last executing test programs: 1m22.079975106s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000002d00000095000000ffffffea"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0x6, 0x5, 0xffffffffffffffc0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @ldst={0x0, 0x2, 0x0, 0xa, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x1, 0x7, 0xa, 0x30, 0x1}, @generic={0x0, 0x1, 0x1, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x10000, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x4, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000680)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x64, 0x80000001}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x5, 0x1, 0x10, 0x1}, {0x0, 0x1, 0xb, 0x6}, {0x3, 0x2, 0xa, 0x7}, {0x0, 0x1, 0x4, 0x5}], 0x10, 0x8fc09bb, @void, @value}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5a96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088f1}, 0x800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x2c}}, 0x0) (async) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) splice(r8, 0x0, r9, 0x0, 0xfffffffffffffdef, 0x0) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) write$cgroup_pid(r8, &(0x7f0000000300)=r10, 0x12) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0009"], 0x34}}, 0xc000) 1m21.670826093s ago: executing program 4 (id=20): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x7adb}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1a}, @TCA_CAKE_RTT={0x8, 0x7, 0x58}]}}]}, 0x54}}, 0x0) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0xa0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x70bd26, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 1m21.28684149s ago: executing program 2 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r4, 0x201, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) 1m21.239441011s ago: executing program 4 (id=23): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r7, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000040)=0x2, 0x4) splice(r4, 0x0, r7, &(0x7f0000000080)=0x8, 0x1, 0x1) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socket(0x1d, 0x2, 0x6) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x0, 0x0, @void, @value}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r7, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000040)=0x2, 0x4) (async) splice(r4, 0x0, r7, &(0x7f0000000080)=0x8, 0x1, 0x1) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) (async) 1m21.078571443s ago: executing program 2 (id=25): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x9d8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x99c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x8f0, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xa8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x85, 0x20000, 0x5, 0x9, 0x2, 0x7, 0x101, 0xf, 0x0, 0x1, 0x80, 0x8, 0x3ff, 0x5, 0x6, 0x0, 0x3, 0x3, 0xf, 0x1, 0x1, 0x0, 0xffff, 0xfffffffb, 0x5, 0x2, 0x9, 0x1, 0x37fab7e, 0x80000001, 0x6, 0xe3e, 0x7, 0x1, 0x41, 0x6, 0x6, 0x0, 0x48c, 0xa55d, 0x8, 0xfffffff7, 0xdc, 0x8, 0x1, 0xfffffff0, 0x9, 0x3, 0x2, 0x3, 0x8, 0x1, 0x0, 0xfffffffa, 0xd, 0x5, 0x7ff, 0xe36b, 0x3, 0xfffffffe, 0x4, 0x2, 0x9, 0x80000001, 0x4, 0x1, 0x0, 0x4, 0x2, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0xc2c00000, 0x8, 0x9464, 0x100, 0x7, 0x7, 0x0, 0x6, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x8, 0x4, 0x4, 0x7ff, 0x5, 0x8, 0x8, 0x8, 0xfffffffc, 0x9, 0xf8, 0x8, 0x9e, 0xed, 0x7f, 0x6ac5, 0xfffffff7, 0x2, 0x9, 0x6, 0x3, 0x4e2d, 0x45e, 0x0, 0xe8, 0x1c7b, 0x1, 0x10000, 0x9, 0x200, 0x101, 0x8, 0xfffffffb, 0xfff, 0x1840, 0xa, 0x5, 0x3b, 0x10000, 0x5, 0x2, 0x21, 0x3f, 0x9e, 0x4, 0x8, 0x7ff, 0x800, 0xffff, 0x7, 0x4, 0x4, 0x1, 0x1, 0xfff, 0x4, 0x7ff, 0x0, 0xfffffff7, 0x8adf, 0x7f, 0x8, 0x8, 0x9, 0x1, 0x6, 0x1, 0x9f7c, 0x6, 0x5a, 0x8, 0xffffffc0, 0x0, 0x9, 0x9, 0x800, 0xb, 0x2, 0x7, 0x4, 0x4, 0x3943, 0x3, 0x1, 0x7, 0x5, 0x3, 0x32, 0x8, 0x9, 0x6, 0x5, 0x10000, 0x5, 0xffffffff, 0x800, 0x379e9338, 0x8, 0x9, 0x2, 0x6, 0x3, 0x757, 0x0, 0x200, 0xffffffff, 0xfffff800, 0xd, 0x7d7, 0x6, 0x7, 0x9, 0x9, 0x3, 0x0, 0x5, 0x2, 0x68, 0x2, 0x92d, 0x8, 0x418, 0x7, 0x619, 0x25, 0x4, 0x343, 0x200, 0x2, 0x7, 0x4, 0x1, 0x7, 0x80000001, 0x80, 0x88f3, 0x2, 0xffffffff, 0x6810, 0x0, 0x3ff, 0x7fff, 0x2, 0x8, 0x6, 0x4, 0x580, 0xa, 0x2, 0xb, 0xffff3655, 0xb, 0x454b, 0x8, 0x4, 0xb, 0xfffffff8, 0x1, 0x100, 0x4, 0x7f, 0x3, 0x200, 0x80, 0x8, 0x91e]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x5, 0x692, 0x1ff, {0x4, 0x1, 0xb, 0x2, 0x1, 0x80000000}, {0x0, 0x2, 0x7f, 0x1, 0x1, 0xa}, 0xb, 0x401, 0x6c5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa93}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4eb7, 0x197d, 0x404, 0x6, 0x2, 0xc, 0x3ff, 0x8, 0x7f, 0x1, 0x10001, 0xe, 0x6, 0x65bf357b, 0x3, 0x4, 0x4, 0x9, 0x0, 0xc, 0x99, 0x0, 0x6, 0x8, 0x4, 0x3, 0x7, 0xffffff00, 0xfffffff7, 0x200004, 0x3, 0x4, 0xe366, 0x0, 0x4, 0x20b, 0x8, 0x93, 0x101, 0x5, 0x100, 0x3, 0x8, 0x6010357e, 0x2, 0x6, 0x6, 0x8, 0x40, 0x7fffffff, 0x1, 0x1, 0x5, 0x3, 0xfff, 0x4, 0x7, 0x80000000, 0x4, 0x101, 0x9, 0x4, 0x6, 0x5, 0x5f23, 0xd2b, 0x400, 0x4, 0xbd8, 0x7, 0x1, 0x0, 0x9, 0x0, 0x4, 0xfffffff8, 0x6, 0x800, 0x4aa43e7b, 0x3ff, 0x5, 0xf, 0x5, 0xfe3, 0x4, 0x5, 0x1, 0x6, 0x0, 0x9, 0x9, 0x7fffffff, 0x100, 0x0, 0x8001, 0xe, 0x8, 0x7, 0x3e6, 0x7fffffff, 0xfffffffc, 0xe1f8, 0x4, 0x200, 0x0, 0x9, 0x0, 0xfff, 0xffffffff, 0x8, 0x5, 0x0, 0x7ff, 0x0, 0x4, 0x6, 0x0, 0xffffffff, 0x6, 0x80, 0xc, 0x10001, 0x5, 0xc, 0xfffffffe, 0x1, 0xffffffff, 0xa, 0xdc25, 0x8, 0xe, 0x101, 0x9, 0xfffffffb, 0xb7d, 0x5, 0x9, 0x1ff, 0xfc09, 0x6, 0xf, 0x101, 0xff, 0x200, 0x8000, 0x30, 0x0, 0x4, 0x4, 0x7, 0x0, 0x9, 0x401, 0xf26, 0x3, 0x2, 0x7, 0x9, 0x1c9, 0x2, 0x9, 0x6, 0x2, 0x800, 0xf9, 0x1, 0x12b, 0x7fff, 0xce, 0xffff, 0x0, 0xa68, 0x7, 0x0, 0x733e, 0x2, 0xc336, 0x800, 0x1, 0x1be, 0x8000, 0x9, 0x8000, 0x9, 0x9, 0x2, 0x80, 0x3f80000, 0x6, 0x4, 0xcc, 0x9, 0x2, 0x3, 0xffffff91, 0x0, 0x7f, 0x5, 0xc, 0x0, 0x5, 0x7, 0x9, 0x1, 0x9, 0x4, 0xcdb4, 0x4, 0xa2, 0x1, 0x0, 0x8, 0x4, 0x4, 0xa0, 0x3, 0xe3, 0x9, 0x4, 0x5, 0x7, 0x1, 0x8, 0x1, 0x4308, 0xd2e, 0xffff, 0x5, 0x80000001, 0x7, 0x1, 0xffffffff, 0x0, 0x5, 0x5, 0x2, 0x3, 0x8, 0x38a5, 0x81, 0x9, 0xffffffff, 0xfffffff8, 0x9, 0x8000, 0x3, 0x9, 0x9b6, 0x2, 0x4, 0x265, 0x6, 0x80000000, 0x6, 0x1, 0x66]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x3, 0x3, 0x1000, 0xde, {0x40, 0x0, 0xc00, 0x2, 0x2, 0x5}, {0x7, 0x2, 0x8, 0x200, 0x4, 0x80}, 0x5, 0x2, 0x500}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x1, 0xb, 0x200, 0x8, {0xff, 0xe7012c04b3450ee5, 0x6, 0x81, 0x2, 0x80000001}, {0x61, 0x1, 0xb, 0x91, 0xe78c, 0xfffffffe}, 0xdb, 0x5, 0x6b}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x6c, 0x4, [@m_simple={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x3c, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a9"}, {0xc}, {0xc}}}]}]}}]}, 0x9d8}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xe, 0x0, &(0x7f0000000040)) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xcd48}, &(0x7f0000000080)=0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x1) shutdown(r5, 0x1) r6 = socket(0x8, 0xa, 0xc1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r9, r7}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) 1m20.970261916s ago: executing program 0 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23dab73e5dbab037672", 0xd}, {&(0x7f00000002c0)="628a31b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee837448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d3881ae40ded75e48ec1d1782df4cdfbf37cbc44de0d079b1bb195f5d9a5995b26e7abb0cd849ea", 0x57}, {&(0x7f0000000640)="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", 0x139}, {&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b335388cfebd804d367af99611817fed2c6b73965e9ec17a1bb6ba06b3f1d01065f97ed134f9a6f4", 0xca}, {&(0x7f0000001680)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f26c80457ceacf706c54e5b1f431a8df03f7376096b86b8ac804d9dde5f9eca2dc99bf2cb9c6ebf5a6c9db3db0d4a2e15002854bcb86bb89ea0e5511db578021e8cd35ff5d1f46a24dd14e248fc171e0d094a27510d418a5b467230f11b0a224362e6e9b3331f22ad5c10fc6e21c2297d9a21ce00af6ea39b66254f66189929b12973020c175bafd2d419832", 0xde}, {&(0x7f00000001c0)="213faed66532503be23dcf751298b5e5be928969c63d", 0x16}], 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) sendfile(r4, r2, 0x0, 0xfacf) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@setlink={0x54, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x301}, [@IFLA_GSO_MAX_SEGS={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_OPERSTATE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1c828}]}, 0x54}}, 0x0) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf8, r1, 0x800, 0x2e70, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x7, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) getsockopt$X25_QBITINCL(r9, 0x106, 0x1, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073113c00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r13, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) 1m20.832649833s ago: executing program 4 (id=29): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x5b, &(0x7f0000000000)="c9ba26e1f1b9484cbef9a28b9fd4382b34b92704dd607753b453268bb9bc194ebe5524ae00be9b71e57e0139d3a47a238e85800d72a171a26e8d4ee9103aa44f184321c1efad86bf24fa1fd188ccebfaadc6fcf442c4ef31ac7eeb", 0x1c, 0x0, &(0x7f0000000080)="ed93fd19453ceccf4a40e3819d48ca03b35f933560c9eb56fffe6bf5"}) bind$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000200), 0x4) 1m20.502903388s ago: executing program 0 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000200)="9e54640da26e2c9744cf74c4c4ca4c829d63db107a4516d6e65a717be0a31386fb77cba4f0d2f5b1419a810518d5618ad9ebd4e47b096eec11eeaf55f97357a4b094d3352f38aa9d6be6b24e170c365e401f53e945e970a275775b03a6be89db999f252e1ab930dfc18531c242eeec29638c451b3c6fde89aad7e0852cafa63f264b72", &(0x7f00000005c0)=""/93, 0x4}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180), 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x40, 0x400, 0x0, 0x7, 0x3ff, 0x0, 0x1, 0xec7}, &(0x7f0000000040)=0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x248, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x4c, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x248}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 1m20.501609545s ago: executing program 2 (id=33): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x24044005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='afs_call_state\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x53, 0xd, 0x1, 0x0, "8e3ac6f64f547b240fe498d5e31c0776fa78411c1ce435099d7fafaffa5f4f9d4f122385471ec5db5d258a613f46e2529e6e127716e2ddf99912f027d185adc06fabe98d34afcf98a8e1d27bd1b8e5"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x1fc, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xf8, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0xa9f12135f1f373f}, @NFTA_DYNSET_EXPRESSIONS={0x28, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}}}, {0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xd0, 0x7, 0x1, 0x0, "975f8e4dd6585cd7f2ee22efdb8b18457c0128ac294151c3e1919f910aaf330402ea2f2a1d7c9bce5bb1eb33271245e64c43791af517df8d6ac2a58da0cd540d672fb8da0bd039ba8061631bb1ecc0063821a7b960f245515f1f06ac4f4f7a1e9525cb24380ca434ad2800584fab74761af268df849da498d244a2a05e176b003d38cf7ffaa908bae217f07aceb50e34b64a9620ba0aaa5f919e7023e8290da75a00d6def33328f2abe8e061e9bc3210b5a4f6bae24b8700c02e93e938272d23e589caed63fe2369fd3e4685"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2e0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x29, 0x4, 0xbe) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000006c0)='reno\x00', 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x40c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x121e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xec4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x118d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbf6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x48800}, 0x8011) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000980)={0x1, 0x9, 0x1, 0x1, 0x6, 0x8ad7}) r6 = socket(0x8, 0x4, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r5, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x0, 0x3, 0x0, {0x3, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3, 0xfc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000b40)={'erspan0\x00', 0x0, 0x700, 0x1, 0x2, 0x1, {{0x14, 0x4, 0x3, 0x20, 0x50, 0x66, 0x0, 0x91, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x34, 0x8f, 0x1, 0xe, [{@empty, 0x4}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@empty, 0x1}, {@loopback, 0x9}, {@remote, 0xffffffff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'gre0\x00', &(0x7f0000000c00)={'gre0\x00', 0x0, 0x10, 0x0, 0x1, 0x1, {{0x10, 0x4, 0x0, 0x3f, 0x40, 0x66, 0x0, 0xa, 0x2f, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0x8, 0x51, 0x0, 0x7, [0xffff]}, @timestamp_prespec={0x44, 0x24, 0xb5, 0x3, 0x9, [{@local, 0x7}, {@rand_addr=0x64010102, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x100}, {@broadcast, 0x5}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@bridge_getneigh={0x44, 0x1e, 0x20, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x20002, 0x110}, [@IFLA_LINK={0x8, 0x5, r10}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc715}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x4008000) sendmsg$NFT_BATCH(r0, &(0x7f00000021c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002180)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0xac, 0xb, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_DESC={0x98, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xeb}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4ad}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6ea2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe240}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}]}, @NFT_MSG_DELSETELEM={0x105c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1028, 0x3, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30d82e04f537aca8}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "68467ecf76dc394f592d7811207d865a44def6d232e9b9cb75a5d93b5b315eea"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "f2002150a07862271d2f6435f8ec709041158d055d542e98db9ab9b9edb8fb39133fda50a817dfc0ea55623d9aaaaa277cfb9dc1934a1137cfd6aa0f12468c6d81c2ccc4fbd047b3cda879fb99c9cf380f227b1a56d41c0c0c1ac6684f896ee055c6d77f1265e46474ebc4e7cef92af60c0c25201902d2e786700298b8bc4f4a0a0f52f29e6453cc818233a2a599f9219c9108a5f4c76a6d52d6fc26955bb9c7c257512c5a50e395c0b206c037b3876757115da6de"}, @NFTA_DATA_VALUE={0x24, 0x1, "7b5510abf8dfd3fd1786e59e8733b95272a45b709b437cf88bf46273fdc1b8a6"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x6f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xda35}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "fe559d9813b2f9804b49e55659a1cf9a6d78e0fe281b73b33238bdb9e614ed22a0b62415e318d43394a663dcc14175d43f2d5d1acb430939d2e234afa0bb877345357adeb06140e20ae036f4ca60898fd9b8919677598fce1771d1680114ddf613d4ce83f81a2755856d094ef348d3847684d0b3b8f377ecd00fe097299b19bc2a281812e2bb25c279156d144c5bc6f6cad2f7f6b314ffcdc50533c5a91feecfcf88bef9a02d90d8bd3e8d4b5d62"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x364, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x354, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x200, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "b73d4a5902348c03615d3ab072669b1c67898f32cfa4765e68791f56f4b157d7d05a052d7fa8dd96f542464b0d60737d41342a3b83784fefea90a269afa5db2c538136095a2282ad11c8d8b7d77a2d674f40a3566f0f3e8b22623b234992a54a92b16ccfa8671ae947c1fe3258506f782e209623f24601535f2a18aa2e85"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "e37584fae03ea3a7aacd5aa6b7e57ba3e7479c32be043b55019659bb5b1bd7ee64d30cb16491f8d1005b11e339b737bef9bc29b23c2df5bc799cf8ee5281c6528e29ef775f1ff256e201698a120f79b47b2c83726c957d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9, 0x1, "0c27a8ae32"}, @NFTA_DATA_VALUE={0x5a, 0x1, "b569086f6c48fc8fc5f70088409d76d60d7513401a48c1ee9f5566972df2fca89c2990ce6605649f07652100fd34e49fe87d65529102532bc95623c394d4fe58d88c9f615a495e471bee43ab6c664faff7b004724321"}, @NFTA_DATA_VALUE={0x3a, 0x1, "a2b9e8419a4ec999daf562823676ac18ad8704a7ad613a50d24bebbf0b072b4bd9f1c95e0de4cae616aa5b16f72f84e950a15778b7c8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_TO_DATA={0x150, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "7bb0306ec9760f6d37e4814dbc35b2580e2d8cf5bfb9"}, @NFTA_DATA_VALUE={0xfa, 0x1, "16a1be470f1e9bdb430ba32b55cff18cae64ca6500c955c7fbbad6dcb8a2a069fdfff8dcc27dd02dfed42eb08cb0d19b69cd0adef246cca6a52fdc4e52e7c0adb6a2ffc452fb62e57b4ee93da8927bcaa97b919316b3cf114c48f15af30061286b33e447e5fc16424480f1ff5bfba686bb3dd6a418460d53373eaefeb3b8f3e39152b9699e9b5573451e272a251853b3e6786ce567ffab99dedd32d340995c4a47c40ae9505ff3d9acba5df71cda6870696ede060c5b8b75f19cf8e4a3fb0b0b8be314aa02e063c5ba638e9e79aa2e71c97283a83b06271a47a2933c96200714da6a29ef977057fe50fa218a1bcb1fcdc1e932b66e0b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, @NFTA_SET_ELEM_KEY_END={0x24c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "b0cf2e35bef7a52f0c9d930b53a18b039b1bf809d39aeb56eb4bd6132e7cf48ded4172c2046da5cb3e121c8ed9222f0cbf99263ba6c95b5f079938d062528404a90a4e39eced0c69901f00b3ae63eb09bcc4b0d2298df3180723253bdf"}, @NFTA_DATA_VALUE={0xdf, 0x1, "f3ea1b2b9c3d66329b74d417c14bff2d9d9687795b640eff61afe7cc700b515d28be4ca2da5d6f6b6bc39538352ad0f06074497484840555546ad2ff02eead4dc9156a5b3ea3eced506d9e9bf83072a9e103883de20630fbfc765ca19f9baf1ede02f7a883c46b9e6ab981f43ae2b9e5c03eb5606ef08271c14caa9cb32301145780bc06325091a7b8c9a59ebd997f73da52225b52ef79201a2d1caadf5d9e581ca29efb24d2aa99a9305cea680ee03ef8abcd64dd148deb504006f99a312710b8c29a5f52dcea41ecb4ecc404ab891cb5cda799fb9a2f9fcbf3a3"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x98, 0x1, "932eb16d2194a1a8b04bfed604f627a99a39507b3724279e2347283d77e9e6a7243c9e9e432192e73d948057f69fd3c8da8302f8db0b88be355c7d7c627b43c08146f2ff8f89cb995fefc55d2ddc07d9988801956d2fd65c36990469fb8dfda560559e9386c7cebb0e5b80dc7f02702a4c4dd9c4c09aba7de65ef273f68efa85560b4150b59da917c32816f0f1785a9363135874"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}, {0x784, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4f, 0x6, 0x1, 0x0, "0f0c0cbcdcf948913df0ed5dc791d6dafe58d26cd2ac1e8e11c5e79f98e64b470aff471227c79b56b64341e8e906959699bd1998d8bcbb5a808fb419db1ed6b8a58a95a3f5142b0a4db491"}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x1c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x72, 0x1, "f3055626f6a6f16f94a0a1bf46ed828e5c31dc879ef5125a9d944aaca5e482aaecca299177c914723ecf100c5eee2aa22137785a6a28000c9f5859f7d2e50bcc2b052d9edbb3d425efccca542b27c4bf09d5e3f425c8c054a95bc3a8905e3821fead1506a7ed040a0054d84f3f39"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "08679b2d4d333ed941395dcc73f27e7e810c5490d83b161c3e8fa8ed2a8274d2d179df08e7088b1766a91a0f0d11ea119f5e2af1a4ee87c2e658be583e5f72d7fd60f8633a10512af0423ad66149eaf5ad6bc768faf894f3a6f71d0d4302876d74381acd97a4f40c9d994a93c83d5957f660d3a03845c69eb1b3869c18f5367a3a2dff9084a41a5e9635c9648933624230facbe4b00fdf10a7922b7e300b4fdc41f9dd6c8c3b6d2d134c84c6332fe99bc71c3fb7ea45dc9ac6b05c38e02b6871cf0690f36b1b183c1a9c38f64d9aa516eaf591b7a9c98ab7a1f371bb1805d4535e068075e93ba320a57f3c7a9e6edc61ff70dc"}]}, @NFTA_SET_ELEM_DATA={0x1dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x50, 0x1, "1ae5d983e0abe84d451aa96c3b0fbc71f9b1586912f01b976214c0d7a102e496607ea0cd53d32265f02c36d4ad41c8e2a012dbaa831d5ca3725631fb1acd588c14113f58e709d07bd8decc76"}, @NFTA_DATA_VALUE={0x7, 0x1, "b7465b"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "0f2a6af9053e9e2312c9447e9e8b380ad7081c0db4cf9f1dd753dfd19bfc1170c6d6e0edaa756df624d6ec60f442ab34a1369b2c737681ca85e9852d7712236f13df6314dec4571ed9a7a39f7b7cb95868af94fc5a75a6c3a911b6926aaa331e6c7fafc83b530b73cb47778bcc755eadf4ab4412a5df58fe54ec"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x7c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x41, 0x3, "87d86e50d994e526281a778748f0b80c5ab167fb494a3f51be7e3138795bb9182bc0e398d8cc004ffeb8f921688b5ba48fa4e4d137d3e5d706e34a55dd"}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "ea6a14638097c412712d5c79e22119e820144af82bbc70f03e6f75b3d0bec29161605a40bdaf56c412bc9116633bd6c768806aa3f493bdc5f55ab651fb7744770981ea50c9dc36970be746a3857e9a"}, @NFTA_DATA_VALUE={0x3a, 0x1, "30ce7dafbc88d36d16bccb561c414d977ac3fba59fc2e7c8ccfeabc661090280f77e4f100d10c35cf7ef9ff0a8ad4528aac215ed1187"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x1d8, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xbe, 0x8, "3af4b6d4d87487c6fd9b5dfbd9761bc9ea25a473a3c11e6d7f284e948f316640888965541750678efe4fdf5b88040dc7b0c9a2b18d3037048992ad899e08850469c457f9a46b738b43390f4f9d0e7882a6f3d6b72bfaedcc5832b9e230ff11d2cf1bc24adf66bf91fd16025eab5e2e2c3b342bf4c5b08c9dd70dedec4ca3e6ce4dc9e71581625a1ae61591923d1caf1b873f57c9e7af77d1353d1b619e757ab0013c380cda28a85c2a683a748c5def92d737177e16b427b0aacd"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xac, 0x8, "28c8297e9b8f5f78a8416026bc7e428a8574ce4c6416b325d8e04ace3ff86b7519b1a1339f3e75c82473a58aa22ae50e5e4f227fdb263842b7f8ac16d07dcacb72a9be254480b10f0c93ad443fe279742490211740daa4723fce2908fcbcab4bfdbc5dcad6fccfda4b0c2ec136a72886afd429bacb22a90c804711995509818da776ac170a7fa36680619dca21b8f75e331e9da28f9aba8b656ad45a81b03c3da72574f116e66bd4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x104, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x7}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x2e}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x2f}, @NFTA_CT_EXPECT_SIZE={0x5, 0x5, 0x8}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e24}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1358}, 0x1, 0x0, 0x0, 0xc040}, 0x400) splice(r6, &(0x7f0000002200)=0x5, r1, &(0x7f0000002240)=0x9, 0x1, 0xa) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000022c0), r2) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f00000024c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002300)={0x14c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffff88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r7) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0xa8, r12, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x212}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x18}, 0x20040091) socket$inet_mptcp(0x2, 0x1, 0x106) 1m20.411632254s ago: executing program 1 (id=34): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8001, 0x4) sendmmsg$inet6(r2, &(0x7f0000007e40), 0x4000000000000aa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4, 0x5}]}, 0x68}}, 0x0) 1m20.367458235s ago: executing program 4 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x64, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m20.275007132s ago: executing program 3 (id=36): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x6, [0xb8]}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @eol, @mss={0x2, 0x4, 0x5}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x1e, [0xff, 0x200, 0x0, 0x80000000, 0xff, 0x0, 0x7]}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = accept4(r1, &(0x7f0000000040)=@generic, &(0x7f0000000140)=0x80, 0x0) recvmmsg$unix(r3, &(0x7f0000000f00), 0x0, 0x12000, &(0x7f0000000fc0)={0x77359400}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e26, 0x20d, @mcast2, 0x2}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f00000002c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @local, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001200", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x7, 0x8, 0x8, 0xffffffffffffffff}]}}}}}}}}, 0x0) 1m20.274309128s ago: executing program 2 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100a6d20013070000000000000000ac4e77121414bb000000000000000000000000ac1414aa000000ed0000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200600000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000000000000000000c0016800804040089"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008530000000000000090000007f16cf51bd66169f99c28e083a7e8798f3809cee14ea8c388fc7764ed62def04bf55d7e826cefdda09b2c621c2e34eba8fe1408897d3a6e09115f9f2bfcec4977f17f07c2e572f08c1e1aa996d4a21a0ddff11e87be881ca86c121231b25d5bb4a20709a", @ANYRES32, @ANYBLOB="00000000000000200000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14d8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x90}}, 0x0) 1m20.061873572s ago: executing program 0 (id=38): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) listen(r0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1871ec2c1e954791150000001600156f000000000000000009", @ANYRES32=0x0], 0x18}}, 0x0) sendmmsg(r1, &(0x7f0000007880)=[{{&(0x7f0000001280)=@x25, 0x80, 0x0}}], 0x1, 0x40) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x60}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="8515000000220000009500000000000000000000000000000f82187689fee27e6b1de2c10fe963a3dacbcca7621a5fceeb4b57a7a634204f6a241f16e746ae61bfed8c7cbb6a11f19d2342c66361f9bce736385d6c66ad461a89f40a6acf2ee4f8288425d742f0da34b5"], &(0x7f0000000140)='GPL\x00', 0x8, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwrite64(r5, &(0x7f00000002c0)="cbe68a1617f1a37e200c18e409d395673a060fe995d5cba28bc8e2d8bc01aa51f8ae5de6cbdf0c2978b36b41fc189424cdb536736a34170ed341dd0cc407d1d8030d3d814d7f5160e0cee9a9ec7575b686d75d163a4752684a044c637dca778c2979b685848c8bbe1d400613dd2e8b8944c1276ba3b173d39bcb2990761de9bbcfcc618189d4f026583fc5a482c87ac03517d0ebff2eb689a5f994738b7918aeb0d181b2e793809a8ee9d75ef155028ce6b678cf675dab8199ece29141ad48a42c649143c3d5a791d1874c24818a9bdaafc0ea9a69e5615a92b23984f991ab8b6e61c70dbbf9", 0xe6, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) accept$inet(r6, 0x0, &(0x7f0000000480)) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$unix(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)="b098e1", 0x3}, {&(0x7f0000001300)="8fa19388653a6fe02ff095b7", 0xc}, {&(0x7f0000001400)="edc59c6511e16c08ac9cf82c0a86e688933ff05ec73ee6bd4e6a3bbe724c7e89f71319834cc73fa72d61d9030f4df89888", 0x31}, {&(0x7f0000001480)="98", 0x1}], 0x4}, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRESDEC=r7, @ANYBLOB="080005"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1m20.06106659s ago: executing program 1 (id=39): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000001280)=ANY=[], 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {0x0, 0x1, 0x8000}, {}, 0x0, 0x1, 0x2, 0x4}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "25cac521"}}]}, 0x140}}, 0x0) 1m20.060786098s ago: executing program 3 (id=40): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000a0600000000000aff"], 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x9, [@struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{0xf, 0x2, 0x3}, {0xc, 0x0, 0x8000}, {0x9, 0x4, 0x5}, {0x3, 0x5, 0x2}, {0xe, 0x1, 0x63f8}, {0x9, 0x0, 0x586b0b92}]}, @var={0x7, 0x0, 0x0, 0xe, 0x5}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @fwd={0xd}, @enum={0x1, 0x9, 0x0, 0x6, 0x4, [{0x1}, {0x3, 0xa0}, {0xc, 0x80}, {0xb, 0x3}, {0xb, 0x9}, {0x7, 0x5}, {0x5, 0x2}, {0x6}, {0x2, 0xfffffff7}]}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @const]}, {0x0, [0x0, 0x61, 0x2e, 0x0, 0x30, 0x5f, 0x30]}}, &(0x7f0000000480)=""/44, 0x12d, 0x2c, 0x0, 0x10000, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x5f, &(0x7f00000000c0)=""/95, 0x41000, 0x45, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0x2, 0x7fff}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x3, 0x5, 0x1, 0x6}, {0x1, 0x4, 0x4, 0x1}, {0x4, 0x2, 0x1, 0x8}, {0x1, 0x2, 0x9}, {0x0, 0x5, 0x2, 0x1}, {0x1, 0x4, 0x9, 0x8}, {0x1, 0x5, 0x9, 0x2}, {0x0, 0x4, 0x3}], 0x10, 0x200, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00438b0000000000000000000000000000000000000000140c07211937c5da00"/54], 0x40}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m19.931520137s ago: executing program 2 (id=41): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x4040054) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x54}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000906000000000023e626ec000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100767469000c000280080001"], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="795431d21800a6826ef390ae6f", @ANYRES16=r7, @ANYBLOB="010000000000000000001500000004000180"], 0x18}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xff, 0x44}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8091}, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1m19.794988164s ago: executing program 3 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000010300006744a50d0000020014000000000110000000080002"], 0x3b}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000010300006744a50d0000020014000000000110000000080002"], 0x3b}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) 1m19.51089506s ago: executing program 3 (id=43): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) pipe(0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x5760, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x38, 0x21, 0x107, 0x0, 0x0, {0x2, 0x2}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private2}]}, 0x38}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e24, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x4, "a000"}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8c4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) 1m19.47770881s ago: executing program 0 (id=44): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 1m19.24353573s ago: executing program 0 (id=45): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x3, 0x67) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x8000, 0x5}, &(0x7f0000000040)=0xc) sendto$unix(r1, 0x0, 0x0, 0x4008000, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) recvfrom$packet(r1, &(0x7f00000007c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) 1m19.08874447s ago: executing program 1 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x20, 0x28, 0x107, 0x0, 0x0, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m18.835285502s ago: executing program 3 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r3, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x8, 0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x73, 0x73, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x7e, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @datasec={0xa, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x4, 0x8c}, {0x2, 0x7, 0x9}, {0x4, 0xc00, 0x5}, {0x1, 0x0, 0xfffff8c8}, {0x5, 0x5, 0x7724776f}, {0x2, 0x80, 0x1}], "b7a82b"}]}, {0x0, [0x2e, 0x30, 0x0, 0x0]}}, &(0x7f0000000140)=""/4, 0x92, 0x4, 0x0, 0x4, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x4, 0x9, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffc}, @generic={0x4a, 0x0, 0x5, 0x30ce, 0x7cde}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x1c, '\x00', r7, 0x17, r8, 0x8, &(0x7f0000001480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0x2, 0x4, 0x8}, 0x10, 0x25447, r1, 0x3, &(0x7f0000001500)=[r0, r0, r0], &(0x7f0000001540)=[{0x2, 0x5, 0xe, 0x4}, {0x0, 0x5, 0x1, 0x9}, {0x3, 0x1, 0x2, 0x4}], 0x10, 0xc2, @void, @value}, 0x94) 1m18.586923058s ago: executing program 2 (id=48): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r8, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x7fffffff, @mcast1, 0xc}, @in6={0xa, 0x4e22, 0x6, @local, 0x3}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x3, @private0, 0x5}, @in6={0xa, 0x4e24, 0x400, @mcast1, 0x6}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe8}], 0x9c) getsockopt(r5, 0x1, 0x27, 0x0, &(0x7f0000000080)) 1m18.278581544s ago: executing program 0 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) 1m18.174577587s ago: executing program 3 (id=50): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x4, 0x21}, {0x8, 0x0, 0x0, 0x0, 0x8000000}]}}, @AF_MPLS={0x4}]}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x906, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xe}, {0xffff}}}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r8, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x50}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) 1m17.959120712s ago: executing program 1 (id=51): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x30, r0, 0x2aa30000) 973.961958ms ago: executing program 1 (id=53): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050033000100000008000300", @ANYRES32=r3], 0x24}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x6, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000080)=""/6, 0x28, 0x6, 0x0, 0x1cb80000, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffffffe, 0x6, 0x0, 0x42120, 0xffffffffffffffff, 0xb19c, '\x00', r3, r6, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 0s ago: executing program 1 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000100)=0x8, 0x4) getsockname$packet(r3, &(0x7f00000001c0), &(0x7f00000002c0)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x8, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x400, 0x2000000, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x3, 0x1, 0x2, 0x2}]}, 0x10) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000200), 0x4) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "725330451e7753bf"}, 0x10}, 0x2}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002dbd7000000000002e000000200034004ef4a8440142e7600273f5955fe300e5f9ac2f60a363689acad4dc96060066000000000004006700"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 66.169731][ T5222] cgroup: Unknown subsys name 'net' [ 66.297580][ T5222] cgroup: Unknown subsys name 'cpuset' [ 66.306669][ T5222] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.857131][ T5222] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.130638][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.152123][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.161567][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.178977][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.188200][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.196215][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.214890][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.217044][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.230502][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.231819][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.247238][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.255499][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.274361][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.284521][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.299566][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.310395][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.310668][ T5253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.317759][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.335691][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.343294][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.344134][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.360176][ T5253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.368251][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.378567][ T5253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.389359][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.389595][ T4622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.410823][ T5253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.418262][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.428125][ T5253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.435820][ T5253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.830122][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 70.864758][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 70.965864][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 71.106172][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 71.125244][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.132399][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.140593][ T5233] bridge_slave_0: entered allmulticast mode [ 71.148513][ T5233] bridge_slave_0: entered promiscuous mode [ 71.158146][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.165372][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.172583][ T5232] bridge_slave_0: entered allmulticast mode [ 71.180108][ T5232] bridge_slave_0: entered promiscuous mode [ 71.208257][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 71.221973][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.229428][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.236892][ T5233] bridge_slave_1: entered allmulticast mode [ 71.243852][ T5233] bridge_slave_1: entered promiscuous mode [ 71.250917][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.258203][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.265625][ T5232] bridge_slave_1: entered allmulticast mode [ 71.272415][ T5232] bridge_slave_1: entered promiscuous mode [ 71.360473][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.368727][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.376359][ T5241] bridge_slave_0: entered allmulticast mode [ 71.383170][ T5241] bridge_slave_0: entered promiscuous mode [ 71.420202][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.442601][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.450726][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.458697][ T5241] bridge_slave_1: entered allmulticast mode [ 71.466275][ T5241] bridge_slave_1: entered promiscuous mode [ 71.487953][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.509105][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.525558][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.589144][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.596513][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.608140][ T5242] bridge_slave_0: entered allmulticast mode [ 71.615226][ T5242] bridge_slave_0: entered promiscuous mode [ 71.625524][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.645323][ T5233] team0: Port device team_slave_0 added [ 71.660934][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.668273][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.676089][ T5242] bridge_slave_1: entered allmulticast mode [ 71.682979][ T5242] bridge_slave_1: entered promiscuous mode [ 71.691525][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.701104][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.708376][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.716455][ T5243] bridge_slave_0: entered allmulticast mode [ 71.723354][ T5243] bridge_slave_0: entered promiscuous mode [ 71.731672][ T5233] team0: Port device team_slave_1 added [ 71.751354][ T5232] team0: Port device team_slave_0 added [ 71.776819][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.784109][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.791414][ T5243] bridge_slave_1: entered allmulticast mode [ 71.799039][ T5243] bridge_slave_1: entered promiscuous mode [ 71.817994][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.825009][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.850932][ T5232] team0: Port device team_slave_1 added [ 71.883203][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.890645][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.917083][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.949787][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.962715][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.983874][ T5241] team0: Port device team_slave_0 added [ 71.992408][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.005241][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.015167][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.022154][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.048648][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.060468][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.067973][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.094315][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.118969][ T5241] team0: Port device team_slave_1 added [ 72.143881][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.151067][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.177882][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.219089][ T5243] team0: Port device team_slave_0 added [ 72.235785][ T5242] team0: Port device team_slave_0 added [ 72.242403][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.249690][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.276050][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.288959][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.296681][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.322965][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.335915][ T5243] team0: Port device team_slave_1 added [ 72.362733][ T5242] team0: Port device team_slave_1 added [ 72.374336][ T5245] Bluetooth: hci1: command tx timeout [ 72.402666][ T5233] hsr_slave_0: entered promiscuous mode [ 72.410428][ T5233] hsr_slave_1: entered promiscuous mode [ 72.444224][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.451233][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.477606][ T5245] Bluetooth: hci3: command tx timeout [ 72.477875][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.484323][ T5253] Bluetooth: hci2: command tx timeout [ 72.499723][ T5245] Bluetooth: hci0: command tx timeout [ 72.533610][ T5253] Bluetooth: hci4: command tx timeout [ 72.552696][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.560240][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.586545][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.598158][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.608030][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.635777][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.660318][ T5232] hsr_slave_0: entered promiscuous mode [ 72.666791][ T5232] hsr_slave_1: entered promiscuous mode [ 72.672865][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.680880][ T5232] Cannot create hsr debugfs directory [ 72.703865][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.710964][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.737853][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.771617][ T5241] hsr_slave_0: entered promiscuous mode [ 72.778483][ T5241] hsr_slave_1: entered promiscuous mode [ 72.784843][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.792420][ T5241] Cannot create hsr debugfs directory [ 72.868351][ T5242] hsr_slave_0: entered promiscuous mode [ 72.875844][ T5242] hsr_slave_1: entered promiscuous mode [ 72.881941][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.889775][ T5242] Cannot create hsr debugfs directory [ 72.971526][ T5243] hsr_slave_0: entered promiscuous mode [ 72.985652][ T5243] hsr_slave_1: entered promiscuous mode [ 72.992187][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.000628][ T5243] Cannot create hsr debugfs directory [ 73.196373][ T5233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.251035][ T5233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.280320][ T5233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.295695][ T5233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.361172][ T5232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.375265][ T5232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.401294][ T5232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.419770][ T5232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.469876][ T5241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.480379][ T5241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.496718][ T5241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.530237][ T5241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.600833][ T5242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.611620][ T5242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.622650][ T5242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.637278][ T5242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.764219][ T5243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.775892][ T5243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.788572][ T5243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.815189][ T5243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.842479][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.862055][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.911467][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.965713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.973021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.012130][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.020067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.038488][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.058408][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.079994][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.094542][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.101678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.110770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.117975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.180590][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.206236][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.238061][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.245288][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.270783][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.299720][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.307452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.322543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.329719][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.369717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.377049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.451383][ T5241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.464806][ T5253] Bluetooth: hci1: command tx timeout [ 74.484268][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.530488][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.537492][ T5253] Bluetooth: hci3: command tx timeout [ 74.544427][ T5253] Bluetooth: hci2: command tx timeout [ 74.549896][ T5253] Bluetooth: hci0: command tx timeout [ 74.625299][ T5253] Bluetooth: hci4: command tx timeout [ 74.661072][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.688672][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.695917][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.718439][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.747537][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.754780][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.865182][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.960839][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.999281][ T5232] veth0_vlan: entered promiscuous mode [ 75.063037][ T5233] veth0_vlan: entered promiscuous mode [ 75.107691][ T5232] veth1_vlan: entered promiscuous mode [ 75.116800][ T5233] veth1_vlan: entered promiscuous mode [ 75.158144][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.222257][ T5232] veth0_macvtap: entered promiscuous mode [ 75.240788][ T5233] veth0_macvtap: entered promiscuous mode [ 75.260833][ T5232] veth1_macvtap: entered promiscuous mode [ 75.307388][ T5233] veth1_macvtap: entered promiscuous mode [ 75.331866][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.369738][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.383906][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.397122][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.414629][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.435763][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.447899][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.460351][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.480821][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.501814][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.511580][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.523565][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.532322][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.543002][ T5242] veth0_vlan: entered promiscuous mode [ 75.570910][ T5232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.580159][ T5232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.589401][ T5232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598585][ T5232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.614757][ T5242] veth1_vlan: entered promiscuous mode [ 75.711548][ T5241] veth0_vlan: entered promiscuous mode [ 75.759165][ T5243] veth0_vlan: entered promiscuous mode [ 75.801984][ T5241] veth1_vlan: entered promiscuous mode [ 75.817441][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.825887][ T5243] veth1_vlan: entered promiscuous mode [ 75.843413][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.881998][ T5242] veth0_macvtap: entered promiscuous mode [ 75.899739][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.923496][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.936672][ T5242] veth1_macvtap: entered promiscuous mode [ 75.969875][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.989451][ T5241] veth0_macvtap: entered promiscuous mode [ 75.995518][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.032617][ T5241] veth1_macvtap: entered promiscuous mode [ 76.051335][ T5243] veth0_macvtap: entered promiscuous mode [ 76.066085][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.079097][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.085787][ T5233] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.100096][ T5243] veth1_macvtap: entered promiscuous mode [ 76.112384][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.124831][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.136589][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.147864][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.159593][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.180899][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.197381][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.208748][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.222431][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.244890][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.256740][ T5242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.273704][ T5242] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.282560][ T5242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.291948][ T5242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.308299][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.320047][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.331660][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.342616][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.363665][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.389530][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.403024][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.420814][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.432712][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.442962][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.453810][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.463894][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.474428][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.484425][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.494990][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.506579][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.516725][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.527303][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.537387][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.543714][ T5253] Bluetooth: hci1: command tx timeout [ 76.548038][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.563389][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.574162][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.586487][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.596842][ T5241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.605764][ T5241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.614904][ T5241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.623779][ T5241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.637232][ T5253] Bluetooth: hci0: command tx timeout [ 76.637331][ T5245] Bluetooth: hci2: command tx timeout [ 76.642793][ T5253] Bluetooth: hci3: command tx timeout [ 76.670010][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.682231][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.692329][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.704305][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.704469][ T5238] Bluetooth: hci4: command tx timeout [ 76.714334][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.730309][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.741092][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.753855][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.765615][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.780753][ T5243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.789958][ T5243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802889][ T5243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.818544][ T5243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.855926][ T5328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.900669][ T5328] Zero length message leads to an empty skb [ 77.042915][ T5331] : renamed from bond0 (while UP) [ 77.081139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.089304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.171652][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.175188][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.196659][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.211277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.278913][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.311706][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.339882][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.356500][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.461399][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.470813][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.961067][ T5353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 78.006183][ T5352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'. [ 78.030122][ T5357] netem: change failed [ 78.056218][ T5358] openvswitch: netlink: Actions may not be safe on all matching packets [ 78.185128][ T5362] ax25_connect(): syz.3.14 uses autobind, please contact jreuter@yaina.de [ 78.217427][ T5371] netlink: 'syz.0.18': attribute type 13 has an invalid length. [ 78.225450][ T5371] netlink: 'syz.0.18': attribute type 58 has an invalid length. [ 78.233636][ T5371] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18'. [ 78.400638][ T5362] netlink: 'syz.3.14': attribute type 21 has an invalid length. [ 78.409354][ T5362] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14'. [ 78.624453][ T5238] Bluetooth: hci1: command tx timeout [ 78.691315][ T5385] netlink: 'syz.3.24': attribute type 9 has an invalid length. [ 78.700069][ T5238] Bluetooth: hci3: command tx timeout [ 78.705654][ T5238] Bluetooth: hci2: command tx timeout [ 78.711201][ T5238] Bluetooth: hci0: command tx timeout [ 78.769297][ T5390] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.792084][ T5253] Bluetooth: hci4: command tx timeout [ 79.041393][ T5396] macvtap0: entered promiscuous mode [ 79.063574][ T5402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.084563][ T5396] macvtap0: entered allmulticast mode [ 79.090038][ T5396] veth0_macvtap: entered allmulticast mode [ 79.687603][ T2893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.826600][ T2893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.921457][ T47] IPVS: starting estimator thread 0... [ 79.934845][ T5425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'. [ 79.961468][ T5425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'. [ 80.059356][ T5431] IPVS: using max 17 ests per chain, 40800 per kthread [ 80.064828][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 80.080032][ T5425] gretap1: entered promiscuous mode [ 80.087241][ T5425] gretap1: entered allmulticast mode [ 80.135407][ T2893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.162310][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 80.244776][ T5433] lo speed is unknown, defaulting to 1000 [ 80.298217][ T5444] openvswitch: netlink: Actions may not be safe on all matching packets [ 80.341601][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.351080][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.360406][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.369099][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.377349][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.392268][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.394988][ T2893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.434612][ T5455] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 80.477996][ T5433] lo speed is unknown, defaulting to 1000 [ 80.491428][ T5456] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 80.521637][ T5458] raw_sendmsg: syz.0.45 forgot to set AF_INET. Fix it! [ 80.532289][ T5433] lo speed is unknown, defaulting to 1000 [ 80.546905][ T5433] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.557909][ T5433] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -1 [ 80.582658][ T5433] lo speed is unknown, defaulting to 1000 [ 80.590833][ T5433] lo speed is unknown, defaulting to 1000 [ 80.770556][ T5433] lo speed is unknown, defaulting to 1000 [ 80.823030][ T5449] lo speed is unknown, defaulting to 1000 [ 80.857590][ T5433] lo speed is unknown, defaulting to 1000 [ 80.902112][ T5460] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 80.951787][ T5433] lo speed is unknown, defaulting to 1000 [ 81.466864][ T2893] bridge_slave_1: left allmulticast mode [ 81.519380][ T2893] bridge_slave_1: left promiscuous mode [ 81.564003][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.761272][ T2893] bridge_slave_0: left allmulticast mode [ 81.801143][ T2893] bridge_slave_0: left promiscuous mode [ 81.829381][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.533479][ T5238] Bluetooth: hci3: command tx timeout [ 83.907465][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.065613][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.205774][ T2893] bond0 (unregistering): Released all slaves [ 84.433284][ C1] sched: DL replenish lagged too much [ 84.616568][ T5238] Bluetooth: hci3: command tx timeout [ 86.693515][ T5238] Bluetooth: hci3: command tx timeout [ 88.773510][ T5238] Bluetooth: hci3: command tx timeout [ 93.059234][ T5253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.068666][ T5253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.077423][ T5253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.093872][ T5253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.104390][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.114926][ T5253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.313732][ T5253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.340732][ T5253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.355003][ T5253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.363216][ T5253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.371557][ T5253] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.379153][ T5253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.809734][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.819117][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.827881][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.841031][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.849345][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.857220][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.934819][ T5253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.944849][ T5253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.953873][ T5253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.964170][ T5253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.971935][ T5253] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.990094][ T5253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.173506][ T5253] Bluetooth: hci0: command tx timeout [ 95.413464][ T5253] Bluetooth: hci5: command tx timeout [ 95.895088][ T5253] Bluetooth: hci6: command tx timeout [ 96.053485][ T5253] Bluetooth: hci7: command tx timeout [ 97.253538][ T5253] Bluetooth: hci0: command tx timeout [ 97.493533][ T5253] Bluetooth: hci5: command tx timeout [ 97.973480][ T5253] Bluetooth: hci6: command tx timeout [ 98.133520][ T5253] Bluetooth: hci7: command tx timeout [ 99.333534][ T5253] Bluetooth: hci0: command tx timeout [ 99.583562][ T5253] Bluetooth: hci5: command tx timeout [ 100.053529][ T5253] Bluetooth: hci6: command tx timeout [ 100.213552][ T5253] Bluetooth: hci7: command tx timeout [ 101.413453][ T5253] Bluetooth: hci0: command tx timeout [ 101.653979][ T5253] Bluetooth: hci5: command tx timeout [ 102.133615][ T5253] Bluetooth: hci6: command tx timeout [ 102.293554][ T5253] Bluetooth: hci7: command tx timeout [ 133.271708][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283298][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.748383][ T25] cfg80211: failed to load regulatory.db [ 143.588375][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.601755][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.611126][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.620174][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.638444][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.654825][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.828835][ T5483] lo speed is unknown, defaulting to 1000 [ 143.857071][ T5488] lo speed is unknown, defaulting to 1000 [ 145.733505][ T5253] Bluetooth: hci1: command tx timeout [ 147.813595][ T5253] Bluetooth: hci1: command tx timeout [ 149.893391][ T5253] Bluetooth: hci1: command tx timeout [ 151.973588][ T5253] Bluetooth: hci1: command tx timeout [ 153.124041][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.135179][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.151516][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.159775][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.169565][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.177043][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.194917][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.202584][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.211043][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.219139][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.226766][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.234560][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.358172][ T5501] lo speed is unknown, defaulting to 1000 [ 153.569743][ T5501] chnl_net:caif_netlink_parms(): no params data found [ 154.031541][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.061132][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.093742][ T5501] bridge_slave_0: entered allmulticast mode [ 154.100961][ T5501] bridge_slave_0: entered promiscuous mode [ 154.161543][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.200941][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.221549][ T5501] bridge_slave_1: entered allmulticast mode [ 154.267882][ T5501] bridge_slave_1: entered promiscuous mode [ 154.446206][ T5501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.491635][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.503861][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.515789][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.525487][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.545169][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.553466][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.574479][ T5501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.642961][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 154.652174][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 154.660839][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 154.671988][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 154.691301][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 154.700148][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 154.820496][ T5501] team0: Port device team_slave_0 added [ 154.837374][ T5501] team0: Port device team_slave_1 added [ 154.927684][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.939870][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.975560][ T5501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.996675][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.010390][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.049838][ T5501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.196319][ T5501] hsr_slave_0: entered promiscuous mode [ 155.208621][ T5501] hsr_slave_1: entered promiscuous mode [ 155.221065][ T5501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.237050][ T5501] Cannot create hsr debugfs directory [ 155.334122][ T5245] Bluetooth: hci2: command tx timeout [ 155.342194][ T55] Bluetooth: hci3: command tx timeout [ 155.550612][ T5501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.015957][ T5501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.399759][ T5501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.613487][ T55] Bluetooth: hci4: command tx timeout [ 156.728888][ T5501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.773559][ T55] Bluetooth: hci8: command tx timeout [ 157.104307][ T5501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.131804][ T5501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.170396][ T5501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.201243][ T5501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.244066][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.251463][ T5501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.259876][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.267194][ T5501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.371640][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.413667][ T55] Bluetooth: hci3: command tx timeout [ 157.419179][ T55] Bluetooth: hci2: command tx timeout [ 157.433821][ T5501] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.761186][ T5501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.842795][ T5501] veth0_vlan: entered promiscuous mode [ 157.864990][ T5501] veth1_vlan: entered promiscuous mode [ 157.912997][ T5501] veth0_macvtap: entered promiscuous mode [ 157.927165][ T5501] veth1_macvtap: entered promiscuous mode [ 157.962991][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.983019][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.998675][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.017398][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.031498][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.046965][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.072444][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.083532][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.103028][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.121234][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.139195][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.156430][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.177784][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.191334][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.207044][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.228713][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.242462][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.261951][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.273006][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.294880][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.315403][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.332204][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.347532][ T5501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.365871][ T5501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.381516][ T5501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.397093][ T5501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.567220][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.602593][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.649909][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.668214][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.693479][ T55] Bluetooth: hci4: command tx timeout [ 158.865737][ T55] Bluetooth: hci8: command tx timeout [ 158.909380][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 158.923531][ T5524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.931030][ T5524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.970364][ T5524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.983524][ T5524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.493534][ T55] Bluetooth: hci2: command tx timeout [ 159.499083][ T5245] Bluetooth: hci3: command tx timeout [ 159.864433][ T5526] pim6reg: entered allmulticast mode [ 159.871593][ T5526] pim6reg: left allmulticast mode [ 160.774571][ T55] Bluetooth: hci4: command tx timeout [ 160.933483][ T55] Bluetooth: hci8: command tx timeout [ 161.573606][ T5245] Bluetooth: hci3: command tx timeout [ 161.579238][ T55] Bluetooth: hci2: command tx timeout [ 162.853438][ T55] Bluetooth: hci4: command tx timeout [ 163.013411][ T55] Bluetooth: hci8: command tx timeout [ 170.560207][ T5245] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 170.572329][ T5245] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 170.581408][ T5245] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 170.589819][ T5245] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 170.606953][ T5245] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 170.615904][ T5245] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 170.701834][ T5529] lo speed is unknown, defaulting to 1000 [ 170.911512][ T5529] chnl_net:caif_netlink_parms(): no params data found [ 171.172350][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.180172][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.196018][ T5529] bridge_slave_0: entered allmulticast mode [ 171.210338][ T5529] bridge_slave_0: entered promiscuous mode [ 171.220461][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.235540][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.242871][ T5529] bridge_slave_1: entered allmulticast mode [ 171.262444][ T5529] bridge_slave_1: entered promiscuous mode [ 171.423724][ T5529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.446187][ T5529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.647917][ T5529] team0: Port device team_slave_0 added [ 171.669704][ T5529] team0: Port device team_slave_1 added [ 171.757757][ T5529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.774794][ T5529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.811197][ T5529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.826880][ T5529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.842213][ T5529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.877532][ T5529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.144519][ T5529] hsr_slave_0: entered promiscuous mode [ 172.184702][ T5529] hsr_slave_1: entered promiscuous mode [ 172.192796][ T5529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.207687][ T5529] Cannot create hsr debugfs directory [ 172.698377][ T55] Bluetooth: hci9: command tx timeout [ 174.780002][ T55] Bluetooth: hci9: command tx timeout [ 176.860558][ T55] Bluetooth: hci9: command tx timeout [ 178.951066][ T55] Bluetooth: hci9: command tx timeout [ 194.714033][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720591][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.229921][ T5245] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 202.239440][ T5245] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 202.247815][ T5245] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 202.256994][ T5245] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 202.268413][ T5245] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 202.276317][ T5245] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 204.373577][ T5245] Bluetooth: hci10: command tx timeout [ 206.453525][ T5245] Bluetooth: hci10: command tx timeout [ 208.175974][ T5529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.533581][ T5245] Bluetooth: hci10: command tx timeout [ 210.613460][ T5245] Bluetooth: hci10: command tx timeout [ 213.158437][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 213.167825][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 213.176065][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 213.184542][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 213.192371][ T55] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 213.208345][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 214.467727][ T5245] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 214.477151][ T5245] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 214.493483][ T5245] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 214.503084][ T5245] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 214.512418][ T5245] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 214.520180][ T5245] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 214.606015][ T5245] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 214.616016][ T5245] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 214.625002][ T5245] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 214.633072][ T5245] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 214.640943][ T5245] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 214.649136][ T5245] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 215.253517][ T55] Bluetooth: hci11: command tx timeout [ 216.613708][ T55] Bluetooth: hci12: command tx timeout [ 216.693528][ T55] Bluetooth: hci13: command tx timeout [ 217.280985][ T4622] Bluetooth: hci7: command 0x0406 tx timeout [ 217.287283][ T5250] Bluetooth: hci6: command 0x0406 tx timeout [ 217.293420][ T5251] Bluetooth: hci0: command 0x0406 tx timeout [ 217.299498][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 217.343747][ T5238] Bluetooth: hci11: command tx timeout [ 218.693507][ T5253] Bluetooth: hci12: command tx timeout [ 218.773662][ T5253] Bluetooth: hci13: command tx timeout [ 219.413488][ T5253] Bluetooth: hci11: command tx timeout [ 220.773553][ T5253] Bluetooth: hci12: command tx timeout [ 220.863652][ T5253] Bluetooth: hci13: command tx timeout [ 221.493585][ T5253] Bluetooth: hci11: command tx timeout [ 222.853515][ T5253] Bluetooth: hci12: command tx timeout [ 222.933620][ T5253] Bluetooth: hci13: command tx timeout [ 231.938323][ T5240] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 231.947992][ T5240] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 231.956312][ T5240] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 231.978048][ T5240] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 231.986201][ T5240] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 231.993852][ T5240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 234.053440][ T5240] Bluetooth: hci14: command tx timeout [ 236.133421][ T5240] Bluetooth: hci14: command tx timeout [ 238.213544][ T5240] Bluetooth: hci14: command tx timeout [ 240.293697][ T5240] Bluetooth: hci14: command tx timeout [ 256.143890][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.150266][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.824116][ T5253] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 263.833110][ T5253] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 263.844970][ T5253] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 263.854767][ T5253] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 263.871243][ T5253] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 263.879750][ T5253] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 265.983725][ T5253] Bluetooth: hci15: command tx timeout [ 268.053375][ T5253] Bluetooth: hci15: command tx timeout [ 268.460496][ T5253] Bluetooth: hci1: command 0x0406 tx timeout [ 270.133571][ T5240] Bluetooth: hci15: command tx timeout [ 272.213538][ T5240] Bluetooth: hci15: command tx timeout [ 273.574066][ T5253] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 273.582806][ T5253] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 273.591099][ T5253] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 273.599295][ T5253] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 273.608169][ T5253] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 273.616405][ T5253] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 274.928589][ T5240] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 274.937654][ T5240] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 274.946181][ T5240] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 274.957018][ T5240] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 274.965218][ T5240] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 274.974256][ T5240] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 275.052263][ T5253] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 275.061683][ T5253] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 275.071531][ T5253] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 275.081639][ T5253] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 275.092494][ T5253] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 275.101425][ T5253] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 275.653501][ T5253] Bluetooth: hci16: command tx timeout [ 275.958616][ T5529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.013439][ T5253] Bluetooth: hci17: command tx timeout [ 277.173408][ T5253] Bluetooth: hci18: command tx timeout [ 277.733441][ T5253] Bluetooth: hci16: command tx timeout [ 278.717779][ T5253] Bluetooth: hci8: command 0x0406 tx timeout [ 278.724156][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 278.730255][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 278.736660][ T4622] Bluetooth: hci4: command 0x0406 tx timeout [ 279.093475][ T5240] Bluetooth: hci17: command tx timeout [ 279.253372][ T5240] Bluetooth: hci18: command tx timeout [ 279.813426][ T5240] Bluetooth: hci16: command tx timeout [ 281.175791][ T5240] Bluetooth: hci17: command tx timeout [ 281.343717][ T5240] Bluetooth: hci18: command tx timeout [ 281.893714][ T5240] Bluetooth: hci16: command tx timeout [ 283.253324][ T5240] Bluetooth: hci17: command tx timeout [ 283.413389][ T5240] Bluetooth: hci18: command tx timeout [ 291.333810][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 291.341532][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 291.403347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.412108][ T30] task:kworker/u8:0 state:D stack:21784 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 291.483291][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 291.490624][ T30] Call Trace: [ 291.533274][ T30] [ 291.536364][ T30] __schedule+0x1895/0x4b30 [ 291.540950][ T30] ? __pfx___schedule+0x10/0x10 [ 291.593397][ T30] ? __pfx_lock_release+0x10/0x10 [ 291.598521][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 291.633426][ T30] ? kthread_data+0x52/0xd0 [ 291.638042][ T30] ? schedule+0x90/0x320 [ 291.642342][ T30] ? wq_worker_sleeping+0x66/0x240 [ 291.693764][ T30] ? schedule+0x90/0x320 [ 291.698117][ T30] schedule+0x14b/0x320 [ 291.702333][ T30] schedule_preempt_disabled+0x13/0x30 [ 291.760308][ T30] __mutex_lock+0x6a7/0xd70 [ 291.778520][ T30] ? __mutex_lock+0x52a/0xd70 [ 291.803495][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 291.810027][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 291.848285][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 291.880723][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.905792][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 291.912764][ T30] ? process_scheduled_works+0x976/0x1850 [ 291.963528][ T30] process_scheduled_works+0xa63/0x1850 [ 291.969210][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.022020][ T30] ? assign_work+0x364/0x3d0 [ 292.043414][ T30] worker_thread+0x870/0xd30 [ 292.048128][ T30] ? __kthread_parkme+0x169/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.125633][ T30] ? __pfx_worker_thread+0x10/0x10 [ 292.130930][ T30] kthread+0x2f0/0x390 [ 292.211823][ T30] ? __pfx_worker_thread+0x10/0x10 [ 292.240637][ T30] ? __pfx_kthread+0x10/0x10 [ 292.246097][ T30] ret_from_fork+0x4b/0x80 [ 292.250673][ T30] ? __pfx_kthread+0x10/0x10 [ 292.281144][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.291046][ T30] [ 292.313451][ T30] INFO: task kworker/u8:1:12 blocked for more than 144 seconds. [ 292.331670][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 292.353459][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.362207][ T30] task:kworker/u8:1 state:D stack:19696 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 292.410346][ T30] Workqueue: events_unbound linkwatch_event [ 292.423305][ T30] Call Trace: [ 292.426660][ T30] [ 292.429630][ T30] __schedule+0x1895/0x4b30 [ 292.453640][ T30] ? __pfx___schedule+0x10/0x10 [ 292.458614][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.479760][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 292.493429][ T30] ? kthread_data+0x52/0xd0 [ 292.498944][ T30] ? schedule+0x90/0x320 [ 292.530282][ T30] ? wq_worker_sleeping+0x66/0x240 [ 292.536175][ T30] ? schedule+0x90/0x320 [ 292.540559][ T30] schedule+0x14b/0x320 [ 292.560825][ T30] schedule_preempt_disabled+0x13/0x30 [ 292.580410][ T30] __mutex_lock+0x6a7/0xd70 [ 292.593417][ T30] ? __mutex_lock+0x52a/0xd70 [ 292.599195][ T30] ? linkwatch_event+0xe/0x60 [ 292.623334][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 292.628462][ T30] ? process_scheduled_works+0x976/0x1850 [ 292.661559][ T30] linkwatch_event+0xe/0x60 [ 292.680980][ T30] process_scheduled_works+0xa63/0x1850 [ 292.710763][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.731319][ T30] ? assign_work+0x364/0x3d0 [ 292.743239][ T30] worker_thread+0x870/0xd30 [ 292.747944][ T30] ? __kthread_parkme+0x169/0x1d0 [ 292.753059][ T30] ? __pfx_worker_thread+0x10/0x10 [ 292.793431][ T30] kthread+0x2f0/0x390 [ 292.797591][ T30] ? __pfx_worker_thread+0x10/0x10 [ 292.821994][ T30] ? __pfx_kthread+0x10/0x10 [ 292.848533][ T30] ret_from_fork+0x4b/0x80 [ 292.853046][ T30] ? __pfx_kthread+0x10/0x10 [ 292.873990][ T5245] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 292.883355][ T5245] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 292.893738][ T5245] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 292.902839][ T5245] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 292.912038][ T5245] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 292.919736][ T5245] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 292.953226][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.958105][ T30] [ 293.048278][ T30] INFO: task kworker/1:0:25 blocked for more than 145 seconds. [ 293.074442][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 293.082231][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.102559][ T30] task:kworker/1:0 state:D stack:24880 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 293.133278][ T30] Workqueue: events request_firmware_work_func [ 293.139542][ T30] Call Trace: [ 293.142857][ T30] [ 293.153087][ T30] __schedule+0x1895/0x4b30 [ 293.158162][ T30] ? __pfx___schedule+0x10/0x10 [ 293.163085][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.173630][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 293.179163][ T30] ? kthread_data+0x52/0xd0 [ 293.197028][ T30] ? schedule+0x90/0x320 [ 293.201620][ T30] ? wq_worker_sleeping+0x66/0x240 [ 293.217433][ T30] ? schedule+0x90/0x320 [ 293.221773][ T30] schedule+0x14b/0x320 [ 293.228939][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.239559][ T30] __mutex_lock+0x6a7/0xd70 [ 293.247101][ T30] ? __mutex_lock+0x52a/0xd70 [ 293.251844][ T30] ? regdb_fw_cb+0x82/0x1c0 [ 293.261801][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 293.272090][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 293.282161][ T30] regdb_fw_cb+0x82/0x1c0 [ 293.289422][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 293.299935][ T30] request_firmware_work_func+0x1a4/0x280 [ 293.309072][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 293.320725][ T30] ? process_scheduled_works+0x976/0x1850 [ 293.330760][ T30] process_scheduled_works+0xa63/0x1850 [ 293.339394][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.352662][ T30] ? assign_work+0x364/0x3d0 [ 293.360060][ T30] worker_thread+0x870/0xd30 [ 293.370465][ T30] ? __kthread_parkme+0x169/0x1d0 [ 293.378315][ T30] ? __pfx_worker_thread+0x10/0x10 [ 293.388583][ T30] kthread+0x2f0/0x390 [ 293.392811][ T30] ? __pfx_worker_thread+0x10/0x10 [ 293.400781][ T30] ? __pfx_kthread+0x10/0x10 [ 293.408262][ T30] ret_from_fork+0x4b/0x80 [ 293.412754][ T30] ? __pfx_kthread+0x10/0x10 [ 293.428954][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.438929][ T30] [ 293.442245][ T30] INFO: task kworker/u8:6:2893 blocked for more than 145 seconds. [ 293.459227][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 293.467867][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.483500][ T30] task:kworker/u8:6 state:D stack:22360 pid:2893 tgid:2893 ppid:2 flags:0x00004000 [ 293.502984][ T30] Workqueue: netns cleanup_net [ 293.508202][ T30] Call Trace: [ 293.511528][ T30] [ 293.519638][ T30] __schedule+0x1895/0x4b30 [ 293.529510][ T30] ? __pfx___schedule+0x10/0x10 [ 293.537455][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.542591][ T30] ? kthread_data+0x52/0xd0 [ 293.552512][ T30] ? wq_worker_sleeping+0x66/0x240 [ 293.560570][ T30] ? schedule+0x90/0x320 [ 293.570629][ T30] schedule+0x14b/0x320 [ 293.577887][ T30] schedule_timeout+0xb0/0x310 [ 293.582778][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 293.599370][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.607192][ T30] ? wait_for_completion+0x2fe/0x620 [ 293.612554][ T30] ? wait_for_completion+0x2fe/0x620 [ 293.622003][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.634891][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.640186][ T30] ? wait_for_completion+0x2fe/0x620 [ 293.650855][ T30] wait_for_completion+0x355/0x620 [ 293.658965][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 293.669926][ T30] ? __flush_work+0xe7/0xc50 [ 293.679852][ T30] __flush_work+0xa37/0xc50 [ 293.688535][ T30] ? __flush_work+0xe7/0xc50 [ 293.697760][ T30] ? __pfx___flush_work+0x10/0x10 [ 293.702856][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 293.712396][ T30] ? __pfx___cancel_work+0x10/0x10 [ 293.721508][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.733009][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 293.752802][ T30] __cancel_work_sync+0xbc/0x110 [ 293.763758][ T30] wiphy_unregister+0x594/0xb00 [ 293.768695][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 293.782240][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 293.788336][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 293.801526][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 293.807507][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 293.813126][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 293.829864][ T30] hwsim_exit_net+0x5c1/0x670 [ 293.843334][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 293.848848][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 293.862641][ T30] cleanup_net+0x802/0xcc0 [ 293.867486][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 293.873122][ T30] ? process_scheduled_works+0x976/0x1850 [ 293.886552][ T30] process_scheduled_works+0xa63/0x1850 [ 293.892289][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.903212][ T30] ? assign_work+0x364/0x3d0 [ 293.907930][ T30] worker_thread+0x870/0xd30 [ 293.912851][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.929583][ T30] ? __kthread_parkme+0x169/0x1d0 [ 293.939773][ T30] ? __pfx_worker_thread+0x10/0x10 [ 293.947735][ T30] kthread+0x2f0/0x390 [ 293.951904][ T30] ? __pfx_worker_thread+0x10/0x10 [ 293.962499][ T30] ? __pfx_kthread+0x10/0x10 [ 293.970734][ T30] ret_from_fork+0x4b/0x80 [ 293.981317][ T30] ? __pfx_kthread+0x10/0x10 [ 293.988185][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.993038][ T30] [ 294.004652][ T30] INFO: task kworker/u8:8:4437 blocked for more than 146 seconds. [ 294.012516][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 294.028081][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.039726][ T30] task:kworker/u8:8 state:D stack:21048 pid:4437 tgid:4437 ppid:2 flags:0x00004000 [ 294.058514][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 294.065013][ T5245] Bluetooth: hci9: command 0x0406 tx timeout [ 294.081033][ T30] Call Trace: [ 294.089008][ T30] [ 294.092010][ T30] __schedule+0x1895/0x4b30 [ 294.100537][ T30] ? __pfx___schedule+0x10/0x10 [ 294.109549][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.118576][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 294.128229][ T30] ? kthread_data+0x52/0xd0 [ 294.140169][ T30] ? schedule+0x90/0x320 [ 294.148587][ T30] ? wq_worker_sleeping+0x66/0x240 [ 294.157748][ T30] ? schedule+0x90/0x320 [ 294.162075][ T30] schedule+0x14b/0x320 [ 294.173535][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.179144][ T30] __mutex_lock+0x6a7/0xd70 [ 294.190762][ T30] ? mark_lock+0x9a/0x360 [ 294.195965][ T30] ? __mutex_lock+0x52a/0xd70 [ 294.200703][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 294.209224][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.220685][ T30] addrconf_dad_work+0xd0/0x16f0 [ 294.228515][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 294.240415][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.251938][ T30] ? process_scheduled_works+0x976/0x1850 [ 294.262865][ T30] process_scheduled_works+0xa63/0x1850 [ 294.271325][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.282456][ T30] ? assign_work+0x364/0x3d0 [ 294.290175][ T30] worker_thread+0x870/0xd30 [ 294.300611][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.309948][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.320255][ T30] ? __pfx_worker_thread+0x10/0x10 [ 294.330718][ T30] kthread+0x2f0/0x390 [ 294.338307][ T30] ? __pfx_worker_thread+0x10/0x10 [ 294.349264][ T30] ? __pfx_kthread+0x10/0x10 [ 294.355531][ T30] ret_from_fork+0x4b/0x80 [ 294.360024][ T30] ? __pfx_kthread+0x10/0x10 [ 294.371216][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.377904][ T30] [ 294.382056][ T30] INFO: task dhcpcd:4898 blocked for more than 146 seconds. [ 294.403390][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 294.411265][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.434531][ T30] task:dhcpcd state:D stack:23632 pid:4898 tgid:4898 ppid:1 flags:0x00000002 [ 294.456453][ T30] Call Trace: [ 294.459804][ T30] [ 294.462785][ T30] __schedule+0x1895/0x4b30 [ 294.473349][ T30] ? __pfx___schedule+0x10/0x10 [ 294.478301][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.493458][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 294.499029][ T30] ? schedule+0x90/0x320 [ 294.510873][ T30] schedule+0x14b/0x320 [ 294.515636][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.521170][ T30] __mutex_lock+0x6a7/0xd70 [ 294.533346][ T30] ? __mutex_lock+0x52a/0xd70 [ 294.538117][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 294.552647][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.558182][ T30] ? __might_fault+0xc6/0x120 [ 294.562933][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 294.573296][ T30] ? sock_ioctl+0x661/0x8e0 [ 294.577883][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 294.590767][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 294.597349][ T30] sock_ioctl+0x680/0x8e0 [ 294.601762][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 294.614543][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 294.619562][ T30] __se_sys_ioctl+0xf9/0x170 [ 294.630759][ T30] do_syscall_64+0xf3/0x230 [ 294.637391][ T30] ? clear_bhb_loop+0x35/0x90 [ 294.642224][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.660676][ T30] RIP: 0033:0x7f5106733d49 [ 294.665616][ T30] RSP: 002b:00007ffd5e351a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.681524][ T30] RAX: ffffffffffffffda RBX: 00005619229938a0 RCX: 00007f5106733d49 [ 294.690144][ T30] RDX: 00007ffd5e351a30 RSI: 0000000000008982 RDI: 0000000000000011 [ 294.706240][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 294.718535][ T30] R10: 00007ffd5e3620b0 R11: 0000000000000246 R12: 00007ffd5e351a30 [ 294.733080][ T30] R13: 00007ffd5e351af0 R14: 00005619229938a0 R15: 00005619229928a0 [ 294.745291][ T30] [ 294.749895][ T30] INFO: task syz.0.49:5465 blocked for more than 146 seconds. [ 294.765971][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 294.792379][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.801654][ T30] task:syz.0.49 state:D stack:24128 pid:5465 tgid:5464 ppid:5243 flags:0x00004002 [ 294.822002][ T30] Call Trace: [ 294.825806][ T30] [ 294.828789][ T30] __schedule+0x1895/0x4b30 [ 294.840945][ T30] ? __pfx___schedule+0x10/0x10 [ 294.846454][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.852885][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 294.870030][ T30] ? schedule+0x90/0x320 [ 294.877702][ T30] schedule+0x14b/0x320 [ 294.881935][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.893341][ T30] __mutex_lock+0x6a7/0xd70 [ 294.897916][ T30] ? __mutex_lock+0x52a/0xd70 [ 294.902637][ T30] ? tun_chr_close+0x3b/0x1b0 [ 294.917121][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.922224][ T30] ? __pfx_call_rcu+0x10/0x10 [ 294.932374][ T30] tun_chr_close+0x3b/0x1b0 [ 294.941746][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 294.953238][ T30] __fput+0x23f/0x880 [ 294.957332][ T30] task_work_run+0x24f/0x310 [ 294.961998][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 294.975030][ T30] ? __pfx_task_work_run+0x10/0x10 [ 294.980209][ T30] ? do_exit+0xa2a/0x28e0 [ 294.991930][ T30] ? kmem_cache_free+0x1a2/0x420 [ 294.998601][ T30] ? do_exit+0xa2a/0x28e0 [ 295.003081][ T30] do_exit+0xa2f/0x28e0 [ 295.013850][ T30] ? __pfx_do_exit+0x10/0x10 [ 295.018560][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.024399][ T5240] Bluetooth: hci19: command tx timeout [ 295.038454][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.047582][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.062543][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 295.070595][ T30] do_group_exit+0x207/0x2c0 [ 295.080256][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.088473][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.101508][ T30] get_signal+0x16a3/0x1740 [ 295.109036][ T30] ? __pfx_get_signal+0x10/0x10 [ 295.119464][ T30] arch_do_signal_or_restart+0x96/0x860 [ 295.127935][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 295.141143][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.150116][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 295.162266][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 295.170814][ T30] do_syscall_64+0x100/0x230 [ 295.183203][ T30] ? clear_bhb_loop+0x35/0x90 [ 295.187959][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.200751][ T30] RIP: 0033:0x7fdd0cb7dff9 [ 295.206106][ T30] RSP: 002b:00007fdd0d956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.224826][ T30] RAX: 0000000000000020 RBX: 00007fdd0cd35f80 RCX: 00007fdd0cb7dff9 [ 295.241362][ T30] RDX: 0000000000000000 RSI: 00000000200026c0 RDI: 0000000000000003 [ 295.249846][ T30] RBP: 00007fdd0cbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 295.263197][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.271239][ T30] R13: 0000000000000000 R14: 00007fdd0cd35f80 R15: 00007ffe8facc838 [ 295.285974][ T30] [ 295.289221][ T30] INFO: task syz.3.50:5469 blocked for more than 147 seconds. [ 295.306550][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 295.320249][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.332141][ T30] task:syz.3.50 state:D stack:23920 pid:5469 tgid:5466 ppid:5242 flags:0x00004002 [ 295.347830][ T30] Call Trace: [ 295.351164][ T30] [ 295.357136][ T30] __schedule+0x1895/0x4b30 [ 295.363566][ T30] ? __pfx___schedule+0x10/0x10 [ 295.368519][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.383392][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 295.389026][ T30] ? schedule+0x90/0x320 [ 295.400920][ T30] schedule+0x14b/0x320 [ 295.405712][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.411664][ T30] __mutex_lock+0x6a7/0xd70 [ 295.424257][ T30] ? __mutex_lock+0x52a/0xd70 [ 295.429101][ T30] ? tun_chr_close+0x3b/0x1b0 [ 295.440934][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.449571][ T30] ? __pfx_call_rcu+0x10/0x10 [ 295.462437][ T30] tun_chr_close+0x3b/0x1b0 [ 295.471981][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 295.483476][ T30] __fput+0x23f/0x880 [ 295.487596][ T30] task_work_run+0x24f/0x310 [ 295.492232][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 295.508236][ T30] ? __pfx_task_work_run+0x10/0x10 [ 295.516277][ T30] ? do_exit+0xa2a/0x28e0 [ 295.520677][ T30] ? kmem_cache_free+0x1a2/0x420 [ 295.532010][ T30] ? do_exit+0xa2a/0x28e0 [ 295.539365][ T30] do_exit+0xa2f/0x28e0 [ 295.549129][ T30] ? __pfx_do_exit+0x10/0x10 [ 295.558762][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.567940][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.581119][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.589092][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 295.600646][ T30] do_group_exit+0x207/0x2c0 [ 295.606922][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.612185][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.623280][ T30] get_signal+0x16a3/0x1740 [ 295.627966][ T30] ? __pfx_get_signal+0x10/0x10 [ 295.632968][ T30] arch_do_signal_or_restart+0x96/0x860 [ 295.648089][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 295.659130][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.670602][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 295.680428][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 295.690195][ T30] do_syscall_64+0x100/0x230 [ 295.698908][ T30] ? clear_bhb_loop+0x35/0x90 [ 295.707721][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.719832][ T30] RIP: 0033:0x7f293137dff9 [ 295.729113][ T30] RSP: 002b:00007f2932161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 295.742456][ T30] RAX: 0000000000000002 RBX: 00007f2931536058 RCX: 00007f293137dff9 [ 295.755273][ T30] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000a [ 295.768980][ T30] RBP: 00007f29313f0296 R08: 0000000000000000 R09: 0000000000000000 [ 295.781147][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.796169][ T30] R13: 0000000000000000 R14: 00007f2931536058 R15: 00007ffe8c91bf88 [ 295.822141][ T30] [ 295.826307][ T30] INFO: task syz.1.51:5471 blocked for more than 147 seconds. [ 295.841617][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 295.849911][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.863284][ T30] task:syz.1.51 state:D stack:23568 pid:5471 tgid:5470 ppid:5232 flags:0x00004002 [ 295.884503][ T30] Call Trace: [ 295.887996][ T30] [ 295.891082][ T30] __schedule+0x1895/0x4b30 [ 295.903689][ T30] ? __pfx___schedule+0x10/0x10 [ 295.908629][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.920419][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 295.926960][ T30] ? schedule+0x90/0x320 [ 295.931286][ T30] schedule+0x14b/0x320 [ 295.943230][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.948777][ T30] __mutex_lock+0x6a7/0xd70 [ 295.960347][ T30] ? __mutex_lock+0x52a/0xd70 [ 295.967878][ T30] ? tun_chr_close+0x3b/0x1b0 [ 295.972622][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.983737][ T30] ? __pfx_call_rcu+0x10/0x10 [ 295.988568][ T30] tun_chr_close+0x3b/0x1b0 [ 296.001219][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 296.006902][ T30] __fput+0x23f/0x880 [ 296.010962][ T30] task_work_run+0x24f/0x310 [ 296.023216][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 296.028639][ T30] ? __pfx_task_work_run+0x10/0x10 [ 296.041827][ T30] ? do_exit+0xa2a/0x28e0 [ 296.049198][ T30] ? kmem_cache_free+0x1a2/0x420 [ 296.061775][ T30] ? do_exit+0xa2a/0x28e0 [ 296.066575][ T30] do_exit+0xa2f/0x28e0 [ 296.070813][ T30] ? __pfx_do_exit+0x10/0x10 [ 296.079131][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.090421][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.098794][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.111513][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 296.118334][ T30] do_group_exit+0x207/0x2c0 [ 296.122992][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.133608][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 296.138915][ T30] get_signal+0x16a3/0x1740 [ 296.152793][ T30] ? __pfx_get_signal+0x10/0x10 [ 296.158158][ T30] arch_do_signal_or_restart+0x96/0x860 [ 296.171314][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 296.177948][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.193215][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 296.199036][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 296.214056][ T30] do_syscall_64+0x100/0x230 [ 296.218881][ T30] ? clear_bhb_loop+0x35/0x90 [ 296.231997][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.239981][ T30] RIP: 0033:0x7f405a77dff9 [ 296.249879][ T30] RSP: 002b:00007f405b560038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.261132][ T30] RAX: 0000000000000038 RBX: 00007f405a935f80 RCX: 00007f405a77dff9 [ 296.273192][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 296.281229][ T30] RBP: 00007f405a7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 296.299387][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.311361][ T30] R13: 0000000000000000 R14: 00007f405a935f80 R15: 00007ffc3e6811d8 [ 296.325320][ T30] [ 296.328514][ T30] INFO: task syz-executor:5479 blocked for more than 148 seconds. [ 296.342529][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 296.353063][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.369053][ T30] task:syz-executor state:D stack:24128 pid:5479 tgid:5479 ppid:1 flags:0x00000004 [ 296.382429][ T30] Call Trace: [ 296.392348][ T30] [ 296.398195][ T30] __schedule+0x1895/0x4b30 [ 296.402804][ T30] ? __pfx___schedule+0x10/0x10 [ 296.413064][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.420925][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 296.431867][ T30] ? schedule+0x90/0x320 [ 296.441152][ T30] schedule+0x14b/0x320 [ 296.451040][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.463197][ T30] __mutex_lock+0x6a7/0xd70 [ 296.467780][ T30] ? __mutex_lock+0x52a/0xd70 [ 296.472502][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 296.489404][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.497407][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 296.502434][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 296.512854][ T30] ? __lock_acquire+0x1384/0x2050 [ 296.520904][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.531825][ T30] netlink_rcv_skb+0x1e3/0x430 [ 296.543423][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.548980][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.561086][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.566802][ T30] netlink_unicast+0x7f6/0x990 [ 296.571647][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 296.583231][ T30] ? __virt_addr_valid+0x183/0x530 [ 296.588425][ T30] ? __check_object_size+0x48e/0x900 [ 296.602502][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 296.607802][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.621708][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 296.627064][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.632582][ T30] __sock_sendmsg+0x221/0x270 [ 296.647988][ T30] __sys_sendto+0x39b/0x4f0 [ 296.652592][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 296.660778][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.671108][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 296.680072][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.691355][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.709021][ T30] __x64_sys_sendto+0xde/0x100 [ 296.714383][ T30] do_syscall_64+0xf3/0x230 [ 296.718959][ T30] ? clear_bhb_loop+0x35/0x90 [ 296.731218][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.739767][ T30] RIP: 0033:0x7f190177fe8c [ 296.751942][ T30] RSP: 002b:00007ffd24fa7840 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 296.761728][ T30] RAX: ffffffffffffffda RBX: 00007f1902464620 RCX: 00007f190177fe8c [ 296.777403][ T30] RDX: 0000000000000028 RSI: 00007f1902464670 RDI: 0000000000000003 [ 296.790595][ T30] RBP: 0000000000000000 R08: 00007ffd24fa7894 R09: 000000000000000c [ 296.808586][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 296.819493][ T30] R13: 0000000000000000 R14: 00007f1902464670 R15: 0000000000000000 [ 296.832703][ T30] [ 296.835915][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 296.853078][ T30] INFO: task syz-executor:5483 blocked for more than 148 seconds. [ 296.872277][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 296.891852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.904944][ T30] task:syz-executor state:D stack:24128 pid:5483 tgid:5483 ppid:1 flags:0x00004006 [ 296.921487][ T30] Call Trace: [ 296.926367][ T30] [ 296.929369][ T30] __schedule+0x1895/0x4b30 [ 296.943308][ T30] ? __pfx___schedule+0x10/0x10 [ 296.948348][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.962685][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 296.968777][ T30] ? schedule+0x90/0x320 [ 296.973138][ T30] schedule+0x14b/0x320 [ 296.985009][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.990550][ T30] __mutex_lock+0x6a7/0xd70 [ 297.001168][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.009864][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 297.021413][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.031677][ T30] ? read_word_at_a_time+0xe/0x20 [ 297.041055][ T30] ? sized_strscpy+0x8d/0x220 [ 297.049952][ T30] ip_tunnel_init_net+0x20e/0x720 [ 297.057830][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 297.068808][ T30] ? ops_init+0x75/0x590 [ 297.075969][ T30] ops_init+0x31e/0x590 [ 297.080201][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 297.090750][ T30] setup_net+0x287/0x9e0 [ 297.097082][ T5240] Bluetooth: hci19: command tx timeout [ 297.109056][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 297.120324][ T30] ? __pfx_setup_net+0x10/0x10 [ 297.128005][ T30] copy_net_ns+0x33f/0x570 [ 297.132505][ T30] create_new_namespaces+0x425/0x7b0 [ 297.140984][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 297.152196][ T30] ksys_unshare+0x619/0xc10 [ 297.158405][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 297.169714][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.179629][ T30] ? do_syscall_64+0x100/0x230 [ 297.190937][ T30] __x64_sys_unshare+0x38/0x40 [ 297.199204][ T30] do_syscall_64+0xf3/0x230 [ 297.211328][ T30] ? clear_bhb_loop+0x35/0x90 [ 297.217798][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.230550][ T30] RIP: 0033:0x7f10fb17f7f7 [ 297.236707][ T30] RSP: 002b:00007ffc48fa15d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 297.251879][ T30] RAX: ffffffffffffffda RBX: 00007f10fb335f40 RCX: 00007f10fb17f7f7 [ 297.264227][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 297.272275][ T30] RBP: 00007f10fb336a38 R08: 0000000000000000 R09: 0000000000000000 [ 297.289350][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 297.300457][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 297.314930][ T30] [ 297.318010][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 297.337302][ T30] INFO: task syz-executor:5485 blocked for more than 149 seconds. [ 297.349480][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 297.365159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.381390][ T30] task:syz-executor state:D stack:24128 pid:5485 tgid:5485 ppid:1 flags:0x00000004 [ 297.392051][ T30] Call Trace: [ 297.421373][ T30] [ 297.433314][ T30] __schedule+0x1895/0x4b30 [ 297.437933][ T30] ? __pfx___schedule+0x10/0x10 [ 297.442843][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.459155][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.468078][ T30] ? schedule+0x90/0x320 [ 297.472399][ T30] schedule+0x14b/0x320 [ 297.482144][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.490553][ T30] __mutex_lock+0x6a7/0xd70 [ 297.500304][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.509253][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.521218][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.531245][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.541360][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 297.549310][ T30] ? __lock_acquire+0x1384/0x2050 [ 297.559992][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.568803][ T30] netlink_rcv_skb+0x1e3/0x430 [ 297.581012][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.589272][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.599727][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.609529][ T30] netlink_unicast+0x7f6/0x990 [ 297.621728][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 297.628800][ T30] ? __virt_addr_valid+0x183/0x530 [ 297.640301][ T30] ? __check_object_size+0x48e/0x900 [ 297.647428][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 297.652383][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.663204][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 297.674143][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.679592][ T30] __sock_sendmsg+0x221/0x270 [ 297.693613][ T30] __sys_sendto+0x39b/0x4f0 [ 297.698214][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 297.710959][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.719001][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.733043][ T30] __x64_sys_sendto+0xde/0x100 [ 297.738627][ T30] do_syscall_64+0xf3/0x230 [ 297.751345][ T30] ? clear_bhb_loop+0x35/0x90 [ 297.756678][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.762653][ T30] RIP: 0033:0x7f2c3537fe8c [ 297.777490][ T30] RSP: 002b:00007ffda63b3910 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 297.791690][ T30] RAX: ffffffffffffffda RBX: 00007f2c36064620 RCX: 00007f2c3537fe8c [ 297.802663][ T30] RDX: 000000000000002c RSI: 00007f2c36064670 RDI: 0000000000000003 [ 297.813479][ T30] RBP: 0000000000000000 R08: 00007ffda63b3964 R09: 000000000000000c [ 297.829342][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 297.839524][ T30] R13: 0000000000000000 R14: 00007f2c36064670 R15: 0000000000000000 [ 297.854061][ T30] [ 297.857136][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 297.873318][ T30] INFO: task syz-executor:5488 blocked for more than 149 seconds. [ 297.883811][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 297.891491][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.918851][ T30] task:syz-executor state:D stack:21728 pid:5488 tgid:5488 ppid:1 flags:0x00004004 [ 297.935646][ T30] Call Trace: [ 297.938992][ T30] [ 297.941970][ T30] __schedule+0x1895/0x4b30 [ 297.954029][ T30] ? __pfx___schedule+0x10/0x10 [ 297.959009][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.972288][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.979924][ T30] ? schedule+0x90/0x320 [ 297.991677][ T30] schedule+0x14b/0x320 [ 297.996279][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.001807][ T30] __mutex_lock+0x6a7/0xd70 [ 298.013248][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.018000][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 298.022821][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.038719][ T30] ? __asan_memset+0x23/0x50 [ 298.047421][ T30] ? nla_strscpy+0x113/0x180 [ 298.052098][ T30] rtnl_newlink+0xab7/0x20a0 [ 298.070122][ T30] ? rtnl_newlink+0x4d1/0x20a0 [ 298.075140][ T30] ? rtnl_newlink+0x4d1/0x20a0 [ 298.079971][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.092766][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 298.099526][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.112229][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.119680][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 298.133277][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.138486][ T30] ? __lock_acquire+0x1384/0x2050 [ 298.153294][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.158866][ T30] netlink_rcv_skb+0x1e3/0x430 [ 298.170838][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.176718][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.182100][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.195337][ T30] netlink_unicast+0x7f6/0x990 [ 298.200193][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 298.213055][ T30] ? __virt_addr_valid+0x183/0x530 [ 298.223118][ T30] ? __check_object_size+0x48e/0x900 [ 298.229591][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 298.242899][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.248871][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 298.261229][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.267009][ T30] __sock_sendmsg+0x221/0x270 [ 298.271760][ T30] __sys_sendto+0x39b/0x4f0 [ 298.286593][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 298.291728][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.303336][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.309784][ T30] __x64_sys_sendto+0xde/0x100 [ 298.321334][ T30] do_syscall_64+0xf3/0x230 [ 298.328585][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.342208][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.349777][ T30] RIP: 0033:0x7f01b3d7fe8c [ 298.361701][ T30] RSP: 002b:00007ffc97d985f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.373382][ T30] RAX: ffffffffffffffda RBX: 00007f01b4a64620 RCX: 00007f01b3d7fe8c [ 298.381442][ T30] RDX: 000000000000003c RSI: 00007f01b4a64670 RDI: 0000000000000003 [ 298.398530][ T30] RBP: 0000000000000000 R08: 00007ffc97d98644 R09: 000000000000000c [ 298.409450][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 298.422664][ T30] R13: 0000000000000000 R14: 00007f01b4a64670 R15: 0000000000000000 [ 298.434289][ T30] [ 298.437378][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 298.456421][ T30] INFO: task syz-executor:5493 blocked for more than 150 seconds. [ 298.477156][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 298.488962][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.501739][ T30] task:syz-executor state:D stack:24128 pid:5493 tgid:5493 ppid:1 flags:0x00000004 [ 298.516075][ T30] Call Trace: [ 298.519423][ T30] [ 298.522452][ T30] __schedule+0x1895/0x4b30 [ 298.534619][ T30] ? __pfx___schedule+0x10/0x10 [ 298.553483][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.558607][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 298.572292][ T30] ? schedule+0x90/0x320 [ 298.577593][ T30] schedule+0x14b/0x320 [ 298.581826][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.595019][ T30] __mutex_lock+0x6a7/0xd70 [ 298.599601][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.609591][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 298.621663][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.632163][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 298.639598][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.651674][ T30] ? __lock_acquire+0x1384/0x2050 [ 298.657163][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.662720][ T30] netlink_rcv_skb+0x1e3/0x430 [ 298.673709][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.681884][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.692698][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.703341][ T30] netlink_unicast+0x7f6/0x990 [ 298.708214][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 298.720465][ T30] ? __virt_addr_valid+0x183/0x530 [ 298.726128][ T30] ? __check_object_size+0x48e/0x900 [ 298.731488][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 298.745437][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.750819][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 298.761139][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.769413][ T30] __sock_sendmsg+0x221/0x270 [ 298.781638][ T30] __sys_sendto+0x39b/0x4f0 [ 298.790008][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 298.800193][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.809206][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.820643][ T30] ? exc_page_fault+0x590/0x8c0 [ 298.828477][ T30] __x64_sys_sendto+0xde/0x100 [ 298.838395][ T30] do_syscall_64+0xf3/0x230 [ 298.847387][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.852140][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.866056][ T30] RIP: 0033:0x7f8efd17fe8c [ 298.870554][ T30] RSP: 002b:00007ffc0f5f8d30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.883798][ T30] RAX: ffffffffffffffda RBX: 00007f8efde64620 RCX: 00007f8efd17fe8c [ 298.891844][ T30] RDX: 0000000000000028 RSI: 00007f8efde64670 RDI: 0000000000000003 [ 298.908304][ T30] RBP: 0000000000000000 R08: 00007ffc0f5f8d84 R09: 000000000000000c [ 298.919243][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 298.932410][ T30] R13: 0000000000000000 R14: 00007f8efde64670 R15: 0000000000000000 [ 298.960605][ T30] [ 298.964102][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 298.981466][ T30] [ 298.981466][ T30] Showing all locks held in the system: [ 298.990808][ T30] 3 locks held by kworker/u8:0/11: [ 299.003507][ T30] #0: ffff88801bb2d948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.025811][ T30] #1: ffffc90000107d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.049222][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 299.064775][ T30] 3 locks held by kworker/u8:1/12: [ 299.069944][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.087131][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.108802][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 299.122014][ T30] 3 locks held by kworker/1:0/25: [ 299.132932][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.151669][ T30] #1: ffffc900001f7d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.172409][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: regdb_fw_cb+0x82/0x1c0 [ 299.181565][ T5240] Bluetooth: hci19: command tx timeout [ 299.195652][ T30] 1 lock held by khungtaskd/30: [ 299.200584][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 299.219032][ T30] 3 locks held by kworker/1:1/47: [ 299.225719][ T30] 3 locks held by kworker/u8:6/2893: [ 299.231053][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.250549][ T30] #1: ffffc90009ae7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.265343][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 299.282398][ T30] 3 locks held by kworker/u8:8/4437: [ 299.288178][ T30] #0: ffff88802df9f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.311286][ T30] #1: ffffc9000cb07d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.332045][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 299.344708][ T30] 2 locks held by dhcpcd/4898: [ 299.349966][ T30] #0: ffffffff8fcb6268 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 299.369231][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 299.383107][ T30] 2 locks held by getty/4989: [ 299.388141][ T30] #0: ffff88802ebcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 299.405764][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 299.421422][ T30] 7 locks held by kworker/1:4/5287: [ 299.430826][ T30] 3 locks held by kworker/0:4/5289: [ 299.440118][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 299.455195][ T30] #1: ffffc90003f97d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 299.473314][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 299.490969][ T30] 1 lock held by syz.0.49/5465: [ 299.496320][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 299.512968][ T30] 1 lock held by syz.3.50/5469: [ 299.519308][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 299.536127][ T30] 1 lock held by syz.1.51/5471: [ 299.541047][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 299.556671][ T30] 1 lock held by syz-executor/5479: [ 299.567407][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.581382][ T30] 2 locks held by syz-executor/5483: [ 299.590722][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 299.604393][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 299.621107][ T30] 1 lock held by syz-executor/5485: [ 299.627953][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.645495][ T30] 1 lock held by syz-executor/5488: [ 299.650754][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 299.670797][ T30] 1 lock held by syz-executor/5493: [ 299.678915][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.693507][ T30] 1 lock held by syz-executor/5500: [ 299.698757][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.717934][ T30] 1 lock held by syz-executor/5515: [ 299.728398][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.741590][ T30] 1 lock held by syz-executor/5517: [ 299.752134][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.764493][ T30] 2 locks held by syz.1.56/5527: [ 299.770855][ T30] #0: ffffffff8fd374b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 299.784692][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 299.801034][ T30] 7 locks held by syz-executor/5529: [ 299.810038][ T30] #0: ffff88802d288420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 299.826396][ T30] #1: ffff88807bcb6c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 299.842914][ T30] #2: ffff8880276cc0f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 299.860738][ T30] #3: ffffffff8f56f848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 299.872804][ T30] #4: ffff88807dd3d0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 299.893238][ T30] #5: ffff88807dd3c250 (&devlink->lock_key#6){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 299.911592][ T30] #6: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 299.921506][ T30] 1 lock held by syz-executor/5541: [ 299.934354][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.950189][ T30] 1 lock held by syz-executor/5546: [ 299.957067][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.981808][ T30] 1 lock held by syz-executor/5553: [ 299.993199][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.002739][ T30] 1 lock held by syz-executor/5555: [ 300.016140][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.031532][ T30] 1 lock held by syz-executor/5558: [ 300.039589][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.060741][ T30] 1 lock held by syz-executor/5564: [ 300.067706][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.083342][ T30] 1 lock held by syz-executor/5571: [ 300.088599][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.105214][ T30] 1 lock held by syz-executor/5578: [ 300.110475][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.130139][ T30] 1 lock held by syz-executor/5580: [ 300.143378][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.152905][ T30] 1 lock held by syz-executor/5584: [ 300.166187][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.181334][ T30] [ 300.188066][ T30] ============================================= [ 300.188066][ T30] [ 300.200538][ T30] NMI backtrace for cpu 0 [ 300.204930][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 300.215594][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.225790][ T30] Call Trace: [ 300.229105][ T30] [ 300.232069][ T30] dump_stack_lvl+0x241/0x360 [ 300.236855][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.242184][ T30] ? __pfx__printk+0x10/0x10 [ 300.246927][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 300.251927][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.257434][ T30] ? _printk+0xd5/0x120 [ 300.261636][ T30] ? __pfx__printk+0x10/0x10 [ 300.266275][ T30] ? __wake_up_klogd+0xcc/0x110 [ 300.271214][ T30] ? __pfx__printk+0x10/0x10 [ 300.275864][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 300.280942][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.287068][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 300.293275][ T30] watchdog+0xff4/0x1040 [ 300.297566][ T30] ? watchdog+0x1ea/0x1040 [ 300.302037][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.306764][ T30] kthread+0x2f0/0x390 [ 300.310874][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.315610][ T30] ? __pfx_kthread+0x10/0x10 [ 300.320241][ T30] ret_from_fork+0x4b/0x80 [ 300.324705][ T30] ? __pfx_kthread+0x10/0x10 [ 300.329345][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.334176][ T30] [ 300.338338][ T30] Sending NMI from CPU 0 to CPUs 1: [ 300.344091][ C1] NMI backtrace for cpu 1 [ 300.344105][ C1] CPU: 1 UID: 0 PID: 5287 Comm: kworker/1:4 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 300.344127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.344139][ C1] Workqueue: events_long defense_work_handler [ 300.344170][ C1] RIP: 0010:do_raw_spin_lock+0x0/0x370 [ 300.344198][ C1] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c 91 48 89 df e8 16 e2 8c 00 eb 87 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 300.344224][ C1] RSP: 0018:ffffc90000a178f8 EFLAGS: 00000096 [ 300.344240][ C1] RAX: b0c4f1bb17e9b400 RBX: 1ffff92000142f24 RCX: b0c4f1bb17e9b400 [ 300.344254][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffff888063ab8620 [ 300.344268][ C1] RBP: ffffc90000a17990 R08: ffffffff942c583f R09: 1ffffffff2858b07 [ 300.344281][ C1] R10: dffffc0000000000 R11: fffffbfff2858b08 R12: 0000000000000246 [ 300.344294][ C1] R13: 1ffff92000142f20 R14: ffff888063ab8620 R15: dffffc0000000000 [ 300.344309][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 300.344324][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.344337][ C1] CR2: 000000110c247e6d CR3: 000000000e734000 CR4: 00000000003526f0 [ 300.344352][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.344363][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.344375][ C1] Call Trace: [ 300.344382][ C1] [ 300.344390][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 300.344412][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 300.344442][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.344463][ C1] ? nmi_handle+0x2a/0x5a0 [ 300.344490][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 300.344514][ C1] ? nmi_handle+0x14f/0x5a0 [ 300.344533][ C1] ? nmi_handle+0x2a/0x5a0 [ 300.344552][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.344575][ C1] ? default_do_nmi+0x63/0x160 [ 300.344598][ C1] ? exc_nmi+0x123/0x1f0 [ 300.344619][ C1] ? end_repeat_nmi+0xf/0x53 [ 300.344642][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.344666][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.344691][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.344715][ C1] [ 300.344720][ C1] [ 300.344727][ C1] _raw_spin_lock_irqsave+0xe1/0x120 [ 300.344753][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 300.344778][ C1] ? stack_depot_save_flags+0x29/0x830 [ 300.344810][ C1] ref_tracker_alloc+0x1c3/0x490 [ 300.344829][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 300.344845][ C1] ? dst_init+0xee/0x490 [ 300.344860][ C1] ? dst_alloc+0x14f/0x190 [ 300.344875][ C1] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 300.344902][ C1] ? ip_route_output_key_hash+0x193/0x2b0 [ 300.344927][ C1] ? ip_route_output_flow+0x29/0x140 [ 300.344949][ C1] ? ip_route_me_harder+0x80d/0x1300 [ 300.344972][ C1] ? synproxy_send_tcp+0x356/0x6c0 [ 300.344995][ C1] ? synproxy_send_client_synack+0x8b8/0xf30 [ 300.345019][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 300.345045][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 300.345070][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 300.345095][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 300.345120][ C1] ? nf_hook_slow+0xc3/0x220 [ 300.345142][ C1] ? NF_HOOK+0x29e/0x450 [ 300.345160][ C1] ? NF_HOOK+0x3a4/0x450 [ 300.345178][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 300.345210][ C1] dst_init+0xee/0x490 [ 300.345225][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 300.345252][ C1] dst_alloc+0x14f/0x190 [ 300.345270][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 300.345304][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 300.345331][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 300.345356][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 300.345384][ C1] ? __pfx_lock_release+0x10/0x10 [ 300.345410][ C1] ? update_defense_level+0x8ec/0xcf0 [ 300.345440][ C1] ip_route_output_flow+0x29/0x140 [ 300.345465][ C1] ip_route_me_harder+0x80d/0x1300 [ 300.345493][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 300.345518][ C1] ? trace_kmalloc+0x1f/0xd0 [ 300.345540][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 300.345577][ C1] synproxy_send_tcp+0x356/0x6c0 [ 300.345605][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 300.345637][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 300.345664][ C1] ? synproxy_pernet+0x45/0x270 [ 300.345692][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 300.345721][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 300.345746][ C1] ? NF_HOOK+0x29e/0x450 [ 300.345766][ C1] ? nf_ip_checksum+0x13a/0x500 [ 300.345795][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 300.345824][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 300.345852][ C1] ? __lock_acquire+0x1384/0x2050 [ 300.345879][ C1] ? __pfx_validate_chain+0x10/0x10 [ 300.345905][ C1] nft_do_chain+0x4ad/0x1da0 [ 300.345939][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 300.345965][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 300.346010][ C1] nft_do_chain_inet+0x418/0x6b0 [ 300.346037][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 300.346062][ C1] ? ipt_do_table+0x312/0x1860 [ 300.346097][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 300.346122][ C1] nf_hook_slow+0xc3/0x220 [ 300.346145][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 300.346166][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 300.346186][ C1] NF_HOOK+0x29e/0x450 [ 300.346213][ C1] ? NF_HOOK+0x9a/0x450 [ 300.346232][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 300.346252][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 300.346276][ C1] ? ip_rcv_finish+0x406/0x560 [ 300.346297][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 300.346317][ C1] NF_HOOK+0x3a4/0x450 [ 300.346335][ C1] ? __lock_acquire+0x1384/0x2050 [ 300.346363][ C1] ? NF_HOOK+0x9a/0x450 [ 300.346382][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 300.346400][ C1] ? ip_rcv_core+0x801/0xd10 [ 300.346420][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 300.346444][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 300.346464][ C1] __netif_receive_skb+0x2bf/0x650 [ 300.346487][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 300.346514][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 300.346535][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.346562][ C1] ? __pfx_lock_release+0x10/0x10 [ 300.346589][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 300.346620][ C1] process_backlog+0x662/0x15b0 [ 300.346645][ C1] ? process_backlog+0x33b/0x15b0 [ 300.346673][ C1] ? __pfx_process_backlog+0x10/0x10 [ 300.346696][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.346724][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.346753][ C1] __napi_poll+0xcb/0x490 [ 300.346776][ C1] net_rx_action+0x89b/0x1240 [ 300.346811][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 300.346835][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 300.346879][ C1] handle_softirqs+0x2c5/0x980 [ 300.346906][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 300.346931][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 300.346958][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 300.346978][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 300.347001][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 300.347030][ C1] irq_exit_rcu+0x9/0x30 [ 300.347052][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 300.347078][ C1] [ 300.347084][ C1] [ 300.347090][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.347118][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 300.347143][ C1] Code: 8c e8 74 e0 6d 0a 65 66 8b 05 e4 52 ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 bd ae 0b 00 e8 98 1a 45 00 fb 65 8b 05 a8 52 ac 7e <85> c0 75 05 e8 47 31 a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 300.347157][ C1] RSP: 0018:ffffc90003f57980 EFLAGS: 00000282 [ 300.347172][ C1] RAX: 0000000080000000 RBX: 1ffff920007eaf34 RCX: ffffffff8170bc6a [ 300.347186][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c60f860 [ 300.347199][ C1] RBP: ffffc90003f57a30 R08: ffffffff942c5897 R09: 1ffffffff2858b12 [ 300.347219][ C1] R10: dffffc0000000000 R11: fffffbfff2858b13 R12: dffffc0000000000 [ 300.347232][ C1] R13: 1ffff920007eaf38 R14: ffffc90003f579c0 R15: 0000000000000200 [ 300.347250][ C1] ? mark_lock+0x9a/0x360 [ 300.347271][ C1] ? update_defense_level+0x122/0xcf0 [ 300.347295][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 300.347319][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 300.347344][ C1] ? update_defense_level+0x122/0xcf0 [ 300.347368][ C1] ? update_defense_level+0x122/0xcf0 [ 300.347393][ C1] update_defense_level+0x8ec/0xcf0 [ 300.347418][ C1] ? update_defense_level+0x122/0xcf0 [ 300.347443][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 300.347472][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.347503][ C1] ? process_scheduled_works+0x976/0x1850 [ 300.347529][ C1] defense_work_handler+0x22/0xd0 [ 300.347554][ C1] process_scheduled_works+0xa63/0x1850 [ 300.347593][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.347623][ C1] ? assign_work+0x364/0x3d0 [ 300.347649][ C1] worker_thread+0x870/0xd30 [ 300.347683][ C1] ? __kthread_parkme+0x169/0x1d0 [ 300.347711][ C1] ? __pfx_worker_thread+0x10/0x10 [ 300.347736][ C1] kthread+0x2f0/0x390 [ 300.347753][ C1] ? __pfx_worker_thread+0x10/0x10 [ 300.347777][ C1] ? __pfx_kthread+0x10/0x10 [ 300.347795][ C1] ret_from_fork+0x4b/0x80 [ 300.347821][ C1] ? __pfx_kthread+0x10/0x10 [ 300.347839][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.347872][ C1] [ 301.320504][ T5240] Bluetooth: hci19: command tx timeout [ 301.332308][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 301.339219][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 301.349761][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.359857][ T30] Call Trace: [ 301.363173][ T30] [ 301.366134][ T30] dump_stack_lvl+0x241/0x360