892635][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.921674][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.922323][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 95.975064][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.988294][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.305458][ T6691] geneve3: entered promiscuous mode [ 96.310831][ T6691] geneve3: entered allmulticast mode [ 96.627740][ T6712] netlink: 'syz.0.370': attribute type 5 has an invalid length. [ 96.995162][ T6736] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 97.040401][ T6730] syzkaller0: create flow: hash 320977488 index 3 [ 97.148737][ T6741] syzkaller0: delete flow: hash 320977488 index 3 [ 97.172497][ T6742] syz_tun: entered promiscuous mode [ 97.242733][ T6742] syz_tun: left promiscuous mode [ 97.328342][ T6743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.335637][ T6743] IPv6: NLM_F_CREATE should be set when creating new route [ 97.431184][ T127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.892680][ T6752] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 98.015869][ T6756] __nla_validate_parse: 5 callbacks suppressed [ 98.015886][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 98.192646][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.207917][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.216665][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.231110][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.248979][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.256970][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.328563][ T127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.488725][ T127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.620957][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 99.736149][ T127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.783924][ T6795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.791259][ T6795] IPv6: NLM_F_CREATE should be set when creating new route [ 99.924787][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 100.200717][ T127] bridge_slave_1: left allmulticast mode [ 100.252271][ T127] bridge_slave_1: left promiscuous mode [ 100.258040][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.336151][ T127] bridge_slave_0: left allmulticast mode [ 100.351560][ T127] bridge_slave_0: left promiscuous mode [ 100.357325][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.361939][ T5246] Bluetooth: hci1: command tx timeout [ 101.197355][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.208397][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.219381][ T127] bond0 (unregistering): Released all slaves [ 101.234886][ T6767] chnl_net:caif_netlink_parms(): no params data found [ 101.247916][ T6827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.410'. [ 101.282053][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.299203][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.311734][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.323236][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.333710][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.344783][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.355387][ T6833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.369952][ T6833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.400979][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.410'. [ 102.051377][ T6894] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 102.077686][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.085689][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.093519][ T6767] bridge_slave_0: entered allmulticast mode [ 102.110908][ T6767] bridge_slave_0: entered promiscuous mode [ 102.216079][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.233065][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.257370][ T6767] bridge_slave_1: entered allmulticast mode [ 102.303154][ T6767] bridge_slave_1: entered promiscuous mode [ 102.365782][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 102.441826][ T5246] Bluetooth: hci1: command tx timeout [ 102.489550][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'. [ 102.520431][ T127] hsr_slave_0: left promiscuous mode [ 102.554116][ T127] hsr_slave_1: left promiscuous mode [ 102.576849][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.607109][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.672419][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.704524][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.762410][ T127] veth1_macvtap: left promiscuous mode [ 102.767990][ T127] veth0_macvtap: left promiscuous mode [ 102.792905][ T127] veth1_vlan: left promiscuous mode [ 102.798342][ T127] veth0_vlan: left promiscuous mode [ 103.406235][ T127] team0 (unregistering): Port device team_slave_1 removed [ 103.442617][ T127] team0 (unregistering): Port device team_slave_0 removed [ 103.783181][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.898970][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.054901][ T6767] team0: Port device team_slave_0 added [ 104.081297][ T6960] tipc: Enabling of bearer rejected, failed to enable media [ 104.104776][ T6767] team0: Port device team_slave_1 added [ 104.170595][ T6966] netlink: 64 bytes leftover after parsing attributes in process `syz.3.446'. [ 104.242712][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'. [ 104.296173][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 104.326356][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.446'. [ 104.363263][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.370255][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.471587][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.515625][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.522392][ T5246] Bluetooth: hci1: command tx timeout [ 104.541546][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.611539][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.647495][ T6993] ip6gretap0: entered promiscuous mode [ 104.674282][ T6993] batadv_slave_0: entered promiscuous mode [ 104.918102][ T6767] hsr_slave_0: entered promiscuous mode [ 104.955938][ T6767] hsr_slave_1: entered promiscuous mode [ 105.050455][ T7015] tipc: Enabling of bearer rejected, failed to enable media [ 105.101699][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 105.479831][ T7037] netlink: 'syz.3.465': attribute type 4 has an invalid length. [ 105.491971][ T7031] IPv6: Can't replace route, no match found [ 105.724856][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 105.749477][ T7054] xfrm1: entered promiscuous mode [ 105.755292][ T7054] xfrm1: entered allmulticast mode [ 105.781112][ T7056] tipc: Enabling of bearer rejected, failed to enable media [ 105.902913][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 106.002388][ T7067] xt_l2tp: invalid flags combination: 4 [ 106.349360][ T7083] netlink: 'syz.4.484': attribute type 2 has an invalid length. [ 106.564502][ T7107] tipc: Enabling of bearer rejected, failed to enable media [ 106.601921][ T5246] Bluetooth: hci1: command tx timeout [ 106.604856][ T6767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.654341][ T6767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.705768][ T6767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.736581][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 106.760903][ T6767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.082130][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.090859][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 107.120776][ T6767] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.136746][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.143937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.188309][ T7136] raw_sendmsg: syz.4.499 forgot to set AF_INET. Fix it! [ 107.236886][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.244126][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.306428][ T6767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.337443][ T6767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.682087][ T7168] tipc: Enabling of bearer rejected, failed to enable media [ 107.801406][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.984883][ T7170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.054966][ T6767] veth0_vlan: entered promiscuous mode [ 108.120194][ T7169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.156846][ T6767] veth1_vlan: entered promiscuous mode [ 108.179468][ T7196] netlink: 'syz.3.513': attribute type 3 has an invalid length. [ 108.214973][ T6767] veth0_macvtap: entered promiscuous mode [ 108.249237][ T6767] veth1_macvtap: entered promiscuous mode [ 108.337911][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.380031][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.417312][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.442196][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.465676][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.486469][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.506904][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.550143][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.567682][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.591092][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.670287][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.700119][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.728654][ T7232] syz.3.521[7232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.728755][ T7232] syz.3.521[7232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.749888][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.771942][ T7232] syz.3.521[7232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.772834][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.833083][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.844012][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.854657][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.867131][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.904062][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 108.931093][ T7231] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 108.961287][ T6767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.988177][ T6767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.001079][ T6767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.016807][ T6767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.296201][ T7262] __nla_validate_parse: 1 callbacks suppressed [ 109.296220][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 109.447239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.478180][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.570129][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.609368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.767435][ T5246] Bluetooth: hci4: link tx timeout [ 109.774277][ T5246] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.790404][ T53] Bluetooth: hci4: link tx timeout [ 109.799695][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.808040][ T53] Bluetooth: hci4: link tx timeout [ 109.813709][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.046579][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 110.102695][ T7309] netlink: 'syz.4.541': attribute type 28 has an invalid length. [ 110.110485][ T7309] netlink: 544 bytes leftover after parsing attributes in process `syz.4.541'. [ 110.123766][ T7312] netlink: 'syz.3.540': attribute type 7 has an invalid length. [ 110.133023][ T7312] netlink: 15 bytes leftover after parsing attributes in process `syz.3.540'. [ 110.146924][ T7309] netlink: 'syz.4.541': attribute type 32 has an invalid length. [ 110.154874][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 110.194371][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 110.211694][ T7312] netlink: 872 bytes leftover after parsing attributes in process `syz.3.540'. [ 110.231888][ T7309] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 110.279658][ T7312] netlink: 'syz.3.540': attribute type 7 has an invalid length. [ 110.300384][ T7312] netlink: 15 bytes leftover after parsing attributes in process `syz.3.540'. [ 110.444041][ T5284] IPVS: starting estimator thread 0... [ 110.551764][ T7334] IPVS: using max 21 ests per chain, 50400 per kthread [ 110.776652][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 110.995263][ T127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.029944][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 111.257474][ T127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.326567][ T127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.406199][ T127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.566867][ T127] bridge_slave_1: left allmulticast mode [ 111.585664][ T127] bridge_slave_1: left promiscuous mode [ 111.594570][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.658584][ T127] bridge_slave_0: left allmulticast mode [ 111.684746][ T127] bridge_slave_0: left promiscuous mode [ 111.711750][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.801979][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 112.092222][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.101257][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.121029][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.129977][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.140778][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.148992][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.369952][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.394301][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.406202][ T127] bond0 (unregistering): Released all slaves [ 112.709306][ T7414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.716653][ T7414] IPv6: NLM_F_CREATE should be set when creating new route [ 113.197146][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.241329][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.298392][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.366059][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.423753][ T7452] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20002 [ 113.440052][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.465557][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.478933][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.496624][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.548482][ T127] hsr_slave_0: left promiscuous mode [ 113.584190][ T127] hsr_slave_1: left promiscuous mode [ 113.611906][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.630755][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.640708][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.669714][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.706527][ T127] veth1_macvtap: left promiscuous mode [ 113.717876][ T127] veth0_macvtap: left promiscuous mode [ 113.729595][ T127] veth1_vlan: left promiscuous mode [ 113.741633][ T127] veth0_vlan: left promiscuous mode [ 114.212809][ T5246] Bluetooth: hci1: command tx timeout [ 114.283772][ T127] team0 (unregistering): Port device team_slave_1 removed [ 114.320186][ T127] team0 (unregistering): Port device team_slave_0 removed [ 114.987757][ T7395] chnl_net:caif_netlink_parms(): no params data found [ 115.443968][ T7510] __nla_validate_parse: 2 callbacks suppressed [ 115.443987][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 115.555351][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.563679][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.618282][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.625708][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.634949][ T7395] bridge_slave_0: entered allmulticast mode [ 115.642879][ T7395] bridge_slave_0: entered promiscuous mode [ 115.650743][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.657927][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.665339][ T7395] bridge_slave_1: entered allmulticast mode [ 115.684841][ T7395] bridge_slave_1: entered promiscuous mode [ 115.781290][ T7522] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 115.789762][ T7522] netlink: 244 bytes leftover after parsing attributes in process `syz.4.593'. [ 115.809687][ T7515] netlink: 'syz.3.592': attribute type 10 has an invalid length. [ 115.867950][ T7515] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.885473][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.904188][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.992186][ T7395] team0: Port device team_slave_0 added [ 116.046012][ T7395] team0: Port device team_slave_1 added [ 116.188244][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.221115][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.270635][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.293020][ T5246] Bluetooth: hci1: command tx timeout [ 117.139266][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.157409][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.196178][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 117.213655][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.681916][ T7395] hsr_slave_0: entered promiscuous mode [ 117.716235][ T7395] hsr_slave_1: entered promiscuous mode [ 117.764824][ T7561] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 117.799866][ T7561] netlink: 48 bytes leftover after parsing attributes in process `syz.4.605'. [ 117.961323][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.605'. [ 118.361631][ T5246] Bluetooth: hci1: command tx timeout [ 118.796551][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 119.129347][ T7596] FAULT_INJECTION: forcing a failure. [ 119.129347][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 119.200196][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.4.615 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 119.210863][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.220944][ T7596] Call Trace: [ 119.224245][ T7596] [ 119.227193][ T7596] dump_stack_lvl+0x241/0x360 [ 119.231902][ T7596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.237122][ T7596] ? __pfx__printk+0x10/0x10 [ 119.241733][ T7596] ? fs_reclaim_acquire+0x93/0x130 [ 119.246864][ T7596] ? __pfx___might_resched+0x10/0x10 [ 119.252173][ T7596] ? dynamic_dname+0x141/0x1b0 [ 119.256965][ T7596] should_fail_ex+0x3b0/0x4e0 [ 119.261670][ T7596] ? tomoyo_encode+0x26f/0x540 [ 119.266456][ T7596] should_failslab+0xac/0x100 [ 119.271252][ T7596] ? tomoyo_encode+0x26f/0x540 [ 119.276037][ T7596] __kmalloc_noprof+0xd8/0x400 [ 119.280833][ T7596] tomoyo_encode+0x26f/0x540 [ 119.285448][ T7596] ? __pfx_pipefs_dname+0x10/0x10 [ 119.290499][ T7596] tomoyo_realpath_from_path+0x59e/0x5e0 [ 119.296165][ T7596] tomoyo_path_number_perm+0x23a/0x880 [ 119.301660][ T7596] ? tomoyo_path_number_perm+0x208/0x880 [ 119.307359][ T7596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.313405][ T7596] ? __fget_files+0x29/0x470 [ 119.318020][ T7596] ? __fget_files+0x3f3/0x470 [ 119.322725][ T7596] security_file_ioctl+0xc6/0x2a0 [ 119.327778][ T7596] __se_sys_ioctl+0x47/0x170 [ 119.332399][ T7596] do_syscall_64+0xf3/0x230 [ 119.336925][ T7596] ? clear_bhb_loop+0x35/0x90 [ 119.341629][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.347546][ T7596] RIP: 0033:0x7fb9d0d7e719 [ 119.351988][ T7596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.371626][ T7596] RSP: 002b:00007fb9d1b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.380070][ T7596] RAX: ffffffffffffffda RBX: 00007fb9d0f35f80 RCX: 00007fb9d0d7e719 [ 119.388066][ T7596] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 119.396069][ T7596] RBP: 00007fb9d1b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 119.404070][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.412068][ T7596] R13: 0000000000000000 R14: 00007fb9d0f35f80 R15: 00007ffeefbab798 [ 119.420083][ T7596] [ 119.554771][ T7600] netlink: 104 bytes leftover after parsing attributes in process `syz.1.616'. [ 119.875574][ T7596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.912845][ T7605] tipc: Enabled bearer , priority 0 [ 120.446274][ T5246] Bluetooth: hci1: command tx timeout [ 120.473518][ T7625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.622'. [ 120.819616][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 121.299367][ T7637] syz_tun: entered promiscuous mode [ 121.342195][ T7637] syz_tun: left promiscuous mode [ 122.636982][ T16] sched: DL replenish lagged too much [ 128.826263][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.843579][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.851398][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.862944][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.874273][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.881920][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.921893][ T53] Bluetooth: hci5: command tx timeout [ 133.001793][ T53] Bluetooth: hci5: command tx timeout [ 133.272005][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.278358][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.081900][ T53] Bluetooth: hci5: command tx timeout [ 135.768036][ T5246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.776882][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.785009][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.793166][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.800768][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 135.813203][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.673725][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 136.683546][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.694505][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.702838][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.711355][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 136.719545][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.161919][ T53] Bluetooth: hci5: command tx timeout [ 137.667725][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 137.685676][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 137.695058][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 137.704103][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 137.712571][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 137.719938][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 137.881712][ T5246] Bluetooth: hci6: command tx timeout [ 138.762958][ T5246] Bluetooth: hci7: command tx timeout [ 139.801701][ T5246] Bluetooth: hci8: command tx timeout [ 139.971759][ T5246] Bluetooth: hci6: command tx timeout [ 140.851756][ T5246] Bluetooth: hci7: command tx timeout [ 141.883096][ T5246] Bluetooth: hci8: command tx timeout [ 142.041701][ T5246] Bluetooth: hci6: command tx timeout [ 142.921715][ T5246] Bluetooth: hci7: command tx timeout [ 143.961613][ T5246] Bluetooth: hci8: command tx timeout [ 144.121631][ T5246] Bluetooth: hci6: command tx timeout [ 145.001717][ T5246] Bluetooth: hci7: command tx timeout [ 146.041695][ T5246] Bluetooth: hci8: command tx timeout [ 175.099898][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.108903][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.117505][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.125763][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.139947][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 175.152170][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.331535][ T5240] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.337606][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 182.361728][ T5240] Bluetooth: hci4: command tx timeout [ 184.441887][ T5240] Bluetooth: hci4: command tx timeout [ 186.521697][ T5240] Bluetooth: hci4: command tx timeout [ 188.601645][ T5246] Bluetooth: hci4: command tx timeout [ 189.980552][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.989893][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.998812][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.006951][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.015424][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.031791][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.121997][ T5246] Bluetooth: hci3: command tx timeout [ 194.201883][ T5246] Bluetooth: hci3: command tx timeout [ 194.608601][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.617030][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.291561][ T5246] Bluetooth: hci3: command tx timeout [ 196.327649][ T4625] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 196.341899][ T4625] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 196.350240][ T4625] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 196.373099][ T4625] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 196.380824][ T4625] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 196.391666][ T4625] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 197.358418][ T5246] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 197.367992][ T5246] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 197.383447][ T5246] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 197.394982][ T5246] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 197.402941][ T5246] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 197.411098][ T5246] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 198.361946][ T5246] Bluetooth: hci3: command tx timeout [ 198.441809][ T5246] Bluetooth: hci9: command tx timeout [ 198.766009][ T4625] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 198.775510][ T4625] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 198.786840][ T4625] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 198.796436][ T4625] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 198.811702][ T4625] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 198.820282][ T4625] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 199.481971][ T4625] Bluetooth: hci10: command tx timeout [ 200.521658][ T4625] Bluetooth: hci9: command tx timeout [ 200.841715][ T4625] Bluetooth: hci11: command tx timeout [ 201.561749][ T4625] Bluetooth: hci10: command tx timeout [ 202.601849][ T4625] Bluetooth: hci9: command tx timeout [ 202.921716][ T4625] Bluetooth: hci11: command tx timeout [ 203.643900][ T4625] Bluetooth: hci10: command tx timeout [ 204.681707][ T4625] Bluetooth: hci9: command tx timeout [ 205.001713][ T4625] Bluetooth: hci11: command tx timeout [ 205.721752][ T4625] Bluetooth: hci10: command tx timeout [ 207.081708][ T4625] Bluetooth: hci11: command tx timeout [ 236.552498][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.572115][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.580422][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.589291][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.597019][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.611694][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.649069][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 238.681747][ T4625] Bluetooth: hci0: command tx timeout [ 240.761716][ T4625] Bluetooth: hci0: command tx timeout [ 242.841659][ T4625] Bluetooth: hci0: command tx timeout [ 244.921723][ T4625] Bluetooth: hci0: command tx timeout [ 250.715106][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.724249][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.733465][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.750919][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.759366][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 250.773075][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.841654][ T5240] Bluetooth: hci1: command tx timeout [ 254.921679][ T5240] Bluetooth: hci1: command tx timeout [ 256.043410][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049764][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.520595][ T4625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.532331][ T4625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.540863][ T4625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.549194][ T4625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.562020][ T4625] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.570935][ T4625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.002061][ T5240] Bluetooth: hci1: command tx timeout [ 257.560170][ T4625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.571725][ T4625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.581727][ T4625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.599655][ T4625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.607842][ T4625] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.617298][ T4625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.601736][ T4625] Bluetooth: hci2: command tx timeout [ 259.081710][ T4625] Bluetooth: hci1: command tx timeout [ 259.627566][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.637099][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.644372][ T5246] Bluetooth: hci4: command tx timeout [ 259.653571][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.670425][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.678829][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 259.691962][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.681691][ T5240] Bluetooth: hci2: command tx timeout [ 261.721832][ T4625] Bluetooth: hci4: command tx timeout [ 261.729694][ T5240] Bluetooth: hci5: command tx timeout [ 262.761766][ T5240] Bluetooth: hci2: command tx timeout [ 263.801656][ T5240] Bluetooth: hci5: command tx timeout [ 263.807138][ T5240] Bluetooth: hci4: command tx timeout [ 264.841818][ T5240] Bluetooth: hci2: command tx timeout [ 265.881812][ T4625] Bluetooth: hci5: command tx timeout [ 265.888980][ T5240] Bluetooth: hci4: command tx timeout [ 267.971855][ T5240] Bluetooth: hci5: command tx timeout [ 297.619810][ T4625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.628896][ T4625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.637981][ T4625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.658013][ T4625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.669291][ T4625] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 297.677143][ T4625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.721887][ T4625] Bluetooth: hci6: command tx timeout [ 301.801709][ T4625] Bluetooth: hci6: command tx timeout [ 303.881644][ T4625] Bluetooth: hci6: command tx timeout [ 305.961755][ T4625] Bluetooth: hci6: command tx timeout [ 311.297663][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.307260][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.315656][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.331652][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.345002][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 311.352496][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.401738][ T5240] Bluetooth: hci7: command tx timeout [ 314.450962][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 315.481776][ T4625] Bluetooth: hci7: command tx timeout [ 317.077017][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 317.085969][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 317.094531][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 317.110139][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 317.121941][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 317.129296][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 317.511176][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.521798][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.561735][ T53] Bluetooth: hci7: command tx timeout [ 318.119945][ T5246] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 318.129320][ T5246] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 318.138364][ T5246] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 318.153821][ T5246] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 318.162031][ T5246] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 318.172091][ T5246] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 319.161852][ T5246] Bluetooth: hci8: command tx timeout [ 319.561760][ T5246] Bluetooth: hci9: command 0x0406 tx timeout [ 319.567934][ T5246] Bluetooth: hci10: command 0x0406 tx timeout [ 319.641586][ T4625] Bluetooth: hci7: command tx timeout [ 320.155730][ T5240] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 320.164797][ T5240] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 320.173969][ T5240] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 320.182079][ T5240] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 320.193534][ T5240] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 320.202433][ T5246] Bluetooth: hci12: command tx timeout [ 320.210621][ T5240] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 321.241646][ T4625] Bluetooth: hci8: command tx timeout [ 322.281885][ T5240] Bluetooth: hci12: command tx timeout [ 322.289661][ T4625] Bluetooth: hci13: command tx timeout [ 323.321665][ T5240] Bluetooth: hci8: command tx timeout [ 324.362031][ T5240] Bluetooth: hci13: command tx timeout [ 324.367603][ T5240] Bluetooth: hci12: command tx timeout [ 324.690850][ T5240] Bluetooth: hci11: command 0x0406 tx timeout [ 325.401783][ T4625] Bluetooth: hci8: command tx timeout [ 326.441923][ T5240] Bluetooth: hci13: command tx timeout [ 326.449011][ T4625] Bluetooth: hci12: command tx timeout [ 328.521841][ T4625] Bluetooth: hci13: command tx timeout [ 359.166732][ T5246] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 359.176046][ T5246] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 359.184654][ T5246] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 359.202653][ T5246] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 359.214749][ T5246] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 359.231854][ T5246] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 360.528562][ T5246] Bluetooth: hci0: command 0x0406 tx timeout [ 361.321741][ T4625] Bluetooth: hci14: command tx timeout [ 363.401667][ T4625] Bluetooth: hci14: command tx timeout [ 365.481716][ T4625] Bluetooth: hci14: command tx timeout [ 367.561755][ T4625] Bluetooth: hci14: command tx timeout [ 372.313429][ T5246] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 372.329997][ T5246] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 372.339196][ T5246] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 372.347623][ T5246] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 372.355970][ T5246] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 372.363882][ T5246] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 374.441707][ T5246] Bluetooth: hci15: command tx timeout [ 375.889246][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 376.521702][ T4625] Bluetooth: hci15: command tx timeout [ 377.585776][ T5246] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 377.595245][ T5246] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 377.604120][ T5246] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 377.613181][ T5246] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 377.624601][ T5246] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 377.633815][ T5246] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 378.601656][ T4625] Bluetooth: hci15: command tx timeout [ 378.927110][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.939530][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.042810][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 379.053220][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 379.064137][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 379.073582][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 379.083988][ T53] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 379.091400][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 379.721862][ T53] Bluetooth: hci16: command tx timeout [ 380.681770][ T53] Bluetooth: hci15: command tx timeout [ 381.014641][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 381.020742][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 381.161793][ T4625] Bluetooth: hci17: command tx timeout [ 381.466129][ T5246] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 381.475308][ T5246] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 381.491828][ T5246] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 381.501855][ T5246] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 381.509833][ T5246] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 381.517539][ T5246] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 381.801671][ T5246] Bluetooth: hci16: command tx timeout [ 383.241653][ T5246] Bluetooth: hci17: command tx timeout [ 383.561837][ T5246] Bluetooth: hci18: command tx timeout [ 383.881616][ T5246] Bluetooth: hci16: command tx timeout [ 385.321828][ T5246] Bluetooth: hci17: command tx timeout [ 385.651774][ T5246] Bluetooth: hci18: command tx timeout [ 385.961741][ T5246] Bluetooth: hci16: command tx timeout [ 386.128685][ T5246] Bluetooth: hci5: command 0x0406 tx timeout [ 387.401788][ T4625] Bluetooth: hci17: command tx timeout [ 387.721844][ T4625] Bluetooth: hci18: command tx timeout [ 389.801829][ T4625] Bluetooth: hci18: command tx timeout [ 398.121839][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 398.129539][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 398.171508][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.228265][ T30] task:kworker/u8:0 state:D stack:20312 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 398.321546][ T30] Workqueue: netns cleanup_net [ 398.326423][ T30] Call Trace: [ 398.329720][ T30] [ 398.391578][ T30] __schedule+0x1895/0x4b30 [ 398.396180][ T30] ? __pfx___schedule+0x10/0x10 [ 398.401068][ T30] ? __pfx_lock_release+0x10/0x10 [ 398.471575][ T30] ? kthread_data+0x52/0xd0 [ 398.476163][ T30] ? wq_worker_sleeping+0x66/0x240 [ 398.481309][ T30] ? schedule+0x90/0x320 [ 398.547227][ T30] schedule+0x14b/0x320 [ 398.581508][ T30] schedule_timeout+0xb0/0x310 [ 398.586340][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 398.641501][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.647570][ T30] ? wait_for_completion+0x2fe/0x620 [ 398.701554][ T30] ? wait_for_completion+0x2fe/0x620 [ 398.706907][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.757464][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 398.775339][ T30] ? wait_for_completion+0x2fe/0x620 [ 398.780698][ T30] wait_for_completion+0x355/0x620 [ 398.821716][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 398.827435][ T30] ? __flush_work+0xe7/0xc50 [ 398.848560][ T30] __flush_work+0xa37/0xc50 [ 398.855096][ T30] ? __flush_work+0xe7/0xc50 [ 398.859747][ T30] ? __pfx___flush_work+0x10/0x10 [ 398.870260][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 398.878844][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 398.890077][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 398.896846][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.907003][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 398.914949][ T30] ? net_generic+0x1f/0x240 [ 398.919515][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 398.931170][ T30] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 398.939473][ T30] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 398.949767][ T30] cleanup_net+0x75d/0xcc0 [ 398.957032][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 398.965839][ T30] ? process_scheduled_works+0x976/0x1850 [ 398.976113][ T30] process_scheduled_works+0xa63/0x1850 [ 398.985476][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.994199][ T30] ? assign_work+0x364/0x3d0 [ 398.998859][ T30] worker_thread+0x870/0xd30 [ 399.007471][ T30] ? __kthread_parkme+0x169/0x1d0 [ 399.015231][ T30] ? __pfx_worker_thread+0x10/0x10 [ 399.020402][ T30] kthread+0x2f0/0x390 [ 399.028461][ T30] ? __pfx_worker_thread+0x10/0x10 [ 399.037030][ T30] ? __pfx_kthread+0x10/0x10 [ 399.045524][ T30] ret_from_fork+0x4b/0x80 [ 399.049998][ T30] ? __pfx_kthread+0x10/0x10 [ 399.060850][ T30] ret_from_fork_asm+0x1a/0x30 [ 399.070946][ T30] [ 399.076844][ T30] INFO: task kworker/u8:3:51 blocked for more than 144 seconds. [ 399.090070][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 399.100558][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.113017][ T30] task:kworker/u8:3 state:D stack:20152 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 399.127033][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 399.136515][ T30] Call Trace: [ 399.139834][ T30] [ 399.147941][ T30] __schedule+0x1895/0x4b30 [ 399.155054][ T30] ? __pfx___schedule+0x10/0x10 [ 399.159945][ T30] ? __pfx_lock_release+0x10/0x10 [ 399.169879][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 399.177922][ T30] ? kthread_data+0x52/0xd0 [ 399.186186][ T30] ? schedule+0x90/0x320 [ 399.190471][ T30] ? wq_worker_sleeping+0x66/0x240 [ 399.198239][ T30] ? schedule+0x90/0x320 [ 399.206264][ T30] schedule+0x14b/0x320 [ 399.210469][ T30] schedule_preempt_disabled+0x13/0x30 [ 399.220515][ T30] __mutex_lock+0x6a7/0xd70 [ 399.243918][ T30] ? __mutex_lock+0x52a/0xd70 [ 399.248666][ T30] ? addrconf_verify_work+0x19/0x30 [ 399.318951][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 399.325534][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 399.336377][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.344899][ T30] ? process_scheduled_works+0x976/0x1850 [ 399.350690][ T30] addrconf_verify_work+0x19/0x30 [ 399.362600][ T30] process_scheduled_works+0xa63/0x1850 [ 399.368338][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.380587][ T30] ? assign_work+0x364/0x3d0 [ 399.385605][ T30] worker_thread+0x870/0xd30 [ 399.390255][ T30] ? __kthread_parkme+0x169/0x1d0 [ 399.401359][ T30] ? __pfx_worker_thread+0x10/0x10 [ 399.411517][ T30] kthread+0x2f0/0x390 [ 399.415634][ T30] ? __pfx_worker_thread+0x10/0x10 [ 399.420778][ T30] ? __pfx_kthread+0x10/0x10 [ 399.435697][ T30] ret_from_fork+0x4b/0x80 [ 399.440182][ T30] ? __pfx_kthread+0x10/0x10 [ 399.449675][ T30] ret_from_fork_asm+0x1a/0x30 [ 399.457542][ T30] [ 399.460747][ T30] INFO: task dhcpcd:4901 blocked for more than 144 seconds. [ 399.471899][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 399.479567][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.495759][ T30] task:dhcpcd state:D stack:20608 pid:4901 tgid:4901 ppid:4900 flags:0x00000002 [ 399.514046][ T30] Call Trace: [ 399.517376][ T30] [ 399.520331][ T30] __schedule+0x1895/0x4b30 [ 399.529080][ T30] ? __pfx___schedule+0x10/0x10 [ 399.537121][ T30] ? __pfx_lock_release+0x10/0x10 [ 399.545484][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 399.551017][ T30] ? schedule+0x90/0x320 [ 399.559129][ T30] schedule+0x14b/0x320 [ 399.566104][ T30] schedule_preempt_disabled+0x13/0x30 [ 399.576965][ T30] __mutex_lock+0x6a7/0xd70 [ 399.584094][ T30] ? __mutex_lock+0x52a/0xd70 [ 399.588820][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 399.597795][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 399.605597][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 399.610582][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 399.621358][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.629507][ T30] netlink_rcv_skb+0x1e3/0x430 [ 399.637991][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.648946][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.657952][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.665844][ T30] netlink_unicast+0x7f6/0x990 [ 399.670664][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 399.680256][ T30] ? __virt_addr_valid+0x183/0x530 [ 399.688072][ T30] ? __check_object_size+0x48e/0x900 [ 399.697055][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 399.704485][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.709823][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 399.720561][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.728792][ T30] __sock_sendmsg+0x221/0x270 [ 399.737328][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 399.744944][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.750952][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 399.762701][ T30] __sys_sendmsg+0x292/0x380 [ 399.767341][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.778535][ T30] ? netlink_bind+0xaeb/0xc90 [ 399.783613][ T30] ? __pfx___sys_bind+0x10/0x10 [ 399.788497][ T30] ? fd_install+0x35c/0x5d0 [ 399.800767][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.807706][ T30] ? do_syscall_64+0x100/0x230 [ 399.818408][ T30] ? do_syscall_64+0xb6/0x230 [ 399.823471][ T30] do_syscall_64+0xf3/0x230 [ 399.828016][ T30] ? clear_bhb_loop+0x35/0x90 [ 399.838838][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.845298][ T30] RIP: 0033:0x7f8960655a4b [ 399.849757][ T30] RSP: 002b:00007ffff050ac88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.866549][ T30] RAX: ffffffffffffffda RBX: 00007f896057d6c0 RCX: 00007f8960655a4b [ 399.875469][ T30] RDX: 0000000000000000 RSI: 00007ffff051ee38 RDI: 000000000000000c [ 399.889477][ T30] RBP: 000000000000000c R08: 0000000000000000 R09: 00007ffff051ee38 [ 399.897900][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 399.911494][ T30] R13: 00007ffff051ee38 R14: 000000000000002c R15: 0000000000000001 [ 399.919530][ T30] [ 399.928075][ T30] INFO: task syz-executor:7395 blocked for more than 145 seconds. [ 399.938129][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 399.952013][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 399.966747][ T30] task:syz-executor state:D stack:20784 pid:7395 tgid:7395 ppid:1 flags:0x00004006 [ 399.978468][ T30] Call Trace: [ 399.987074][ T30] [ 399.990050][ T30] __schedule+0x1895/0x4b30 [ 399.996180][ T30] ? __pfx___schedule+0x10/0x10 [ 400.001073][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.012868][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 400.018386][ T30] ? schedule+0x90/0x320 [ 400.028799][ T30] schedule+0x14b/0x320 [ 400.033334][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.038829][ T30] __mutex_lock+0x6a7/0xd70 [ 400.049810][ T30] ? __mutex_lock+0x52a/0xd70 [ 400.054841][ T30] ? tun_chr_close+0x3b/0x1b0 [ 400.060125][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 400.071506][ T30] ? __pfx_call_rcu+0x10/0x10 [ 400.076309][ T30] tun_chr_close+0x3b/0x1b0 [ 400.080838][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 400.095685][ T30] __fput+0x23f/0x880 [ 400.099733][ T30] task_work_run+0x24f/0x310 [ 400.108635][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 400.116688][ T30] ? __pfx_task_work_run+0x10/0x10 [ 400.125599][ T30] ? do_exit+0xa2a/0x28e0 [ 400.129971][ T30] ? kmem_cache_free+0x1a2/0x420 [ 400.137643][ T30] ? do_exit+0xa2a/0x28e0 [ 400.147509][ T30] do_exit+0xa2f/0x28e0 [ 400.154326][ T30] ? __pfx_do_exit+0x10/0x10 [ 400.158967][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.168945][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.177781][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.188471][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 400.196341][ T30] do_group_exit+0x207/0x2c0 [ 400.200978][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.210285][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 400.220212][ T30] get_signal+0x16a3/0x1740 [ 400.228524][ T30] ? __pfx_get_signal+0x10/0x10 [ 400.235990][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 400.240893][ T30] arch_do_signal_or_restart+0x96/0x860 [ 400.250451][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.259292][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.269713][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 400.278087][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 400.288995][ T30] do_syscall_64+0x100/0x230 [ 400.296300][ T30] ? clear_bhb_loop+0x35/0x90 [ 400.301123][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.310881][ T30] RIP: 0033:0x7fab29b7d1ff [ 400.317963][ T30] RSP: 002b:00007ffc45966230 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 400.330663][ T30] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00007fab29b7d1ff [ 400.341370][ T30] RDX: 0000000000000001 RSI: 00007ffc45966280 RDI: 0000000000000005 [ 400.353215][ T30] RBP: 00007fab29bf23d6 R08: 0000000000000000 R09: 00007ffc45966087 [ 400.361246][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 400.376766][ T30] R13: 00007ffc45966280 R14: 00007fab2a864620 R15: 0000000000000003 [ 400.387752][ T30] [ 400.390902][ T30] INFO: task syz.4.620:7617 blocked for more than 145 seconds. [ 400.403330][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 400.411001][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.423690][ T30] task:syz.4.620 state:D stack:24368 pid:7617 tgid:7614 ppid:5230 flags:0x00004002 [ 400.438621][ T30] Call Trace: [ 400.451993][ T30] [ 400.454978][ T30] __schedule+0x1895/0x4b30 [ 400.459529][ T30] ? __pfx___schedule+0x10/0x10 [ 400.470234][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.475736][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 400.481246][ T30] ? schedule+0x90/0x320 [ 400.491689][ T30] schedule+0x14b/0x320 [ 400.495891][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.501374][ T30] __mutex_lock+0x6a7/0xd70 [ 400.513821][ T30] ? __mutex_lock+0x52a/0xd70 [ 400.518562][ T30] ? tun_chr_close+0x3b/0x1b0 [ 400.528235][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 400.538811][ T30] ? __pfx_call_rcu+0x10/0x10 [ 400.546611][ T30] tun_chr_close+0x3b/0x1b0 [ 400.551159][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 400.560038][ T30] __fput+0x23f/0x880 [ 400.566738][ T30] task_work_run+0x24f/0x310 [ 400.574334][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 400.579669][ T30] ? __pfx_task_work_run+0x10/0x10 [ 400.590871][ T30] ? do_exit+0xa2a/0x28e0 [ 400.595564][ T30] ? kmem_cache_free+0x1a2/0x420 [ 400.600542][ T30] ? do_exit+0xa2a/0x28e0 [ 400.611129][ T30] do_exit+0xa2f/0x28e0 [ 400.615680][ T30] ? __pfx_do_exit+0x10/0x10 [ 400.620304][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.631494][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.637532][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.650885][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 400.656772][ T30] do_group_exit+0x207/0x2c0 [ 400.661402][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.666900][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 400.678734][ T30] get_signal+0x16a3/0x1740 [ 400.683696][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 400.689014][ T30] ? __pfx_get_signal+0x10/0x10 [ 400.700403][ T30] ? ksys_unshare+0x96e/0xa70 [ 400.705453][ T30] arch_do_signal_or_restart+0x96/0x860 [ 400.711042][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.721485][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.727536][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 400.739242][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 400.745212][ T30] do_syscall_64+0x100/0x230 [ 400.749840][ T30] ? clear_bhb_loop+0x35/0x90 [ 400.760608][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.767447][ T30] RIP: 0033:0x7fb9d0d7e719 [ 400.778567][ T30] RSP: 002b:00007fb9d1b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 400.788599][ T30] RAX: fffffffffffffffc RBX: 00007fb9d0f35f80 RCX: 00007fb9d0d7e719 [ 400.801731][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 400.809757][ T30] RBP: 00007fb9d0df12be R08: 0000000000000000 R09: 0000000000000000 [ 400.823917][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.835813][ T30] R13: 0000000000000000 R14: 00007fb9d0f35f80 R15: 00007ffeefbab798 [ 400.846590][ T30] [ 400.849716][ T30] INFO: task syz-executor:7690 blocked for more than 146 seconds. [ 400.863780][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 400.875586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.887509][ T30] task:syz-executor state:D stack:23360 pid:7690 tgid:7690 ppid:1 flags:0x00004006 [ 400.901573][ T30] Call Trace: [ 400.904888][ T30] [ 400.907843][ T30] __schedule+0x1895/0x4b30 [ 400.918460][ T30] ? __pfx___schedule+0x10/0x10 [ 400.923736][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.928803][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 400.941517][ T30] ? schedule+0x90/0x320 [ 400.945804][ T30] schedule+0x14b/0x320 [ 400.949987][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.961302][ T30] __mutex_lock+0x6a7/0xd70 [ 400.966206][ T30] ? xas_find_marked+0xf5d/0x10e0 [ 400.971272][ T30] ? __mutex_lock+0x52a/0xd70 [ 400.983156][ T30] ? add_one_compat_dev+0x10d/0x710 [ 400.988412][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.001069][ T30] ? xa_find+0x36c/0x420 [ 401.005717][ T30] ? __pfx_down_read+0x10/0x10 [ 401.010532][ T30] add_one_compat_dev+0x10d/0x710 [ 401.021508][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 401.026679][ T30] rdma_dev_init_net+0x1f1/0x280 [ 401.037102][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 401.042975][ T30] ops_init+0x31e/0x590 [ 401.047172][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 401.058752][ T30] setup_net+0x287/0x9e0 [ 401.063353][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 401.068940][ T30] ? __pfx_setup_net+0x10/0x10 [ 401.081229][ T30] copy_net_ns+0x33f/0x570 [ 401.087430][ T30] create_new_namespaces+0x425/0x7b0 [ 401.098171][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 401.105414][ T30] ksys_unshare+0x57d/0xa70 [ 401.109962][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 401.120022][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.127868][ T30] ? do_syscall_64+0x100/0x230 [ 401.137516][ T30] __x64_sys_unshare+0x38/0x40 [ 401.145536][ T30] do_syscall_64+0xf3/0x230 [ 401.150091][ T30] ? clear_bhb_loop+0x35/0x90 [ 401.159746][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.167329][ T30] RIP: 0033:0x7f22baf7ff17 [ 401.176653][ T30] RSP: 002b:00007ffe7aa48cd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 401.187217][ T30] RAX: ffffffffffffffda RBX: 00007f22bb135f40 RCX: 00007f22baf7ff17 [ 401.201500][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 401.209519][ T30] RBP: 00007f22bb136a38 R08: 0000000000000000 R09: 0000000000000000 [ 401.226583][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 401.236189][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 401.249391][ T30] [ 401.254043][ T30] INFO: task syz-executor:7693 blocked for more than 146 seconds. [ 401.267228][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 401.276507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.292725][ T30] task:syz-executor state:D stack:23360 pid:7693 tgid:7693 ppid:1 flags:0x00004006 [ 401.308920][ T30] Call Trace: [ 401.312521][ T30] [ 401.315491][ T30] __schedule+0x1895/0x4b30 [ 401.320095][ T30] ? __pfx___schedule+0x10/0x10 [ 401.328705][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.338832][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 401.345957][ T30] ? schedule+0x90/0x320 [ 401.350269][ T30] schedule+0x14b/0x320 [ 401.361217][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.368334][ T30] __mutex_lock+0x6a7/0xd70 [ 401.377728][ T30] ? __mutex_lock+0x52a/0xd70 [ 401.384005][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 401.389957][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.398934][ T30] ? read_word_at_a_time+0xe/0x20 [ 401.410077][ T30] ? sized_strscpy+0x8d/0x220 [ 401.418576][ T30] ip_tunnel_init_net+0x20e/0x720 [ 401.426336][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 401.436860][ T30] ? ops_init+0x75/0x590 [ 401.441170][ T30] ops_init+0x31e/0x590 [ 401.448657][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 401.458192][ T30] setup_net+0x287/0x9e0 [ 401.465104][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 401.470704][ T30] ? __pfx_setup_net+0x10/0x10 [ 401.479464][ T30] copy_net_ns+0x33f/0x570 [ 401.490888][ T30] create_new_namespaces+0x425/0x7b0 [ 401.501502][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 401.507282][ T30] ksys_unshare+0x57d/0xa70 [ 401.518760][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 401.524159][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.530529][ T30] ? do_syscall_64+0x100/0x230 [ 401.541517][ T30] __x64_sys_unshare+0x38/0x40 [ 401.546333][ T30] do_syscall_64+0xf3/0x230 [ 401.550866][ T30] ? clear_bhb_loop+0x35/0x90 [ 401.561806][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.567745][ T30] RIP: 0033:0x7fdb22d7ff17 [ 401.582436][ T30] RSP: 002b:00007ffcde3c6458 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 401.590910][ T30] RAX: ffffffffffffffda RBX: 00007fdb22f35f40 RCX: 00007fdb22d7ff17 [ 401.605638][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 401.615257][ T30] RBP: 00007fdb22f36a38 R08: 0000000000000000 R09: 0000000000000000 [ 401.628094][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 401.637614][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 401.651516][ T30] [ 401.655659][ T30] INFO: task syz-executor:7699 blocked for more than 146 seconds. [ 401.669204][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 401.678526][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.691498][ T30] task:syz-executor state:D stack:23360 pid:7699 tgid:7699 ppid:1 flags:0x00004004 [ 401.708479][ T30] Call Trace: [ 401.712090][ T30] [ 401.715057][ T30] __schedule+0x1895/0x4b30 [ 401.719606][ T30] ? __pfx___schedule+0x10/0x10 [ 401.732918][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.737998][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 401.749528][ T30] ? schedule+0x90/0x320 [ 401.754112][ T30] schedule+0x14b/0x320 [ 401.758303][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.769870][ T30] __mutex_lock+0x6a7/0xd70 [ 401.774527][ T30] ? xas_find_marked+0xf5d/0x10e0 [ 401.779584][ T30] ? __mutex_lock+0x52a/0xd70 [ 401.790396][ T30] ? add_one_compat_dev+0x10d/0x710 [ 401.798385][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.810872][ T30] ? xa_find+0x36c/0x420 [ 401.815532][ T30] ? __pfx_down_read+0x10/0x10 [ 401.820345][ T30] add_one_compat_dev+0x10d/0x710 [ 401.831379][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 401.836959][ T30] rdma_dev_init_net+0x1f1/0x280 [ 401.847869][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 401.853783][ T30] ops_init+0x31e/0x590 [ 401.857983][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 401.870808][ T30] setup_net+0x287/0x9e0 [ 401.875557][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 401.881147][ T30] ? __pfx_setup_net+0x10/0x10 [ 401.891519][ T30] copy_net_ns+0x33f/0x570 [ 401.895989][ T30] create_new_namespaces+0x425/0x7b0 [ 401.908108][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 401.914182][ T30] ksys_unshare+0x57d/0xa70 [ 401.918733][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 401.930017][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 401.938477][ T30] ? do_syscall_64+0x100/0x230 [ 401.949385][ T30] __x64_sys_unshare+0x38/0x40 [ 401.954521][ T30] do_syscall_64+0xf3/0x230 [ 401.959063][ T30] ? clear_bhb_loop+0x35/0x90 [ 401.971909][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.977861][ T30] RIP: 0033:0x7ff64537ff17 [ 401.988408][ T30] RSP: 002b:00007ffc25e3b178 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 401.997242][ T30] RAX: ffffffffffffffda RBX: 00007ff645535f40 RCX: 00007ff64537ff17 [ 402.011542][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 402.019558][ T30] RBP: 00007ff645536a38 R08: 0000000000000000 R09: 0000000000000000 [ 402.034007][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 402.045910][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 402.056501][ T30] [ 402.059626][ T30] INFO: task syz-executor:7702 blocked for more than 147 seconds. [ 402.071486][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 402.079148][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.094539][ T30] task:syz-executor state:D stack:23360 pid:7702 tgid:7702 ppid:1 flags:0x00004004 [ 402.110480][ T30] Call Trace: [ 402.116616][ T30] [ 402.119586][ T30] __schedule+0x1895/0x4b30 [ 402.129338][ T30] ? __pfx___schedule+0x10/0x10 [ 402.135777][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.140846][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 402.153193][ T30] ? schedule+0x90/0x320 [ 402.157477][ T30] schedule+0x14b/0x320 [ 402.167871][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.173703][ T30] __mutex_lock+0x6a7/0xd70 [ 402.178254][ T30] ? __mutex_lock+0x52a/0xd70 [ 402.189033][ T30] ? ib_get_eth_speed+0x153/0x800 [ 402.194427][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.199498][ T30] ? _raw_spin_unlock+0x28/0x50 [ 402.207621][ T30] ? ib_device_get_netdev+0x229/0x2f0 [ 402.216987][ T30] ib_get_eth_speed+0x153/0x800 [ 402.225170][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 402.230597][ T30] ? __pfx_kobject_add+0x10/0x10 [ 402.240426][ T30] ? rxe_query_port+0x4f/0x260 [ 402.247180][ T30] rxe_query_port+0x76/0x260 [ 402.256966][ T30] ib_query_port+0x166/0x7d0 [ 402.263116][ T30] ib_setup_port_attrs+0x299/0x2440 [ 402.268358][ T30] ? device_add+0xa6a/0xbf0 [ 402.277818][ T30] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 402.285175][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 402.291219][ T30] ? device_add+0x460/0xbf0 [ 402.302486][ T30] add_one_compat_dev+0x51a/0x710 [ 402.307581][ T30] rdma_dev_init_net+0x1f1/0x280 [ 402.319312][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 402.325262][ T30] ops_init+0x31e/0x590 [ 402.329547][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 402.341158][ T30] setup_net+0x287/0x9e0 [ 402.345838][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 402.351815][ T30] ? __pfx_setup_net+0x10/0x10 [ 402.356639][ T30] copy_net_ns+0x33f/0x570 [ 402.361093][ T30] create_new_namespaces+0x425/0x7b0 [ 402.373711][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 402.379501][ T30] ksys_unshare+0x57d/0xa70 [ 402.391983][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 402.397056][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.408484][ T30] ? do_syscall_64+0x100/0x230 [ 402.415467][ T30] __x64_sys_unshare+0x38/0x40 [ 402.420270][ T30] do_syscall_64+0xf3/0x230 [ 402.429823][ T30] ? clear_bhb_loop+0x35/0x90 [ 402.437325][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.449478][ T30] RIP: 0033:0x7fef2317ff17 [ 402.454291][ T30] RSP: 002b:00007ffe5e989428 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 402.468669][ T30] RAX: ffffffffffffffda RBX: 00007fef23335f40 RCX: 00007fef2317ff17 [ 402.477387][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 402.491382][ T30] RBP: 00007fef23336a38 R08: 0000000000000000 R09: 0000000000000000 [ 402.499770][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 402.515077][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 402.533566][ T30] [ 402.539767][ T30] INFO: task syz-executor:7719 blocked for more than 147 seconds. [ 402.552984][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 402.560662][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.573363][ T30] task:syz-executor state:D stack:24128 pid:7719 tgid:7719 ppid:1 flags:0x00004006 [ 402.589329][ T30] Call Trace: [ 402.595346][ T30] [ 402.598317][ T30] __schedule+0x1895/0x4b30 [ 402.610614][ T30] ? __pfx___schedule+0x10/0x10 [ 402.618784][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.627637][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 402.635735][ T30] ? schedule+0x90/0x320 [ 402.640017][ T30] schedule+0x14b/0x320 [ 402.648163][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.657557][ T30] __mutex_lock+0x6a7/0xd70 [ 402.665826][ T30] ? __mutex_lock+0x52a/0xd70 [ 402.670548][ T30] ? register_nexthop_notifier+0x84/0x290 [ 402.678977][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.694514][ T30] ? __asan_memset+0x23/0x50 [ 402.699178][ T30] register_nexthop_notifier+0x84/0x290 [ 402.707484][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 402.717094][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 402.728157][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 402.738106][ T30] ? __asan_memset+0x23/0x50 [ 402.745448][ T30] ops_init+0x31e/0x590 [ 402.749652][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 402.759351][ T30] setup_net+0x287/0x9e0 [ 402.766491][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 402.775840][ T30] ? __pfx_setup_net+0x10/0x10 [ 402.780667][ T30] copy_net_ns+0x33f/0x570 [ 402.787782][ T30] create_new_namespaces+0x425/0x7b0 [ 402.798497][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 402.807434][ T30] ksys_unshare+0x57d/0xa70 [ 402.815888][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 402.820966][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.830750][ T30] ? do_syscall_64+0x100/0x230 [ 402.839281][ T30] __x64_sys_unshare+0x38/0x40 [ 402.846812][ T30] do_syscall_64+0xf3/0x230 [ 402.851366][ T30] ? clear_bhb_loop+0x35/0x90 [ 402.859899][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.869962][ T30] RIP: 0033:0x7effb737ff17 [ 402.878185][ T30] RSP: 002b:00007ffd239fb468 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 402.889336][ T30] RAX: ffffffffffffffda RBX: 00007effb7535f40 RCX: 00007effb737ff17 [ 402.901100][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 402.911747][ T30] RBP: 00007effb7536a38 R08: 0000000000000000 R09: 0000000000000000 [ 402.919761][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 402.931485][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 402.939526][ T30] [ 402.949230][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 402.958699][ T30] INFO: task syz-executor:7768 blocked for more than 148 seconds. [ 402.971486][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 402.979163][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.993338][ T30] task:syz-executor state:D stack:24128 pid:7768 tgid:7768 ppid:1 flags:0x00000004 [ 403.011406][ T30] Call Trace: [ 403.015002][ T30] [ 403.017968][ T30] __schedule+0x1895/0x4b30 [ 403.029627][ T30] ? __pfx___schedule+0x10/0x10 [ 403.035262][ T30] ? __pfx_lock_release+0x10/0x10 [ 403.040332][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 403.051530][ T30] ? schedule+0x90/0x320 [ 403.055820][ T30] schedule+0x14b/0x320 [ 403.060006][ T30] schedule_preempt_disabled+0x13/0x30 [ 403.071079][ T30] __mutex_lock+0x6a7/0xd70 [ 403.077355][ T30] ? __mutex_lock+0x52a/0xd70 [ 403.091784][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 403.097018][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 403.108644][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 403.114015][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 403.119173][ T30] ? __lock_acquire+0x1384/0x2050 [ 403.129468][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.136963][ T30] netlink_rcv_skb+0x1e3/0x430 [ 403.145916][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.151426][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.160600][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.169740][ T30] netlink_unicast+0x7f6/0x990 [ 403.177508][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 403.186495][ T30] ? __virt_addr_valid+0x183/0x530 [ 403.194208][ T30] ? __check_object_size+0x48e/0x900 [ 403.199540][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 403.208316][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.216199][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.227013][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 403.235376][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.240705][ T30] __sock_sendmsg+0x221/0x270 [ 403.251496][ T30] __sys_sendto+0x39b/0x4f0 [ 403.256047][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 403.261105][ T30] ? clockevents_program_event+0x240/0x350 [ 403.273075][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.279103][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.292276][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.298653][ T30] __x64_sys_sendto+0xde/0x100 [ 403.309442][ T30] do_syscall_64+0xf3/0x230 [ 403.314388][ T30] ? clear_bhb_loop+0x35/0x90 [ 403.319100][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.331192][ T30] RIP: 0033:0x7fc0d41805ac [ 403.336624][ T30] RSP: 002b:00007ffccca3cf80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 403.351028][ T30] RAX: ffffffffffffffda RBX: 00007fc0d4e64620 RCX: 00007fc0d41805ac [ 403.359367][ T30] RDX: 0000000000000028 RSI: 00007fc0d4e64670 RDI: 0000000000000003 [ 403.371950][ T30] RBP: 0000000000000000 R08: 00007ffccca3cfd4 R09: 000000000000000c [ 403.379962][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 403.393132][ T30] R13: 0000000000000000 R14: 00007fc0d4e64670 R15: 0000000000000000 [ 403.401161][ T30] [ 403.408239][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 403.419949][ T30] [ 403.419949][ T30] Showing all locks held in the system: [ 403.431493][ T30] 4 locks held by kworker/0:1/9: [ 403.437818][ T30] 5 locks held by kworker/u8:0/11: [ 403.450117][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 403.462675][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 403.478224][ T30] #2: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 403.490740][ T30] #3: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 403.504589][ T30] #4: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 403.520529][ T30] 1 lock held by khungtaskd/30: [ 403.529179][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 403.545912][ T30] 3 locks held by kworker/u8:3/51: [ 403.551069][ T30] #0: ffff88814b90b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 403.576132][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 403.598240][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 403.608252][ T30] 3 locks held by kworker/1:2/937: [ 403.619280][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 403.630718][ T30] #1: ffffc900036dfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 403.652597][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 403.669215][ T30] 1 lock held by dhcpcd/4901: [ 403.674326][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 403.689912][ T30] 2 locks held by getty/4990: [ 403.695001][ T30] #0: ffff88803232a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 403.711175][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 403.723404][ T30] 1 lock held by syz-executor/7395: [ 403.728641][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 403.745214][ T30] 1 lock held by syz.4.620/7617: [ 403.750221][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 403.761485][ T30] 4 locks held by syz-executor/7690: [ 403.766808][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 403.781926][ T30] #1: ffffffff8fa41ed0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 403.798645][ T30] #2: ffffffff8fa42090 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 403.812011][ T30] #3: ffff88807f250f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 403.828302][ T30] 2 locks held by syz-executor/7693: [ 403.835100][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 403.850107][ T30] #1: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 403.862645][ T30] 4 locks held by syz-executor/7699: [ 403.867982][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 403.881488][ T30] #1: ffffffff8fa41ed0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 403.891233][ T30] #2: ffffffff8fa42090 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 403.906720][ T30] #3: ffff88807f250f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 403.918033][ T30] 6 locks held by syz-executor/7702: [ 403.929350][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 403.940877][ T30] #1: ffffffff8fa41ed0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 403.957347][ T30] #2: ffffffff8fa42090 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 403.967848][ T30] #3: ffff88807f250f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 403.984795][ T30] #4: ffff88807f251230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 403.997093][ T30] #5: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 404.011897][ T30] 2 locks held by syz-executor/7719: [ 404.017219][ T30] #0: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 404.031489][ T30] #1: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 404.047334][ T30] 1 lock held by syz-executor/7768: [ 404.053579][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.069211][ T30] 1 lock held by syz-executor/7773: [ 404.074808][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.091514][ T30] 1 lock held by syz-executor/7779: [ 404.096760][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.112101][ T30] 1 lock held by syz-executor/7782: [ 404.117336][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.132029][ T30] 1 lock held by syz-executor/7785: [ 404.137267][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.153257][ T30] 1 lock held by syz-executor/7791: [ 404.158499][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.175204][ T30] 1 lock held by syz-executor/7797: [ 404.180444][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.191724][ T30] 1 lock held by syz-executor/7800: [ 404.196958][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.212834][ T30] 1 lock held by syz-executor/7804: [ 404.218069][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.234064][ T30] 1 lock held by syz-executor/7808: [ 404.239301][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.251700][ T30] 1 lock held by syz-executor/7813: [ 404.257614][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.272219][ T30] 1 lock held by syz-executor/7819: [ 404.277462][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.293286][ T30] 1 lock held by syz-executor/7823: [ 404.298527][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.314103][ T30] 1 lock held by syz-executor/7827: [ 404.319341][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.333014][ T30] [ 404.335371][ T30] ============================================= [ 404.335371][ T30] [ 404.350096][ T30] NMI backtrace for cpu 1 [ 404.354478][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 404.365007][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.375090][ T30] Call Trace: [ 404.378387][ T30] [ 404.381339][ T30] dump_stack_lvl+0x241/0x360 [ 404.386053][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.391284][ T30] ? __pfx__printk+0x10/0x10 [ 404.395918][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 404.400893][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 404.406382][ T30] ? _printk+0xd5/0x120 [ 404.410563][ T30] ? __pfx__printk+0x10/0x10 [ 404.415212][ T30] ? __wake_up_klogd+0xcc/0x110 [ 404.420092][ T30] ? __pfx__printk+0x10/0x10 [ 404.424713][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 404.429784][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 404.435796][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 404.441819][ T30] watchdog+0xff4/0x1040 [ 404.446093][ T30] ? watchdog+0x1ea/0x1040 [ 404.450552][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.455264][ T30] kthread+0x2f0/0x390 [ 404.459370][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.464369][ T30] ? __pfx_kthread+0x10/0x10 [ 404.468998][ T30] ret_from_fork+0x4b/0x80 [ 404.473452][ T30] ? __pfx_kthread+0x10/0x10 [ 404.478071][ T30] ret_from_fork_asm+0x1a/0x30 [ 404.482880][ T30] [ 404.486537][ T30] Sending NMI from CPU 1 to CPUs 0: [ 404.492050][ C0] NMI backtrace for cpu 0 [ 404.492064][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 404.492084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.492094][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 404.492120][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 404.492142][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 04 3b 9d 0c 48 89 de 5b e9 c3 c7 5d 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d8 03 00 65 8b 15 a0 f0 [ 404.492157][ C0] RSP: 0018:ffffc90000006c10 EFLAGS: 00000246 [ 404.492170][ C0] RAX: 0000000000000100 RBX: 000000000100007f RCX: dffffc0000000000 [ 404.492182][ C0] RDX: ffff88801ceb0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.492193][ C0] RBP: 0000000000000002 R08: ffffffff8a1f5764 R09: ffffffff8a1f5679 [ 404.492204][ C0] R10: 0000000000000003 R11: ffff88801ceb0000 R12: 0000000000000000 [ 404.492215][ C0] R13: 0000000000000000 R14: ffffc90000006d00 R15: ffff888021b62400 [ 404.492226][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 404.492240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.492251][ C0] CR2: 000000110c313d04 CR3: 000000000e734000 CR4: 00000000003526f0 [ 404.492265][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.492275][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.492285][ C0] Call Trace: [ 404.492291][ C0] [ 404.492298][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 404.492318][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 404.492340][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 404.492359][ C0] ? nmi_handle+0x2a/0x5a0 [ 404.492382][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 404.492401][ C0] ? nmi_handle+0x14f/0x5a0 [ 404.492415][ C0] ? nmi_handle+0x2a/0x5a0 [ 404.492431][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 404.492449][ C0] ? default_do_nmi+0x63/0x160 [ 404.492469][ C0] ? exc_nmi+0x123/0x1f0 [ 404.492488][ C0] ? end_repeat_nmi+0xf/0x53 [ 404.492509][ C0] ? ip_route_output_key_hash_rcu+0xef9/0x2390 [ 404.492524][ C0] ? ip_route_output_key_hash_rcu+0xfe4/0x2390 [ 404.492542][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 404.492561][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 404.492580][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 404.492598][ C0] [ 404.492603][ C0] [ 404.492608][ C0] ip_route_output_key_hash_rcu+0x107e/0x2390 [ 404.492631][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 404.492647][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 404.492667][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 404.492685][ C0] ? __pfx_lock_release+0x10/0x10 [ 404.492703][ C0] ? kthread+0x2f0/0x390 [ 404.492723][ C0] ip_route_output_flow+0x29/0x140 [ 404.492744][ C0] ip_route_me_harder+0x877/0x1360 [ 404.492769][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 404.492790][ C0] ? trace_kmalloc+0x1f/0xd0 [ 404.492807][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 404.492836][ C0] synproxy_send_tcp+0x356/0x6c0 [ 404.492860][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 404.492887][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 404.492908][ C0] ? synproxy_pernet+0x45/0x270 [ 404.492926][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 404.492944][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 404.492961][ C0] ? nf_ip_checksum+0x13a/0x500 [ 404.492979][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 404.492997][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 404.493011][ C0] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 404.493031][ C0] ? ip_vs_conn_out_get+0xba6/0xc00 [ 404.493050][ C0] nft_do_chain+0x4ad/0x1da0 [ 404.493068][ C0] ? tcp_conn_schedule+0x45e/0x880 [ 404.493091][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 404.493121][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 404.493140][ C0] nft_do_chain_inet+0x418/0x6b0 [ 404.493157][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 404.493181][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 404.493195][ C0] nf_hook_slow+0xc3/0x220 [ 404.493215][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 404.493232][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 404.493249][ C0] NF_HOOK+0x29e/0x450 [ 404.493267][ C0] ? NF_HOOK+0x9a/0x450 [ 404.493283][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 404.493301][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 404.493321][ C0] ? ip_rcv_finish+0x406/0x560 [ 404.493339][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 404.493355][ C0] NF_HOOK+0x3a4/0x450 [ 404.493371][ C0] ? __lock_acquire+0x1384/0x2050 [ 404.493391][ C0] ? NF_HOOK+0x9a/0x450 [ 404.493406][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 404.493422][ C0] ? ip_rcv_core+0x801/0xd10 [ 404.493439][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 404.493460][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 404.493477][ C0] __netif_receive_skb+0x2bf/0x650 [ 404.493496][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 404.493514][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 404.493531][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 404.493550][ C0] ? __pfx_lock_release+0x10/0x10 [ 404.493570][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 404.493591][ C0] process_backlog+0x662/0x15b0 [ 404.493612][ C0] ? process_backlog+0x33b/0x15b0 [ 404.493634][ C0] ? __pfx_process_backlog+0x10/0x10 [ 404.493652][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 404.493678][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.493699][ C0] __napi_poll+0xcb/0x490 [ 404.493718][ C0] net_rx_action+0x89b/0x1240 [ 404.493747][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 404.493766][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 404.493801][ C0] handle_softirqs+0x2c5/0x980 [ 404.493823][ C0] ? do_softirq+0x11b/0x1e0 [ 404.493841][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 404.493863][ C0] do_softirq+0x11b/0x1e0 [ 404.493880][ C0] [ 404.493885][ C0] [ 404.493891][ C0] ? __pfx_do_softirq+0x10/0x10 [ 404.493908][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 404.493930][ C0] ? rcu_is_watching+0x15/0xb0 [ 404.493947][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 404.493965][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 404.493983][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 404.494001][ C0] ? neigh_destroy+0x423/0x580 [ 404.494021][ C0] neigh_periodic_work+0xb35/0xd50 [ 404.494043][ C0] ? process_scheduled_works+0x976/0x1850 [ 404.494062][ C0] process_scheduled_works+0xa63/0x1850 [ 404.494094][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 404.494116][ C0] ? assign_work+0x364/0x3d0 [ 404.494137][ C0] worker_thread+0x870/0xd30 [ 404.494159][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 404.494178][ C0] ? __kthread_parkme+0x169/0x1d0 [ 404.494198][ C0] ? __pfx_worker_thread+0x10/0x10 [ 404.494216][ C0] kthread+0x2f0/0x390 [ 404.494230][ C0] ? __pfx_worker_thread+0x10/0x10 [ 404.494247][ C0] ? __pfx_kthread+0x10/0x10 [ 404.494263][ C0] ret_from_fork+0x4b/0x80 [ 404.494282][ C0] ? __pfx_kthread+0x10/0x10 [ 404.494297][ C0] ret_from_fork_asm+0x1a/0x30 [ 404.494323][ C0] [ 405.208197][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 405.215095][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 405.225618][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.235695][ T30] Call Trace: [ 405.238991][ T30] [ 405.241941][ T30] dump_stack_lvl+0x241/0x360 [ 405.246647][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.251869][ T30] ? __pfx__printk+0x10/0x10 [ 405.256473][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.262487][ T30] ? vscnprintf+0x5d/0x90 [ 405.266846][ T30] panic+0x349/0x880 [ 405.270763][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 405.276948][ T30] ? __pfx_panic+0x10/0x10 [ 405.281379][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 405.286775][ T30] ? __irq_work_queue_local+0x137/0x410 [ 405.292347][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 405.297737][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 405.303911][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 405.310091][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 405.316276][ T30] watchdog+0x1033/0x1040 [ 405.320639][ T30] ? watchdog+0x1ea/0x1040 [ 405.325089][ T30] ? __pfx_watchdog+0x10/0x10 [ 405.329789][ T30] kthread+0x2f0/0x390 [ 405.333881][ T30] ? __pfx_watchdog+0x10/0x10 [ 405.338580][ T30] ? __pfx_kthread+0x10/0x10 [ 405.343194][ T30] ret_from_fork+0x4b/0x80 [ 405.347633][ T30] ? __pfx_kthread+0x10/0x10 [ 405.352239][ T30] ret_from_fork_asm+0x1a/0x30 [ 405.357036][ T30] [ 405.360340][ T30] Kernel Offset: disabled [ 405.364659][ T30] Rebooting in 86400 seconds..