last executing test programs: 28m32.136987596s ago: executing program 32 (id=46): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) unshare(0x20000600) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 24m43.377330612s ago: executing program 33 (id=491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 17m56.282024125s ago: executing program 2 (id=3508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 17m56.162851064s ago: executing program 2 (id=3510): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a00", 0x12) close_range(r2, 0xffffffffffffffff, 0x1000000000000000) 17m56.05779531s ago: executing program 2 (id=3511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='sys_enter\x00', r1, 0x0, 0xfff}, 0x18) setfsuid(0x0) 17m55.841453068s ago: executing program 2 (id=3512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 17m55.241360488s ago: executing program 2 (id=3515): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17m48.764458179s ago: executing program 0 (id=3522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_sync_fs\x00', r1, 0x0, 0xc}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 17m48.694163884s ago: executing program 0 (id=3523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r2) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m48.576456816s ago: executing program 4 (id=3524): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00"/49, @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 17m48.568775596s ago: executing program 0 (id=3525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x1a, 0x0, 0xd}, 0x28) 17m48.457377061s ago: executing program 5 (id=3526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 17m48.392456476s ago: executing program 5 (id=3527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000001040)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) bind$packet(r1, 0x0, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 17m48.324344938s ago: executing program 2 (id=3528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x7ffff088) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r7) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002680)="75f60520bd942f2aef", 0x9}], 0x1}}], 0x1, 0x40) recvmmsg(r8, &(0x7f0000000d40), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r13, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100}) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 17m48.153436777s ago: executing program 5 (id=3529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 17m47.718476903s ago: executing program 4 (id=3530): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) 17m47.613810518s ago: executing program 5 (id=3531): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2dfea4174acbe3350c14498396b28c7d1784d04aa38922721cb7816094cb8295d26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89dbaf17e97cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x90}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4", 0x3be}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 17m47.47866269s ago: executing program 5 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 17m47.46990526s ago: executing program 4 (id=3533): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r1}, 0xc) 17m47.357481404s ago: executing program 4 (id=3534): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000800000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) 17m47.330425489s ago: executing program 5 (id=3535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000faffffffffffffffffffffffffff8100250008004500002000102000fc06"], 0x36) 17m47.305716475s ago: executing program 4 (id=3536): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 17m47.145415511s ago: executing program 4 (id=3537): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17m46.944315733s ago: executing program 0 (id=3538): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x2, 0x285}, 0x0, &(0x7f0000000480)=0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r3, 0x127f, &(0x7f0000000200)={0x0, {0x600}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x3]}) ioctl$BLKSSZGET(r3, 0x1268, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) socket$kcm(0x29, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) close_range(r4, r4, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) 17m46.813205755s ago: executing program 0 (id=3539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) 17m46.750169044s ago: executing program 0 (id=3540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000fbff0080000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 17m32.371431618s ago: executing program 34 (id=3528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x7ffff088) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r7) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002680)="75f60520bd942f2aef", 0x9}], 0x1}}], 0x1, 0x40) recvmmsg(r8, &(0x7f0000000d40), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r13, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100}) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 17m31.697114887s ago: executing program 35 (id=3535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000faffffffffffffffffffffffffff8100250008004500002000102000fc06"], 0x36) 17m31.555488088s ago: executing program 36 (id=3537): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17m31.426954288s ago: executing program 37 (id=3540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000fbff0080000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 12m30.965451943s ago: executing program 8 (id=4287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) 12m29.300157312s ago: executing program 8 (id=4290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_sync_fs\x00', r1, 0x0, 0xc}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r2}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 12m27.854101076s ago: executing program 8 (id=4297): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) open(0x0, 0x8060, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12m20.60739628s ago: executing program 8 (id=4303): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00*\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 12m20.557712879s ago: executing program 8 (id=4305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='sys_enter\x00', r1}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x1000) 12m19.332508668s ago: executing program 8 (id=4314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) shutdown(r2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 12m3.973714255s ago: executing program 38 (id=4314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) shutdown(r2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 11m31.155394684s ago: executing program 7 (id=4446): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) 11m31.057156838s ago: executing program 7 (id=4447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa, r1, 0xffff}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0xcb8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5fa}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc04, 0xa9, @random="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"}]}, 0xcb8}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 11m24.730794787s ago: executing program 7 (id=4451): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) close_range(r0, 0xffffffffffffffff, 0x0) 11m24.62107413s ago: executing program 7 (id=4452): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x29fb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x200, 0x1, {{0x8, 0x4, 0x1, 0x30, 0x20, 0x66, 0x0, 0x4, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, {[@rr={0x7, 0x3, 0x1f}, @noop, @rr={0x7, 0x3, 0x41}, @ra={0x94, 0x4}]}}}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@multicast2, @local, r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) socket$kcm(0x21, 0x2, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000002c0), &(0x7f0000000400)='%pI4 \x00'}, 0x20) 11m23.535716641s ago: executing program 7 (id=4458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, r5, 0x0) 11m19.716661717s ago: executing program 7 (id=4465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r3 = socket$rxrpc(0x21, 0x2, 0xa) listen(r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x10801, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x840000000002, 0x3, 0xff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000480)={0x8, 0x2, 'client0\x00', 0x1, "abb363bbde7e68b5", "ddfdbda093760845a388d32521c6ac020d1d6261237a7cc81469ef60fa12d45d", 0x8, 0x8}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11m4.501943951s ago: executing program 39 (id=4465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r3 = socket$rxrpc(0x21, 0x2, 0xa) listen(r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x10801, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x840000000002, 0x3, 0xff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000480)={0x8, 0x2, 'client0\x00', 0x1, "abb363bbde7e68b5", "ddfdbda093760845a388d32521c6ac020d1d6261237a7cc81469ef60fa12d45d", 0x8, 0x8}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8m16.333446731s ago: executing program 3 (id=4866): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x802}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r3, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 8m14.814826628s ago: executing program 3 (id=4867): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x8000004}, {0xffffffff}, {0x0, 0x4}, {0xb0ef, 0x4, 0x8}, 0x0, 0x1, 0x0, 0x3, 0x0, 0x80000000, 0xfffffffd, 0x1, 0x0, 0x0, 0xc091, 0x3, 0x0, 0x100, 0x2, 0xc}) 8m13.293502729s ago: executing program 3 (id=4871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8m12.028541372s ago: executing program 3 (id=4875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 8m10.549078951s ago: executing program 3 (id=4881): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 8m6.423942831s ago: executing program 3 (id=4892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@mcast1, @private0, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xd6, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7m51.164924145s ago: executing program 40 (id=4892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@mcast1, @private0, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xd6, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 28.661538127s ago: executing program 9 (id=5685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) 27.902965593s ago: executing program 1 (id=5687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 27.737557997s ago: executing program 9 (id=5688): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 27.617660007s ago: executing program 9 (id=5689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f0000003580)=0xf2c17809, 0x4) 26.297251922s ago: executing program 9 (id=5691): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x50, 0x0, 0x7, 0x8, 0x8, 0x20000, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r5, &(0x7f0000000600)=""/4093, 0xffd, 0xfffffffd) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280), 0x0) r8 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) ioctl$NBD_SET_SOCK(r5, 0xab00, r5) 25.737065721s ago: executing program 1 (id=5693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa, r1, 0xffff}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x9b8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5fa}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x904, 0xa9, @random="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"}]}, 0x9b8}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 25.092620733s ago: executing program 1 (id=5695): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4800}, 0x24020000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x40}}, 0x8080) 24.748711545s ago: executing program 6 (id=5697): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 24.560384863s ago: executing program 6 (id=5698): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) eventfd2(0x8001, 0x0) 24.265292243s ago: executing program 6 (id=5699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f0000003580)=0xf2c17809, 0x4) 23.04051505s ago: executing program 6 (id=5700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000001100"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 22.704585512s ago: executing program 9 (id=5701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 22.145378824s ago: executing program 6 (id=5702): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100f811a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) 22.069750206s ago: executing program 1 (id=5703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0x3a1, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, r1, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x4}]}}, {"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"}}}}, 0x3af) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) listen(r4, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000080)=[r6], 0x0, 0x1, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088f747e0ffff200000002021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 20.815834161s ago: executing program 6 (id=5704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa, r1, 0xffff}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x9b8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5fa}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x904, 0xa9, @random="c3c9c2621f32d46db628c34655be1ffd5e39041d8cb21ebd3b49d7272c85a1273064f59e544333cce9d270f7fb96e652aad4284001fbc808033c7a4a7248c5cd7bc28779b8d5ca8095209ac17a845a0048a11016a5b37bf54d441dfb08e339d6eff22105142854ea27d0ed8ac3a30cf5db1a38f3644fe078b71aa76e23c72a1c18cb9bf3614482d58e93a3ad33decd86a21eec1d0efa14cbd547306a6500d88645bc3a83094b1aa7166c057da7a23e1c51385c30ed819b7d2f21470fe7ac87aae47cb213de68e786acaa365ddc026a13fb808594dc817e5064303dd753ba936e8970f62cf2b85ac744e90deeef951615b9838b50fe6e0d40618916845a63b53ccf68ef146cc6b1ac2d4f36f9005f7388a3cf7f8e3771b54e71f567df81a0cc81e07e62532f366873c978820f9212808b6d0f6d6e142fbedb860e7812686a2c96e9682de9c6d1b338194623d0c3619935c6b279e0489028c61269bb2ba2b2e2a9da626b768441fed3ea5b64d3d06294199e47ef06e8edb6fb48f499b506aeb580d3bcf68c0bf43231af3581306fe02d7c4ac0eb60de179b14281a01807ff71ada952707efb2d589e75798ae4476b2ebd7faab59f9d90ae7f5ca526b5f01a8fdb87c55f6f16313daff7bfa833026f87ca0e274b9a739321eeb09afb44af80c711e82229c532bbb2f59f9d1db680b9ad9511b9965a2a364cf5e6d1bac2cd761258fe50de827ba8e209aa2ef4278bfa7d8182f7325943a9dba85cc3b4743ff386e0bf6d5b5b143c56aa5d84ffbe788daacbf2dedeec8ccbdce540310f85b1e9eebcd9cd25c6b3094b2f99eb6ffb3ad39533194e35bb9c928ac0e92a218499a27d35dff891599131dfddeefd6af10eac1b040e3de80f828a2fe391cc28290597289c57d93e543491bb99fceb9ec954bec015f54fcfdf888d3fd366e297ff47834aea83ed13aa436a9973034c2db7c05daf7627ba63dada22dcad62c7493b627af88dac91cb06e222ef50ec6b7dd2f030e9dd9d2b5485b41448b92192268a7f75014946b7e681bebbc08ad7fad5ce728c692133d6f3fab4d408605a1293c4069e3201e0d561d6fedbd0be6ca739953cf157e76c8423ed5a8560c50bbeaff29254751bd95e18703fc2124673002992345694c6a8b7c6a9233c116cfd616274fa11b48352f2419e0812784133e10ffe8f134b4a45027235ad93ed51382b43b5a166275229a83f8c8807ad5da5ec99c19a80daf772d7e174c0ac86c6fd356b630b1b64391be4532b02f9115c8b29fd114a3d9fdf7d5eb01fa7308f740ae46cc54ff7882ebc782e5c3c93c0c177c92fa4255126a755bb8b182345e70aa99efee7d2ee883d1c5e61cc1efa001b43190486418bcc92621b922995bd8293e035f6ce3deb88e7195c942545074763ac79b52d78725cd5e5557de473286d030c7812ddcde42a0283a445ef280d728dd9d4f6db2f254bb1bca674ff67ad4b3d53936d29bfbcccefacbbf34a1e98355874a3f1a2522a1e734314e88c1361b0d2d16e44d922fb688cf8c28cf964d631b0fa0b17f32e97a6d64cf95c6bd455185f22eea3dd74916c49ab2384edde9fad87703c42dfb01ef7ba496bf1832653b00a216a50c9b521718a64ce3305b11756e44becf3e3e0b5d76707ead0dfe6dfde518d9aafaf0b38fa69ac93257328e260195f6adf9798d53a916ce233bafec764b9eb995db9469296f69fe7051c4a0323c5f804900d83edf2866b046df4564eeda1d76b421a1d6a28247ba07fd6cb51578f7f7eff4b8d0df18e36d93c1cb274daae564468fcb0c35cd0c308ffc14f0cab605f3a2fd33b6d6a51cce78f201204bae5552310695627b2f85377bd5722570e3798d1665d5a999a5a0b0141a75e675156fa9b2e61276373653b29a6a737d3ec88dda73cb7558c2c9c53eccd31dd6d468bd38dcf2e81609997abaec05b37a51375065c83e0cedc88d8dddf00ef734f54a946102ee524253ac10861dc2145489a230a5afc851059e82a422b775631d2844445be61ee05a5393a694988e8f25f2102329d893ec256834f7c2ec8d3071643a844a320810dc0375449ac6ebbc2ac150a96756ae84a218a09ce716bd5b8d0ca110b63679b18f8170e7abe2f60ed67ab68cbd48c9c57bd49a5732bc017074ad55263ec343f33152cadf6552568b07336427775f89e4dd76aa28c4e2113172607450f5e1202b1c39a86b03eb3ae1a221ffe0e69a951f512ba2503e5a14314b4faee6d9faf9438d380a3b6af2686aea5cb0dd0bfc8a6d3743968bab91e19dfa4e6f900e084faab8f9ea040a9cbe53f4ffb1060da68fe53cd12463e10ae37f882e26708638643ad9bbc2594c1192f77b897d95d37c2810f42988de5f0edef93062b7b914f241f8078d6d0eccf14dc2c63937e4f6da19075bc7b8623c5b55d3e0abe53f0e66b0dc03ea02e63011ca762b49dc3d48782d09ff57a80c03b2f951f72a63664e73f1019bbbbfec7f1771cfd0fb5160dff475850f06f2ef95b9e1640bbc938f37b8387d54226e638989ef909776424cd4373dd146db699903a101420252d21ebc52f4f20d4ce0a89915a6b263afc0f499f5ba5e0b449f58b1e2309ecf7c3f7694073c6cc2d3725c573bc6ca47c346a6d6cdb2ca23a51c77ce2cbe90b8944114249ac796a2054fc71aa7a5d167b05362330b3c05805d15b87cfc9ede9fa3540338133bf1606c565bdeb77c08ef6ca8b486ec0d0ed37f5c736d6787786c91f92748b98e9e482a7c3a78c9825c38f9ef912ce0689abad153abdb9f0f24972ff66fc1e9c23010f442734f410fd02417fb4b084c739da49077e0d63e08fe6c76dd3d4036ca6f5dac682f2ac6c74edb9a5a091616c4f69f1d5fe1a4f47b8ff71540ac46fdd5cfd9a2ad8787234807571be0bd68caa45de58819305016ba60f4d1fa8d7fdc4819d5bc1f0360ef5e2c0452fc39756bd7960bade9c7bf567134bf05bf762b13a74ae07b2c4b3ba7f007198509fcbe5dcdb7405c2ba51959ac3b779dea85691ac1e41cee8582ca25b8c5c41dbbb874ad7fa40d4d2d14a92cd81832db0149445337583f28c819a3b6de40009e833a9ece338c1d03bc94b5f3e8c8579e5381ae80309b47debac766d6d171d51d6e0423d227c6e2deb527cb59677caba789fd9a7c8a2093a4d65d489af304234835031551ceff013558237d32c197fe4b8881836c864c5867eac4f169368388e90cb0ba6847bf99e58ac73d09bff7b092536ffb570fcc840c2c2c"}]}, 0x9b8}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 18.025109752s ago: executing program 1 (id=5705): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) 16.809309861s ago: executing program 9 (id=5706): r0 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000002059249b37"], 0x0) getsockopt(0xffffffffffffffff, 0xfffffffe, 0x4, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000680001000000000000000000020000000000000008000600f200000008000500", @ANYBLOB="8d7d553bbe41ede3af0000a800ecbe0ae6d20c74819b2c51b07197c15b71da55c9db6cded69ebcdade2669"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 15.860465146s ago: executing program 1 (id=5707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet6(r1, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5.046717299s ago: executing program 41 (id=5704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa, r1, 0xffff}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x9b8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa5fa}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x904, 0xa9, @random="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"}]}, 0x9b8}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r4, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 1.120878314s ago: executing program 42 (id=5706): r0 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000002059249b37"], 0x0) getsockopt(0xffffffffffffffff, 0xfffffffe, 0x4, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000680001000000000000000000020000000000000008000600f200000008000500", @ANYBLOB="8d7d553bbe41ede3af0000a800ecbe0ae6d20c74819b2c51b07197c15b71da55c9db6cded69ebcdade2669"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 0s ago: executing program 43 (id=5707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet6(r1, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 5': attribute type 6 has an invalid length. [ 1411.845679][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5028'. [ 1412.207915][T16091] Bluetooth: hci4: command tx timeout [ 1413.707015][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1414.271913][T16091] Bluetooth: hci4: command tx timeout [ 1416.089892][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'. [ 1416.492193][T16091] Bluetooth: hci4: command tx timeout [ 1418.230902][T15175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.639857][T20634] chnl_net:caif_netlink_parms(): no params data found [ 1420.323944][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1420.323961][ T37] audit: type=1326 audit(1758153301.689:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.323993][ T37] audit: type=1326 audit(1758153301.689:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.324757][ T37] audit: type=1326 audit(1758153301.689:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.324801][ T37] audit: type=1326 audit(1758153301.689:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.324842][ T37] audit: type=1326 audit(1758153301.689:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.325477][ T37] audit: type=1326 audit(1758153301.689:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.325506][ T37] audit: type=1326 audit(1758153301.689:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.325849][ T37] audit: type=1326 audit(1758153301.689:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.325876][ T37] audit: type=1326 audit(1758153301.689:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20753 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1420.590067][T15175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.709739][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1420.738009][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1420.740966][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1420.818307][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1420.832028][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1421.268367][T15175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.687113][T15175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.947288][T16091] Bluetooth: hci1: command tx timeout [ 1423.273974][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.301592][T20634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.302160][T20634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.302439][T20634] bridge_slave_0: entered allmulticast mode [ 1423.305257][T20634] bridge_slave_0: entered promiscuous mode [ 1423.311536][T20760] lo speed is unknown, defaulting to 1000 [ 1423.323016][T20634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.323152][T20634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.323437][T20634] bridge_slave_1: entered allmulticast mode [ 1423.326087][T20634] bridge_slave_1: entered promiscuous mode [ 1424.471733][T20634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.277691][T16091] Bluetooth: hci1: command tx timeout [ 1425.860285][T20634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.412416][T20634] team0: Port device team_slave_0 added [ 1426.718733][T20634] team0: Port device team_slave_1 added [ 1427.311727][T16091] Bluetooth: hci1: command tx timeout [ 1432.621675][T16091] Bluetooth: hci1: command tx timeout [ 1433.455964][T20821] ubi: mtd0 is already attached to ubi31 [ 1435.054729][T20634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.054745][T20634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.054772][T20634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.060070][T20634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.060086][T20634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.060110][T20634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.218515][T15175] bridge_slave_1: left allmulticast mode [ 1435.218548][T15175] bridge_slave_1: left promiscuous mode [ 1435.218811][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.314708][T15175] bridge_slave_0: left allmulticast mode [ 1435.314731][T15175] bridge_slave_0: left promiscuous mode [ 1435.314914][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.439741][T15175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.543837][T15175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.607485][T15175] bond0 (unregistering): Released all slaves [ 1437.692160][T15175] bond1 (unregistering): (slave geneve3): Releasing backup interface [ 1438.978267][T15175] bond0 (unregistering): Released all slaves [ 1439.868458][T15175] bond1 (unregistering): Released all slaves [ 1442.461468][T15175] tipc: Left network mode [ 1444.146430][T20865] overlayfs: missing 'lowerdir' [ 1444.858358][T20634] hsr_slave_0: entered promiscuous mode [ 1444.884026][T20634] hsr_slave_1: entered promiscuous mode [ 1444.893048][T20634] debugfs: 'hsr0' already exists in 'hsr' [ 1444.893081][T20634] Cannot create hsr debugfs directory [ 1446.658486][T20879] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5077'. [ 1447.827988][T20760] chnl_net:caif_netlink_parms(): no params data found [ 1448.792947][T20898] siw: device registration error -23 [ 1450.785211][ T37] audit: type=1326 audit(1758153332.149:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.785264][ T37] audit: type=1326 audit(1758153332.149:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.785306][ T37] audit: type=1326 audit(1758153332.149:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.785346][ T37] audit: type=1326 audit(1758153332.149:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.786883][ T37] audit: type=1326 audit(1758153332.149:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.786928][ T37] audit: type=1326 audit(1758153332.149:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.786968][ T37] audit: type=1326 audit(1758153332.149:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.787006][ T37] audit: type=1326 audit(1758153332.149:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1450.787046][ T37] audit: type=1326 audit(1758153332.149:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20905 comm="syz.1.5083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1451.627594][T20760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.627742][T20760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.628005][T20760] bridge_slave_0: entered allmulticast mode [ 1451.630863][T20760] bridge_slave_0: entered promiscuous mode [ 1451.811498][T15175] hsr_slave_0: left promiscuous mode [ 1451.831564][T15175] hsr_slave_1: left promiscuous mode [ 1451.832583][T15175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.862387][T15175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.712440][T15175] team0 (unregistering): Port device team_slave_1 removed [ 1452.873638][T15175] team0 (unregistering): Port device team_slave_0 removed [ 1460.013582][T20760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.013726][T20760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.013989][T20760] bridge_slave_1: entered allmulticast mode [ 1460.017778][T20760] bridge_slave_1: entered promiscuous mode [ 1460.040913][T20932] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1460.051773][T20918] IPVS: stopping backup sync thread 20932 ... [ 1460.465451][T20941] netlink: 'syz.6.5094': attribute type 1 has an invalid length. [ 1460.570428][T20943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5094'. [ 1461.019328][T20941] bond0: entered promiscuous mode [ 1461.019358][T20941] bond0: entered allmulticast mode [ 1461.032874][T20943] bond0: left promiscuous mode [ 1461.032904][T20943] bond0: left allmulticast mode [ 1461.056531][T20943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.070881][T20760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.101271][T20760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.894524][T20934] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1462.261313][ T37] audit: type=1326 audit(1758153343.599:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261363][ T37] audit: type=1326 audit(1758153343.599:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261398][ T37] audit: type=1326 audit(1758153343.599:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261430][ T37] audit: type=1326 audit(1758153343.599:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261461][ T37] audit: type=1326 audit(1758153343.599:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261493][ T37] audit: type=1326 audit(1758153343.599:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261525][ T37] audit: type=1326 audit(1758153343.599:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261558][ T37] audit: type=1326 audit(1758153343.599:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261591][ T37] audit: type=1326 audit(1758153343.609:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.261622][ T37] audit: type=1326 audit(1758153343.609:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.6.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1462.799885][T20760] team0: Port device team_slave_0 added [ 1462.988275][T20760] team0: Port device team_slave_1 added [ 1463.137586][T20634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1463.475638][T20956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.475951][T20634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1463.497757][T20760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.497772][T20760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.497796][T20760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.499726][T20634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1463.564272][T20760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.564289][T20760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.564315][T20760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.649817][T20634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1464.352859][T20760] hsr_slave_0: entered promiscuous mode [ 1464.354384][T20760] hsr_slave_1: entered promiscuous mode [ 1464.355215][T20760] debugfs: 'hsr0' already exists in 'hsr' [ 1464.355238][T20760] Cannot create hsr debugfs directory [ 1469.224071][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5105'. [ 1469.224689][T15175] bridge_slave_1: left allmulticast mode [ 1469.224722][T15175] bridge_slave_1: left promiscuous mode [ 1469.225010][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.433454][T15175] bridge_slave_0: left allmulticast mode [ 1469.433479][T15175] bridge_slave_0: left promiscuous mode [ 1469.433691][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.135528][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1470.189526][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1470.235116][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1470.242635][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1470.243427][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1470.542359][T15175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.742273][T15175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.010611][T15175] bond0 (unregistering): Released all slaves [ 1472.352103][T16091] Bluetooth: hci3: command tx timeout [ 1472.551508][T15175] hsr_slave_0: left promiscuous mode [ 1472.581582][T15175] hsr_slave_1: left promiscuous mode [ 1472.582533][T15175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.644995][T15175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.642698][T16091] Bluetooth: hci3: command tx timeout [ 1476.671418][T16091] Bluetooth: hci3: command tx timeout [ 1478.172090][T15175] team0 (unregistering): Port device team_slave_1 removed [ 1478.639693][T15175] team0 (unregistering): Port device team_slave_0 removed [ 1478.753447][T16091] Bluetooth: hci3: command tx timeout [ 1481.443108][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1481.447336][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1482.381825][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1482.473846][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1482.474515][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1482.974605][T21074] binder: 21071:21074 ioctl c0306201 200000000040 returned -14 [ 1482.976358][T21074] binder: 21071:21074 ioctl c0306201 0 returned -14 [ 1483.964162][T21081] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5126'. [ 1484.520257][T21067] lo speed is unknown, defaulting to 1000 [ 1484.525754][ T59] Bluetooth: hci4: command tx timeout [ 1484.598102][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.613441][T21004] lo speed is unknown, defaulting to 1000 [ 1486.814345][ T59] Bluetooth: hci4: command tx timeout [ 1488.831518][ T59] Bluetooth: hci4: command tx timeout [ 1490.921548][ T59] Bluetooth: hci4: command tx timeout [ 1491.561134][T21137] netlink: 'syz.1.5140': attribute type 4 has an invalid length. [ 1491.561157][T21137] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1492.499515][T21004] chnl_net:caif_netlink_parms(): no params data found [ 1492.523638][T21139] netlink: 'syz.9.5141': attribute type 1 has an invalid length. [ 1492.592742][T21142] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5141'. [ 1492.607102][T21139] bond0: entered promiscuous mode [ 1492.607131][T21139] bond0: entered allmulticast mode [ 1492.650394][T21142] bond0: left promiscuous mode [ 1492.650424][T21142] bond0: left allmulticast mode [ 1492.650991][T21142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.652181][T21067] chnl_net:caif_netlink_parms(): no params data found [ 1494.695625][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5145'. [ 1495.820276][T21182] netlink: 'syz.1.5150': attribute type 4 has an invalid length. [ 1495.820346][T21182] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1498.422901][T21004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.423026][T21004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.423214][T21004] bridge_slave_0: entered allmulticast mode [ 1498.442585][T21004] bridge_slave_0: entered promiscuous mode [ 1498.670230][T21004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.670545][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.670820][T21004] bridge_slave_1: entered allmulticast mode [ 1498.675563][T21004] bridge_slave_1: entered promiscuous mode [ 1499.481672][T21067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.481822][T21067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.482086][T21067] bridge_slave_0: entered allmulticast mode [ 1499.484820][T21067] bridge_slave_0: entered promiscuous mode [ 1501.944573][T21067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.944721][T21067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.945761][T21067] bridge_slave_1: entered allmulticast mode [ 1501.948549][T21067] bridge_slave_1: entered promiscuous mode [ 1501.992513][T21004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.142939][T21004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.915569][T21067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.118009][T21067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.120523][T21004] team0: Port device team_slave_0 added [ 1504.465290][T21004] team0: Port device team_slave_1 added [ 1504.539346][T21231] netlink: 'syz.6.5164': attribute type 1 has an invalid length. [ 1504.590603][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5164'. [ 1504.645896][T21235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5164'. [ 1504.895062][T21231] bond3: entered promiscuous mode [ 1504.895092][T21231] bond3: entered allmulticast mode [ 1504.916179][T21235] bond3: left promiscuous mode [ 1504.916211][T21235] bond3: left allmulticast mode [ 1504.916859][T21235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1504.927406][T21067] team0: Port device team_slave_0 added [ 1505.149364][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5168'. [ 1505.428635][T21067] team0: Port device team_slave_1 added [ 1505.429327][T15175] bridge_slave_1: left allmulticast mode [ 1505.429355][T15175] bridge_slave_1: left promiscuous mode [ 1505.429612][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.203038][T15175] bridge_slave_0: left allmulticast mode [ 1506.203072][T15175] bridge_slave_0: left promiscuous mode [ 1506.203366][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.693120][T15175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.772186][T15175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.846020][T15175] bond0 (unregistering): Released all slaves [ 1506.902667][T21004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.902684][T21004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.902710][T21004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.091862][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1507.091878][ T37] audit: type=1326 audit(1758153388.459:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.092256][ T37] audit: type=1326 audit(1758153388.459:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.092510][ T37] audit: type=1326 audit(1758153388.459:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.093034][ T37] audit: type=1326 audit(1758153388.459:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.093425][ T37] audit: type=1326 audit(1758153388.459:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.093841][ T37] audit: type=1326 audit(1758153388.459:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.094286][ T37] audit: type=1326 audit(1758153388.459:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1507.094526][ T37] audit: type=1326 audit(1758153388.459:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1507.094819][ T37] audit: type=1326 audit(1758153388.459:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.095390][ T37] audit: type=1326 audit(1758153388.459:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21254 comm="syz.6.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1507.436825][T21004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.436844][T21004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.436871][T21004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.706330][T21067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1507.706342][T21067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.706355][T21067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.709632][T21067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.709647][T21067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1507.709673][T21067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.724846][T21267] netlink: 'syz.6.5176': attribute type 1 has an invalid length. [ 1507.776800][T21268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5176'. [ 1507.829339][T21269] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5176'. [ 1507.861500][T15175] hsr_slave_0: left promiscuous mode [ 1507.882566][T15175] hsr_slave_1: left promiscuous mode [ 1507.883667][T15175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.935859][T15175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.553677][T15175] team0 (unregistering): Port device team_slave_1 removed [ 1509.609187][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1509.733403][T15175] team0 (unregistering): Port device team_slave_0 removed [ 1510.595506][T21267] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1512.105509][ T37] kauditd_printk_skb: 150 callbacks suppressed [ 1512.105528][ T37] audit: type=1326 audit(1758153393.429:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1512.105824][ T37] audit: type=1326 audit(1758153393.469:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1512.106157][ T37] audit: type=1326 audit(1758153393.469:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1512.106418][ T37] audit: type=1326 audit(1758153393.469:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1512.107948][ T37] audit: type=1326 audit(1758153393.469:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1512.236230][ T37] audit: type=1326 audit(1758153393.599:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1512.236284][ T37] audit: type=1326 audit(1758153393.599:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1512.236326][ T37] audit: type=1326 audit(1758153393.599:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21284 comm="syz.6.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1513.845030][T21004] hsr_slave_0: entered promiscuous mode [ 1513.846398][T21004] hsr_slave_1: entered promiscuous mode [ 1513.847307][T21004] debugfs: 'hsr0' already exists in 'hsr' [ 1513.911462][T21004] Cannot create hsr debugfs directory [ 1513.920431][T21067] hsr_slave_0: entered promiscuous mode [ 1513.944235][T21067] hsr_slave_1: entered promiscuous mode [ 1513.944802][T21067] debugfs: 'hsr0' already exists in 'hsr' [ 1513.944818][T21067] Cannot create hsr debugfs directory [ 1514.908187][T21318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1516.214595][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5190'. [ 1516.925602][ T37] audit: type=1326 audit(1758153398.289:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1516.925653][ T37] audit: type=1326 audit(1758153398.289:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1517.140205][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1517.140218][ T37] audit: type=1326 audit(1758153398.499:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f4def5b67 code=0x7ffc0000 [ 1517.140245][ T37] audit: type=1326 audit(1758153398.499:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f4de9ada9 code=0x7ffc0000 [ 1517.140267][ T37] audit: type=1326 audit(1758153398.499:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1517.941373][ T37] audit: type=1326 audit(1758153399.309:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f4def5b67 code=0x7ffc0000 [ 1517.941425][ T37] audit: type=1326 audit(1758153399.309:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f4de9ada9 code=0x7ffc0000 [ 1517.941464][ T37] audit: type=1326 audit(1758153399.309:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1517.945885][ T37] audit: type=1326 audit(1758153399.309:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f4def5b67 code=0x7ffc0000 [ 1517.945915][ T37] audit: type=1326 audit(1758153399.309:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f4de9ada9 code=0x7ffc0000 [ 1517.945938][ T37] audit: type=1326 audit(1758153399.309:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1517.945960][ T37] audit: type=1326 audit(1758153399.309:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21335 comm="syz.9.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1519.517516][T15175] bridge_slave_1: left allmulticast mode [ 1519.517609][T15175] bridge_slave_1: left promiscuous mode [ 1519.533185][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.615067][T15175] bridge_slave_0: left allmulticast mode [ 1519.615097][T15175] bridge_slave_0: left promiscuous mode [ 1519.615338][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.762609][T15175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.252955][T15175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.160752][T15175] bond0 (unregistering): Released all slaves [ 1524.407338][T15175] hsr_slave_0: left promiscuous mode [ 1524.412517][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5200'. [ 1524.432330][T15175] hsr_slave_1: left promiscuous mode [ 1524.433301][T15175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.484725][T15175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.073797][T15175] team0 (unregistering): Port device team_slave_1 removed [ 1528.232489][T15175] team0 (unregistering): Port device team_slave_0 removed [ 1530.159314][T21394] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1531.506742][T16091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1531.530981][T16091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1531.540407][T16091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1531.558460][T16091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1531.581744][T16091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1532.521577][T21402] lo speed is unknown, defaulting to 1000 [ 1532.625834][T21067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1532.689924][T21067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1532.876260][T21067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1533.079299][T21067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1533.711560][ T59] Bluetooth: hci1: command tx timeout [ 1533.902716][T21424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5211'. [ 1535.150190][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5213'. [ 1535.807793][ T59] Bluetooth: hci1: command tx timeout [ 1536.814124][T21402] chnl_net:caif_netlink_parms(): no params data found [ 1537.093084][T21454] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1537.871533][ T59] Bluetooth: hci1: command tx timeout [ 1538.562432][T21463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5219'. [ 1539.127179][T21466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1539.952807][ T59] Bluetooth: hci1: command tx timeout [ 1541.614205][T21402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.614346][T21402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.614605][T21402] bridge_slave_0: entered allmulticast mode [ 1541.617332][T21402] bridge_slave_0: entered promiscuous mode [ 1541.771682][T21402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.771922][T21402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.772175][T21402] bridge_slave_1: entered allmulticast mode [ 1541.805515][T21484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1541.814070][T21402] bridge_slave_1: entered promiscuous mode [ 1542.187429][ T6302] bridge_slave_1: left allmulticast mode [ 1542.187460][ T6302] bridge_slave_1: left promiscuous mode [ 1542.187691][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.662899][ T6302] bridge_slave_0: left allmulticast mode [ 1542.662933][ T6302] bridge_slave_0: left promiscuous mode [ 1542.663200][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.175629][T21494] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1545.213627][T21500] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1545.229846][T21500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1545.243057][T21500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1545.243821][T21500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1545.244908][T21500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1546.142426][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.443347][T21508] nfs: Unknown parameter '' [ 1546.602037][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.662400][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.706420][ T6302] bond0 (unregistering): Released all slaves [ 1547.609874][ T59] Bluetooth: hci3: command tx timeout [ 1548.694328][T21516] overlayfs: failed to clone lowerpath [ 1548.789952][T21402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.816254][T21402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.290875][ T6302] hsr_slave_0: left promiscuous mode [ 1549.312764][ T6302] hsr_slave_1: left promiscuous mode [ 1549.313444][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.362971][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.880098][ T59] Bluetooth: hci3: command tx timeout [ 1552.200016][ T59] Bluetooth: hci3: command tx timeout [ 1552.410484][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5236'. [ 1552.410547][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5236'. [ 1552.508573][T21534] syz.1.5237 (21534) used greatest stack depth: 17584 bytes left [ 1552.563674][T21538] random: crng reseeded on system resumption [ 1552.690702][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5236'. [ 1552.690777][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5236'. [ 1552.782295][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1552.911552][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1552.911569][ T37] audit: type=1326 audit(1758153434.249:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911616][ T37] audit: type=1326 audit(1758153434.249:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911657][ T37] audit: type=1326 audit(1758153434.259:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911719][ T37] audit: type=1326 audit(1758153434.259:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911760][ T37] audit: type=1326 audit(1758153434.259:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911802][ T37] audit: type=1326 audit(1758153434.259:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911844][ T37] audit: type=1326 audit(1758153434.259:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911884][ T37] audit: type=1326 audit(1758153434.269:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911925][ T37] audit: type=1326 audit(1758153434.269:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1552.911969][ T37] audit: type=1326 audit(1758153434.269:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21537 comm="syz.1.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1553.223708][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1553.662255][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5239'. [ 1553.908175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.121104][T21543] pim6reg: entered allmulticast mode [ 1554.163948][T21402] team0: Port device team_slave_0 added [ 1554.167575][T21402] team0: Port device team_slave_1 added [ 1554.272142][ T59] Bluetooth: hci3: command tx timeout [ 1554.719612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.804862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.854933][T21402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.854945][T21402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.854960][T21402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.858855][T21498] lo speed is unknown, defaulting to 1000 [ 1554.861104][T21402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.861118][T21402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.979518][T21402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.099933][T21560] overlayfs: failed to clone lowerpath [ 1555.669006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.808677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.955207][T21402] hsr_slave_0: entered promiscuous mode [ 1555.957924][T21402] hsr_slave_1: entered promiscuous mode [ 1555.976508][T21402] debugfs: 'hsr0' already exists in 'hsr' [ 1555.976539][T21402] Cannot create hsr debugfs directory [ 1556.041097][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.264379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.400087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.931727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1559.212322][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1559.212385][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1559.348686][T21582] netlink: 'syz.1.5248': attribute type 1 has an invalid length. [ 1559.404202][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5248'. [ 1559.405508][T21584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5248'. [ 1559.414064][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1559.414131][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1559.606424][T21582] bond0: entered promiscuous mode [ 1559.606453][T21582] bond0: entered allmulticast mode [ 1559.813901][T21584] bond0: left promiscuous mode [ 1559.813933][T21584] bond0: left allmulticast mode [ 1559.819293][T21584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.828232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1559.861703][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1559.861768][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5247'. [ 1559.889892][T21498] chnl_net:caif_netlink_parms(): no params data found [ 1560.130310][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5250'. [ 1560.241912][T21597] Invalid source name [ 1560.275521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1560.857735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1561.014584][T21603] overlayfs: failed to clone lowerpath [ 1561.874399][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.869660][T21624] block device autoloading is deprecated and will be removed. [ 1566.370440][T21627] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1567.417106][T21498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.417248][T21498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.417536][T21498] bridge_slave_0: entered allmulticast mode [ 1567.492277][T21498] bridge_slave_0: entered promiscuous mode [ 1567.515535][T21498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.515678][T21498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.516040][T21498] bridge_slave_1: entered allmulticast mode [ 1567.541540][T21498] bridge_slave_1: entered promiscuous mode [ 1568.089608][T21498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.324921][T21498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.040322][T21498] team0: Port device team_slave_0 added [ 1569.058955][T21498] team0: Port device team_slave_1 added [ 1569.758775][ T6302] bridge_slave_1: left allmulticast mode [ 1569.758936][ T6302] bridge_slave_1: left promiscuous mode [ 1569.771531][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.747418][ T6302] bridge_slave_0: left allmulticast mode [ 1570.747451][ T6302] bridge_slave_0: left promiscuous mode [ 1570.747713][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.810796][T21654] syz.1.5265 (21654) used greatest stack depth: 16656 bytes left [ 1571.472986][T21662] overlayfs: failed to clone lowerpath [ 1576.353282][T21691] nfs: Unknown parameter '' [ 1577.345092][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.453481][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.524011][ T6302] bond0 (unregistering): Released all slaves [ 1577.650260][T21498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.650277][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.650304][T21498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.185137][T21498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.185152][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.185174][T21498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.961489][ T6302] hsr_slave_0: left promiscuous mode [ 1578.981451][ T6302] hsr_slave_1: left promiscuous mode [ 1578.982548][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.042878][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.277257][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1581.722267][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1583.515929][T21726] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5282'. [ 1585.036981][T21402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1585.563062][T21402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1586.129802][T21402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1586.252901][T21498] hsr_slave_0: entered promiscuous mode [ 1586.259483][T21498] hsr_slave_1: entered promiscuous mode [ 1586.262801][T21498] debugfs: 'hsr0' already exists in 'hsr' [ 1586.262826][T21498] Cannot create hsr debugfs directory [ 1586.299892][T21402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1593.384381][T21792] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1594.063427][T21795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1594.082877][T21795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1594.092514][T21795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1594.108813][T21795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1594.110732][T21795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1596.192061][T21795] Bluetooth: hci1: command tx timeout [ 1597.960038][T21793] lo speed is unknown, defaulting to 1000 [ 1598.338652][T21836] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1599.181792][T21795] Bluetooth: hci1: command tx timeout [ 1602.130663][ T59] Bluetooth: hci1: command tx timeout [ 1603.261504][T21498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1604.209393][ T59] Bluetooth: hci1: command tx timeout [ 1604.653947][T15165] bridge_slave_1: left allmulticast mode [ 1604.653970][T15165] bridge_slave_1: left promiscuous mode [ 1604.654163][T15165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.861022][T15165] bridge_slave_0: left allmulticast mode [ 1604.861056][T15165] bridge_slave_0: left promiscuous mode [ 1604.861489][T15165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.427232][T21878] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1606.286444][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1606.286461][ T37] audit: type=1326 audit(1758153487.649:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286506][ T37] audit: type=1326 audit(1758153487.649:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286548][ T37] audit: type=1326 audit(1758153487.649:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286589][ T37] audit: type=1326 audit(1758153487.649:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286628][ T37] audit: type=1326 audit(1758153487.649:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286669][ T37] audit: type=1326 audit(1758153487.649:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286708][ T37] audit: type=1326 audit(1758153487.649:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286749][ T37] audit: type=1326 audit(1758153487.649:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286789][ T37] audit: type=1326 audit(1758153487.649:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1606.286829][ T37] audit: type=1326 audit(1758153487.649:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21879 comm="syz.9.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f4def5b67 code=0x7ffc0000 [ 1607.570993][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.694889][T21795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1607.736781][T21795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1607.740020][T21795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1607.762066][T21795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1607.801637][T21795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1609.597379][T15165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.798760][T15165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.959599][ T59] Bluetooth: hci3: command tx timeout [ 1610.005863][T15165] bond0 (unregistering): Released all slaves [ 1610.106203][T21913] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1611.424023][ T37] kauditd_printk_skb: 75 callbacks suppressed [ 1611.424041][ T37] audit: type=1326 audit(1758153492.789:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.424137][ T37] audit: type=1326 audit(1758153492.789:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.424559][ T37] audit: type=1326 audit(1758153492.789:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.424607][ T37] audit: type=1326 audit(1758153492.789:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.427092][ T37] audit: type=1326 audit(1758153492.789:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.427359][ T37] audit: type=1326 audit(1758153492.789:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.427851][ T37] audit: type=1326 audit(1758153492.789:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1611.783582][ T37] audit: type=1326 audit(1758153492.789:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f4def5b67 code=0x7ffc0000 [ 1611.816547][ T37] audit: type=1326 audit(1758153493.149:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f4de9ada9 code=0x7ffc0000 [ 1611.816602][ T37] audit: type=1326 audit(1758153493.149:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21922 comm="syz.9.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f4def5b67 code=0x7ffc0000 [ 1612.053131][ T59] Bluetooth: hci3: command tx timeout [ 1612.181526][T15165] hsr_slave_0: left promiscuous mode [ 1612.221552][T15165] hsr_slave_1: left promiscuous mode [ 1612.222758][T15165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.388000][T15165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.171959][T21953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1614.194610][ T59] Bluetooth: hci3: command tx timeout [ 1616.281502][ T59] Bluetooth: hci3: command tx timeout [ 1616.312292][T15165] team0 (unregistering): Port device team_slave_1 removed [ 1616.442069][ T37] kauditd_printk_skb: 187 callbacks suppressed [ 1616.442111][ T37] audit: type=1326 audit(1758153497.799:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1616.465827][ T37] audit: type=1326 audit(1758153497.809:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1616.466141][ T37] audit: type=1326 audit(1758153497.819:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1616.466255][ T37] audit: type=1326 audit(1758153497.819:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1616.466632][ T37] audit: type=1326 audit(1758153497.829:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1616.469822][ T37] audit: type=1326 audit(1758153497.829:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1616.476347][ T37] audit: type=1326 audit(1758153497.839:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1616.479943][ T37] audit: type=1326 audit(1758153497.839:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1616.485434][ T37] audit: type=1326 audit(1758153497.849:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1616.489599][ T37] audit: type=1326 audit(1758153497.849:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21956 comm="syz.6.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1617.454549][T15165] team0 (unregistering): Port device team_slave_0 removed [ 1620.025216][T21793] chnl_net:caif_netlink_parms(): no params data found [ 1620.144416][T21888] lo speed is unknown, defaulting to 1000 [ 1621.305107][T21995] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1623.069216][T21704] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1623.071778][T21793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.071908][T21793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.072118][T21793] bridge_slave_0: entered allmulticast mode [ 1623.082959][T21793] bridge_slave_0: entered promiscuous mode [ 1623.089903][T21704] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1623.090302][T21793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.090432][T21793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.090632][T21793] bridge_slave_1: entered allmulticast mode [ 1623.111837][T21793] bridge_slave_1: entered promiscuous mode [ 1623.113238][T21704] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1623.131908][T21704] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1624.659964][T21793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.958309][T21793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.319087][T21793] team0: Port device team_slave_0 added [ 1625.394707][T21793] team0: Port device team_slave_1 added [ 1626.092957][T21793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.092969][T21793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.092984][T21793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.273738][T21793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.273756][T21793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.273783][T21793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.274762][T21888] chnl_net:caif_netlink_parms(): no params data found [ 1627.913734][T22056] overlayfs: failed to clone upperpath [ 1628.673102][T21793] hsr_slave_0: entered promiscuous mode [ 1628.674720][T21793] hsr_slave_1: entered promiscuous mode [ 1628.675846][T21793] debugfs: 'hsr0' already exists in 'hsr' [ 1628.675872][T21793] Cannot create hsr debugfs directory [ 1629.215739][T22067] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1630.543903][T21888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.544039][T21888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.544234][T21888] bridge_slave_0: entered allmulticast mode [ 1630.547354][T21888] bridge_slave_0: entered promiscuous mode [ 1630.618210][T21888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.618344][T21888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.618518][T21888] bridge_slave_1: entered allmulticast mode [ 1630.620235][T21888] bridge_slave_1: entered promiscuous mode [ 1630.728846][T22089] overlayfs: failed to clone lowerpath [ 1631.292841][T21888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.360894][T21888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.849404][T22096] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.5382'. [ 1631.973883][T21888] team0: Port device team_slave_0 added [ 1631.998154][T21888] team0: Port device team_slave_1 added [ 1632.508094][T15165] bridge_slave_1: left allmulticast mode [ 1632.508117][T15165] bridge_slave_1: left promiscuous mode [ 1632.508303][T15165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.603386][T15165] bridge_slave_0: left allmulticast mode [ 1632.603419][T15165] bridge_slave_0: left promiscuous mode [ 1632.603765][T15165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.413610][T15165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.503528][T15165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.571095][T15165] bond0 (unregistering): Released all slaves [ 1635.915293][T21888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.915310][T21888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.915337][T21888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.915893][T15164] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1635.916031][T15164] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1635.916068][T15164] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1635.916100][T15164] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1636.051636][T21888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.051653][T21888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.051678][T21888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.241638][T15165] hsr_slave_0: left promiscuous mode [ 1636.281668][T15165] hsr_slave_1: left promiscuous mode [ 1636.282778][T15165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.312572][T15165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.887601][T15165] team0 (unregistering): Port device team_slave_1 removed [ 1639.202682][T15165] team0 (unregistering): Port device team_slave_0 removed [ 1641.403726][T21888] hsr_slave_0: entered promiscuous mode [ 1641.405240][T21888] hsr_slave_1: entered promiscuous mode [ 1641.407452][T21888] debugfs: 'hsr0' already exists in 'hsr' [ 1641.407477][T21888] Cannot create hsr debugfs directory [ 1645.362432][T21793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1645.427951][T21793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1646.248368][T21793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1646.382826][T21793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1650.480482][T21793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.513445][T21793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.522732][T15164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.522951][T15164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.777757][T15165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.777909][T15165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.490740][T21888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1651.519019][T21888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1651.896678][T21888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1651.959531][T21888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1652.355795][T21795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1652.397015][T21795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1652.400616][T21795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1652.433572][T21795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1652.445137][T21795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1653.037820][T22252] lo speed is unknown, defaulting to 1000 [ 1654.901584][T21795] Bluetooth: hci1: command tx timeout [ 1657.782286][T21795] Bluetooth: hci1: command tx timeout [ 1659.005410][T21888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.491047][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1659.791646][T21795] Bluetooth: hci1: command tx timeout [ 1660.047719][T21888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.136921][T15164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.137008][T15164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.265792][ T3670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.267352][ T3670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.415978][ T6302] bridge_slave_1: left allmulticast mode [ 1661.416018][ T6302] bridge_slave_1: left promiscuous mode [ 1661.416300][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.871823][T21795] Bluetooth: hci1: command tx timeout [ 1661.892948][ T6302] bridge_slave_0: left allmulticast mode [ 1661.892985][ T6302] bridge_slave_0: left promiscuous mode [ 1661.893238][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.290272][T21795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1667.296376][T21795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1667.297977][T21795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1667.299748][T21795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1667.301584][T21795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1668.897007][T22346] program syz.1.5450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1668.923695][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.941973][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.764474][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.051182][ T59] Bluetooth: hci4: command tx timeout [ 1670.329685][ T6302] bond0 (unregistering): Released all slaves [ 1670.616945][T22252] chnl_net:caif_netlink_parms(): no params data found [ 1672.020039][T22331] lo speed is unknown, defaulting to 1000 [ 1672.111983][ T59] Bluetooth: hci4: command tx timeout [ 1672.339810][ T6302] hsr_slave_0: left promiscuous mode [ 1672.415570][ T6302] hsr_slave_1: left promiscuous mode [ 1672.416947][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.448959][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1673.636882][T22375] binder: 22372:22375 ioctl c0306201 200000000040 returned -14 [ 1674.227081][ T59] Bluetooth: hci4: command tx timeout [ 1675.712355][T22383] nfs: Unknown parameter '' [ 1676.955979][ T59] Bluetooth: hci4: command tx timeout [ 1678.086584][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1678.630448][T22405] overlayfs: failed to clone lowerpath [ 1679.402291][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1679.652105][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5465'. [ 1687.764946][T22447] netlink: 'syz.1.5473': attribute type 4 has an invalid length. [ 1687.764970][T22447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5473'. [ 1687.797576][T22252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.797713][T22252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.800123][T22252] bridge_slave_0: entered allmulticast mode [ 1687.805018][T22252] bridge_slave_0: entered promiscuous mode [ 1687.865861][T22252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.865941][T22252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.866090][T22252] bridge_slave_1: entered allmulticast mode [ 1687.870649][T22252] bridge_slave_1: entered promiscuous mode [ 1688.096925][ T37] kauditd_printk_skb: 78 callbacks suppressed [ 1688.096943][ T37] audit: type=1326 audit(1758153569.459:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.097069][ T37] audit: type=1326 audit(1758153569.459:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.097647][ T37] audit: type=1326 audit(1758153569.459:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.097690][ T37] audit: type=1326 audit(1758153569.459:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.097730][ T37] audit: type=1326 audit(1758153569.459:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.100343][ T37] audit: type=1326 audit(1758153569.459:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.100773][ T37] audit: type=1326 audit(1758153569.459:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.101045][ T37] audit: type=1326 audit(1758153569.459:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.191555][ T37] audit: type=1326 audit(1758153569.469:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1688.191619][ T37] audit: type=1326 audit(1758153569.469:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd77efc5b67 code=0x7ffc0000 [ 1689.615279][T22252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.635822][T22252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.330212][T22252] team0: Port device team_slave_0 added [ 1690.368403][T22252] team0: Port device team_slave_1 added [ 1692.218537][T22483] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 1692.296602][T22490] netlink: 'syz.9.5482': attribute type 4 has an invalid length. [ 1692.296625][T22490] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5482'. [ 1692.408658][T22252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.408674][T22252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.408698][T22252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.491153][T22252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.491164][T22252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.491179][T22252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.972212][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5484'. [ 1695.359952][T22252] hsr_slave_0: entered promiscuous mode [ 1695.360902][T22252] hsr_slave_1: entered promiscuous mode [ 1695.379890][T22252] debugfs: 'hsr0' already exists in 'hsr' [ 1695.379918][T22252] Cannot create hsr debugfs directory [ 1697.668019][T22331] chnl_net:caif_netlink_parms(): no params data found [ 1702.706889][T22331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.707028][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.707251][T22331] bridge_slave_0: entered allmulticast mode [ 1702.710046][T22331] bridge_slave_0: entered promiscuous mode [ 1703.028322][T22331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.028517][T22331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.028712][T22331] bridge_slave_1: entered allmulticast mode [ 1703.078684][T22331] bridge_slave_1: entered promiscuous mode [ 1704.624715][T22331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.686674][T22331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.974211][T22331] team0: Port device team_slave_0 added [ 1705.974833][ T6302] bridge_slave_1: left allmulticast mode [ 1705.974861][ T6302] bridge_slave_1: left promiscuous mode [ 1705.975114][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.095446][ T6302] bridge_slave_0: left allmulticast mode [ 1706.095479][ T6302] bridge_slave_0: left promiscuous mode [ 1706.095733][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.148231][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5506'. [ 1708.210294][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5510'. [ 1710.885537][T22612] netlink: 'syz.6.5513': attribute type 1 has an invalid length. [ 1710.963680][T22613] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5513'. [ 1711.051580][T22614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5513'. [ 1711.313183][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.402729][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.479116][ T6302] bond0 (unregistering): Released all slaves [ 1711.624961][T22331] team0: Port device team_slave_1 added [ 1711.714614][T22612] bond4: entered promiscuous mode [ 1711.714644][T22612] bond4: entered allmulticast mode [ 1711.746630][T22614] bond4: left promiscuous mode [ 1711.746659][T22614] bond4: left allmulticast mode [ 1711.747084][T22614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1712.251727][ T6302] hsr_slave_0: left promiscuous mode [ 1712.271762][ T6302] hsr_slave_1: left promiscuous mode [ 1712.272737][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1712.312648][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.552277][ T37] kauditd_printk_skb: 74 callbacks suppressed [ 1713.552308][ T37] audit: type=1326 audit(1758153594.909:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552460][ T37] audit: type=1326 audit(1758153594.909:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552503][ T37] audit: type=1326 audit(1758153594.909:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552542][ T37] audit: type=1326 audit(1758153594.909:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552583][ T37] audit: type=1326 audit(1758153594.909:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552624][ T37] audit: type=1326 audit(1758153594.909:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552664][ T37] audit: type=1326 audit(1758153594.909:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.552706][ T37] audit: type=1326 audit(1758153594.909:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd77efc5b67 code=0x7ffc0000 [ 1713.552746][ T37] audit: type=1326 audit(1758153594.909:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd77ef6ada9 code=0x7ffc0000 [ 1713.552786][ T37] audit: type=1326 audit(1758153594.919:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22627 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1713.835967][T21795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1713.865901][T21795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1713.869002][T21795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1713.895141][T21795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1713.896625][T21795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1714.412434][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1716.475216][ T59] Bluetooth: hci3: command tx timeout [ 1716.486024][T22638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1716.742548][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1718.518748][ T59] Bluetooth: hci3: command tx timeout [ 1720.102485][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5523'. [ 1720.322360][T22331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.322378][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.322404][T22331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.332225][T22331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.332242][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.332267][T22331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.423199][T22659] netlink: 'syz.9.5524': attribute type 1 has an invalid length. [ 1720.482862][T22662] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5524'. [ 1720.529359][T22664] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5524'. [ 1720.681492][ T59] Bluetooth: hci3: command tx timeout [ 1721.472153][T22659] bond5: entered promiscuous mode [ 1721.472184][T22659] bond5: entered allmulticast mode [ 1721.554493][T22664] bond5: left promiscuous mode [ 1721.554522][T22664] bond5: left allmulticast mode [ 1721.555053][T22664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1721.883254][T22674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.903593][ T59] Bluetooth: hci3: command tx timeout [ 1723.391683][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 1723.391701][ T37] audit: type=1326 audit(1758153604.749:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.400603][ T37] audit: type=1326 audit(1758153604.759:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.400657][ T37] audit: type=1326 audit(1758153604.759:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.400698][ T37] audit: type=1326 audit(1758153604.759:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.400738][ T37] audit: type=1326 audit(1758153604.759:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.401998][ T37] audit: type=1326 audit(1758153604.769:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.410553][ T37] audit: type=1326 audit(1758153604.769:7514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1723.410606][ T37] audit: type=1326 audit(1758153604.769:7515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1723.410647][ T37] audit: type=1326 audit(1758153604.769:7516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.410689][ T37] audit: type=1326 audit(1758153604.769:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22680 comm="syz.6.5531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1723.728164][T22689] vlan2: entered promiscuous mode [ 1723.728404][T22689] vlan2: entered allmulticast mode [ 1723.728416][T22689] hsr_slave_1: entered allmulticast mode [ 1723.768466][T22689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1723.772227][T22331] hsr_slave_0: entered promiscuous mode [ 1723.775714][T22331] hsr_slave_1: entered promiscuous mode [ 1723.782010][T22331] debugfs: 'hsr0' already exists in 'hsr' [ 1723.782036][T22331] Cannot create hsr debugfs directory [ 1723.868839][T22629] lo speed is unknown, defaulting to 1000 [ 1725.972803][T22702] netlink: 'syz.6.5536': attribute type 1 has an invalid length. [ 1726.077442][T22708] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5536'. [ 1726.154410][T22706] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5536'. [ 1728.360021][T22702] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1728.635457][T22720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.957601][T21795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1728.983844][T21795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1728.986640][T21795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1728.988529][T21795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1728.989384][T21795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1730.061796][T22727] lo speed is unknown, defaulting to 1000 [ 1730.392878][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.684303][T22749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5548'. [ 1731.071680][ T59] Bluetooth: hci1: command tx timeout [ 1732.600687][T22629] chnl_net:caif_netlink_parms(): no params data found [ 1733.101828][T22757] netlink: 'syz.1.5550': attribute type 1 has an invalid length. [ 1733.151515][ T59] Bluetooth: hci1: command tx timeout [ 1733.155399][T22759] 9pnet_fd: Insufficient options for proto=fd [ 1733.200968][T22760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1733.245965][T22757] bond1: entered promiscuous mode [ 1733.245993][T22757] bond1: entered allmulticast mode [ 1733.268351][T22757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1733.400112][T22757] bond1: left promiscuous mode [ 1733.400152][T22757] bond1: left allmulticast mode [ 1733.400781][T22757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1733.906313][T22769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.080286][ T6302] bridge_slave_1: left allmulticast mode [ 1734.080319][ T6302] bridge_slave_1: left promiscuous mode [ 1734.080584][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.132939][ T6302] bridge_slave_0: left allmulticast mode [ 1734.132971][ T6302] bridge_slave_0: left promiscuous mode [ 1734.133255][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.223137][ T6302] bridge_slave_1: left allmulticast mode [ 1734.223174][ T6302] bridge_slave_1: left promiscuous mode [ 1734.223347][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.273749][ T6302] bridge_slave_0: left allmulticast mode [ 1734.273781][ T6302] bridge_slave_0: left promiscuous mode [ 1734.274080][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.878021][ T37] kauditd_printk_skb: 87 callbacks suppressed [ 1734.878039][ T37] audit: type=1326 audit(1758153616.239:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.878357][ T37] audit: type=1326 audit(1758153616.239:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.878648][ T37] audit: type=1326 audit(1758153616.239:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.880315][ T37] audit: type=1326 audit(1758153616.239:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.880752][ T37] audit: type=1326 audit(1758153616.239:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.906319][ T37] audit: type=1326 audit(1758153616.269:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.906617][ T37] audit: type=1326 audit(1758153616.269:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb203935b67 code=0x7ffc0000 [ 1734.906772][ T37] audit: type=1326 audit(1758153616.269:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2038dada9 code=0x7ffc0000 [ 1734.906918][ T37] audit: type=1326 audit(1758153616.269:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1734.907123][ T37] audit: type=1326 audit(1758153616.269:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22777 comm="syz.6.5557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1735.450321][ T59] Bluetooth: hci1: command tx timeout [ 1735.572924][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.724039][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.821874][ T6302] bond0 (unregistering): Released all slaves [ 1736.472221][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.663089][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.666597][ T59] Bluetooth: hci1: command tx timeout [ 1737.761232][ T6302] bond0 (unregistering): Released all slaves [ 1737.793594][T22798] netlink: 'syz.6.5562': attribute type 1 has an invalid length. [ 1737.845731][T22801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5562'. [ 1739.126232][T22809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1739.225299][T22798] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1739.231839][T22629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.231996][T22629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.232353][T22629] bridge_slave_0: entered allmulticast mode [ 1739.235741][T22629] bridge_slave_0: entered promiscuous mode [ 1739.239286][T22629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.239510][T22629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.239700][T22629] bridge_slave_1: entered allmulticast mode [ 1739.252870][T22629] bridge_slave_1: entered promiscuous mode [ 1739.707983][T22629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.720273][T22629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.037826][T22629] team0: Port device team_slave_0 added [ 1741.173358][T22629] team0: Port device team_slave_1 added [ 1741.223669][ T6302] hsr_slave_0: left promiscuous mode [ 1741.251542][ T6302] hsr_slave_1: left promiscuous mode [ 1741.252215][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.302138][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.571617][ T6302] hsr_slave_0: left promiscuous mode [ 1741.591525][ T6302] hsr_slave_1: left promiscuous mode [ 1741.592306][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.640489][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.604726][T22844] netlink: 'syz.6.5572': attribute type 10 has an invalid length. [ 1743.781158][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1744.232049][T22852] netlink: 'syz.9.5574': attribute type 1 has an invalid length. [ 1744.283558][T22853] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5574'. [ 1744.334180][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1744.340795][T22856] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5574'. [ 1745.134104][T22854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.982273][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1746.262695][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1747.184355][T22840] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 1747.185142][T22844] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 1747.185547][T22844] wlan1: mtu less than device minimum [ 1747.185560][T22844] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 1747.244657][T22852] bond6: entered promiscuous mode [ 1747.244687][T22852] bond6: entered allmulticast mode [ 1747.252914][T22856] bond6: left promiscuous mode [ 1747.252943][T22856] bond6: left allmulticast mode [ 1747.253446][T22856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1747.429218][T22863] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1748.232460][T22629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.232478][T22629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.232503][T22629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.235925][T22629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.235940][T22629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.235966][T22629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.270655][T22727] chnl_net:caif_netlink_parms(): no params data found [ 1751.315190][T22629] hsr_slave_0: entered promiscuous mode [ 1751.316507][T22629] hsr_slave_1: entered promiscuous mode [ 1751.317416][T22629] debugfs: 'hsr0' already exists in 'hsr' [ 1751.317441][T22629] Cannot create hsr debugfs directory [ 1753.274109][T22891] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1753.274141][T22891] overlayfs: failed to set xattr on upper [ 1753.274150][T22891] overlayfs: ...falling back to redirect_dir=nofollow. [ 1753.274160][T22891] overlayfs: ...falling back to index=off. [ 1753.274168][T22891] overlayfs: ...falling back to uuid=null. [ 1753.402991][T22896] netlink: 'syz.6.5586': attribute type 1 has an invalid length. [ 1753.457108][T22898] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5586'. [ 1753.509327][T22899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5586'. [ 1753.964800][T22901] nftables ruleset with unbound set [ 1754.065353][T22896] bond5: entered promiscuous mode [ 1754.065381][T22896] bond5: entered allmulticast mode [ 1754.091243][T22899] bond5: left promiscuous mode [ 1754.091275][T22899] bond5: left allmulticast mode [ 1754.101977][T22899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1756.657215][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 1756.657233][ T37] audit: type=1326 audit(1758153638.019:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.657281][ T37] audit: type=1326 audit(1758153638.019:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.657322][ T37] audit: type=1326 audit(1758153638.019:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.658818][ T37] audit: type=1326 audit(1758153638.019:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.658865][ T37] audit: type=1326 audit(1758153638.019:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.658907][ T37] audit: type=1326 audit(1758153638.019:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.658948][ T37] audit: type=1326 audit(1758153638.019:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.658989][ T37] audit: type=1326 audit(1758153638.019:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.659231][ T37] audit: type=1326 audit(1758153638.019:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.661142][ T37] audit: type=1326 audit(1758153638.019:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22923 comm="syz.6.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20393eba9 code=0x7ffc0000 [ 1756.751607][ T59] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1756.752040][ T59] Bluetooth: hci0: Injecting HCI hardware error event [ 1756.762185][T21795] Bluetooth: hci0: hardware error 0x00 [ 1759.249297][T22727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.249449][T22727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.249642][T22727] bridge_slave_0: entered allmulticast mode [ 1759.256816][T22727] bridge_slave_0: entered promiscuous mode [ 1759.282189][T22936] bridge0: port 3(syz_tun) entered blocking state [ 1759.282304][T22936] bridge0: port 3(syz_tun) entered disabled state [ 1759.286773][T22936] syz_tun: entered allmulticast mode [ 1759.292603][T22936] syz_tun: entered promiscuous mode [ 1759.297049][T22936] bridge0: port 3(syz_tun) entered blocking state [ 1759.297174][T22936] bridge0: port 3(syz_tun) entered forwarding state [ 1759.352434][T22727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.352566][T22727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.352772][T22727] bridge_slave_1: entered allmulticast mode [ 1759.355528][T22727] bridge_slave_1: entered promiscuous mode [ 1759.517370][T22939] netlink: 'syz.1.5598': attribute type 1 has an invalid length. [ 1759.578846][T22940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5598'. [ 1759.643709][T22941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5598'. [ 1759.881865][T22939] bond2: entered promiscuous mode [ 1759.881894][T22939] bond2: entered allmulticast mode [ 1760.163639][T22941] bond2: left promiscuous mode [ 1760.163674][T22941] bond2: left allmulticast mode [ 1760.164180][T22941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1760.206217][T22727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.265837][T22727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.681746][T22727] team0: Port device team_slave_0 added [ 1760.709603][T22727] team0: Port device team_slave_1 added [ 1760.733801][T22950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1760.733907][T22950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1760.837470][T22950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1760.936040][T22950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1760.942029][T22950] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1760.998958][T22727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.998976][T22727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.999001][T22727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1761.066734][T22950] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1761.067818][T22727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1761.067832][T22727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1761.067857][T22727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1761.151450][T21795] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1761.673451][ T37] kauditd_printk_skb: 70 callbacks suppressed [ 1761.673464][ T37] audit: type=1326 audit(1758153643.039:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd77efc5b67 code=0x7ffc0000 [ 1761.673490][ T37] audit: type=1326 audit(1758153643.039:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd77ef6ada9 code=0x7ffc0000 [ 1761.673512][ T37] audit: type=1326 audit(1758153643.039:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1761.676304][ T37] audit: type=1326 audit(1758153643.039:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd77efc5b67 code=0x7ffc0000 [ 1761.676333][ T37] audit: type=1326 audit(1758153643.039:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd77ef6ada9 code=0x7ffc0000 [ 1761.676355][ T37] audit: type=1326 audit(1758153643.039:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1761.691814][ T37] audit: type=1326 audit(1758153643.059:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd77efc5b67 code=0x7ffc0000 [ 1761.693255][ T37] audit: type=1326 audit(1758153643.059:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd77ef6ada9 code=0x7ffc0000 [ 1761.693299][ T37] audit: type=1326 audit(1758153643.059:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd77efceba9 code=0x7ffc0000 [ 1761.696278][ T37] audit: type=1326 audit(1758153643.059:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22956 comm="syz.1.5603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd77efc5b67 code=0x7ffc0000 [ 1762.470389][T22727] hsr_slave_0: entered promiscuous mode [ 1762.506873][T22727] hsr_slave_1: entered promiscuous mode [ 1762.507811][T22727] debugfs: 'hsr0' already exists in 'hsr' [ 1762.507837][T22727] Cannot create hsr debugfs directory [ 1762.754531][T21795] Bluetooth: hci3: command 0x0c1a tx timeout [ 1762.825378][T22966] comedi: No check for data length of config insn id 3 is implemented [ 1762.825396][T22966] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1762.825408][T22966] comedi: Assuming n=15 is correct [ 1762.827930][T22629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1762.931053][T22629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1762.991583][T21795] Bluetooth: hci1: command 0x0c1a tx timeout [ 1763.146397][T22974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5607'. [ 1763.225526][T22629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1763.641648][T22629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1764.795041][T22999] netlink: 'syz.9.5616': attribute type 10 has an invalid length. [ 1764.813078][T22999] wlan1: mtu less than device minimum [ 1764.813098][T22999] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 1764.831663][T21795] Bluetooth: hci3: command 0x0c1a tx timeout [ 1765.072809][T21795] Bluetooth: hci1: command 0x0c1a tx timeout [ 1765.534783][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5619'. [ 1765.767280][T22629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.605707][T22629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.734389][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.734617][T18476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.911754][T21795] Bluetooth: hci3: command 0x0c1a tx timeout [ 1767.151509][T21795] Bluetooth: hci1: command 0x0c1a tx timeout [ 1767.173920][T15164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.174078][T15164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.285704][T23039] netlink: 'syz.6.5627': attribute type 1 has an invalid length. [ 1769.499905][T23046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5627'. [ 1770.471354][ T37] kauditd_printk_skb: 116 callbacks suppressed [ 1770.471372][ T37] audit: type=1326 audit(1758153650.979:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471414][ T37] audit: type=1326 audit(1758153650.979:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471452][ T37] audit: type=1326 audit(1758153650.979:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471491][ T37] audit: type=1326 audit(1758153650.989:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471530][ T37] audit: type=1326 audit(1758153650.989:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471570][ T37] audit: type=1326 audit(1758153650.989:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471607][ T37] audit: type=1326 audit(1758153650.989:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471638][ T37] audit: type=1326 audit(1758153650.989:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471667][ T37] audit: type=1326 audit(1758153650.999:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.471707][ T37] audit: type=1326 audit(1758153650.999:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23041 comm="syz.9.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f4defeba9 code=0x7ffc0000 [ 1770.473547][T23039] bond6: entered promiscuous mode [ 1770.473563][T23039] bond6: entered allmulticast mode [ 1770.557872][T23043] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5627'. [ 1770.714329][T23046] bond6: left promiscuous mode [ 1770.714366][T23046] bond6: left allmulticast mode [ 1770.714828][T23046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1771.127904][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5630'. [ 1773.764700][T22727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1773.827821][T22727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1773.863018][T22727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1773.897928][T22727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1774.168349][T22727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1774.464037][T22727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1774.480005][T21704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.480220][T21704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1774.510554][T21704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.510763][T21704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.380470][T23089] netlink: 'syz.6.5637': attribute type 1 has an invalid length. [ 1776.438926][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5637'. [ 1776.490633][T23092] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5637'. [ 1776.551266][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1776.567981][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1776.569784][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1776.576887][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1776.580571][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1776.783849][T23089] bond7: entered promiscuous mode [ 1776.783877][T23089] bond7: entered allmulticast mode [ 1776.804082][T23092] bond7: left promiscuous mode [ 1776.804113][T23092] bond7: left allmulticast mode [ 1776.804884][T23092] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1778.120918][T23091] lo speed is unknown, defaulting to 1000 [ 1778.686210][ T59] Bluetooth: hci3: command tx timeout [ 1780.155099][T23125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1780.240314][T23127] bond3: (slave ip6gretap1): making interface the new active one [ 1780.260935][T23127] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1780.453314][T23125] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1780.490422][T23128] veth0: entered promiscuous mode [ 1780.503819][T23128] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 1780.615877][T23091] chnl_net:caif_netlink_parms(): no params data found [ 1780.689457][T22727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.701225][T21704] bridge_slave_1: left allmulticast mode [ 1780.701258][T21704] bridge_slave_1: left promiscuous mode [ 1780.702110][T21704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.762057][ T59] Bluetooth: hci3: command tx timeout [ 1780.884803][T21704] bridge_slave_0: left allmulticast mode [ 1780.884837][T21704] bridge_slave_0: left promiscuous mode [ 1780.885119][T21704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.852925][ T59] Bluetooth: hci3: command tx timeout [ 1783.220050][T23151] fuse: Bad value for 'fd' [ 1784.915919][ T59] Bluetooth: hci3: command tx timeout [ 1785.402357][T21704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.483666][T21704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.508309][T21704] bond0 (unregistering): Released all slaves [ 1785.598456][T23162] bridge0: entered promiscuous mode [ 1785.976879][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5657'. [ 1786.141486][T21704] hsr_slave_0: left promiscuous mode [ 1786.171549][T21704] hsr_slave_1: left promiscuous mode [ 1786.172876][T21704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.224212][T21704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.520007][T21795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1788.544316][T21795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1788.546509][T21795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1788.547544][T21795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1788.548932][T21795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1789.442607][T21704] team0 (unregistering): Port device team_slave_1 removed [ 1789.773541][T21704] team0 (unregistering): Port device team_slave_0 removed [ 1790.592043][ T59] Bluetooth: hci1: command tx timeout [ 1791.808670][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.671698][ T59] Bluetooth: hci1: command tx timeout [ 1793.471936][T23211] overlayfs: failed to clone upperpath [ 1793.927172][T23091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.927313][T23091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.927513][T23091] bridge_slave_0: entered allmulticast mode [ 1793.930254][T23091] bridge_slave_0: entered promiscuous mode [ 1795.011825][ T59] Bluetooth: hci1: command tx timeout [ 1795.061792][T23091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.061931][T23091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.062174][T23091] bridge_slave_1: entered allmulticast mode [ 1795.064884][T23091] bridge_slave_1: entered promiscuous mode [ 1795.663481][T23091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.668400][T23193] lo speed is unknown, defaulting to 1000 [ 1795.689135][T23091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.418976][T23091] team0: Port device team_slave_0 added [ 1796.439949][T23091] team0: Port device team_slave_1 added [ 1796.741246][T23232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5674'. [ 1796.771869][T23091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.771886][T23091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.771912][T23091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.775803][T23091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.775818][T23091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.775841][T23091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1797.071543][ T59] Bluetooth: hci1: command tx timeout [ 1798.877497][T23091] hsr_slave_0: entered promiscuous mode [ 1798.878900][T23091] hsr_slave_1: entered promiscuous mode [ 1798.879815][T23091] debugfs: 'hsr0' already exists in 'hsr' [ 1798.879840][T23091] Cannot create hsr debugfs directory [ 1798.945870][T23254] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5681'. [ 1799.346954][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5682'. [ 1799.967610][T23267] netlink: 'syz.6.5684': attribute type 1 has an invalid length. [ 1800.021075][T23270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5684'. [ 1800.344186][T23267] bond8: entered promiscuous mode [ 1800.344218][T23267] bond8: entered allmulticast mode [ 1800.446037][T23270] bond8: left promiscuous mode [ 1800.446071][T23270] bond8: left allmulticast mode [ 1800.446668][T23270] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1800.768313][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5686'. [ 1803.057548][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1803.598434][T23193] chnl_net:caif_netlink_parms(): no params data found [ 1809.766834][T21704] bridge_slave_1: left allmulticast mode [ 1809.766871][T21704] bridge_slave_1: left promiscuous mode [ 1809.767143][T21704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.403027][T21704] bridge_slave_0: left allmulticast mode [ 1811.403061][T21704] bridge_slave_0: left promiscuous mode [ 1811.403334][T21704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.491627][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5704'. [ 1824.462965][T21795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1824.495448][T21795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1824.497259][T21795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1824.498611][T21795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1824.500585][T21795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1826.591614][T21795] Bluetooth: hci4: command tx timeout [ 1827.891340][ C1] sched: DL replenish lagged too much [ 1828.387127][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1828.410770][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1828.419655][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1828.420956][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1828.436746][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1828.671883][T21795] Bluetooth: hci4: command tx timeout [ 1829.447933][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1829.478141][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1829.492741][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1829.494085][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1829.525431][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1830.511979][ T59] Bluetooth: hci5: command tx timeout [ 1830.753328][ T59] Bluetooth: hci4: command tx timeout [ 1831.632001][ T59] Bluetooth: hci6: command tx timeout [ 1832.591727][ T59] Bluetooth: hci5: command tx timeout [ 1832.832631][ T59] Bluetooth: hci4: command tx timeout [ 1833.712003][ T59] Bluetooth: hci6: command tx timeout [ 1834.671735][ T59] Bluetooth: hci5: command tx timeout [ 1835.791963][ T59] Bluetooth: hci6: command tx timeout [ 1836.751681][ T59] Bluetooth: hci5: command tx timeout [ 1837.368875][T21795] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1837.401691][T21795] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1837.404236][T21795] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1837.405378][T21795] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1837.406136][T21795] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1837.873183][ T59] Bluetooth: hci6: command tx timeout [ 1839.479662][ T59] Bluetooth: hci8: command tx timeout [ 1841.551644][ T59] Bluetooth: hci8: command tx timeout [ 1843.632313][ T59] Bluetooth: hci8: command tx timeout [ 1845.711655][ T59] Bluetooth: hci8: command tx timeout [ 1849.599063][T21795] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1849.623747][T21795] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1849.627740][T21795] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1849.629799][T21795] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1849.630610][T21795] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1851.711799][T21795] Bluetooth: hci9: command tx timeout [ 1853.793485][T21795] Bluetooth: hci9: command tx timeout [ 1855.032021][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1855.871665][T21795] Bluetooth: hci9: command tx timeout [ 1857.961836][T21795] Bluetooth: hci9: command tx timeout [ 1887.000830][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1887.033016][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1887.044598][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1887.133162][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1887.134276][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1888.886577][T21795] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1888.920085][T21795] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1888.947701][T21795] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1888.949040][T21795] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1888.949841][T21795] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1889.231563][T21795] Bluetooth: hci10: command tx timeout [ 1890.106089][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1890.144037][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1890.147527][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1890.148724][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1890.149572][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1891.072662][ T59] Bluetooth: hci11: command tx timeout [ 1891.314372][ T59] Bluetooth: hci10: command tx timeout [ 1892.271623][ T59] Bluetooth: hci12: command tx timeout [ 1893.151619][ T59] Bluetooth: hci11: command tx timeout [ 1893.392889][ T59] Bluetooth: hci10: command tx timeout [ 1894.351802][ T59] Bluetooth: hci12: command tx timeout [ 1895.241658][ T59] Bluetooth: hci11: command tx timeout [ 1895.472424][ T59] Bluetooth: hci10: command tx timeout [ 1896.431653][ T59] Bluetooth: hci12: command tx timeout [ 1897.312228][ T59] Bluetooth: hci11: command tx timeout [ 1898.521535][ T59] Bluetooth: hci12: command tx timeout [ 1898.725256][T23396] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1898.757369][T23396] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1898.759218][T23396] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1898.760367][T23396] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1898.761163][T23396] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1900.911783][ T59] Bluetooth: hci13: command tx timeout [ 1901.405031][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 1902.991693][ T59] Bluetooth: hci13: command tx timeout [ 1905.072100][ T59] Bluetooth: hci13: command tx timeout [ 1907.152040][ T59] Bluetooth: hci13: command tx timeout [ 1910.876457][T23398] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1910.917719][T23398] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1910.932016][T23398] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1910.934768][T23398] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1910.936554][T23398] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1911.791892][T21795] Bluetooth: hci1: command 0x0406 tx timeout [ 1913.002156][T21795] Bluetooth: hci14: command tx timeout [ 1914.912284][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.071750][T21795] Bluetooth: hci14: command tx timeout [ 1917.151748][T21795] Bluetooth: hci14: command tx timeout [ 1919.233633][T23396] Bluetooth: hci14: command tx timeout [ 1947.485483][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1948.485932][T21795] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1948.515669][T21795] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1948.519996][T21795] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1948.538799][T21795] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1948.539919][T21795] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1949.404784][T23398] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1949.451222][T23398] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1949.460662][T23398] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1949.473638][T23398] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1949.474983][T23398] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1950.610952][T23413] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1950.662907][T23413] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1950.690000][T23413] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1950.697020][T23413] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1950.698029][T23413] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1952.591826][T23411] Bluetooth: hci5: command 0x0406 tx timeout [ 1952.592356][T23411] Bluetooth: hci6: command 0x0406 tx timeout [ 1962.178890][T23418] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1962.380523][T23418] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1962.399522][T23418] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1962.400885][T23418] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1962.457826][T23418] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1963.015865][T23411] Bluetooth: hci8: command 0x0406 tx timeout [ 1966.952287][T23413] Bluetooth: hci17: command tx timeout [ 1968.464092][ T38] INFO: task kworker/u8:5:162 blocked for more than 143 seconds. [ 1968.464119][ T38] Not tainted syzkaller #0 [ 1968.464130][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1968.464140][ T38] task:kworker/u8:5 state:D stack:19880 pid:162 tgid:162 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1968.464186][ T38] Workqueue: events_unbound linkwatch_event [ 1968.464211][ T38] Call Trace: [ 1968.464219][ T38] [ 1968.464233][ T38] __schedule+0x16f3/0x4c20 [ 1968.464286][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.464329][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.464356][ T38] rt_mutex_schedule+0x77/0xf0 [ 1968.464375][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1968.464397][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1968.464434][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1968.464458][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1968.464479][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1968.464511][ T38] ? linkwatch_event+0xe/0x60 [ 1968.464531][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1968.464556][ T38] ? linkwatch_event+0xe/0x60 [ 1968.464572][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1968.464591][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.464614][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1968.464637][ T38] linkwatch_event+0xe/0x60 [ 1968.464662][ T38] process_scheduled_works+0xade/0x17b0 [ 1968.464714][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1968.464755][ T38] worker_thread+0x8a0/0xda0 [ 1968.464803][ T38] kthread+0x70e/0x8a0 [ 1968.464832][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1968.464853][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.464882][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.464907][ T38] ret_from_fork+0x439/0x7d0 [ 1968.464933][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1968.464961][ T38] ? __switch_to_asm+0x39/0x70 [ 1968.464978][ T38] ? __switch_to_asm+0x33/0x70 [ 1968.464994][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.465018][ T38] ret_from_fork_asm+0x1a/0x30 [ 1968.465054][ T38] [ 1968.465162][ T38] INFO: task kworker/u8:42:15164 blocked for more than 143 seconds. [ 1968.465177][ T38] Not tainted syzkaller #0 [ 1968.465187][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1968.465196][ T38] task:kworker/u8:42 state:D stack:20120 pid:15164 tgid:15164 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1968.465238][ T38] Workqueue: ipv6_addrconf addrconf_verify_work [ 1968.465260][ T38] Call Trace: [ 1968.465266][ T38] [ 1968.465278][ T38] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1968.465315][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1968.465346][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.465388][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.465415][ T38] rt_mutex_schedule+0x77/0xf0 [ 1968.465433][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1968.465453][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1968.465492][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1968.465516][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1968.465537][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1968.465568][ T38] ? addrconf_verify_work+0x19/0x30 [ 1968.465596][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1968.465622][ T38] ? addrconf_verify_work+0x19/0x30 [ 1968.465645][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1968.465672][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.465698][ T38] addrconf_verify_work+0x19/0x30 [ 1968.465718][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1968.465737][ T38] process_scheduled_works+0xade/0x17b0 [ 1968.465788][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1968.465829][ T38] worker_thread+0x8a0/0xda0 [ 1968.465878][ T38] kthread+0x70e/0x8a0 [ 1968.465905][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1968.465926][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.465955][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.465980][ T38] ret_from_fork+0x439/0x7d0 [ 1968.466005][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1968.466034][ T38] ? __switch_to_asm+0x39/0x70 [ 1968.466050][ T38] ? __switch_to_asm+0x33/0x70 [ 1968.466066][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.466090][ T38] ret_from_fork_asm+0x1a/0x30 [ 1968.466125][ T38] [ 1968.466135][ T38] INFO: task kworker/0:0:15803 blocked for more than 143 seconds. [ 1968.466147][ T38] Not tainted syzkaller #0 [ 1968.466157][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1968.466166][ T38] task:kworker/0:0 state:D stack:20392 pid:15803 tgid:15803 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1968.466208][ T38] Workqueue: events switchdev_deferred_process_work [ 1968.466228][ T38] Call Trace: [ 1968.466234][ T38] [ 1968.466247][ T38] __schedule+0x16f3/0x4c20 [ 1968.466290][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.466316][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.466358][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.466385][ T38] rt_mutex_schedule+0x77/0xf0 [ 1968.466402][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1968.466423][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1968.466462][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1968.466485][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1968.466507][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1968.466539][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1968.466565][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1968.466591][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1968.466607][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1968.466626][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.466649][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1968.466679][ T38] switchdev_deferred_process_work+0xe/0x20 [ 1968.466698][ T38] process_scheduled_works+0xade/0x17b0 [ 1968.466750][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1968.466790][ T38] worker_thread+0x8a0/0xda0 [ 1968.466815][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1968.466866][ T38] ? __kthread_parkme+0x7b/0x200 [ 1968.466899][ T38] kthread+0x70e/0x8a0 [ 1968.466926][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1968.466948][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.466977][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.467001][ T38] ret_from_fork+0x439/0x7d0 [ 1968.467026][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1968.467055][ T38] ? __switch_to_asm+0x39/0x70 [ 1968.467070][ T38] ? __switch_to_asm+0x33/0x70 [ 1968.467086][ T38] ? __pfx_kthread+0x10/0x10 [ 1968.467110][ T38] ret_from_fork_asm+0x1a/0x30 [ 1968.467144][ T38] [ 1968.467184][ T38] INFO: task syz-executor:23091 blocked for more than 143 seconds. [ 1968.467197][ T38] Not tainted syzkaller #0 [ 1968.467207][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1968.467216][ T38] task:syz-executor state:D stack:22096 pid:23091 tgid:23091 ppid:1 task_flags:0x480140 flags:0x00004006 [ 1968.467257][ T38] Call Trace: [ 1968.467265][ T38] [ 1968.467277][ T38] __schedule+0x16f3/0x4c20 [ 1968.467313][ [ 1968.467313][ T38] ? kernel_text_address+0xa5/0xe0 [ 1968.467337][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1968.467361][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.467403][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.467430][ T38] rt_mutex_schedule+0x77/0xf0 [ 1968.467447][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1968.467467][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1968.467506][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1968.467529][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1968.467551][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1968.467598][ T38] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1968.467620][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1968.467638][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1968.467669][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1968.467691][ T38] rtnl_net_dev_lock+0x257/0x2f0 [ 1968.467717][ T38] unregister_netdevice_notifier_dev_net+0x8f/0x420 [ 1968.467743][ T38] ? mntput_no_expire+0x2eb/0x9d0 [ 1968.467763][ T38] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 1968.467792][ T38] ? __pfx_mntput_no_expire+0x10/0x10 [ 1968.467810][ T38] ? rt_spin_unlock+0x65/0x80 [ 1968.467836][ T38] ? simple_release_fs+0x9c/0xd0 [ 1968.467872][ T38] nsim_destroy+0xd9/0x670 [ 1968.467895][ T38] ? nsim_dev_reload_destroy+0x288/0x490 [ 1968.467921][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 1968.467946][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 1968.467967][ T38] ? nsim_drv_remove+0x50/0x160 [ 1968.467991][ T38] nsim_drv_remove+0x58/0x160 [ 1968.468011][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1968.468032][ T38] device_release_driver_internal+0x46c/0x800 [ 1968.468060][ T38] bus_remove_device+0x355/0x420 [ 1968.468091][ T38] device_del+0x515/0x8e0 [ 1968.468112][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1968.468140][ T38] ? __pfx_device_del+0x10/0x10 [ 1968.468168][ T38] device_unregister+0x20/0xc0 [ 1968.468187][ T38] del_device_store+0x2aa/0x360 [ 1968.468210][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1968.468229][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1968.468255][ T38] ? sysfs_kf_write+0x166/0x260 [ 1968.468282][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1968.468303][ T38] kernfs_fop_write_iter+0x3ad/0x540 [ 1968.468333][ T38] vfs_write+0x5d2/0xb40 [ 1968.468361][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1968.468384][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1968.468408][ T38] ? do_sys_openat2+0x154/0x1c0 [ 1968.468424][ T38] ? kmem_cache_free+0x195/0x510 [ 1968.468463][ T38] ksys_write+0x14b/0x260 [ 1968.468487][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1968.468506][ T38] ? rcu_is_watching+0x15/0xb0 [ 1968.468537][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1968.468559][ T38] do_syscall_64+0xfa/0x3b0 [ 1968.468575][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1968.468599][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.468617][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1968.468639][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.468665][ T38] RIP: 0033:0x7f504f64d65f [ 1968.468681][ T38] RSP: 002b:00007ffef903d880 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1968.468701][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f504f64d65f [ 1968.468714][ T38] RDX: 0000000000000001 RSI: 00007ffef903d8d0 RDI: 0000000000000005 [ 1968.468727][ T38] RBP: 00007f504f6d30c1 R08: 0000000000000000 R09: 00007ffef903d6d7 [ 1968.468740][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1968.468752][ T38] R13: 00007ffef903d8d0 R14: 00007f50503c4620 R15: 0000000000000003 [ 1968.468783][ T38] [ 1968.468794][ T38] INFO: task syz-executor:23193 blocked for more than 143 seconds. [ 1968.468805][ T38] Not tainted syzkaller #0 [ 1968.468815][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1968.468825][ T38] task:syz-executor state:D stack:22520 pid:23193 tgid:23193 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1968.468866][ T38] Call Trace: [ 1968.468873][ T38] [ 1968.468886][ T38] __schedule+0x16f3/0x4c20 [ 1968.468930][ T38] ? __kernel_text_address+0xd/0x40 [ 1968.468953][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.468995][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.469022][ T38] rt_mutex_schedule+0x77/0xf0 [ 1968.469040][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1968.469060][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 1968.469099][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1968.469141][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1968.469163][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1968.469194][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1968.469221][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1968.469245][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1968.469265][ T38] ? security_capable+0x7e/0x2e0 [ 1968.469293][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 1968.469313][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1968.469332][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 1968.469358][ T38] rtnl_newlink+0x8db/0x1c70 [ 1968.469388][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.469411][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1968.887112][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.887156][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.887192][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.887243][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1968.887272][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 1968.887293][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1968.887366][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.887414][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1968.887438][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1968.887459][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.887483][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1968.887504][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1968.887545][ T38] netlink_rcv_skb+0x208/0x470 [ 1968.887567][ T38] ? __lock_acquire+0xab9/0xd20 [ 1968.887828][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1968.887855][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1968.887891][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1968.887920][ T38] netlink_unicast+0x846/0xa10 [ 1968.887948][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1968.887970][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1968.887989][ T38] ? skb_put+0x11b/0x210 [ 1968.888014][ T38] netlink_sendmsg+0x805/0xb30 [ 1968.888046][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1968.888076][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1968.888094][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1968.888117][ T38] __sock_sendmsg+0x21c/0x270 [ 1968.888143][ T38] __sys_sendto+0x3c7/0x520 [ 1968.888170][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1968.888207][ T38] ? fput_close_sync+0x119/0x200 [ 1968.888240][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1968.888258][ T38] ? rt_spin_unlock+0x65/0x80 [ 1968.888286][ T38] __x64_sys_sendto+0xde/0x100 [ 1968.888314][ T38] do_syscall_64+0xfa/0x3b0 [ 1968.888390][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.888407][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1968.888424][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1968.888446][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.888465][ T38] RIP: 0033:0x7f6de77d0a3c [ 1968.888481][ T38] RSP: 002b:00007fffed607710 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1968.888503][ T38] RAX: ffffffffffffffda RBX: 00007f6de8544620 RCX: 00007f6de77d0a3c [ 1968.888518][ T38] RDX: 0000000000000028 RSI: 00007f6de8544670 RDI: 0000000000000003 [ 1968.888531][ T38] RBP: 0000000000000000 R08: 00007fffed607764 R09: 000000000000000c [ 1968.888543][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1968.888555][ T38] R13: 0000000000000000 R14: 00007f6de8544670 R15: 0000000000000000 [ 1968.888582][ T38] [ 1968.888600][ T38] INFO: task syz.6.5704:23351 blocked for more than 143 seconds. [ 1968.888612][ T38] Not tainted syzkaller #0 [ 1968.888620][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1968.888629][ T38] task:syz.6.5704 state:D stack:25912 pid:23351 tgid:23349 ppid:16276 task_flags:0x400140 flags:0x00004004 [ 1968.888676][ T38] Call Trace: [ 1968.888683][ T38] [ 1968.888714][ T38] __schedule+0x16f3/0x4c20 [ 1968.888751][ T38] ? __pfx_vprintk_emit+0x10/0x10 [ 1968.888780][ T38] ? __pfx___schedule+0x10/0x10 [ 1968.888822][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1968.888849][ T38] rt_mutex_schedule+0x77/0xf0 [ 1968.888868][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1968.992839][T21795] Bluetooth: hci17: command tx timeout [ 1968.993614][T21795] Bluetooth: hci16: command tx timeout [ 1968.994138][T21795] Bluetooth: hci15: command tx timeout [ 1969.071399][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1969.071447][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1969.071468][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1969.071485][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1969.071518][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.071547][ T38] ? rtnl_dellink+0x331/0x710 [ 1969.071580][ T38] ? rtnl_dellink+0x331/0x710 [ 1969.071785][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1969.071813][ T38] rtnl_dellink+0x331/0x710 [ 1969.071829][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1969.071853][ T38] ? __pfx_rtnl_dellink+0x10/0x10 [ 1969.071868][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1969.071889][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.071978][ T38] ? __pfx_rtnl_dellink+0x10/0x10 [ 1969.071996][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1969.072020][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1969.072038][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.072069][ T38] netlink_rcv_skb+0x208/0x470 [ 1969.072087][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.072107][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.072128][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1969.072159][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1969.072186][ T38] netlink_unicast+0x846/0xa10 [ 1969.072212][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1969.072232][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1969.072249][ T38] ? skb_put+0x11b/0x210 [ 1969.072274][ T38] netlink_sendmsg+0x805/0xb30 [ 1969.072301][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.072329][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1969.072347][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.074271][ T38] __sock_sendmsg+0x21c/0x270 [ 1969.074294][ T38] ____sys_sendmsg+0x508/0x820 [ 1969.074314][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1969.074337][ T38] ? import_iovec+0x74/0xa0 [ 1969.074697][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1969.074718][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1969.074765][ T38] ? __fget_files+0x2a/0x420 [ 1969.074784][ T38] ? __fget_files+0x3a6/0x420 [ 1969.074812][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1969.074831][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1969.074854][ T38] ? rcu_is_watching+0x15/0xb0 [ 1969.074879][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1969.074896][ T38] do_syscall_64+0xfa/0x3b0 [ 1969.074910][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.074931][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.074952][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1969.074968][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.074983][ T38] RIP: 0033:0x7fb20393eba9 [ 1969.074997][ T38] RSP: 002b:00007fb201b85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1969.075015][ T38] RAX: ffffffffffffffda RBX: 00007fb203b86090 RCX: 00007fb20393eba9 [ 1969.075026][ T38] RDX: 00000000000000c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 1969.075034][ T38] RBP: 00007fb2039c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1969.075043][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1969.075052][ T38] R13: 00007fb203b86128 R14: 00007fb203b86090 R15: 00007ffe3bffeff8 [ 1969.075075][ T38] [ 1969.075089][ T38] INFO: task syz.1.5707:23363 blocked for more than 143 seconds. [ 1969.075101][ T38] Not tainted syzkaller #0 [ 1969.075108][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1969.075115][ T38] task:syz.1.5707 state:D stack:25912 pid:23363 tgid:23358 ppid:18532 task_flags:0x400140 flags:0x00004004 [ 1969.075155][ T38] Call Trace: [ 1969.075161][ T38] [ 1969.075170][ T38] __schedule+0x16f3/0x4c20 [ 1969.075205][ T38] ? __kernel_text_address+0xd/0x40 [ 1969.075224][ T38] ? __pfx___schedule+0x10/0x10 [ 1969.075257][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1969.075279][ T38] rt_mutex_schedule+0x77/0xf0 [ 1969.075293][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1969.075309][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1969.075339][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1969.075358][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1969.075376][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1969.075391][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.075418][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 1969.075438][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1969.075458][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1969.075474][ T38] ? security_capable+0x7e/0x2e0 [ 1969.075497][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 1969.075512][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1969.075532][ T38] rtnl_newlink+0x8db/0x1c70 [ 1969.075560][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1969.075576][ T38] ? migrate_enable+0x29c/0x3c0 [ 1969.075602][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 1969.075621][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 1969.075638][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 1969.075666][ T38] ? __local_bh_enable+0x23f/0x3d0 [ 1969.075682][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 1969.075701][ T38] ? __pfx___local_bh_enable+0x10/0x10 [ 1969.075725][ T38] ? __local_bh_enable_ip+0x1b2/0x270 [ 1969.075741][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.075763][ T38] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1969.075778][ T38] ? dev_hard_start_xmit+0x7f5/0x870 [ 1969.075793][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 1969.075814][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 1969.075829][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 1969.075845][ T38] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 1969.075864][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.075902][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1969.075920][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1969.075942][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1969.075960][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.075976][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 1969.075996][ T38] ? __asan_memcpy+0x40/0x70 [ 1969.076012][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 1969.076040][ T38] netlink_rcv_skb+0x208/0x470 [ 1969.076061][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.076081][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1969.076110][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1969.076141][ T38] netlink_unicast+0x846/0xa10 [ 1969.076166][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1969.076184][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1969.076202][ T38] ? skb_put+0x11b/0x210 [ 1969.076224][ T38] netlink_sendmsg+0x805/0xb30 [ 1969.076250][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.076275][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1969.076290][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.076308][ T38] __sock_sendmsg+0x21c/0x270 [ 1969.076330][ T38] ____sys_sendmsg+0x508/0x820 [ 1969.076547][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1969.076574][ T38] ? import_iovec+0x74/0xa0 [ 1969.077064][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1969.077089][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1969.077133][ T38] ? __fget_files+0x2a/0x420 [ 1969.077150][ T38] ? __fget_files+0x3a6/0x420 [ 1969.077176][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1969.077193][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1969.077215][ T38] ? rcu_is_watching+0x15/0xb0 [ 1969.077240][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1969.077257][ T38] do_syscall_64+0xfa/0x3b0 [ 1969.077269][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.077286][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.077300][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1969.077317][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.077331][ T38] RIP: 0033:0x7fd77efceba9 [ 1969.077345][ T38] RSP: 002b:00007fd77d215038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1969.077361][ T38] RAX: ffffffffffffffda RBX: 00007fd77f216090 RCX: 00007fd77efceba9 [ 1969.077885][ T38] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1969.077898][ T38] RBP: 00007fd77f051e19 R08: 0000000000000000 R09: 0000000000000000 [ 1969.077907][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1969.077916][ T38] R13: 00007fd77f216128 R14: 00007fd77f216090 R15: 00007ffd8031e768 [ 1969.077942][ T38] [ 1969.077953][ T38] INFO: task syz.9.5706:23365 blocked for more than 143 seconds. [ 1969.077964][ T38] Not tainted syzkaller #0 [ 1969.077971][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1969.077979][ T38] task:syz.9.5706 state:D stack:21336 pid:23365 tgid:23359 ppid:16239 task_flags:0x400140 flags:0x00004004 [ 1969.078026][ T38] Call Trace: [ 1969.078032][ T38] [ 1969.078041][ T38] __schedule+0x16f3/0x4c20 [ 1969.078084][ T38] ? __pfx___schedule+0x10/0x10 [ 1969.078121][ T38] rt_mutex_schedule+0x77/0xf0 [ 1969.078137][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1969.078164][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1969.078184][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1969.078201][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1969.078217][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1969.079028][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.079058][ T38] ? rtm_new_nexthop+0xe96/0x7ec0 [ 1969.079081][ T38] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1969.079101][ T38] ? skb_dst+0x4f/0xd0 [ 1969.079122][ T38] ? rtm_new_nexthop+0xe96/0x7ec0 [ 1969.079134][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1969.079156][ T38] rtm_new_nexthop+0xe96/0x7ec0 [ 1969.079171][ T38] ? __pfx_NF_HOOK+0x10/0x10 [ 1969.079190][ T38] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1969.079217][ T38] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 1969.079233][ T38] ? process_backlog+0x27b/0x900 [ 1969.079254][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.079282][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.079317][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1969.079351][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.079389][ T38] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 1969.079403][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1969.079421][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.079440][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1969.079457][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.079497][ T38] netlink_rcv_skb+0x208/0x470 [ 1969.079515][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.079532][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.079622][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1969.079651][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1969.079676][ T38] netlink_unicast+0x846/0xa10 [ 1969.079702][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1969.079720][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1969.079736][ T38] ? skb_put+0x11b/0x210 [ 1969.079760][ T38] netlink_sendmsg+0x805/0xb30 [ 1969.079786][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.079812][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1969.079827][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.079846][ T38] __sock_sendmsg+0x21c/0x270 [ 1969.079867][ T38] ____sys_sendmsg+0x508/0x820 [ 1969.079887][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1969.079910][ T38] ? import_iovec+0x74/0xa0 [ 1969.079931][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1969.079948][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1969.079994][ T38] ? __fget_files+0x2a/0x420 [ 1969.080012][ T38] ? __fget_files+0x3a6/0x420 [ 1969.080040][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1969.080058][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1969.080082][ T38] ? rcu_is_watching+0x15/0xb0 [ 1969.080107][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1969.080124][ T38] do_syscall_64+0xfa/0x3b0 [ 1969.080136][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.080155][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.080169][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1969.080186][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.080200][ T38] RIP: 0033:0x7f9f4defeba9 [ 1969.080213][ T38] RSP: 002b:00007f9f4c124038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1969.080229][ T38] RAX: ffffffffffffffda RBX: 00007f9f4e146180 RCX: 00007f9f4defeba9 [ 1969.080240][ T38] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1969.080250][ T38] RBP: 00007f9f4df81e19 R08: 0000000000000000 R09: 0000000000000000 [ 1969.080259][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1969.080267][ T38] R13: 00007f9f4e146218 R14: 00007f9f4e146180 R15: 00007ffcc03707b8 [ 1969.080292][ T38] [ 1969.080302][ T38] INFO: task syz-executor:23369 blocked for more than 143 seconds. [ 1969.080313][ T38] Not tainted syzkaller #0 [ 1969.080322][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1969.080330][ T38] task:syz-executor state:D stack:26952 pid:23369 tgid:23369 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1969.080368][ T38] Call Trace: [ 1969.080374][ T38] [ 1969.080384][ T38] __schedule+0x16f3/0x4c20 [ 1969.080425][ T38] ? __pfx___schedule+0x10/0x10 [ 1969.080458][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1969.080480][ T38] rt_mutex_schedule+0x77/0xf0 [ 1969.080494][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1969.080510][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1969.080539][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1969.080567][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1969.080584][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1969.080598][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.080626][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.080647][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1969.080669][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.080708][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1969.080729][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.080753][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1969.080784][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1969.080798][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1969.080816][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.080836][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1969.080853][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.080885][ T38] netlink_rcv_skb+0x208/0x470 [ 1969.080904][ T38] ? __lock_acquire+0xab9/0xd20 [ 1969.080922][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1969.080942][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1969.080973][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1969.081000][ T38] netlink_unicast+0x846/0xa10 [ 1969.081024][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1969.081043][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1969.081059][ T38] ? skb_put+0x11b/0x210 [ 1969.081081][ T38] netlink_sendmsg+0x805/0xb30 [ 1969.081107][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.081132][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1969.081147][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1969.081166][ T38] __sock_sendmsg+0x21c/0x270 [ 1969.081187][ T38] __sys_sendto+0x3c7/0x520 [ 1969.081209][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1969.081252][ T38] ? exc_page_fault+0x76/0xf0 [ 1969.081274][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 1969.612550][ T38] __x64_sys_sendto+0xde/0x100 [ 1969.612596][ T38] do_syscall_64+0xfa/0x3b0 [ 1969.612613][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.612636][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.612654][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1969.612675][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.612694][ T38] RIP: 0033:0x7fb82b850a3c [ 1969.612710][ T38] RSP: 002b:00007fffe7075350 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1969.612730][ T38] RAX: ffffffffffffffda RBX: 00007fb82c5c4620 RCX: 00007fb82b850a3c [ 1969.612744][ T38] RDX: 0000000000000028 RSI: 00007fb82c5c4670 RDI: 0000000000000003 [ 1969.612757][ T38] RBP: 0000000000000000 R08: 00007fffe70753a4 R09: 000000000000000c [ 1969.612770][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1969.612781][ T38] R13: 0000000000000000 R14: 00007fb82c5c4670 R15: 0000000000000000 [ 1969.612810][ T38] [ 1969.612863][ T38] [ 1969.612863][ T38] Showing all locks held in the system: [ 1969.612874][ T38] 2 locks held by kworker/0:1/10: [ 1969.612888][ T38] 10 locks held by ktimers/0/16: [ 1969.612897][ T38] 4 locks held by pr/legacy/17: [ 1969.612908][ T38] 2 locks held by rcuc/0/20: [ 1969.612920][ T38] 1 lock held by khungtaskd/38: [ 1969.612930][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1969.612983][ T38] 3 locks held by kworker/u8:5/162: [ 1969.612994][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.613042][ T38] #1: ffffc90003a87bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.613086][ T38] #2: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1969.613150][ T38] 4 locks held by kworker/u8:11/3670: [ 1969.613163][ T38] 2 locks held by getty/5593: [ 1969.613173][ T38] #0: ffff88823bf348a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1969.613382][ T38] #1: ffffc9000421b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1969.613430][ T38] 3 locks held by syz-executor/5821: [ 1969.613447][ T38] 3 locks held by kworker/u8:42/15164: [ 1969.613458][ T38] #0: ffff88803055d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.613505][ T38] #1: ffffc9000469fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.613549][ T38] #2: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1969.613591][ T38] 5 locks held by kworker/u8:43/15165: [ 1969.613601][ T38] 3 locks held by kworker/0:0/15803: [ 1969.613612][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.613657][ T38] #1: ffffc90004b9fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.613699][ T38] #2: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1969.613746][ T38] 2 locks held by kworker/u8:2/18476: [ 1969.613760][ T38] 2 locks held by kworker/0:2/20216: [ 1969.613773][ T38] 4 locks held by kworker/u8:7/21704: [ 1969.613783][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.613829][ T38] #1: ffffc9000516fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.613872][ T38] #2: ffffffff8ecc66c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1969.613917][ T38] #3: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1969.613966][ T38] 7 locks held by syz-executor/23091: [ 1969.613978][ T38] #0: ffff888034730488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1969.614027][ T38] #1: ffff88802f1d3878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1969.614071][ T38] #2: ffff888027398e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1969.614121][ T38] #3: ffffffff8e542cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1969.614165][ T38] #4: ffff88804033f0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1969.614210][ T38] #5: ffff888029091300 (&devlink->lock_key#33){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1969.614275][ T38] #6: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1969.614323][ T38] 1 lock held by syz-executor/23193: [ 1969.614335][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1969.614388][ T38] 1 lock held by syz.6.5704/23351: [ 1969.614400][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1969.614445][ T38] 1 lock held by syz.1.5707/23363: [ 1969.614457][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1969.614500][ T38] 1 lock held by syz.9.5706/23365: [ 1969.614512][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x7ec0 [ 1969.614554][ T38] 1 lock held by syz-executor/23369: [ 1969.614565][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614609][ T38] 1 lock held by syz-executor/23372: [ 1969.614621][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614664][ T38] 1 lock held by syz-executor/23375: [ 1969.614675][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614717][ T38] 1 lock held by syz-executor/23379: [ 1969.614729][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614770][ T38] 1 lock held by syz-executor/23382: [ 1969.614781][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614823][ T38] 1 lock held by syz-executor/23386: [ 1969.614835][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614876][ T38] 1 lock held by syz-executor/23390: [ 1969.614887][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614927][ T38] 1 lock held by syz-executor/23392: [ 1969.614938][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.614981][ T38] 1 lock held by syz-executor/23395: [ 1969.614991][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.615035][ T38] 1 lock held by syz-executor/23400: [ 1969.615045][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.615088][ T38] 4 locks held by kworker/u9:4/23402: [ 1969.615100][ T38] #0: ffff888036080138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.615144][ T38] #1: ffffc90004bbfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.615188][ T38] #2: ffff888021adce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1969.615231][ T38] #3: ffff888021adc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1969.615361][ T38] 1 lock held by syz-executor/23405: [ 1969.615371][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.615413][ T38] 1 lock held by syz-executor/23407: [ 1969.615423][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.615464][ T38] 6 locks held by kworker/u9:5/23410: [ 1969.615475][ T38] #0: ffff8880820b8938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.615518][ T38] #1: ffffc90004e8fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.615563][ T38] #2: ffff888032048e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1969.615604][ T38] #3: ffff8880320480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1969.615650][ T38] #4: ffffffff8ee3b098 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1969.615695][ T38] #5: ffff88805c019b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1969.615747][ T38] 1 lock held by syz-executor/23412: [ 1969.615759][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.615800][ T38] 1 lock held by syz-executor/23417: [ 1969.615811][ T38] #0: ffffffff8ecd35b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1969.615853][ T38] 4 locks held by kworker/u9:9/23418: [ 1969.615863][ T38] #0: ffff88807ebb3138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1969.615911][ T38] #1: ffffc9000576fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1969.615956][ T38] #2: ffff8880728b40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1969.616002][ T38] #3: ffffffff8ee3b098 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1969.616046][ T38] [ 1969.616052][ T38] ============================================= [ 1969.616052][ T38] [ 1969.616075][ T38] NMI backtrace for cpu 1 [ 1969.616090][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1969.616111][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1969.616122][ T38] Call Trace: [ 1969.616131][ T38] [ 1969.616141][ T38] dump_stack_lvl+0x189/0x250 [ 1969.616170][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1969.616194][ T38] ? __pfx__printk+0x10/0x10 [ 1969.616226][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1969.616259][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1969.616284][ T38] ? __pfx__printk+0x10/0x10 [ 1969.616307][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1969.616330][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1969.616354][ T38] watchdog+0xf93/0xfe0 [ 1969.616381][ T38] ? watchdog+0x1de/0xfe0 [ 1969.616408][ T38] kthread+0x70e/0x8a0 [ 1969.616435][ T38] ? __pfx_watchdog+0x10/0x10 [ 1969.616456][ T38] ? __pfx_kthread+0x10/0x10 [ 1969.616484][ T38] ? __pfx_kthread+0x10/0x10 [ 1969.616508][ T38] ret_from_fork+0x439/0x7d0 [ 1969.616533][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1969.616560][ T38] ? __switch_to_asm+0x39/0x70 [ 1969.616575][ T38] ? __switch_to_asm+0x33/0x70 [ 1969.616590][ T38] ? __pfx_kthread+0x10/0x10 [ 1969.616614][ T38] ret_from_fork_asm+0x1a/0x30 [ 1969.616646][ T38] [ 1969.616654][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1969.616689][ C0] NMI backtrace for cpu 0 [ 1969.616704][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1969.616725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1969.616735][ C0] RIP: 0010:lock_release+0x9/0x3e0 [ 1969.616761][ C0] Code: 24 e9 08 fa ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 40 2c 5a [ 1969.616776][ C0] RSP: 0018:ffffc90000156bc0 EFLAGS: 00000082 [ 1969.616791][ C0] RAX: f3f3f300f1f1f1f1 RBX: 0000000000000a02 RCX: ffffffff99018303 [ 1969.616805][ C0] RDX: 0000000000000001 RSI: ffffffff8af94bf7 RDI: ffff8880b8845698 [ 1969.616818][ C0] RBP: ffffc90000156c70 R08: ffff8880b88456d7 R09: 1ffff11017108ada [ 1969.616831][ C0] R10: dffffc0000000000 R11: ffffed1017108adb R12: dffffc0000000000 [ 1969.616845][ C0] R13: ffffc90000156cc8 R14: ffff8880b8845680 R15: 1ffff9200002ad7c [ 1969.616859][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1969.616873][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1969.616886][ C0] CR2: 00007f126938b7e6 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 1969.616902][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1969.616913][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1969.616924][ C0] Call Trace: [ 1969.616931][ C0] [ 1969.616939][ C0] _raw_spin_unlock_irqrestore+0x70/0x110 [ 1969.616965][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1969.616993][ C0] rt_spin_lock+0x167/0x2c0 [ 1969.617012][ C0] ? stack_depot_save_flags+0x40/0x860 [ 1969.617036][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1969.617057][ C0] ? kasan_save_track+0x4f/0x80 [ 1969.617075][ C0] ? kasan_save_track+0x3e/0x80 [ 1969.617092][ C0] ? kasan_save_free_info+0x46/0x50 [ 1969.617107][ C0] ? __kasan_slab_free+0x5b/0x80 [ 1969.617128][ C0] ___slab_alloc+0x25f/0xdc0 [ 1969.617144][ C0] ? __netif_receive_skb+0x143/0x380 [ 1969.617163][ C0] ? process_backlog+0x31e/0x900 [ 1969.617184][ C0] ? run_ktimerd+0xcf/0x190 [ 1969.617205][ C0] ? smpboot_thread_fn+0x53f/0xa60 [ 1969.617224][ C0] ? __alloc_skb+0x112/0x2d0 [ 1969.617248][ C0] ? __alloc_skb+0x112/0x2d0 [ 1969.617269][ C0] kmem_cache_alloc_node_noprof+0xf2/0x330 [ 1969.617295][ C0] __alloc_skb+0x112/0x2d0 [ 1969.617319][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 1969.617350][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1969.617373][ C0] ? nft_tunnel_get_reduce+0x210/0x640 [ 1969.617396][ C0] ? synproxy_pernet+0x45/0x270 [ 1969.617417][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 1969.617438][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1969.617458][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1969.617478][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1969.617504][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1969.617522][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1969.617548][ C0] nft_do_chain+0x40c/0x1920 [ 1969.617572][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1969.617592][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 1969.617622][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 1969.617642][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1969.617665][ C0] nft_do_chain_inet+0x25d/0x340 [ 1969.617681][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1969.617704][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1969.617725][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1969.617743][ C0] nf_hook_slow+0xc2/0x220 [ 1969.617767][ C0] NF_HOOK+0x206/0x3a0 [ 1969.617789][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1969.617810][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1969.617829][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1969.617849][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1969.617872][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1969.617895][ C0] ? skb_dst+0x4f/0xd0 [ 1969.617916][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1969.617939][ C0] NF_HOOK+0x30c/0x3a0 [ 1969.617960][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1969.617980][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1969.618000][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1969.618022][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1969.618049][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1969.618068][ C0] __netif_receive_skb+0x143/0x380 [ 1969.618087][ C0] ? rt_spin_unlock+0x65/0x80 [ 1969.618108][ C0] ? process_backlog+0x27b/0x900 [ 1969.618128][ C0] process_backlog+0x31e/0x900 [ 1969.618154][ C0] __napi_poll+0xb6/0x540 [ 1969.618176][ C0] net_rx_action+0x707/0xe00 [ 1969.618195][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1969.618226][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1969.618261][ C0] handle_softirqs+0x22f/0x710 [ 1969.618287][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1969.618311][ C0] run_ktimerd+0xcf/0x190 [ 1969.618334][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1969.618356][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1969.618375][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 1969.618396][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1969.618415][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1969.618436][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1969.618459][ C0] kthread+0x70e/0x8a0 [ 1969.618484][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1969.618510][ C0] ? __pfx_kthread+0x10/0x10 [ 1969.618535][ C0] ? __pfx_kthread+0x10/0x10 [ 1969.618557][ C0] ret_from_fork+0x439/0x7d0 [ 1969.618579][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1969.618602][ C0] ? __switch_to_asm+0x39/0x70 [ 1969.618617][ C0] ? __switch_to_asm+0x33/0x70 [ 1969.618632][ C0] ? __pfx_kthread+0x10/0x10 [ 1969.618655][ C0] ret_from_fork_asm+0x1a/0x30 [ 1969.618679][ C0] [ 1969.619694][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1969.619710][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1969.619732][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1969.619742][ T38] Call Trace: [ 1969.619750][ T38] [ 1969.619758][ T38] dump_stack_lvl+0x99/0x250 [ 1969.619782][ T38] ? __asan_memcpy+0x40/0x70 [ 1969.619802][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1969.619825][ T38] ? __pfx__printk+0x10/0x10 [ 1969.619855][ T38] vpanic+0x281/0x750 [ 1969.619881][ T38] ? __pfx_vpanic+0x10/0x10 [ 1969.619902][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1969.619921][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.619954][ T38] panic+0xb9/0xc0 [ 1969.619976][ T38] ? __pfx_panic+0x10/0x10 [ 1969.620002][ T38] ? irq_work_queue+0xc3/0x140 [ 1969.620027][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1969.620051][ T38] watchdog+0xfd2/0xfe0 [ 1969.620078][ T38] ? watchdog+0x1de/0xfe0 [ 1969.620105][ T38] kthread+0x70e/0x8a0 [ 1969.620132][ T38] ? __pfx_watchdog+0x10/0x10 [ 1969.620151][ T38] ? __pfx_kthread+0x10/0x10 [ 1969.620180][ T38] ? __pfx_kthread+0x10/0x10 [ 1969.620203][ T38] ret_from_fork+0x439/0x7d0 [ 1969.620227][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1969.620265][ T38] ? __switch_to_asm+0x39/0x70 [ 1969.620281][ T38] ? __switch_to_asm+0x33/0x70 [ 1969.620297][ T38] ? __pfx_kthread+0x10/0x10 [ 1969.620321][ T38] ret_from_fork_asm+0x1a/0x30 [ 1969.620353][ T38] [ 1969.640946][ T38] Kernel Offset: disabled