last executing test programs: 55.110456958s ago: executing program 1 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x243) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r12, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 48.558272246s ago: executing program 1 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x243) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r12, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 41.844143905s ago: executing program 1 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x243) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r12, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 35.658768953s ago: executing program 4 (id=1338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="faf4ceb0350689621a591ca72fde78a236", 0x11}, {&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb4067ab22fccd16dab6b0416f4b91b89414a67a83cbfcae17db95e9608f4babaa8e26db9ccd33b4d990b3335fc877386a42a048e85fe13735653f5dc6a50f69daff639872adff92fa2553c3a0a85a879576bc223c105571fc143ed0821500e1f522f14cda2967fa4c88b112d574ade8c01d2e7758804757feae278d1eb4ef41ecd6ce5089b6dba007c20825bf781caec663385fbef14106aa320ac804e6a1ee47b202731ea", 0xc4}, {&(0x7f0000000300)="9f6d6c08bb34cc9b518293dd75ee50dd93a53f0e51ffa4ebae3fb241caf823aba01aa0e010e47bb2199cc92dcf9decd9ea13f179e5f53871ab70aae77fc1459ce454586f7b18501336c32ae455fa8b04cd31b1396e57b983d7914e02a68e8e537595dcf502797e3a4d7a990e4b293eb77b73d75a7b1ef0413b6255e849b4", 0x7e}, {&(0x7f0000000380)="dc7e2b4b9bb2aab402bf2ea914dc3d9012974cbcbcc38802d296d236d57b0ceeee1b7d6309c448f1b66d929d", 0x2c}, {&(0x7f00000003c0)="91", 0x1}], 0x5}}], 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=""/17, 0x11}, 0x5}], 0x1, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="7dd154f36c2bab98500675bffa376f8cbf122798a5ffdad803a232c78dcf77c4330fcc7fb2bbe466547a27e2deaa836c0984093c5a18182b93ede16d89f508ad01094bd6c1a9e9fc0cd0b1b97db69bf4a5248b6ae5e11ccc60302d352b6cec709ecad00fa6820a88be1984bdc2dd5fa6299a791275c2224a60db32099477ac6446ef89", @ANYRES64=0x0], 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r7, 0x0, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x854941, 0x0) close(r10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) recvmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000680)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x9, 0x3, 0xf9, 0x600, 0x10000, 0x704006c}) 35.454985331s ago: executing program 4 (id=1343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000035001468e876c2c0062a38d92b587f7b8550caa8ab00000000a0da84fb34"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@generic={0x5, 0xb, 0x8, 0x7, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000140)='syzkaller\x00', 0xa, 0x36, &(0x7f0000000180)=""/54, 0x40f00, 0x56, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xa, 0x9, 0x14}, 0x10, 0x3fd4, r4, 0x5, &(0x7f0000000840)=[r5, 0xffffffffffffffff, r6, r7, r8, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000880)=[{0x0, 0x2, 0xa, 0x8}, {0x5, 0x2, 0x6, 0x1}, {0x4, 0x1, 0xb, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x1, 0x4, 0xa, 0x6}], 0x10, 0x6, @void, @value}, 0x94) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r9, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) (fail_nth: 72) 35.288233965s ago: executing program 4 (id=1345): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)=""/164, 0xa4}], 0x1, &(0x7f0000000140)=[{0xa8, 0x0, 0x0, ""/151}, {0x1010, 0x0, 0x0, ""/4096}], 0x10b8, 0x2000}, 0x38, 0x59ebc1dac772859) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001240)={'team0\x00', 0x2000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001280)) accept$ax25(r3, &(0x7f00000012c0)={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @null, @default, @remote, @null]}, &(0x7f0000001340)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000013c0)="226e73e0cab426891aa54b7f698c094e", 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept$phonet_pipe(r6, &(0x7f0000001580), &(0x7f00000015c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001600)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000001640), &(0x7f0000001680)=0x4) write(r2, &(0x7f00000016c0)="339a908a784fb721d61a7eec10da212b18d488874651d698c32f71159948c38631263f9aa9", 0x25) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000001700)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x0, 0x3, 0x6, 0xa]}, &(0x7f0000001780)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000017c0)={0x0, 0x9, "7d683aed7d810faf1b"}, &(0x7f0000001800)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001840)={r9, @in6={{0xa, 0x4e22, 0x2, @private1, 0xd}}, 0x3, 0x3, 0x800, 0x6, 0x29, 0x3, 0xb}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xc004}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) shutdown(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001a00)={'wlan1\x00'}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001a40)={0x1, 0x91f5}, 0x8) socket$tipc(0x1e, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f00001163c0)={0x4, [{0x0, r11}], 0x2, "87eae6ca816536"}) 34.137401222s ago: executing program 1 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x243) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r12, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 31.10555528s ago: executing program 4 (id=1345): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)=""/164, 0xa4}], 0x1, &(0x7f0000000140)=[{0xa8, 0x0, 0x0, ""/151}, {0x1010, 0x0, 0x0, ""/4096}], 0x10b8, 0x2000}, 0x38, 0x59ebc1dac772859) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001240)={'team0\x00', 0x2000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001280)) accept$ax25(r3, &(0x7f00000012c0)={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @null, @default, @remote, @null]}, &(0x7f0000001340)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000013c0)="226e73e0cab426891aa54b7f698c094e", 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept$phonet_pipe(r6, &(0x7f0000001580), &(0x7f00000015c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001600)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000001640), &(0x7f0000001680)=0x4) write(r2, &(0x7f00000016c0)="339a908a784fb721d61a7eec10da212b18d488874651d698c32f71159948c38631263f9aa9", 0x25) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000001700)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x0, 0x3, 0x6, 0xa]}, &(0x7f0000001780)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000017c0)={0x0, 0x9, "7d683aed7d810faf1b"}, &(0x7f0000001800)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001840)={r9, @in6={{0xa, 0x4e22, 0x2, @private1, 0xd}}, 0x3, 0x3, 0x800, 0x6, 0x29, 0x3, 0xb}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xc004}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) shutdown(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001a00)={'wlan1\x00'}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001a40)={0x1, 0x91f5}, 0x8) socket$tipc(0x1e, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f00001163c0)={0x4, [{0x0, r11}], 0x2, "87eae6ca816536"}) 26.071495753s ago: executing program 1 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x243) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r12, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 24.727111839s ago: executing program 4 (id=1345): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)=""/164, 0xa4}], 0x1, &(0x7f0000000140)=[{0xa8, 0x0, 0x0, ""/151}, {0x1010, 0x0, 0x0, ""/4096}], 0x10b8, 0x2000}, 0x38, 0x59ebc1dac772859) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001240)={'team0\x00', 0x2000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001280)) accept$ax25(r3, &(0x7f00000012c0)={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @null, @default, @remote, @null]}, &(0x7f0000001340)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000013c0)="226e73e0cab426891aa54b7f698c094e", 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept$phonet_pipe(r6, &(0x7f0000001580), &(0x7f00000015c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001600)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000001640), &(0x7f0000001680)=0x4) write(r2, &(0x7f00000016c0)="339a908a784fb721d61a7eec10da212b18d488874651d698c32f71159948c38631263f9aa9", 0x25) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000001700)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x0, 0x3, 0x6, 0xa]}, &(0x7f0000001780)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000017c0)={0x0, 0x9, "7d683aed7d810faf1b"}, &(0x7f0000001800)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001840)={r9, @in6={{0xa, 0x4e22, 0x2, @private1, 0xd}}, 0x3, 0x3, 0x800, 0x6, 0x29, 0x3, 0xb}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xc004}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) shutdown(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001a00)={'wlan1\x00'}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001a40)={0x1, 0x91f5}, 0x8) socket$tipc(0x1e, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f00001163c0)={0x4, [{0x0, r11}], 0x2, "87eae6ca816536"}) 19.407915321s ago: executing program 2 (id=1472): socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x93, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000090601080040000000000000050000000900020073797a310006000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 19.211068211s ago: executing program 2 (id=1476): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c 1:', @ANYRESDEC=r0], 0xa) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x8001}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 18.998658849s ago: executing program 3 (id=1482): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000058c0)=[{{&(0x7f0000004fc0)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000005340)=@nl=@unspec, 0x80, 0x0}}], 0x2, 0x40000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x10100000}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x10100000}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="ff07040001000000", @ANYBLOB="a25de1a7db5bdf78f0c7ea53689fba612be7e51c57ab696b58da4a349516e086063f53033e5d10091512a1b8817e840750c6e1786e91ccacf6cf4e0a4b9ccec5d74333b767e1c06468600e2864830a73925349886e0eeec0c3c007fdf7f9db7a137ab07c2cf6ef2dcbc7f5e362c27274738fde56e5f7b83a5f2187a7204d75d3e58f3398ddb1985a96d34a1f188c2264f7cf2a07304b806af6f92ac09438fb675d25107ff0b8f958962e7f1f1804aeff35d776511dec1dad96cdc435de23310dda865a9851c308a86486a2bef972c72bdf95b37e66ab0419fe0461ceed60d1c3f0902044659113c694a3d3cdb623d41125a5cfae27ce292be2559549c5425372ff35ef833cdb666cdb1c0c3d2210034213ae0ba21af48c9731e63405b62e76031b070250c3e227bc7428de6e246cc9980c8313b122fcfa56553a2f853d4602aea66deeb6ef2acd90b534adccadbd497707ac7c4ac3e92e50eb44d6d900fa4d936dd53faad8c0e4805bf6afa77a1388023d11acc5145c8653e545a973e44709ff329e9bf94d2be32975485a3af7612a6588e97c52b683fc1d2b83002632530864fbea6b837aabb3426b689ff5460e3f0a61dd7d142733242eb171c61a2f1ba516d73a830712", @ANYRES32=r1], 0xc) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="48bc05168e92baee7d40eafecd7e29a527e8474ccb507cbc759c8e6f536899ed28f5a67912ea8e04fa7efab4bbd37acd61bb29ccdee69fea0cc441c7f563702547c03541ec465bef62eaec0a0dc1603206304b123ba7c15e2e50f7254c940e6e28f642d9b3979355534be060e0ad22e7c06ae7ffc02c6656e3739a", 0x7b}}, 0x10) accept(r2, &(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80) (async) accept(r2, &(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020000"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) socket$inet6(0xa, 0x80002, 0x88) (async) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r5 = socket(0x1e, 0x1, 0x0) listen(r5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) accept4(r5, 0x0, 0x0, 0x80000) (async) accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r7, 0x0, 0xc810) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10041100}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 18.344068095s ago: executing program 1 (id=550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x243) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r12, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r12) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r10, r10, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 18.020103811s ago: executing program 2 (id=1484): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x800041}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0xfffffffffffffd97, &(0x7f0000003580)={&(0x7f0000000300)=@newsa={0x200, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@empty, {}, {}, {0xffffffff}, 0x0, 0x0, 0x2, 0x0, 0x2}, [@algo_comp={0x102, 0x3, {{'deflate\x00'}, 0x5d0, "32fe9322f94dbf4fbb742963526a79f4512517dae376e7cb0545c6f94797cbf9fcb6020e597316f1d1ccff72a57d268dbec4aa9699e3aab013d3770910d2901e6aa54a6c845f0ff782491f5503b674299a3897d890b3d2212a1837bc3715efca4a15e11c0aebecd3c8bb9d9acfa7ad3caf62407a9b6ba4d64af08ec0e66810e4a3bc017a7cf1ed10a620583350a1f00a361f48196fa90efad8e3234c4f421ddc6294c07e66e3a9ad36bce509d5d74d24b88dfc5141b79dd9cb2a"}}, @sec_ctx={0xc, 0x8, {0x3, 0x8, 0x1}}]}, 0x200}}, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0xe0, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5cd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20044007}, 0x4000044) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x439, 0x0, 0x800, {0x0, 0x0, 0xe403, 0x0, 0x5865}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x34}}, 0x4004804) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r9, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8, 0x20, 0x6, 0xc4, {{0x14, 0x4, 0x0, 0x31, 0x50, 0x66, 0x0, 0xa, 0x2f, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x17, 0xbf, [@rand_addr=0x64010101, @rand_addr=0x64010101, @multicast1, @multicast1, @local]}, @timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0x0, [{@multicast2, 0x20000000}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x6}]}, @ssrr={0x89, 0x7, 0x5a, [@multicast1]}]}}}}}) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f00000001c0)={0x1, 0x4, 0xf, 0x2, @vifc_lcl_ifindex=r12, @remote}, 0x10) 18.019570668s ago: executing program 3 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtclass={0x78, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0xa}, {0xfff1, 0x5}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x10001}]}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x10}}, @TCA_RATE={0x6, 0x5, {0x1, 0x38}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xbf, 0x6}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4005c}, 0x4008014) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000340)="45dd53ac5e0ed64229bdebc0c0b8655848a4145fb7e38a2b54fffd531f0cbf278dc725c073bb2ca466ae3ea07b1250359b47a4435bcfa72a7ec0ee30c852511e93a027fbd742af23cf335f1f4edf808d43898034a61bf94c272856e7380a75ab8873f29086487e5eff9127ef1effc476b2286f5ce89430e4200da67c8f4b40559d7674d226bdb87c5e28fbb469efafc72404df03af9016d38f313aea0387e11b5cd45be911609a72462cc8b5e787b32af46492240f212748316d5f8c917152b210de7d4915b1cddeb480407a6436b26275441ace2272e121d1ea4e747bfedecd11b05949771b385b3997446466e2b634b684d8", 0xf3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40086602, 0x20001400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x22000085) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xe0, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc1, 0xa8, @random="e7de4def874b643e0e324aea94c0583090f75fb79694ed73b93522b6752091d47fdce999792eb56a977e54348a21e729120ea3a0e2854ff6a9dde7e853ea62a68180aa28efd53711f77dc78e057334f624e8b64d1451335e94c08dfce5e869b36cb63860f62808f5107a71388b3dda16aebae3fd842917cd6c2195c10e96262a0f61bf39c2ec5f259002ab19bcc6f68e3d98458337b5f4190c4e0c82ebe36db89c0a4005db7e44b5adaaed23ca9aa2961eb55eccb690a29429ffcff2d6"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) 18.016482648s ago: executing program 4 (id=1345): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)=""/164, 0xa4}], 0x1, &(0x7f0000000140)=[{0xa8, 0x0, 0x0, ""/151}, {0x1010, 0x0, 0x0, ""/4096}], 0x10b8, 0x2000}, 0x38, 0x59ebc1dac772859) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001240)={'team0\x00', 0x2000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001280)) accept$ax25(r3, &(0x7f00000012c0)={{0x3, @netrom}, [@bcast, @default, @netrom, @default, @null, @default, @remote, @null]}, &(0x7f0000001340)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000013c0)="226e73e0cab426891aa54b7f698c094e", 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept$phonet_pipe(r6, &(0x7f0000001580), &(0x7f00000015c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001600)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x0, &(0x7f0000001640), &(0x7f0000001680)=0x4) write(r2, &(0x7f00000016c0)="339a908a784fb721d61a7eec10da212b18d488874651d698c32f71159948c38631263f9aa9", 0x25) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000001700)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x0, 0x3, 0x6, 0xa]}, &(0x7f0000001780)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000017c0)={0x0, 0x9, "7d683aed7d810faf1b"}, &(0x7f0000001800)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001840)={r9, @in6={{0xa, 0x4e22, 0x2, @private1, 0xd}}, 0x3, 0x3, 0x800, 0x6, 0x29, 0x3, 0xb}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xc004}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) shutdown(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001a00)={'wlan1\x00'}) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000001a40)={0x1, 0x91f5}, 0x8) socket$tipc(0x1e, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f00001163c0)={0x4, [{0x0, r11}], 0x2, "87eae6ca816536"}) 17.611950446s ago: executing program 0 (id=1486): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$cgroup_ro(r4, &(0x7f0000000800)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000031c0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000010c0)="db23dcdd6d2f2e3f7d37d5b4ebcc8b45d463ae29482e617b3040f0bc5f8ae5db6036ec214fe533bed008ae698d2438145b4f52e09a92175fd94ea60d27de9906e0094c9574a9868223a90a40651bb6612bbe55feec76016799af68de82f67b270150ec03af9f52025a7ee83bbcd4e194fa9aa61a96d03486eac21d9011e5a6fdfea29d902ba5b7a8d2f617a7d60ef6a9276bcfdbac5502f0a15c09410fe3e4efc7df6b5786ceb4df2665bf8c08af185250d2a52d1d14ff1bfa4ca71340a9d04b73b62f95c43ca81ef48d864e7242cc0875b7078f66e1ac184b136da574512092023b9720271a2d60c42f8ead8f2f8ab645e7a628f4349a336d52e2fdb928f5abdd28820a31f06be9210a297d4ef5d0c0ae1112fef9c3e2eda106a7aeeae3174f4af0d05b4df6d19b5115bb986036e224619ec0f7a1ba025dc0d5f2d3d6c489b4e815fe61854cd04299c42f75fe8fb677107c76c6c7b0dafa04e011a47aa2576abef54e3e2116df784e8f0c44dad03079b0abc5b383f54fd2700ed4436f5e529006ba3290bdd87a922ed74bb9cfbfe3700c17f120438d12a7757c57612e5e2ba7898008ec12e0ea3e58ee5f57c259b4a16fc1599a46b846bb53498798d4815504896af6e777226c57362cde0b6dcefbf63ad401bb78536e2868e65a59bae695669e1cdc7c8a8920eab2295cafda236e93491ebe17bbc66a382bfb6409572bb85699caddf124a893d58048afe7f58ec8fc215093b2beddc02a2eccdfde5dd124d3fa91322fd6913d037c4e5fbdde4087dca0df6a9ee0cbd956d2c3ddc9ad84e3aa122e1df2c6f710f3ba062d9a6222648ac5d2d76920932405207ee624d82bc4919bed5ae3f6f5ef5732da95fc7006e72bcd6c1f976d829210b83f4c6ccec0ac90af9dcd1598b6b420db1e776267a772aedf589acc22d53853e0d4e5739769c5c37a58ad66c9ca10365080bcbd7ce5c05666df7ff563134783eec1cde14e3d80b5f25cc5093998bba03a3b85436cb6164f9f30858db8aca8561a53bcf0f114cbf999d8642c612ffc411f7f8e3068b190bcd26ef888d28d7ac147bb6b6c93bf123573b47644e66fa6919eeb886db8707d09293ef7fa0523c38e22285cf091c6d93cb351e557ee67fcb4b8b51a522129d99a8a0221981182aa8917e9f3d30ffed28a1838ff91b90e2c9e8560706cf9383b2892b8571226602a7d469c04e7c257cd42b248dd09598b7c46104afc351aa8ec73a3adeb54a7d9e2915ed9887fdf8856311c9dc76c8e3e1ee32674d8aca2b1e40d2f6f946ecf9b1374f5cdf24d27f15c5bc4deba2019f318d1181049e3024de1d640f01f7416a4c514176124375fd34f7f4cb51da00c438b9613fb05a7b17eb63161b80f48fe896b2caf0f7ef4a2bf471c09d1c04366323ed62e650c8cafd485d7108af9a7ba74d771bd76e1bd8f9359193cda5b0a68bcccd3b0a6132dc5476081f7cc4fbcfd2c2bf9db26835def0d74067420256f1c717afaba0033c9be8cbd1410b50c5dab5d90659b120ed538b68f78b6667eab22316c5cb37399cef67d921ba9d650bb5824475799ea6ac897b18fd4f36fa97bbaba36abc5f584fa768a54ef9246fa9ce71ab6ab13ef2859063e7be604d5ddc1e5e5dc5fdfbd9666c06765f611863ca8386794f0a7033e8531855cf73c4d625b65df8fce7a236754708c7c212d9b47dab33ef83950ff35220fc6df7cc49ad4156a05fbf7eead5e953d47ff1ceb6b4c8a239e5344d55f67d4675e0f66cf2fcda8ffb2aa464a2772e69c156e2675a49ee3189e851faa13d9a4f57598ff30bef0c272caaa28f17a335ea24feabff8bbd0bf1eb040ba947d87616b46fd53ddbcd58855b8cd66356069f014055d1336f9addd1bc4c8954e77f024de8a8556ed75e26d8da79fafe429437686c97261e7afef51399df3b3181ee02c8d08b305d0201b362bfeb6e6432258233814bbb812eb69af9e7e4858d322e615c04fc70740779de903e3ce6e602e424982e0d806e8256eee438f6ef448d391a66593f27d2f1117f6b764051a51176f37be6caeefb0935f88bc905dd56b7f0a2aab3ece2e6a0aa5a166308408834d354fcbfb398229afee7bee4d9659d0772c3e1d93781bbab3d7dbc9428279b8ae0b0a864c6b3fd6639d9d4313279f143c7499d7f97032052fc4b8d631709e30f4f7dbf2d64cd8f04f33076637dfc28916b19231f2ce3674165cdd02aa4653b69a2539e021785f0bed05d412c0e57c75b4550cb05b2267e5f73d13105a9bf7fb5b03a0f9646296e0e61d9ce164195c25c5e6d209dfe2af3c42b9570d0570a35a2b4ca674ee8aaad21fdc186357f8910cc6804731ad1b30d8385a86211978035807eba5a27d64d7bc4dd5494693486a816e037b0012598f6c67d19020b0ec2168e2a18723f7ae9c547fcd701bffbb9f05bce006e94d41a15f5a0e1a43f23b23cbef7980b5ff2d607564a68cbb1cdb97f8aba63b8e47e13e580671d360cbac761767ddeda6838a8aa1f75c0f425e33297cf6343c90e343a88c38bf037dd2e1a1c37c91e525531a9ece4d0a77f6cf6ac09d651706a1d2521072c4659d0c622ece6fe8acefd9300fbaa2c1a1807c56ee1cb31d6f8c97f088478ed8950487bc072fa3e89af2221e82970b84da55b29579460ad4fff91691649254d1a98f678c8c0bd759238922f49edb6a0d01d8084ec00520e28db7ec72416867a7a832d131bd2df276b7944c8fc1522a8616764ae9aec77b492bca2f27d3524d9ebb62f1e5422d93c5e48a447274413e5bb80a2e13630540480f2f90d7fc7fbc70b6f86fd1e5fec25de0191ba505538dc909ac988c4a0f45b10539d07c076ed8134daa708a8b3cc53af5291c664dca63c6f5b463cfbff549a80d42809800ba9bb9ed137448788541ec2ef2a93ed2f33becc17b94daa74c20cda63c23f48285a973ee70a87bd7ed0ed2b5e202db547bc0604054eba3bcfe459c26ca83524cc96e7a9c6ac3fed0a7cabe28f5d9032f5eab2b76d818ae5c1b6c188272eb925187c7cf3cb1872234a93a02aff2d0626954e288d910c6464f162289ec557bf12b13f2c7ea04824ea276a0461b6ed965d14c556c7cbbf2b6ae33e2488268ef6ef6a64a679926d0e5e0aa227fea252e91bdb4386a3b9dc70b4268f37997ee692722b184f8b3c6109fb7be318dee831d1b81ce9f99891a506763f1c542a412c636d5de8ce74f2ac6118fa3163156a7b73554c3bcad5c943eb9f40caac9b5f53c76f5b9313557156450f127d7eb2f313a2f3455396929081230e87d4222f2173feae0324e4a06046dcffe733c9a4e5b3c5154f8e94f00aa8d8313d099b40e4329e319ad823134a11f971ad3662389cc4d0eddeec1ca8adfc8f6284d9efefbb8d91dabbc976b2ff3abfa501f97fefea8c606301fd5d1473380f1e3d10f520951c42273db194725e572f414befece79c5868aabcdd49348675a716b55930fd3b35e62ad5f25ea710378f9e6521c7c3aa4867206022a24bd4cbc4a2beb7e227800b693241286e1faa22a54161ac11603bae308028dbe86d0bb15d0a4d8a0be45dbf65f83e97648cb5a4b0d9555677dd7f1a18789ff65a25e991475d90aed42fc86cf8a87a16277104e7a81e687d28f53fa68b1b73415ea408529c8553270e71ac00836aef1c5f06198daf82faadb223b0dbc453e6dfb57f79f90b8de432542d31fd743c02c0b37fa703418c0d80b8ede2baa77ae7d7377e59870df8c637b736609654ec879a7aedefe27417c6a39ccf1a5f6ac11e7a858e6c3ce534771ed3e3a229c498bda93c342efaf58dff1a4c5350b2c199e333c599c11892ef35a5a2599fc18d2541a4870fe0b652a183614bc05acb78ec1598b9bc38ab1d415536a9eef2537d8facdd267d6446ef0f466ed2e14486320e7069a5ff1c0e9796b39a3ae6c7eab0e1bf554a98a530ab746451ebc2d1f40c7acd856f203bd11fa41779eeae5c660972ed366fec82f7ff51ffb89d8672a178d3fbf0c9d15d859bde9d901697ebc218a623b2cc8b15024e08686bf5e6b38db8a054e8a4f0ab2003de9f5ed7f3401449123ca554a81bdb11f5cf4757cea8a542c077cda67cb382a29256ba2c1841ba2a030dfb2ca8d4ae86207644faba5a0389aa402e2d1b7f12e0fbfbe8c2ce3308fd7de5f31ae5c5493ccc6830b3b997774f0417529946ecf73c22878a6b2095eef46c6216470fabca8a301597de3f1e60bf6c116e4d24fc7028e77b6341074dec9634b58c4ba8f6f8401f4ad516946b52c68f7cf9e199b563651c104b9f67fd86bd6fc004ec04564b5fd3769081c74f20957dcf0899d10e5c5750cda54f16f8b81ed26d1c3c8f67cb7f84c5df4d98e6c39669a58f8244a8479abe09d1d02d91ebe3b9fc6a1063f3f2c70d7abf0052461c5241821c1fd83c621c9b92645043961985f737b9655a956bf96935172c471d589ce91886cb4e496328a2a4a367102b915dccd69f4ebb546b910b1f7fbf5bbedcc5ad445caf34fb6123d94774b696badd7e78b6af3446a92e95dba9ae0c739a075cd44d9b6294eed0c7110ebc5de5a71bb341d4cac2405a2e8339b340785deb3d59dc3399849086b9b35077ccde3ed5635d46f68c5c2d177097ef8b18326b56b8ada4bf3b0aa7d5dc2cb72e1eb8c8be2ffb7428b93e1094aaf164365c9ee01acf20a09385aead1cf93a857928fa1198cc55e71246187a87610deab2196599e271a4247b16d8752a750cd4bb7fbe4ffc64433336cc0ce68b9746d12cecb314b3c3ea5423a2593c628b897a97b595c84d070e0196dcb4c518d7d670ed8e272247a284437c96e9a13bb50010e313c588bd16db7a1f88734e3648b5185b4229e9c1946559cd90609c40f03a3eab36179b2dd782f95000e7b44749799c453d5b7a24737dc3515b9fef66bcfd352a71a14c87e3299989a2438e6ff0d69668667b069af9dc2b1f8b4785c2fcb0d9e3df58ca08053067c76032594f0cda39a5628728325f0d9d7513a7db3ff87c83c84dd6656454269397ca20dfe102a884f7e1d8403ffd2402c6c1f01b07c0cd88ee918d24df1f2b82b6da854a67a739401d47680882582867556f7b04faa048895e0310a38678b659a0b6cfcf6d7a9457a9d20429a2b2e3c02d2855b259f0b3672cbc54b0ab7123aa690fa6bf77b26f001b198cd4f8d274dd1a20adc3116038a4162c952fea5684f16fb926416cab49c5f020acac5c43707109a1cd2b95c0f6befa3b7fbbc5a55e61b3de04648f07fdb4edab885db7701905057fe9241653d50c009580f183ba6ab58cc6a6354b6016325c56c8bea514cc322044e09ce198a37b39df769697f8b6b2ba6e46abe16407c049933b1796dda284c476a53dca72e611ae6c093205b0d7b43ca95a50f9d5d41631c4b1707cb138743f0a5f0fa0b823b73155c78f6be34f08dd99024a499b0a70c966ff686238eb6f2c4b7b0c042af7b11cfb863d7bef9f2ef3a18c8285828fd391806e776c342d6594bb5ea5ab8a31c266529ac2499e270c895b38fa6d4b54e9b3bb9c7f8fdc11c72007bcc3a8a247e829053b25a15ec9971322ab25242f4aeacd8bc677a18e8af018482e40c6798ff545ae609910af76a73d068858c2dca223abad50337fb00972041d1a66e01882856a8363c554c581afd1ba44f20bfcc4c28a37c7c894080de75c7677d1ea5b70f94611df75c5709eebba939316d596a0fecd53b9383b0d4274532afa879c2b92a2f6613e58ef19c70285a", 0xfe0}, {&(0x7f00000020c0)="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", 0x1000}, {0x0}], 0x3, &(0x7f0000000b00)=[@iv={0x90, 0x117, 0x2, 0x78, "9fb66b0375a815fbf29be1c7f60173163e381b6c3473c9c537ac09a96fd0e307444921fa1a173b9d106536d082d86a42fc2b288a248337abb680b931b07385f9a84ba6fe9f454aec2daa5e69b1d5b59cdac0b242a890736e00f6a6341b267522d795d9f9dc5dda8b9c520062ed05a4e16b57e70a9111563c"}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7a, "75dedb682254cba5579f858a94c12a2b35bb9977f107ed6636746bb03abba7e56db357d9f0ba55996e95186137ad8053116e97ffebaab6cca760ec6f1b6fe14af3bee310a787df51fb9d59d589c06aef07b8cd8b26e059735a519214d2691bdb8dc96008714946b78b664a03b373d70f0453989afc3767fe07ba"}, @iv={0x78, 0x117, 0x2, 0x61, "fe3130a50188a14b4567e71d44a34835fe4456c5f533c66e8287ecbac99a5819c8c9776c8e3c4354cf4f7e3d6169f4d4740213fa3a04b893002419837ae4191a6aa88c549ff5eb438a4fefd432365aaae5f4b8b812dbfda2a743973a2d1565cf66"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x48, 0x117, 0x2, 0x30, "422a9f1a849e7e25145cbf00cb5a972b18335920b0e4bf28c8eed7bc9541d1a71978809386e30c029c78c84ae11ca97d"}], 0x228, 0x4000}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="64a4662356ff89ad83993076d3ca", 0xe}, {0x0}], 0x2, &(0x7f00000030c0), 0x0, 0x4}], 0x2, 0xc040001) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)={0x34, r8, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40) (async) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000600)={'wg2\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[], 0x70}, 0x1, 0x7}, 0x40000c0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 17.611006994s ago: executing program 2 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0x6c, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, r1}, 0x38) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000004c0)={r3, 0x0, 0x10}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2586dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100000627800dd"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f0000000000)={0x9, 0x7, 0x4, 0x7, 0x1, 0x10, 0x1d79, 0x80}, &(0x7f0000000180)={0x6bcf, 0xfffffffffffffffd, 0x5, 0x0, 0x1, 0x5, 0x851, 0x4}, &(0x7f00000001c0)={0x2, 0x7, 0x7fff, 0x1ff, 0x1, 0x800, 0xb625, 0x1}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x80]}, 0x8}) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x2, 0x0, 0x4, 0xfffffffc}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000003c0)=@req={0x4, 0xa0, 0xa0000000, 0x6}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019580)=@newtaction={0x490, 0x30, 0x2d, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x0, 0x101}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x891}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x490}}, 0x0) 17.610210204s ago: executing program 3 (id=1488): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000003c0)={{r0}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000340)={0x0, 0x2, 0x400, 0x1, {0x9, 0xdd, 0xff, 0x7e, 0x62e4}, [0x1ff, 0x8]}}, @devid}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000002000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 17.471018069s ago: executing program 0 (id=1489): socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x4c}}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x93, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000906010800400000ffffeff9050000000900020073797a310006000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 17.442257937s ago: executing program 2 (id=1490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='tlb_flush\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000082", @ANYRES16=r5, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000c40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0x4050) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x570, 0x1e8, 0xf8, 0x1e8, 0x1e8, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000540), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [0xffffffff, 0xff, 0xff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0x808000ff], 'netpci0\x00', 'bridge0\x00', {0xff}, {}, 0x5c, 0x3, 0x0, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "a4ce"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x40}}}, {{@ipv6={@local, @mcast2, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff, 0xff], 'macvtap0\x00', 'veth1\x00', {}, {0xff}, 0x89, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@loopback, 0x3e, 0x3, 0x200}}}, {{@ipv6={@local, @private0, [0xc47372d804d0411e, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xc7a69be7f8b92245], 'pim6reg\x00', 'geneve0\x00', {}, {}, 0x0, 0x2, 0x4, 0x22}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1a}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast2, 0x16, 0x22, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 17.349094409s ago: executing program 0 (id=1491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000006000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.195073276s ago: executing program 0 (id=1492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x8, 0x134, 0xd}) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ce\x00'}, 0x58) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x2ec, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x359}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd88}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ac4c370d679f1b0e7e7f55c691a11f803575ca18c5dc2f5750aed505e7656f49587a1d2d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1a}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5ac2351c2fd97e92d9851d1db242bc3943e1ec821a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x772}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1557}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0xc7b16f5b1f6e1ed2}, 0x4048804) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}}, 0x0) 17.019744032s ago: executing program 0 (id=1493): unshare(0x400) socket(0x23, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000040)=r0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 16.433787477s ago: executing program 2 (id=1494): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0xff, 0x2, 0x0, 0xb88f}, &(0x7f0000001200)=0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x4000b}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x40000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x46, &(0x7f0000000040)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) ioctl(r4, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r5, 0x0, 0xfffffffffffff801}, 0x18) 16.095012131s ago: executing program 0 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0x1, 0x4}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001880)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1600000000000000008400000104ffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x44) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x4f7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}, 0x1c) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r12, 0x0, 0x18, 0x0, &(0x7f00000000c0)) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0106000000000400000009000000240004801300010062726f6164636173742d6c696e6b80"], 0x38}}, 0x800) (async) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x40044) (rerun: 64) 15.797182474s ago: executing program 3 (id=1496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000007a03000018010000846c6c2500000000002020207b1a00fe00000000bfa100000000000007010000009dffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f00000004c0)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.769657209s ago: executing program 3 (id=1497): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {&(0x7f0000000000)="d9cc9a4bb2", 0x5}, {&(0x7f0000000040)="c59437b2996afc", 0x7}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @private=0x2010106}}}], 0x20}, 0x24008004) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x1, '\x00', {}, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200009c0], 0x0, 0x0, &(0x7f00000009c0)=[{0x0, '\x00', 0x0, 0x2}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 15.695139729s ago: executing program 3 (id=1498): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.045481244s ago: executing program 32 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0x1, 0x4}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001880)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1600000000000000008400000104ffffff7f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x44) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x4f7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}, 0x1c) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r12, 0x0, 0x18, 0x0, &(0x7f00000000c0)) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0106000000000400000009000000240004801300010062726f6164636173742d6c696e6b80"], 0x38}}, 0x800) (async) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x40044) (rerun: 64) 1.01649977s ago: executing program 33 (id=1494): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0xff, 0x2, 0x0, 0xb88f}, &(0x7f0000001200)=0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x4000b}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x40000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x46, &(0x7f0000000040)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) ioctl(r4, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r5, 0x0, 0xfffffffffffff801}, 0x18) 0s ago: executing program 34 (id=1498): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) kernel console output (not intermixed with test programs): port 6081 - 0 [ 153.222786][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.280460][ T9825] syzkaller1: entered promiscuous mode [ 153.310737][ T9825] syzkaller1: entered allmulticast mode [ 153.366679][ T9843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 153.377743][ T9843] net_ratelimit: 590 callbacks suppressed [ 153.377764][ T9843] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 153.422143][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.522939][ T9855] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1060'. [ 153.562069][ T53] bridge_slave_1: left allmulticast mode [ 153.567775][ T53] bridge_slave_1: left promiscuous mode [ 153.573823][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.584717][ T53] bridge_slave_0: left allmulticast mode [ 153.598074][ T53] bridge_slave_0: left promiscuous mode [ 153.603948][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.767631][ T9867] FAULT_INJECTION: forcing a failure. [ 153.767631][ T9867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.783396][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.2.1063 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 153.783427][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.783440][ T9867] Call Trace: [ 153.783448][ T9867] [ 153.783456][ T9867] dump_stack_lvl+0x241/0x360 [ 153.783494][ T9867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.783525][ T9867] ? __pfx__printk+0x10/0x10 [ 153.783554][ T9867] ? __pfx_lock_release+0x10/0x10 [ 153.783587][ T9867] should_fail_ex+0x3b0/0x4e0 [ 153.783610][ T9867] _copy_from_user+0x2d/0xb0 [ 153.783641][ T9867] copy_msghdr_from_user+0xae/0x680 [ 153.783671][ T9867] ? __pfx___might_resched+0x10/0x10 [ 153.783696][ T9867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 153.783730][ T9867] ? __sys_sendmmsg+0x392/0x720 [ 153.783754][ T9867] ? __might_fault+0xaa/0x120 [ 153.783779][ T9867] __sys_sendmmsg+0x32b/0x720 [ 153.783802][ T9867] ? __pfx___might_resched+0x10/0x10 [ 153.783831][ T9867] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.783854][ T9867] ? rcu_is_watching+0x15/0xb0 [ 153.783891][ T9867] ? __pfx_lock_release+0x10/0x10 [ 153.783917][ T9867] ? kstrtouint_from_user+0x128/0x190 [ 153.783948][ T9867] ? rcu_is_watching+0x15/0xb0 [ 153.783977][ T9867] ? lock_release+0xbf/0xa30 [ 153.784002][ T9867] ? __pfx_lock_release+0x10/0x10 [ 153.784028][ T9867] ? proc_fail_nth_write+0x24f/0x2d0 [ 153.784065][ T9867] ? common_file_perm+0x1a6/0x210 [ 153.784087][ T9867] ? __pfx_lock_release+0x10/0x10 [ 153.784113][ T9867] ? bpf_lsm_file_permission+0x9/0x10 [ 153.784133][ T9867] ? preempt_count_add+0x93/0x190 [ 153.784160][ T9867] ? sb_end_write+0xe9/0x1c0 [ 153.784189][ T9867] ? vfs_write+0x730/0xd30 [ 153.784211][ T9867] ? __mutex_unlock_slowpath+0x227/0x800 [ 153.784258][ T9867] ? ksys_write+0x251/0x2b0 [ 153.784279][ T9867] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.784306][ T9867] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.784333][ T9867] ? rcu_is_watching+0x15/0xb0 [ 153.784364][ T9867] __x64_sys_sendmmsg+0xa0/0xb0 [ 153.784393][ T9867] do_syscall_64+0xf3/0x230 [ 153.784412][ T9867] ? clear_bhb_loop+0x35/0x90 [ 153.784436][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.784457][ T9867] RIP: 0033:0x7f6e5e58cd29 [ 153.784474][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.784491][ T9867] RSP: 002b:00007f6e5f3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.784514][ T9867] RAX: ffffffffffffffda RBX: 00007f6e5e7a5fa0 RCX: 00007f6e5e58cd29 [ 153.784529][ T9867] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 153.784542][ T9867] RBP: 00007f6e5f3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 153.784554][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.784566][ T9867] R13: 0000000000000000 R14: 00007f6e5e7a5fa0 R15: 00007fffe9638748 [ 153.784590][ T9867] [ 154.086993][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.098759][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.109924][ T53] bond0 (unregistering): Released all slaves [ 154.124914][ T9819] chnl_net:caif_netlink_parms(): no params data found [ 154.199611][ T9876] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 154.216462][ T9876] team0: Port device syz_tun added [ 154.231647][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.239402][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.246694][ T9819] bridge_slave_0: entered allmulticast mode [ 154.253489][ T9819] bridge_slave_0: entered promiscuous mode [ 154.278591][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.287675][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.297767][ T9819] bridge_slave_1: entered allmulticast mode [ 154.305276][ T9819] bridge_slave_1: entered promiscuous mode [ 154.337826][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.350274][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.364877][ T9881] xt_l2tp: v2 tid > 0xffff: 150994944 [ 154.371388][ T9882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1068'. [ 154.394701][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 154.449189][ T9819] team0: Port device team_slave_0 added [ 154.456760][ T9819] team0: Port device team_slave_1 added [ 154.463139][ T9887] netlink: 'syz.2.1069': attribute type 13 has an invalid length. [ 154.473804][ T9888] netlink: 'syz.2.1069': attribute type 13 has an invalid length. [ 154.503383][ T9887] gretap0: refused to change device tx_queue_len [ 154.510654][ T9887] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 154.533223][ T9888] gretap0: refused to change device tx_queue_len [ 154.539689][ T9888] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 154.558616][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.571103][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.615132][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.633916][ T9891] vlan2: entered promiscuous mode [ 154.650597][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.659718][ T9904] FAULT_INJECTION: forcing a failure. [ 154.659718][ T9904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.673133][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.3.1075 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 154.673160][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.673173][ T9904] Call Trace: [ 154.673180][ T9904] [ 154.673188][ T9904] dump_stack_lvl+0x241/0x360 [ 154.673224][ T9904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.673253][ T9904] ? __pfx__printk+0x10/0x10 [ 154.673299][ T9904] ? __pfx_lock_release+0x10/0x10 [ 154.673331][ T9904] should_fail_ex+0x3b0/0x4e0 [ 154.673354][ T9904] _copy_from_user+0x2d/0xb0 [ 154.673384][ T9904] copy_msghdr_from_user+0xae/0x680 [ 154.673416][ T9904] ? __pfx___might_resched+0x10/0x10 [ 154.673441][ T9904] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 154.673474][ T9904] ? __sys_sendmmsg+0x392/0x720 [ 154.673498][ T9904] ? __might_fault+0xaa/0x120 [ 154.673523][ T9904] __sys_sendmmsg+0x32b/0x720 [ 154.673546][ T9904] ? __pfx___might_resched+0x10/0x10 [ 154.673573][ T9904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.673596][ T9904] ? rcu_is_watching+0x15/0xb0 [ 154.673634][ T9904] ? __pfx_lock_release+0x10/0x10 [ 154.673659][ T9904] ? kstrtouint_from_user+0x128/0x190 [ 154.673691][ T9904] ? rcu_is_watching+0x15/0xb0 [ 154.673721][ T9904] ? lock_release+0xbf/0xa30 [ 154.673746][ T9904] ? __pfx_lock_release+0x10/0x10 [ 154.673773][ T9904] ? proc_fail_nth_write+0x24f/0x2d0 [ 154.673800][ T9904] ? common_file_perm+0x1a6/0x210 [ 154.673823][ T9904] ? __pfx_lock_release+0x10/0x10 [ 154.673849][ T9904] ? bpf_lsm_file_permission+0x9/0x10 [ 154.673870][ T9904] ? preempt_count_add+0x93/0x190 [ 154.673891][ T9904] ? sb_end_write+0xe9/0x1c0 [ 154.673922][ T9904] ? vfs_write+0x730/0xd30 [ 154.673944][ T9904] ? __mutex_unlock_slowpath+0x227/0x800 [ 154.673994][ T9904] ? ksys_write+0x251/0x2b0 [ 154.674016][ T9904] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.674047][ T9904] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.674074][ T9904] ? rcu_is_watching+0x15/0xb0 [ 154.674112][ T9904] __x64_sys_sendmmsg+0xa0/0xb0 [ 154.674138][ T9904] do_syscall_64+0xf3/0x230 [ 154.674158][ T9904] ? clear_bhb_loop+0x35/0x90 [ 154.674183][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.674205][ T9904] RIP: 0033:0x7fb79618cd29 [ 154.674223][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.674242][ T9904] RSP: 002b:00007fb796f13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.674264][ T9904] RAX: ffffffffffffffda RBX: 00007fb7963a5fa0 RCX: 00007fb79618cd29 [ 154.674280][ T9904] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 154.674293][ T9904] RBP: 00007fb796f13090 R08: 0000000000000000 R09: 0000000000000000 [ 154.674306][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.674318][ T9904] R13: 0000000000000000 R14: 00007fb7963a5fa0 R15: 00007ffd1121bf38 [ 154.674341][ T9904] [ 154.988182][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.015587][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.076273][ T53] hsr_slave_0: left promiscuous mode [ 155.083518][ T53] hsr_slave_1: left promiscuous mode [ 155.089628][ T5846] Bluetooth: hci2: command tx timeout [ 155.102673][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 155.106303][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 155.121819][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.129288][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.138075][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.145790][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.157291][ T53] veth1_macvtap: left promiscuous mode [ 155.163251][ T53] veth0_macvtap: left promiscuous mode [ 155.169075][ T53] veth1_vlan: left promiscuous mode [ 155.174367][ T53] veth0_vlan: left promiscuous mode [ 155.287336][ T53] team0 (unregistering): Port device team_slave_1 removed [ 155.302303][ T53] team0 (unregistering): Port device team_slave_0 removed [ 155.356605][ T9903] bridge_slave_1: left allmulticast mode [ 155.363750][ T9903] bridge_slave_1: left promiscuous mode [ 155.369672][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.383904][ T9903] bridge_slave_0: left allmulticast mode [ 155.389714][ T9903] bridge_slave_0: left promiscuous mode [ 155.395569][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.497207][ T9819] hsr_slave_0: entered promiscuous mode [ 155.503474][ T9819] hsr_slave_1: entered promiscuous mode [ 155.510272][ T9819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.517883][ T9819] Cannot create hsr debugfs directory [ 155.681658][ T9924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1081'. [ 155.693753][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 155.746887][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 155.981205][ T9950] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 155.996962][ T9819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.056912][ T9819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.091912][ T9819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.117431][ T9819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.267468][ T9819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.310002][ T9819] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.313640][ T9952] infiniband syz1: set down [ 156.325659][ T9952] infiniband syz1: added syzkaller0 [ 156.334116][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.341262][ T8017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.352861][ T9952] syz1: rxe_create_cq: returned err = -12 [ 156.360126][ T9952] infiniband syz1: Couldn't create ib_mad CQ [ 156.367537][ T9952] infiniband syz1: Couldn't open port 1 [ 156.377241][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.384451][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.416360][ T9952] RDS/IB: syz1: added [ 156.420782][ T9952] smc: adding ib device syz1 with port count 1 [ 156.427188][ T9952] smc: ib device syz1 port 1 has pnetid [ 156.459827][ T9967] sch_fq: defrate 511 ignored. [ 156.683249][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.744659][ T9819] veth0_vlan: entered promiscuous mode [ 156.795144][ T9819] veth1_vlan: entered promiscuous mode [ 156.841887][ T9819] veth0_macvtap: entered promiscuous mode [ 156.852742][ T9819] veth1_macvtap: entered promiscuous mode [ 156.887003][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.909920][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.939249][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.961172][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.977790][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.002056][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.024098][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.044321][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.064470][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.084642][ T9819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.106455][ T9819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.129465][ T9819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.149674][ T9819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.159269][ T5846] Bluetooth: hci2: command tx timeout [ 157.172263][ T9819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.189101][ T9819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.208958][ T9819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.309055][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.334980][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.370976][ T8017] smc: removing ib device syz1 [ 157.383480][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.393905][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.835406][ T9989] netlink: 'syz.3.1103': attribute type 4 has an invalid length. [ 157.898518][ T9991] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 158.009592][ T9991] bond2: entered promiscuous mode [ 158.014964][ T9991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.229524][ T9996] delete_channel: no stack [ 158.316083][ T9995] netlink: 'syz.3.1103': attribute type 59 has an invalid length. [ 158.645149][T10015] batadv_slave_1: entered promiscuous mode [ 158.675376][T10013] netlink: 'syz.3.1107': attribute type 142 has an invalid length. [ 158.684868][T10013] netlink: 'syz.3.1107': attribute type 131 has an invalid length. [ 158.716865][T10017] __nla_validate_parse: 5 callbacks suppressed [ 158.716886][T10017] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1109'. [ 158.740286][T10017] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1109'. [ 158.750526][T10017] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1109'. [ 158.766280][T10014] batadv_slave_1: left promiscuous mode [ 158.784315][T10020] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 158.801943][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 158.816325][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 158.823272][T10022] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1110'. [ 158.837681][T10022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.907589][T10028] FAULT_INJECTION: forcing a failure. [ 158.907589][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.931318][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.0.1112 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 158.931350][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.931362][T10028] Call Trace: [ 158.931370][T10028] [ 158.931378][T10028] dump_stack_lvl+0x241/0x360 [ 158.931416][T10028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.931446][T10028] ? __pfx__printk+0x10/0x10 [ 158.931475][T10028] ? __pfx_lock_release+0x10/0x10 [ 158.931507][T10028] should_fail_ex+0x3b0/0x4e0 [ 158.931530][T10028] _copy_from_user+0x2d/0xb0 [ 158.931561][T10028] copy_msghdr_from_user+0xae/0x680 [ 158.931591][T10028] ? __pfx___might_resched+0x10/0x10 [ 158.931616][T10028] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.931649][T10028] ? __sys_sendmmsg+0x392/0x720 [ 158.931673][T10028] ? __might_fault+0xaa/0x120 [ 158.931698][T10028] __sys_sendmmsg+0x32b/0x720 [ 158.931728][T10028] ? __pfx___might_resched+0x10/0x10 [ 158.931773][T10028] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.931801][T10028] ? rcu_is_watching+0x15/0xb0 [ 158.931837][T10028] ? __pfx_lock_release+0x10/0x10 [ 158.931863][T10028] ? kstrtouint_from_user+0x128/0x190 [ 158.931894][T10028] ? rcu_is_watching+0x15/0xb0 [ 158.931925][T10028] ? lock_release+0xbf/0xa30 [ 158.931950][T10028] ? __pfx_lock_release+0x10/0x10 [ 158.931977][T10028] ? proc_fail_nth_write+0x24f/0x2d0 [ 158.932003][T10028] ? common_file_perm+0x1a6/0x210 [ 158.932026][T10028] ? __pfx_lock_release+0x10/0x10 [ 158.932056][T10028] ? bpf_lsm_file_permission+0x9/0x10 [ 158.932076][T10028] ? preempt_count_add+0x93/0x190 [ 158.932098][T10028] ? sb_end_write+0xe9/0x1c0 [ 158.932128][T10028] ? vfs_write+0x730/0xd30 [ 158.932151][T10028] ? __mutex_unlock_slowpath+0x227/0x800 [ 158.932212][T10028] ? ksys_write+0x251/0x2b0 [ 158.932234][T10028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.932274][T10028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.932300][T10028] ? rcu_is_watching+0x15/0xb0 [ 158.932333][T10028] __x64_sys_sendmmsg+0xa0/0xb0 [ 158.932359][T10028] do_syscall_64+0xf3/0x230 [ 158.932378][T10028] ? clear_bhb_loop+0x35/0x90 [ 158.932402][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.932424][T10028] RIP: 0033:0x7f72bb78cd29 [ 158.932441][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.932458][T10028] RSP: 002b:00007f72bc644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.932480][T10028] RAX: ffffffffffffffda RBX: 00007f72bb9a6080 RCX: 00007f72bb78cd29 [ 158.932496][T10028] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 158.932509][T10028] RBP: 00007f72bc644090 R08: 0000000000000000 R09: 0000000000000000 [ 158.932522][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.932534][T10028] R13: 0000000000000000 R14: 00007f72bb9a6080 R15: 00007ffed2a23d88 [ 158.932558][T10028] [ 159.003852][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 159.474203][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.181116][T10056] batadv_slave_1: entered promiscuous mode [ 160.188298][T10052] netlink: 'syz.4.1121': attribute type 27 has an invalid length. [ 160.196601][T10053] netlink: 'syz.2.1119': attribute type 15 has an invalid length. [ 160.229807][T10053] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1119'. [ 160.248697][T10053] netlink: zone id is out of range [ 160.259100][T10053] netlink: zone id is out of range [ 160.269829][T10055] batadv_slave_1: left promiscuous mode [ 160.277526][T10053] netlink: zone id is out of range [ 160.285597][T10053] netlink: zone id is out of range [ 160.292065][T10053] netlink: zone id is out of range [ 160.297345][T10053] netlink: zone id is out of range [ 160.333728][T10053] netlink: zone id is out of range [ 160.361785][T10053] netlink: zone id is out of range [ 160.374293][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.379227][T10053] netlink: zone id is out of range [ 160.440703][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.449336][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.456679][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.469048][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.478041][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.488680][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.492058][T10071] FAULT_INJECTION: forcing a failure. [ 160.492058][T10071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.498523][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.525501][T10071] CPU: 0 UID: 0 PID: 10071 Comm: syz.3.1126 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 160.525531][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.525550][T10071] Call Trace: [ 160.525558][T10071] [ 160.525566][T10071] dump_stack_lvl+0x241/0x360 [ 160.525604][T10071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.525634][T10071] ? __pfx__printk+0x10/0x10 [ 160.525664][T10071] ? __pfx_lock_release+0x10/0x10 [ 160.525696][T10071] should_fail_ex+0x3b0/0x4e0 [ 160.525719][T10071] _copy_from_user+0x2d/0xb0 [ 160.525750][T10071] copy_msghdr_from_user+0xae/0x680 [ 160.525781][T10071] ? __pfx___might_resched+0x10/0x10 [ 160.525807][T10071] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.525841][T10071] ? __sys_sendmmsg+0x392/0x720 [ 160.525865][T10071] ? __might_fault+0xaa/0x120 [ 160.525890][T10071] __sys_sendmmsg+0x32b/0x720 [ 160.525914][T10071] ? __pfx___might_resched+0x10/0x10 [ 160.525943][T10071] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.525966][T10071] ? rcu_is_watching+0x15/0xb0 [ 160.526004][T10071] ? __pfx_lock_release+0x10/0x10 [ 160.526028][T10071] ? kstrtouint_from_user+0x128/0x190 [ 160.526059][T10071] ? rcu_is_watching+0x15/0xb0 [ 160.526091][T10071] ? lock_release+0xbf/0xa30 [ 160.526116][T10071] ? __pfx_lock_release+0x10/0x10 [ 160.526143][T10071] ? proc_fail_nth_write+0x24f/0x2d0 [ 160.526170][T10071] ? common_file_perm+0x1a6/0x210 [ 160.526203][T10071] ? __pfx_lock_release+0x10/0x10 [ 160.526229][T10071] ? bpf_lsm_file_permission+0x9/0x10 [ 160.526267][T10071] ? preempt_count_add+0x93/0x190 [ 160.526297][T10071] ? sb_end_write+0xe9/0x1c0 [ 160.526327][T10071] ? vfs_write+0x730/0xd30 [ 160.526351][T10071] ? __mutex_unlock_slowpath+0x227/0x800 [ 160.526401][T10071] ? ksys_write+0x251/0x2b0 [ 160.526422][T10071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.526450][T10071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.526477][T10071] ? rcu_is_watching+0x15/0xb0 [ 160.526511][T10071] __x64_sys_sendmmsg+0xa0/0xb0 [ 160.526536][T10071] do_syscall_64+0xf3/0x230 [ 160.526557][T10071] ? clear_bhb_loop+0x35/0x90 [ 160.526582][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.526604][T10071] RIP: 0033:0x7fb79618cd29 [ 160.526621][T10071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.526640][T10071] RSP: 002b:00007fb796f13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.526662][T10071] RAX: ffffffffffffffda RBX: 00007fb7963a5fa0 RCX: 00007fb79618cd29 [ 160.526678][T10071] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 160.526691][T10071] RBP: 00007fb796f13090 R08: 0000000000000000 R09: 0000000000000000 [ 160.526705][T10071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.526717][T10071] R13: 0000000000000000 R14: 00007fb7963a5fa0 R15: 00007ffd1121bf38 [ 160.526741][T10071] [ 160.906078][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.977426][T10086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1130'. [ 161.106860][ T53] bridge_slave_1: left allmulticast mode [ 161.118162][ T53] bridge_slave_1: left promiscuous mode [ 161.123993][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.152025][ T53] bridge_slave_0: left allmulticast mode [ 161.168067][ T53] bridge_slave_0: left promiscuous mode [ 161.178026][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.211063][T10094] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 161.234621][T10102] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1133'. [ 161.370608][T10118] FAULT_INJECTION: forcing a failure. [ 161.370608][T10118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.393783][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.4.1137 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 161.393815][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.393828][T10118] Call Trace: [ 161.393837][T10118] [ 161.393845][T10118] dump_stack_lvl+0x241/0x360 [ 161.393881][T10118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.393912][T10118] ? __pfx__printk+0x10/0x10 [ 161.393941][T10118] ? __pfx_lock_release+0x10/0x10 [ 161.393973][T10118] should_fail_ex+0x3b0/0x4e0 [ 161.393996][T10118] _copy_from_user+0x2d/0xb0 [ 161.394037][T10118] copy_msghdr_from_user+0xae/0x680 [ 161.394068][T10118] ? __pfx___might_resched+0x10/0x10 [ 161.394094][T10118] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.394127][T10118] ? __sys_sendmmsg+0x392/0x720 [ 161.394150][T10118] ? __might_fault+0xaa/0x120 [ 161.394189][T10118] __sys_sendmmsg+0x32b/0x720 [ 161.394218][T10118] ? __pfx___might_resched+0x10/0x10 [ 161.394246][T10118] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.394269][T10118] ? rcu_is_watching+0x15/0xb0 [ 161.394313][T10118] ? __pfx_lock_release+0x10/0x10 [ 161.394337][T10118] ? kstrtouint_from_user+0x128/0x190 [ 161.394368][T10118] ? rcu_is_watching+0x15/0xb0 [ 161.394399][T10118] ? lock_release+0xbf/0xa30 [ 161.394424][T10118] ? __pfx_lock_release+0x10/0x10 [ 161.394450][T10118] ? proc_fail_nth_write+0x24f/0x2d0 [ 161.394483][T10118] ? common_file_perm+0x1a6/0x210 [ 161.394507][T10118] ? __pfx_lock_release+0x10/0x10 [ 161.394533][T10118] ? bpf_lsm_file_permission+0x9/0x10 [ 161.394554][T10118] ? preempt_count_add+0x93/0x190 [ 161.394575][T10118] ? sb_end_write+0xe9/0x1c0 [ 161.394605][T10118] ? vfs_write+0x730/0xd30 [ 161.394627][T10118] ? __mutex_unlock_slowpath+0x227/0x800 [ 161.394676][T10118] ? ksys_write+0x251/0x2b0 [ 161.394698][T10118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.394726][T10118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.394753][T10118] ? rcu_is_watching+0x15/0xb0 [ 161.394792][T10118] __x64_sys_sendmmsg+0xa0/0xb0 [ 161.394817][T10118] do_syscall_64+0xf3/0x230 [ 161.394842][T10118] ? clear_bhb_loop+0x35/0x90 [ 161.394867][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.394889][T10118] RIP: 0033:0x7fd19358cd29 [ 161.394906][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.394923][T10118] RSP: 002b:00007fd19441e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.394946][T10118] RAX: ffffffffffffffda RBX: 00007fd1937a6080 RCX: 00007fd19358cd29 [ 161.394961][T10118] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 161.394974][T10118] RBP: 00007fd19441e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.394987][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.394998][T10118] R13: 0000000000000000 R14: 00007fd1937a6080 R15: 00007ffda89d2b18 [ 161.395020][T10118] [ 161.757410][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.784008][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.794398][ T53] bond0 (unregistering): Released all slaves [ 161.981389][T10148] batadv_slave_1: entered promiscuous mode [ 162.012788][T10064] chnl_net:caif_netlink_parms(): no params data found [ 162.149753][T10146] batadv_slave_1: left promiscuous mode [ 162.206162][T10157] netlink: 'syz.3.1150': attribute type 5 has an invalid length. [ 162.381217][ T53] hsr_slave_0: left promiscuous mode [ 162.387274][ T53] hsr_slave_1: left promiscuous mode [ 162.393972][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.401627][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.409700][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.417172][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.426431][ T53] veth1_macvtap: left promiscuous mode [ 162.431968][ T53] veth0_macvtap: left promiscuous mode [ 162.437509][ T53] veth1_vlan: left promiscuous mode [ 162.443232][ T53] veth0_vlan: left promiscuous mode [ 162.497356][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.505007][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.514037][T10064] bridge_slave_0: entered allmulticast mode [ 162.522439][T10064] bridge_slave_0: entered promiscuous mode [ 162.574745][ T53] team0 (unregistering): Port device team_slave_1 removed [ 162.585639][ T53] team0 (unregistering): Port device team_slave_0 removed [ 162.608038][ T5846] Bluetooth: hci2: command tx timeout [ 162.651786][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.661405][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.668782][T10064] bridge_slave_1: entered allmulticast mode [ 162.675352][T10064] bridge_slave_1: entered promiscuous mode [ 162.692149][T10174] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 162.717633][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.732280][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.763748][T10064] team0: Port device team_slave_0 added [ 162.778734][T10064] team0: Port device team_slave_1 added [ 162.807193][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.814848][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.841099][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.853556][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.860569][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.886521][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.916439][T10064] hsr_slave_0: entered promiscuous mode [ 162.923310][T10064] hsr_slave_1: entered promiscuous mode [ 162.929647][T10064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.937249][T10064] Cannot create hsr debugfs directory [ 163.194342][T10064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.206665][T10064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.217725][T10064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.230776][T10173] delete_channel: no stack [ 163.239460][T10064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.346954][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.370880][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.391484][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.398685][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.478325][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.485440][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.505423][T10199] batadv_slave_1: entered promiscuous mode [ 163.609457][T10198] batadv_slave_1: left promiscuous mode [ 163.686632][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.744562][T10064] veth0_vlan: entered promiscuous mode [ 163.759496][T10064] veth1_vlan: entered promiscuous mode [ 163.783104][T10064] veth0_macvtap: entered promiscuous mode [ 163.791478][T10064] veth1_macvtap: entered promiscuous mode [ 163.804791][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.817636][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.827813][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.838596][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.849522][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.860830][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.872979][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.883668][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.894552][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.904421][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.915302][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.929184][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.940421][T10064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.946805][T10213] __nla_validate_parse: 1 callbacks suppressed [ 163.946824][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 163.951959][T10064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.973459][T10064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.982239][T10064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.034816][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.049227][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.075564][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.083662][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.565948][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 164.909467][T10232] netlink: 'syz.2.1171': attribute type 28 has an invalid length. [ 165.146685][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 165.157764][T10248] nbd: nbd0 already in use [ 165.467043][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 165.695813][ T3495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.718318][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 166.720365][T10272] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 166.747394][T10272] net_ratelimit: 9 callbacks suppressed [ 166.747415][T10272] openvswitch: netlink: Multiple metadata blocks provided [ 166.896187][T10278] batadv_slave_1: entered promiscuous mode [ 166.969577][T10277] batadv_slave_1: left promiscuous mode [ 166.978367][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.988337][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.002062][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.010560][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.028011][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.033782][T10290] netlink: 'syz.2.1190': attribute type 3 has an invalid length. [ 167.045511][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.053038][T10290] netlink: 'syz.2.1190': attribute type 3 has an invalid length. [ 167.078768][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 167.099052][T10289] wg1: entered promiscuous mode [ 167.265783][ T3495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.472899][T10310] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.545351][T10285] chnl_net:caif_netlink_parms(): no params data found [ 167.797669][T10285] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.826718][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.886047][T10285] bridge_slave_0: entered allmulticast mode [ 167.907478][T10285] bridge_slave_0: entered promiscuous mode [ 167.930286][ T3495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.945887][T10285] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.966689][T10285] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.986118][T10285] bridge_slave_1: entered allmulticast mode [ 168.011536][T10285] bridge_slave_1: entered promiscuous mode [ 168.071804][ T3495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.119166][T10285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.143679][T10285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.281680][ T3495] bridge_slave_1: left allmulticast mode [ 168.297069][ T3495] bridge_slave_1: left promiscuous mode [ 168.310926][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.322050][ T3495] bridge_slave_0: left allmulticast mode [ 168.327788][ T3495] bridge_slave_0: left promiscuous mode [ 168.335591][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.377032][T10285] team0: Port device team_slave_0 added [ 168.474666][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.474969][T10338] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1200'. [ 168.494874][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.505665][ T3495] bond0 (unregistering): Released all slaves [ 168.517972][T10285] team0: Port device team_slave_1 added [ 168.562910][T10285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.574074][T10285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.611176][T10285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.634781][T10285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.644729][T10285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.674543][T10285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.695261][T10348] batadv_slave_1: entered promiscuous mode [ 168.725680][T10285] hsr_slave_0: entered promiscuous mode [ 168.732070][T10285] hsr_slave_1: entered promiscuous mode [ 168.738324][T10285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.746192][T10285] Cannot create hsr debugfs directory [ 168.756210][T10350] IPVS: length: 78 != 422621984 [ 168.839092][T10347] batadv_slave_1: left promiscuous mode [ 168.992629][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 169.018159][ T3495] hsr_slave_0: left promiscuous mode [ 169.026370][ T3495] hsr_slave_1: left promiscuous mode [ 169.040426][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.057663][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.066125][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.073832][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.081068][ T5846] Bluetooth: hci2: command tx timeout [ 169.088970][ T3495] veth1_macvtap: left promiscuous mode [ 169.094505][ T3495] veth0_macvtap: left promiscuous mode [ 169.100138][ T3495] veth1_vlan: left promiscuous mode [ 169.105409][ T3495] veth0_vlan: left promiscuous mode [ 169.221187][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 169.236154][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 169.474355][T10285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.488310][T10372] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 169.511627][T10285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.555008][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 169.567350][T10285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.585327][T10285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.652675][T10380] batadv_slave_1: entered promiscuous mode [ 169.724308][T10285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.747463][T10285] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.771183][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.778326][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.790591][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.797741][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.812494][T10379] batadv_slave_1: left promiscuous mode [ 169.887396][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 169.900295][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 170.065828][T10285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.129008][T10285] veth0_vlan: entered promiscuous mode [ 170.145479][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 170.149389][T10285] veth1_vlan: entered promiscuous mode [ 170.164824][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 170.196781][T10285] veth0_macvtap: entered promiscuous mode [ 170.208473][T10285] veth1_macvtap: entered promiscuous mode [ 170.223680][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.234483][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.244800][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.255846][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.267369][T10285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.281743][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.292982][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.302914][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.313549][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.326051][T10285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.338619][T10285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.349554][T10285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.360700][T10285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.369569][T10285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.378835][T10285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.387679][T10285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.425690][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.440353][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.456761][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.464887][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.730302][T10410] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1223'. [ 170.856559][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 170.985925][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 170.995897][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 171.074802][T10427] batadv_slave_1: entered promiscuous mode [ 171.139835][T10426] batadv_slave_1: left promiscuous mode [ 171.413501][T10441] bond0: (slave netdevsim0): Releasing backup interface [ 171.441011][T10457] ipt_rpfilter: unknown options [ 171.528092][T10466] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 171.777824][T10482] FAULT_INJECTION: forcing a failure. [ 171.777824][T10482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.792454][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.2.1245 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 171.792485][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 171.792498][T10482] Call Trace: [ 171.792505][T10482] [ 171.792514][T10482] dump_stack_lvl+0x241/0x360 [ 171.792565][T10482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.792595][T10482] ? __pfx__printk+0x10/0x10 [ 171.792625][T10482] ? __pfx_lock_release+0x10/0x10 [ 171.792657][T10482] should_fail_ex+0x3b0/0x4e0 [ 171.792680][T10482] _copy_from_user+0x2d/0xb0 [ 171.792711][T10482] copy_msghdr_from_user+0xae/0x680 [ 171.792740][T10482] ? __pfx___might_resched+0x10/0x10 [ 171.792766][T10482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 171.792799][T10482] ? __sys_sendmmsg+0x392/0x720 [ 171.792827][T10482] ? __might_fault+0xaa/0x120 [ 171.792852][T10482] __sys_sendmmsg+0x32b/0x720 [ 171.792876][T10482] ? __pfx___might_resched+0x10/0x10 [ 171.792904][T10482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.792927][T10482] ? rcu_is_watching+0x15/0xb0 [ 171.792965][T10482] ? __pfx_lock_release+0x10/0x10 [ 171.792990][T10482] ? kstrtouint_from_user+0x128/0x190 [ 171.793022][T10482] ? rcu_is_watching+0x15/0xb0 [ 171.793053][T10482] ? lock_release+0xbf/0xa30 [ 171.793078][T10482] ? __pfx_lock_release+0x10/0x10 [ 171.793105][T10482] ? proc_fail_nth_write+0x24f/0x2d0 [ 171.793133][T10482] ? common_file_perm+0x1a6/0x210 [ 171.793156][T10482] ? __pfx_lock_release+0x10/0x10 [ 171.793182][T10482] ? bpf_lsm_file_permission+0x9/0x10 [ 171.793203][T10482] ? preempt_count_add+0x93/0x190 [ 171.793224][T10482] ? sb_end_write+0xe9/0x1c0 [ 171.793255][T10482] ? vfs_write+0x730/0xd30 [ 171.793277][T10482] ? __mutex_unlock_slowpath+0x227/0x800 [ 171.793326][T10482] ? ksys_write+0x251/0x2b0 [ 171.793348][T10482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.793376][T10482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.793403][T10482] ? rcu_is_watching+0x15/0xb0 [ 171.793436][T10482] __x64_sys_sendmmsg+0xa0/0xb0 [ 171.793462][T10482] do_syscall_64+0xf3/0x230 [ 171.793482][T10482] ? clear_bhb_loop+0x35/0x90 [ 171.793506][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.793528][T10482] RIP: 0033:0x7f6e5e58cd29 [ 171.793552][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.793570][T10482] RSP: 002b:00007f6e5f3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.793593][T10482] RAX: ffffffffffffffda RBX: 00007f6e5e7a5fa0 RCX: 00007f6e5e58cd29 [ 171.793608][T10482] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 171.793621][T10482] RBP: 00007f6e5f3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.793634][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.793646][T10482] R13: 0000000000000000 R14: 00007f6e5e7a5fa0 R15: 00007fffe9638748 [ 171.793670][T10482] [ 172.097173][T10485] netlink: 'syz.0.1246': attribute type 12 has an invalid length. [ 172.421772][ T3495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.675995][T10538] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 173.781793][T10545] tc_dump_action: action bad kind [ 173.845807][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.853204][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.865966][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.873802][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.882485][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.889876][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.986855][T10560] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 174.082929][ T3495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.147918][ T3495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.252828][ T3495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.307429][T10585] macsec0: entered promiscuous mode [ 174.313266][T10585] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 174.320644][T10585] macsec0: entered allmulticast mode [ 174.326052][T10585] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 174.351758][T10587] batadv_slave_1: entered promiscuous mode [ 174.412001][T10548] chnl_net:caif_netlink_parms(): no params data found [ 174.481191][T10594] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 174.494602][T10586] batadv_slave_1: left promiscuous mode [ 174.536339][ T3495] bridge_slave_1: left allmulticast mode [ 174.556725][ T3495] bridge_slave_1: left promiscuous mode [ 174.563546][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.596741][ T3495] bridge_slave_0: left allmulticast mode [ 174.606636][ T3495] bridge_slave_0: left promiscuous mode [ 174.613161][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.620950][T10610] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 174.638163][T10611] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 174.696516][T10611] __nla_validate_parse: 3 callbacks suppressed [ 174.696535][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 174.713677][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 174.726871][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'. [ 174.746403][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'. [ 174.770168][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 174.779844][T10622] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.833150][T10626] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1286'. [ 174.846964][T10626] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.864847][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.875409][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.895803][ T3495] bond0 (unregistering): Released all slaves [ 174.906114][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.913554][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.928453][T10548] bridge_slave_0: entered allmulticast mode [ 174.933591][T10632] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 174.935386][T10548] bridge_slave_0: entered promiscuous mode [ 174.944249][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1289'. [ 174.996189][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.013841][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.030731][T10548] bridge_slave_1: entered allmulticast mode [ 175.047028][T10548] bridge_slave_1: entered promiscuous mode [ 175.134577][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.162660][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.163121][T10637] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.229848][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1290'. [ 175.271278][T10548] team0: Port device team_slave_0 added [ 175.291532][T10548] team0: Port device team_slave_1 added [ 175.319417][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1292'. [ 175.352237][T10643] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1292'. [ 175.361428][T10643] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 175.415729][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.431826][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.460772][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.475291][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.483322][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.552277][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.574194][T10653] netem: change failed [ 175.581850][T10653] netem: change failed [ 175.607946][T10657] batadv_slave_1: entered promiscuous mode [ 175.629428][T10548] hsr_slave_0: entered promiscuous mode [ 175.635876][T10548] hsr_slave_1: entered promiscuous mode [ 175.642824][T10548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.650729][T10548] Cannot create hsr debugfs directory [ 175.734618][T10656] batadv_slave_1: left promiscuous mode [ 175.826441][ T3495] hsr_slave_0: left promiscuous mode [ 175.834683][ T3495] hsr_slave_1: left promiscuous mode [ 175.845038][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.853267][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.861784][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.869661][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.884653][ T3495] veth1_macvtap: left promiscuous mode [ 175.893226][ T3495] veth0_macvtap: left promiscuous mode [ 175.898961][ T3495] veth1_vlan: left promiscuous mode [ 175.904383][ T3495] veth0_vlan: left promiscuous mode [ 175.958144][ T5839] Bluetooth: hci2: command tx timeout [ 175.984646][T10673] tap0: tun_chr_ioctl cmd 1074025677 [ 175.990597][T10673] tap0: linktype set to 768 [ 176.045595][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 176.060054][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 176.261120][T10679] netlink: 'syz.0.1303': attribute type 2 has an invalid length. [ 176.291314][T10679] fþ: entered promiscuous mode [ 176.297076][T10685] ipt_REJECT: TCP_RESET invalid for non-tcp [ 176.365869][T10687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.385134][T10691] batadv_slave_1: entered promiscuous mode [ 176.479191][T10690] batadv_slave_1: left promiscuous mode [ 176.510632][T10699] FAULT_INJECTION: forcing a failure. [ 176.510632][T10699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.524159][T10699] CPU: 1 UID: 0 PID: 10699 Comm: syz.4.1312 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 176.524187][T10699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.524200][T10699] Call Trace: [ 176.524208][T10699] [ 176.524216][T10699] dump_stack_lvl+0x241/0x360 [ 176.524254][T10699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.524285][T10699] ? __pfx__printk+0x10/0x10 [ 176.524313][T10699] ? __pfx_lock_release+0x10/0x10 [ 176.524346][T10699] should_fail_ex+0x3b0/0x4e0 [ 176.524369][T10699] _copy_from_user+0x2d/0xb0 [ 176.524400][T10699] copy_msghdr_from_user+0xae/0x680 [ 176.524430][T10699] ? __pfx___might_resched+0x10/0x10 [ 176.524456][T10699] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 176.524489][T10699] ? __sys_sendmmsg+0x392/0x720 [ 176.524513][T10699] ? __might_fault+0xaa/0x120 [ 176.524538][T10699] __sys_sendmmsg+0x32b/0x720 [ 176.524561][T10699] ? __pfx___might_resched+0x10/0x10 [ 176.524589][T10699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 176.524612][T10699] ? rcu_is_watching+0x15/0xb0 [ 176.524650][T10699] ? __pfx_lock_release+0x10/0x10 [ 176.524673][T10699] ? kstrtouint_from_user+0x128/0x190 [ 176.524703][T10699] ? rcu_is_watching+0x15/0xb0 [ 176.524732][T10699] ? lock_release+0xbf/0xa30 [ 176.524756][T10699] ? __pfx_lock_release+0x10/0x10 [ 176.524781][T10699] ? proc_fail_nth_write+0x24f/0x2d0 [ 176.524807][T10699] ? common_file_perm+0x1a6/0x210 [ 176.524829][T10699] ? __pfx_lock_release+0x10/0x10 [ 176.524854][T10699] ? bpf_lsm_file_permission+0x9/0x10 [ 176.524874][T10699] ? preempt_count_add+0x93/0x190 [ 176.524895][T10699] ? sb_end_write+0xe9/0x1c0 [ 176.524925][T10699] ? vfs_write+0x730/0xd30 [ 176.524948][T10699] ? __mutex_unlock_slowpath+0x227/0x800 [ 176.524998][T10699] ? ksys_write+0x251/0x2b0 [ 176.525019][T10699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.525046][T10699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.525082][T10699] ? rcu_is_watching+0x15/0xb0 [ 176.525113][T10699] __x64_sys_sendmmsg+0xa0/0xb0 [ 176.525137][T10699] do_syscall_64+0xf3/0x230 [ 176.525156][T10699] ? clear_bhb_loop+0x35/0x90 [ 176.525181][T10699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.525203][T10699] RIP: 0033:0x7fd19358cd29 [ 176.525219][T10699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.525235][T10699] RSP: 002b:00007fd19443f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.525256][T10699] RAX: ffffffffffffffda RBX: 00007fd1937a5fa0 RCX: 00007fd19358cd29 [ 176.525271][T10699] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 176.525283][T10699] RBP: 00007fd19443f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.525296][T10699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.525307][T10699] R13: 0000000000000000 R14: 00007fd1937a5fa0 R15: 00007ffda89d2b18 [ 176.525330][T10699] [ 176.904767][T10548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.970122][T10548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.011505][T10720] lo: left promiscuous mode [ 177.018134][T10548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.037770][T10548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.148303][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.161420][T10726] batman_adv: batadv0: Adding interface: dummy0 [ 177.178785][T10726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.204438][T10726] batman_adv: batadv0: Interface activated: dummy0 [ 177.230137][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.267422][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.274629][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.343333][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.350516][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.383031][T10740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.410242][T10743] batadv_slave_1: entered promiscuous mode [ 177.556651][T10742] batadv_slave_1: left promiscuous mode [ 177.685792][T10759] FAULT_INJECTION: forcing a failure. [ 177.685792][T10759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.717317][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.719659][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.2.1328 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 177.719691][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.719705][T10759] Call Trace: [ 177.719712][T10759] [ 177.719721][T10759] dump_stack_lvl+0x241/0x360 [ 177.719760][T10759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.719791][T10759] ? __pfx__printk+0x10/0x10 [ 177.719821][T10759] ? __pfx_lock_release+0x10/0x10 [ 177.719854][T10759] should_fail_ex+0x3b0/0x4e0 [ 177.719879][T10759] _copy_from_user+0x2d/0xb0 [ 177.719911][T10759] copy_msghdr_from_user+0xae/0x680 [ 177.719942][T10759] ? __pfx___might_resched+0x10/0x10 [ 177.719979][T10759] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.720013][T10759] ? __sys_sendmmsg+0x392/0x720 [ 177.720036][T10759] ? __might_fault+0xaa/0x120 [ 177.720061][T10759] __sys_sendmmsg+0x32b/0x720 [ 177.720085][T10759] ? __pfx___might_resched+0x10/0x10 [ 177.720114][T10759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 177.720137][T10759] ? rcu_is_watching+0x15/0xb0 [ 177.720175][T10759] ? __pfx_lock_release+0x10/0x10 [ 177.720200][T10759] ? kstrtouint_from_user+0x128/0x190 [ 177.720233][T10759] ? rcu_is_watching+0x15/0xb0 [ 177.720266][T10759] ? lock_release+0xbf/0xa30 [ 177.720293][T10759] ? __pfx_lock_release+0x10/0x10 [ 177.720327][T10759] ? proc_fail_nth_write+0x24f/0x2d0 [ 177.720355][T10759] ? common_file_perm+0x1a6/0x210 [ 177.720378][T10759] ? __pfx_lock_release+0x10/0x10 [ 177.720405][T10759] ? bpf_lsm_file_permission+0x9/0x10 [ 177.720427][T10759] ? preempt_count_add+0x93/0x190 [ 177.720454][T10759] ? sb_end_write+0xe9/0x1c0 [ 177.720485][T10759] ? vfs_write+0x730/0xd30 [ 177.720508][T10759] ? __mutex_unlock_slowpath+0x227/0x800 [ 177.720559][T10759] ? ksys_write+0x251/0x2b0 [ 177.720580][T10759] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.720609][T10759] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.720637][T10759] ? rcu_is_watching+0x15/0xb0 [ 177.720671][T10759] __x64_sys_sendmmsg+0xa0/0xb0 [ 177.720697][T10759] do_syscall_64+0xf3/0x230 [ 177.720718][T10759] ? clear_bhb_loop+0x35/0x90 [ 177.720742][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.720765][T10759] RIP: 0033:0x7f6e5e58cd29 [ 177.720783][T10759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.720809][T10759] RSP: 002b:00007f6e5f3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.720833][T10759] RAX: ffffffffffffffda RBX: 00007f6e5e7a5fa0 RCX: 00007f6e5e58cd29 [ 177.720853][T10759] RDX: 0000000000000299 RSI: 0000000020003dc0 RDI: 0000000000000005 [ 177.720865][T10759] RBP: 00007f6e5f3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 177.720879][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.720892][T10759] R13: 0000000000000000 R14: 00007f6e5e7a5fa0 R15: 00007fffe9638748 [ 177.720916][T10759] [ 177.963043][T10783] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 178.040472][ T5839] Bluetooth: hci2: command tx timeout [ 178.100394][T10548] veth0_vlan: entered promiscuous mode [ 178.112804][T10548] veth1_vlan: entered promiscuous mode [ 178.134404][T10548] veth0_macvtap: entered promiscuous mode [ 178.143335][T10548] veth1_macvtap: entered promiscuous mode [ 178.181142][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.234851][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.257923][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.285311][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.318213][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.356585][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.391289][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.407539][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.422254][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.432347][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.445960][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.457263][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.543924][T10548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.594334][T10548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.620585][T10548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.642822][T10548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.730994][T10806] batadv_slave_1: entered promiscuous mode [ 178.914739][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.934389][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.962514][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.975013][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.984854][T10805] batadv_slave_1: left promiscuous mode [ 179.426563][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.435619][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.444223][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.454458][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.464075][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 179.471442][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.698691][T10826] chnl_net:caif_netlink_parms(): no params data found [ 179.786614][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.793418][T10841] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 179.803598][T10841] __nla_validate_parse: 10 callbacks suppressed [ 179.803619][T10841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1352'. [ 179.808563][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.827406][T10826] bridge_slave_0: entered allmulticast mode [ 179.835226][T10826] bridge_slave_0: entered promiscuous mode [ 179.848570][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.855742][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.878482][T10826] bridge_slave_1: entered allmulticast mode [ 179.889581][T10826] bridge_slave_1: entered promiscuous mode [ 179.930419][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.943207][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.973359][T10826] team0: Port device team_slave_0 added [ 180.016164][T10826] team0: Port device team_slave_1 added [ 180.074775][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.081955][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.148099][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.169869][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.176838][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.238065][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.271222][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.341471][T10826] hsr_slave_0: entered promiscuous mode [ 180.347598][T10826] hsr_slave_1: entered promiscuous mode [ 180.357747][T10826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.367572][T10826] Cannot create hsr debugfs directory [ 180.471535][T10826] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.574387][T10826] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.622083][T10826] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.682251][T10826] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.784372][T10826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.793220][T10826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.802060][T10826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.810681][T10826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.856558][T10826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.871973][T10826] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.883678][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.890802][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.903178][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.910300][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.922523][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.026505][T10826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.142782][T10826] veth0_vlan: entered promiscuous mode [ 181.152598][T10826] veth1_vlan: entered promiscuous mode [ 181.173842][T10826] veth0_macvtap: entered promiscuous mode [ 181.183506][T10826] veth1_macvtap: entered promiscuous mode [ 181.196859][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.208283][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.218459][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.229162][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.239640][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.250553][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.261295][T10826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.275069][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.287602][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.298744][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.308689][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.319555][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.329740][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.340576][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.350507][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.361324][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.404775][T10826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.433425][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.454092][T10826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.464384][T10870] openvswitch: netlink: Message has 8 unknown bytes. [ 181.466617][T10826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.482066][T10826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.498253][T10826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.561477][ T5839] Bluetooth: hci2: command tx timeout [ 181.609983][ T8017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.626430][ T8017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.654380][T10874] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 181.660135][ T8017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.671153][ T8017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.747629][ T53] bridge_slave_1: left allmulticast mode [ 181.772453][ T53] bridge_slave_1: left promiscuous mode [ 181.790994][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.821243][ T53] bridge_slave_0: left allmulticast mode [ 181.826945][ T53] bridge_slave_0: left promiscuous mode [ 181.832804][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.835137][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.840662][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.855122][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.864754][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.873050][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.881523][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.076981][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.092158][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.103416][ T53] bond0 (unregistering): Released all slaves [ 182.573464][ T53] hsr_slave_0: left promiscuous mode [ 182.590267][ T53] hsr_slave_1: left promiscuous mode [ 182.605241][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.618107][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.628866][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.636434][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.647745][ T53] veth1_macvtap: left promiscuous mode [ 182.653991][ T53] veth0_macvtap: left promiscuous mode [ 182.661367][ T53] veth1_vlan: left promiscuous mode [ 182.668218][ T53] veth0_vlan: left promiscuous mode [ 182.674462][T10900] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1367'. [ 182.685384][T10900] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 182.803661][T10905] syz.3.1366 uses old SIOCAX25GETINFO [ 182.814687][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 183.023496][ T53] team0 (unregistering): Port device team_slave_1 removed [ 183.053359][ T53] team0 (unregistering): Port device team_slave_0 removed [ 183.526564][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.535118][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.545861][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.554612][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.565556][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 183.575808][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.634258][T10878] chnl_net:caif_netlink_parms(): no params data found [ 183.657683][T10929] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1373'. [ 183.896678][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.914838][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.922297][T10878] bridge_slave_0: entered allmulticast mode [ 183.922775][T10939] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 183.929483][T10878] bridge_slave_0: entered promiscuous mode [ 183.945860][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.953083][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.960574][ T5839] Bluetooth: hci2: command tx timeout [ 183.966259][T10878] bridge_slave_1: entered allmulticast mode [ 183.973381][T10878] bridge_slave_1: entered promiscuous mode [ 184.012747][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.039101][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.105174][T10878] team0: Port device team_slave_0 added [ 184.113514][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.141881][T10878] team0: Port device team_slave_1 added [ 184.211406][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.218597][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.244663][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.256805][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.263894][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.291044][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.450136][T10878] hsr_slave_0: entered promiscuous mode [ 184.466771][T10878] hsr_slave_1: entered promiscuous mode [ 184.478605][T10878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.496349][T10878] Cannot create hsr debugfs directory [ 184.528923][T10924] chnl_net:caif_netlink_parms(): no params data found [ 184.574494][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 184.653657][T10963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1383'. [ 184.770041][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.777204][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.784558][T10924] bridge_slave_0: entered allmulticast mode [ 184.791467][T10924] bridge_slave_0: entered promiscuous mode [ 184.799808][T10924] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.806896][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.817446][T10924] bridge_slave_1: entered allmulticast mode [ 184.824720][T10924] bridge_slave_1: entered promiscuous mode [ 184.844083][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 184.876649][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.892516][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.898974][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 184.934237][T10924] team0: Port device team_slave_0 added [ 184.945381][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.965103][T10924] team0: Port device team_slave_1 added [ 185.006826][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.042873][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.052604][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.079519][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 185.098315][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.110362][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.117512][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.143902][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.205342][T10924] hsr_slave_0: entered promiscuous mode [ 185.214432][T10924] hsr_slave_1: entered promiscuous mode [ 185.228449][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.232543][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 185.236030][T10924] Cannot create hsr debugfs directory [ 185.251955][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.294794][T10878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.305792][T10878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.327317][T10878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.337686][T10878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.433128][ T53] bridge_slave_1: left allmulticast mode [ 185.440038][ T53] bridge_slave_1: left promiscuous mode [ 185.446036][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.458913][ T53] bridge_slave_0: left allmulticast mode [ 185.464587][ T53] bridge_slave_0: left promiscuous mode [ 185.473179][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.488369][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1393'. [ 185.632566][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.638463][ T5839] Bluetooth: hci4: command tx timeout [ 185.657773][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.669478][ T53] bond0 (unregistering): Released all slaves [ 185.870042][T11022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1397'. [ 185.894007][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.935117][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.957055][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.964226][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.013846][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.021005][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.038343][ T5839] Bluetooth: hci2: command tx timeout [ 186.106606][T10924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.130335][T10924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.147564][T10924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.163364][T10924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.250460][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.387215][ T53] hsr_slave_0: left promiscuous mode [ 186.393223][ T53] hsr_slave_1: left promiscuous mode [ 186.414635][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.422363][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.432616][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.441409][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.454002][ T53] veth1_macvtap: left promiscuous mode [ 186.460249][ T53] veth0_macvtap: left promiscuous mode [ 186.466176][ T53] veth1_vlan: left promiscuous mode [ 186.471764][ T53] veth0_vlan: left promiscuous mode [ 186.536890][T10878] veth0_vlan: entered promiscuous mode [ 186.618477][ T53] team0 (unregistering): Port device team_slave_1 removed [ 186.632589][ T53] team0 (unregistering): Port device team_slave_0 removed [ 186.641003][T11046] No such timeout policy "syz1" [ 186.711859][T10924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.729537][T10878] veth1_vlan: entered promiscuous mode [ 186.766618][T10924] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.777048][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 186.793029][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.800239][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.844593][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.851822][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.905748][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1407'. [ 186.923212][T10878] veth0_macvtap: entered promiscuous mode [ 186.940296][T10878] veth1_macvtap: entered promiscuous mode [ 186.976770][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.989524][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.004185][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.018209][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.029561][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.051612][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 187.074556][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.094608][T11063] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 187.099100][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.118054][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1407'. [ 187.119148][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.137935][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.150386][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.161273][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.172590][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.182934][T11063] veth0_vlan: left promiscuous mode [ 187.198547][T11063] veth0_vlan: entered promiscuous mode [ 187.219326][T11063] team0: Device veth0_vlan failed to register rx_handler [ 187.296003][T10878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.311792][T10878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.320821][T10878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.330049][T10878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.373821][T10924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.463577][ T8017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.475893][ T8017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.595688][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.614819][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.718108][ T5839] Bluetooth: hci4: command tx timeout [ 188.054820][T10924] veth0_vlan: entered promiscuous mode [ 188.080852][T10924] veth1_vlan: entered promiscuous mode [ 188.137640][T10924] veth0_macvtap: entered promiscuous mode [ 188.173204][T10924] veth1_macvtap: entered promiscuous mode [ 188.207511][ T3543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.233718][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.269539][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.293587][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.304611][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.316118][T11107] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 188.327402][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.338393][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.349936][T10924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.378402][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.389642][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.400571][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.411364][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.421231][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.432028][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.442021][T10924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.452574][T10924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.463561][T10924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.481594][T10924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.491024][T10924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.500161][T10924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.510076][T10924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.564711][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.572848][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.590174][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.598598][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.641327][ T3543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.941639][ T3543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.102967][ T3543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.193556][ T3543] bridge_slave_1: left allmulticast mode [ 189.199361][ T3543] bridge_slave_1: left promiscuous mode [ 189.205055][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.213704][ T3543] bridge_slave_0: left allmulticast mode [ 189.219800][ T3543] bridge_slave_0: left promiscuous mode [ 189.225451][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.333065][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.343495][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.353637][ T3543] bond0 (unregistering): Released all slaves [ 189.545153][T11114] sctp: [Deprecated]: syz.0.1420 (pid 11114) Use of int in max_burst socket option. [ 189.545153][T11114] Use struct sctp_assoc_value instead [ 189.560887][T11111] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 189.575120][T11111] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 189.585948][T11114] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 189.739584][ T3543] hsr_slave_0: left promiscuous mode [ 189.750182][ T3543] hsr_slave_1: left promiscuous mode [ 189.768439][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.775897][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.816742][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.827937][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.850356][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.857697][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.877716][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.895072][ T3543] veth1_macvtap: left promiscuous mode [ 189.901135][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.908605][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.915914][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.923751][ T3543] veth0_macvtap: left promiscuous mode [ 189.930048][ T3543] veth1_vlan: left promiscuous mode [ 189.936773][ T3543] veth0_vlan: left promiscuous mode [ 189.946354][T11124] netlink: 'syz.0.1423': attribute type 11 has an invalid length. [ 189.969956][T11124] __nla_validate_parse: 2 callbacks suppressed [ 189.970008][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 190.181655][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 190.217040][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 190.260751][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.268237][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.275574][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.285285][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.293069][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.300623][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.571877][T11145] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.1426'. [ 190.583870][T11145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.694646][T11150] tipc: Invalid UDP bearer configuration [ 190.694683][T11150] tipc: Enabling of bearer rejected, failed to enable media [ 190.778805][T11118] chnl_net:caif_netlink_parms(): no params data found [ 190.860271][T11153] batadv_slave_1: entered promiscuous mode [ 190.914476][T11118] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.915007][T11155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1429'. [ 190.923477][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.939939][T11118] bridge_slave_0: entered allmulticast mode [ 190.946520][T11118] bridge_slave_0: entered promiscuous mode [ 190.969649][T11118] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.977147][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.988305][T11118] bridge_slave_1: entered allmulticast mode [ 190.995277][T11118] bridge_slave_1: entered promiscuous mode [ 191.011559][T11152] batadv_slave_1: left promiscuous mode [ 191.063593][ T3543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.092378][T11118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.104248][T11118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.179632][ T3543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.203866][T11118] team0: Port device team_slave_0 added [ 191.221053][T11132] chnl_net:caif_netlink_parms(): no params data found [ 191.243869][T11118] team0: Port device team_slave_1 added [ 191.259058][ T3543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.318998][T11118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.319257][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 191.335566][T11118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.362345][T11118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.375189][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 191.405803][T11118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.412984][T11118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.439288][T11118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.464475][ T3543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.479039][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 191.479054][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 191.479085][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 191.506424][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.513720][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.521074][T11132] bridge_slave_0: entered allmulticast mode [ 191.527765][T11132] bridge_slave_0: entered promiscuous mode [ 191.535131][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.542333][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.543087][T11191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1438'. [ 191.551463][T11132] bridge_slave_1: entered allmulticast mode [ 191.565761][T11132] bridge_slave_1: entered promiscuous mode [ 191.612374][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.631050][T11118] hsr_slave_0: entered promiscuous mode [ 191.637326][T11118] hsr_slave_1: entered promiscuous mode [ 191.664148][T11118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.672179][T11118] Cannot create hsr debugfs directory [ 191.683365][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.757396][T11132] team0: Port device team_slave_0 added [ 191.768918][T11132] team0: Port device team_slave_1 added [ 191.826090][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.834780][T11201] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 191.841401][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.844773][T11201] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1441'. [ 191.872917][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.931956][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.949490][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.976446][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.978760][ T5846] Bluetooth: hci2: command tx timeout [ 191.988410][ T3543] bridge_slave_1: left allmulticast mode [ 191.998694][ T3543] bridge_slave_1: left promiscuous mode [ 192.004555][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.013535][ T3543] bridge_slave_0: left allmulticast mode [ 192.023795][ T3543] bridge_slave_0: left promiscuous mode [ 192.029763][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.165339][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.176991][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.186929][ T3543] bond0 (unregistering): Released all slaves [ 192.268478][T11227] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1447'. [ 192.281870][T11132] hsr_slave_0: entered promiscuous mode [ 192.293195][T11132] hsr_slave_1: entered promiscuous mode [ 192.299582][T11132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.307280][T11132] Cannot create hsr debugfs directory [ 192.360467][ T5846] Bluetooth: hci4: command tx timeout [ 192.572907][ T3543] hsr_slave_0: left promiscuous mode [ 192.580444][ T3543] hsr_slave_1: left promiscuous mode [ 192.587227][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.596852][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.610505][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.620432][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.630370][ T3543] veth1_macvtap: left promiscuous mode [ 192.636022][ T3543] veth0_macvtap: left promiscuous mode [ 192.642984][ T3543] veth1_vlan: left promiscuous mode [ 192.648563][ T3543] veth0_vlan: left promiscuous mode [ 192.765319][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 192.781659][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 192.902748][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 192.919342][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 193.112273][T11118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.121469][T11118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.133250][T11118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.142589][T11118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.169813][T11132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.184126][T11132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.195311][T11132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.205698][T11132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.295707][T11118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.321018][T11118] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.333098][T11132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.343450][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.350558][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.370195][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.377331][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.392799][T11132] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.410616][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.417767][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.467656][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.475029][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.612854][T11262] openvswitch: netlink: Duplicate or invalid key (type 0). [ 193.629636][T11262] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.723331][T11269] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 193.732870][T11269] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.744313][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.755326][T11118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.803406][T11118] veth0_vlan: entered promiscuous mode [ 193.815145][T11118] veth1_vlan: entered promiscuous mode [ 193.854918][T11118] veth0_macvtap: entered promiscuous mode [ 193.876999][T11118] veth1_macvtap: entered promiscuous mode [ 193.928083][T11118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.944148][T11118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.965529][T11118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.989821][T11118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.038876][T11118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.048876][ T5846] Bluetooth: hci2: command tx timeout [ 194.058383][T11118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.072298][T11118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.082679][T11118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.094824][T11118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.104725][T11118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.115529][T11118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.138942][T11118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.154092][T11288] bond_slave_1: invalid flags given to default FDB implementation [ 194.193930][T11118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.204376][T11118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.216001][T11118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.224986][T11118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.266107][T11132] veth0_vlan: entered promiscuous mode [ 194.313371][T11132] veth1_vlan: entered promiscuous mode [ 194.360968][T11132] veth0_macvtap: entered promiscuous mode [ 194.390544][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.420329][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.438234][ T5846] Bluetooth: hci4: command tx timeout [ 194.453119][T11305] sctp: [Deprecated]: syz.0.1468 (pid 11305) Use of int in max_burst socket option deprecated. [ 194.453119][T11305] Use struct sctp_assoc_value instead [ 194.453376][T11303] netlink: 'syz.2.1470': attribute type 13 has an invalid length. [ 194.469809][T11132] veth1_macvtap: entered promiscuous mode [ 194.478160][T11303] netlink: 'syz.2.1470': attribute type 11 has an invalid length. [ 194.504978][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.524474][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525763][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.531240][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.560175][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.564600][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.604154][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.622020][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.634957][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.647125][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.660626][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.676924][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.688087][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.698602][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.709209][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.719133][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.730000][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.740337][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.751465][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.765887][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.791488][T11132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.802678][T11132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.812459][T11132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.821340][T11132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.943346][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.953654][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.976588][ T8017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.991761][ T8017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.035927][T11322] sctp: [Deprecated]: syz.3.1475 (pid 11322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.035927][T11322] Use struct sctp_sack_info instead [ 195.112407][T11330] pim6reg: entered allmulticast mode [ 195.247528][T11344] ieee802154 phy0 wpan0: encryption failed: -90 [ 195.883002][T11323] pim6reg: left allmulticast mode [ 195.904440][ T3495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.241593][T11350] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 196.399319][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.406598][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.414158][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.422261][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.429828][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.437078][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.569365][T11355] chnl_net:caif_netlink_parms(): no params data found [ 196.612144][T11355] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.619864][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.627091][T11355] bridge_slave_0: entered allmulticast mode [ 196.649033][T11355] bridge_slave_0: entered promiscuous mode [ 196.656973][T11355] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.664322][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.674823][T11355] bridge_slave_1: entered allmulticast mode [ 196.682047][T11355] bridge_slave_1: entered promiscuous mode [ 196.774735][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.804832][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.907537][T11355] team0: Port device team_slave_0 added [ 196.925347][T11355] team0: Port device team_slave_1 added [ 196.941979][T11379] x_tables: duplicate underflow at hook 1 [ 196.993842][T11355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.011468][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.015877][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.055992][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.066880][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.083576][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.092905][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.100392][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.111884][T11355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.124574][T11355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.134688][T11355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.164159][T11355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.274794][T11355] hsr_slave_0: entered promiscuous mode [ 197.282237][T11355] hsr_slave_1: entered promiscuous mode [ 197.289034][T11355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.296753][T11355] Cannot create hsr debugfs directory [ 197.311156][ T3495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.376375][ T3495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.443307][ T3495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.560169][ T3495] bridge_slave_1: left allmulticast mode [ 197.565857][ T3495] bridge_slave_1: left promiscuous mode [ 197.578737][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.587696][ T3495] bridge_slave_0: left allmulticast mode [ 197.596387][ T3495] bridge_slave_0: left promiscuous mode [ 197.602597][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.767743][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.788481][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.799776][ T3495] bond0 (unregistering): Released all slaves [ 197.841344][T11392] netlink: 'syz.2.1494': attribute type 12 has an invalid length. [ 197.985499][T11382] chnl_net:caif_netlink_parms(): no params data found [ 198.517961][ T5838] Bluetooth: hci2: command tx timeout [ 198.582350][T11409] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 199.319327][ T5838] Bluetooth: hci4: command tx timeout [ 199.641078][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.598152][ T5838] Bluetooth: hci2: command tx timeout [ 201.397982][ T5838] Bluetooth: hci4: command tx timeout [ 202.678277][ T5838] Bluetooth: hci2: command tx timeout [ 203.478367][ T5838] Bluetooth: hci4: command tx timeout [ 204.761032][ T5838] Bluetooth: hci2: command tx timeout [ 205.558195][ T5838] Bluetooth: hci4: command tx timeout [ 213.392002][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.399777][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.407104][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.407756][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.414891][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.421791][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.432624][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.435668][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.442653][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.453286][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.463912][ T5839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.471393][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.366898][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.374417][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.381808][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.389604][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.397140][ T5839] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.404437][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.478093][ T5839] Bluetooth: hci5: command tx timeout [ 215.557990][ T5839] Bluetooth: hci6: command tx timeout [ 216.438546][ T5839] Bluetooth: hci7: command tx timeout [ 217.558208][ T5839] Bluetooth: hci5: command tx timeout [ 217.638076][ T5839] Bluetooth: hci6: command tx timeout [ 218.518123][ T5839] Bluetooth: hci7: command tx timeout [ 219.638002][ T5839] Bluetooth: hci5: command tx timeout [ 219.718048][ T5839] Bluetooth: hci6: command tx timeout [ 220.598083][ T5839] Bluetooth: hci7: command tx timeout [ 221.728173][ T5839] Bluetooth: hci5: command tx timeout [ 221.798036][ T5839] Bluetooth: hci6: command tx timeout [ 222.678539][ T5839] Bluetooth: hci7: command tx timeout [ 255.959884][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.966211][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.699259][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.706525][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.713856][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.722206][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.730278][ T5849] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 257.737506][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 258.218866][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 258.226121][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 258.233613][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 258.241883][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 258.249550][ T5839] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 258.256793][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 259.798093][ T5839] Bluetooth: hci8: command tx timeout [ 260.278100][ T5839] Bluetooth: hci9: command tx timeout [ 261.878056][ T5839] Bluetooth: hci8: command tx timeout [ 262.358265][ T5839] Bluetooth: hci9: command tx timeout [ 263.958011][ T5839] Bluetooth: hci8: command tx timeout [ 264.438015][ T5839] Bluetooth: hci9: command tx timeout [ 266.038041][ T5839] Bluetooth: hci8: command tx timeout [ 266.208089][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.518067][ T5839] Bluetooth: hci9: command tx timeout [ 273.526181][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 273.533736][ T5849] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 273.541221][ T5849] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 273.548980][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 273.556477][ T5849] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 273.564007][ T5849] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 273.569593][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 273.578823][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 273.586180][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 273.594008][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 273.601927][ T5846] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 273.609539][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 274.506462][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 274.513915][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 274.521841][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 274.529648][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 274.537277][ T5838] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 274.544654][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 275.638110][ T5838] Bluetooth: hci11: command tx timeout [ 275.642063][ T5846] Bluetooth: hci10: command tx timeout [ 276.607982][ T5846] Bluetooth: hci12: command tx timeout [ 277.718039][ T5846] Bluetooth: hci11: command tx timeout [ 277.720047][ T5838] Bluetooth: hci10: command tx timeout [ 278.677978][ T5838] Bluetooth: hci12: command tx timeout [ 279.798080][ T5838] Bluetooth: hci10: command tx timeout [ 279.808096][ T5838] Bluetooth: hci11: command tx timeout [ 280.757957][ T5838] Bluetooth: hci12: command tx timeout [ 281.877971][ T5838] Bluetooth: hci11: command tx timeout [ 281.883502][ T5838] Bluetooth: hci10: command tx timeout [ 282.838025][ T5838] Bluetooth: hci12: command tx timeout [ 317.400601][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407537][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.478147][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 319.478144][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 319.945260][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 319.952709][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 319.960317][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 319.968752][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 319.976353][ T5838] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 319.984361][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 320.565553][ T5838] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 320.573031][ T5838] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 320.580573][ T5838] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 320.588633][ T5838] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 320.596293][ T5838] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 320.604359][ T5838] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 322.038113][ T5846] Bluetooth: hci13: command tx timeout [ 322.678279][ T5846] Bluetooth: hci14: command tx timeout [ 324.117960][ T5846] Bluetooth: hci13: command tx timeout [ 324.757997][ T5846] Bluetooth: hci14: command tx timeout [ 326.208142][ T5846] Bluetooth: hci13: command tx timeout [ 326.837909][ T5846] Bluetooth: hci14: command tx timeout [ 328.278235][ T5846] Bluetooth: hci13: command tx timeout [ 328.928083][ T5846] Bluetooth: hci14: command tx timeout [ 334.112349][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 334.120488][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 334.127849][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 334.135601][ T5838] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 334.143331][ T5838] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 334.151903][ T5838] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 334.161191][ T5838] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 334.168636][ T5838] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 334.175986][ T5838] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 334.183816][ T5838] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 334.191501][ T5838] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 334.199095][ T5838] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 335.092202][ T5846] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 335.100141][ T5846] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 335.107525][ T5846] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 335.115365][ T5846] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 335.122982][ T5846] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 335.130372][ T5846] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 336.197999][ T5838] Bluetooth: hci15: command tx timeout [ 336.277958][ T5838] Bluetooth: hci16: command tx timeout [ 337.157941][ T5838] Bluetooth: hci17: command tx timeout [ 338.277972][ T5838] Bluetooth: hci15: command tx timeout [ 338.357915][ T5838] Bluetooth: hci16: command tx timeout [ 339.248067][ T5838] Bluetooth: hci17: command tx timeout [ 339.958128][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 339.958125][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 339.958235][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 340.358034][ T5839] Bluetooth: hci15: command tx timeout [ 340.448042][ T5839] Bluetooth: hci16: command tx timeout [ 341.317946][ T5839] Bluetooth: hci17: command tx timeout [ 342.437941][ T5839] Bluetooth: hci15: command tx timeout [ 342.517959][ T5839] Bluetooth: hci16: command tx timeout [ 343.398041][ T5839] Bluetooth: hci17: command tx timeout [ 351.318418][ T30] INFO: task kworker/u8:10:3495 blocked for more than 143 seconds. [ 351.326472][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 351.333890][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.342673][ T30] task:kworker/u8:10 state:D stack:22096 pid:3495 tgid:3495 ppid:2 flags:0x00004000 [ 351.353021][ T30] Workqueue: netns cleanup_net [ 351.357899][ T30] Call Trace: [ 351.361207][ T30] [ 351.364165][ T30] __schedule+0x186c/0x4be0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.368752][ T30] ? schedule+0x90/0x320 [ 351.373220][ T30] ? schedule+0x90/0x320 [ 351.377506][ T30] ? __pfx___schedule+0x10/0x10 [ 351.382482][ T30] ? __pfx_lock_release+0x10/0x10 [ 351.387542][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.392490][ T30] ? kthread_data+0x52/0xd0 [ 351.397023][ T30] ? schedule+0x90/0x320 [ 351.401441][ T30] ? wq_worker_sleeping+0x66/0x240 [ 351.406585][ T30] ? schedule+0x90/0x320 [ 351.411142][ T30] schedule+0x14b/0x320 [ 351.415332][ T30] schedule_preempt_disabled+0x13/0x30 [ 351.421247][ T30] __mutex_lock+0x817/0x1010 [ 351.425884][ T30] ? __mutex_lock+0x602/0x1010 [ 351.430886][ T30] ? unregister_netdevice_many_notify+0x1c2c/0x2030 [ 351.437517][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 351.442639][ T30] ? __pfx___might_resched+0x10/0x10 [ 351.448408][ T30] ? __pfx_device_del+0x10/0x10 [ 351.453313][ T30] unregister_netdevice_many_notify+0x1c2c/0x2030 [ 351.459972][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 351.466784][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.497198][ T30] ? __pfx_lock_release+0x10/0x10 [ 351.502452][ T30] unregister_netdevice_queue+0x303/0x370 [ 351.512843][ T30] ? __pfx_up_write+0x10/0x10 [ 351.517570][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 351.524197][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 351.530018][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 351.535765][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 351.541651][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 351.548033][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.552846][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 351.558363][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 351.563981][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 351.570475][ T30] hwsim_exit_net+0x5c1/0x670 [ 351.575158][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 351.580399][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 351.586234][ T30] cleanup_net+0x812/0xd60 [ 351.590710][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 351.595666][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.600512][ T30] ? process_scheduled_works+0x976/0x1840 [ 351.606268][ T30] process_scheduled_works+0xa66/0x1840 [ 351.611917][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.617962][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 351.623573][ T30] ? assign_work+0x364/0x3d0 [ 351.628401][ T30] worker_thread+0x870/0xd30 [ 351.633033][ T30] ? __kthread_parkme+0x169/0x1d0 [ 351.638292][ T30] ? __pfx_worker_thread+0x10/0x10 [ 351.643435][ T30] kthread+0x7a9/0x920 [ 351.647509][ T30] ? __pfx_kthread+0x10/0x10 [ 351.652165][ T30] ? __pfx_worker_thread+0x10/0x10 [ 351.657367][ T30] ? __pfx_kthread+0x10/0x10 [ 351.661999][ T30] ? __pfx_kthread+0x10/0x10 [ 351.666608][ T30] ? __pfx_kthread+0x10/0x10 [ 351.671236][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.676532][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 351.681864][ T30] ? __pfx_kthread+0x10/0x10 [ 351.686460][ T30] ret_from_fork+0x4b/0x80 [ 351.690927][ T30] ? __pfx_kthread+0x10/0x10 [ 351.695540][ T30] ret_from_fork_asm+0x1a/0x30 [ 351.700363][ T30] [ 351.703387][ T30] INFO: task kworker/u8:11:3543 blocked for more than 143 seconds. [ 351.711349][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 351.718653][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.727660][ T30] task:kworker/u8:11 state:D stack:21840 pid:3543 tgid:3543 ppid:2 flags:0x00004000 [ 351.737924][ T30] Workqueue: events_unbound linkwatch_event [ 351.743828][ T30] Call Trace: [ 351.747099][ T30] [ 351.750183][ T30] __schedule+0x186c/0x4be0 [ 351.754736][ T30] ? schedule+0x90/0x320 [ 351.759144][ T30] ? schedule+0x90/0x320 [ 351.763422][ T30] ? __pfx___schedule+0x10/0x10 [ 351.768348][ T30] ? __pfx_lock_release+0x10/0x10 [ 351.773413][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.778242][ T30] ? kthread_data+0x52/0xd0 [ 351.782765][ T30] ? schedule+0x90/0x320 [ 351.787030][ T30] ? wq_worker_sleeping+0x66/0x240 [ 351.792267][ T30] ? schedule+0x90/0x320 [ 351.796527][ T30] schedule+0x14b/0x320 [ 351.802871][ T30] schedule_preempt_disabled+0x13/0x30 [ 351.808379][ T30] __mutex_lock+0x817/0x1010 [ 351.812997][ T30] ? __mutex_lock+0x602/0x1010 [ 351.817837][ T30] ? linkwatch_event+0xe/0x60 [ 351.822527][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 351.827573][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 351.833773][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.838643][ T30] ? process_scheduled_works+0x976/0x1840 [ 351.844385][ T30] linkwatch_event+0xe/0x60 [ 351.848917][ T30] process_scheduled_works+0xa66/0x1840 [ 351.854499][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.860538][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 351.866102][ T30] ? assign_work+0x364/0x3d0 [ 351.870745][ T30] worker_thread+0x870/0xd30 [ 351.875352][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 351.881369][ T30] ? __kthread_parkme+0x169/0x1d0 [ 351.886399][ T30] ? __pfx_worker_thread+0x10/0x10 [ 351.891611][ T30] kthread+0x7a9/0x920 [ 351.895706][ T30] ? __pfx_kthread+0x10/0x10 [ 351.900449][ T30] ? __pfx_worker_thread+0x10/0x10 [ 351.905591][ T30] ? __pfx_kthread+0x10/0x10 [ 351.910208][ T30] ? __pfx_kthread+0x10/0x10 [ 351.914806][ T30] ? __pfx_kthread+0x10/0x10 [ 351.919453][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.924677][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 351.929942][ T30] ? __pfx_kthread+0x10/0x10 [ 351.934788][ T30] ret_from_fork+0x4b/0x80 [ 351.939316][ T30] ? __pfx_kthread+0x10/0x10 [ 351.943938][ T30] ret_from_fork_asm+0x1a/0x30 [ 351.948774][ T30] [ 351.951895][ T30] INFO: task syz-executor:11355 blocked for more than 143 seconds. [ 351.959995][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 351.967446][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.976222][ T30] task:syz-executor state:D stack:22128 pid:11355 tgid:11355 ppid:1 flags:0x00004006 [ 351.986587][ T30] Call Trace: [ 351.989898][ T30] [ 351.992834][ T30] __schedule+0x186c/0x4be0 [ 351.997351][ T30] ? schedule+0x90/0x320 [ 352.001643][ T30] ? schedule+0x90/0x320 [ 352.005893][ T30] ? __pfx___schedule+0x10/0x10 [ 352.010872][ T30] ? __pfx_lock_release+0x10/0x10 [ 352.015906][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.020883][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 352.026790][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.033175][ T30] ? schedule+0x90/0x320 [ 352.037602][ T30] schedule+0x14b/0x320 [ 352.041971][ T30] schedule_preempt_disabled+0x13/0x30 [ 352.047456][ T30] __mutex_lock+0x817/0x1010 [ 352.052105][ T30] ? __mutex_lock+0x602/0x1010 [ 352.056904][ T30] ? nsim_destroy+0xa4/0x620 [ 352.061559][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 352.066592][ T30] ? mntput_no_expire+0x2da/0x850 [ 352.071699][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 352.077085][ T30] ? _raw_spin_unlock+0x28/0x50 [ 352.082007][ T30] ? simple_release_fs+0x9c/0xd0 [ 352.086970][ T30] nsim_destroy+0xa4/0x620 [ 352.091411][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 352.097072][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 352.102227][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 352.107925][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 352.113225][ T30] nsim_drv_remove+0x58/0x160 [ 352.118161][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 352.124351][ T30] bus_remove_device+0x34f/0x420 [ 352.129355][ T30] device_del+0x57a/0x9b0 [ 352.133689][ T30] ? __pfx_device_del+0x10/0x10 [ 352.138765][ T30] device_unregister+0x20/0xc0 [ 352.143565][ T30] del_device_store+0x363/0x480 [ 352.148548][ T30] ? __pfx_del_device_store+0x10/0x10 [ 352.153954][ T30] ? __virt_addr_valid+0x45f/0x530 [ 352.159149][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 352.164004][ T30] ? bus_attr_store+0x4f/0xb0 [ 352.168709][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 352.173910][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 352.179266][ T30] vfs_write+0xaeb/0xd30 [ 352.183549][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 352.189405][ T30] ? __pfx_vfs_write+0x10/0x10 [ 352.194173][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 352.199148][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.204398][ T30] ksys_write+0x18f/0x2b0 [ 352.208887][ T30] ? __pfx_ksys_write+0x10/0x10 [ 352.213791][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.218607][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.223381][ T30] do_syscall_64+0xf3/0x230 [ 352.228071][ T30] ? clear_bhb_loop+0x35/0x90 [ 352.232783][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.238737][ T30] RIP: 0033:0x7fbb0138b7df [ 352.243405][ T30] RSP: 002b:00007ffeef89ac40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 352.251878][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fbb0138b7df [ 352.259930][ T30] RDX: 0000000000000001 RSI: 00007ffeef89ac90 RDI: 0000000000000005 [ 352.267960][ T30] RBP: 00007fbb0140f4ad R08: 0000000000000000 R09: 00007ffeef89aa97 [ 352.275946][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 352.284035][ T30] R13: 00007ffeef89ac90 R14: 00007fbb020d4620 R15: 0000000000000003 [ 352.292092][ T30] [ 352.295125][ T30] INFO: task syz-executor:11382 blocked for more than 144 seconds. [ 352.303295][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 352.310638][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.319380][ T30] task:syz-executor state:D stack:22128 pid:11382 tgid:11382 ppid:1 flags:0x00004004 [ 352.329705][ T30] Call Trace: [ 352.333019][ T30] [ 352.335950][ T30] __schedule+0x186c/0x4be0 [ 352.340623][ T30] ? schedule+0x90/0x320 [ 352.345096][ T30] ? schedule+0x90/0x320 [ 352.349446][ T30] ? __pfx___schedule+0x10/0x10 [ 352.354322][ T30] ? __pfx_lock_release+0x10/0x10 [ 352.359397][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.364184][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 352.370112][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.376458][ T30] ? schedule+0x90/0x320 [ 352.380761][ T30] schedule+0x14b/0x320 [ 352.384969][ T30] schedule_preempt_disabled+0x13/0x30 [ 352.390476][ T30] __mutex_lock+0x817/0x1010 [ 352.395078][ T30] ? __mutex_lock+0x602/0x1010 [ 352.399923][ T30] ? rtnl_newlink+0xce2/0x2210 [ 352.404713][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 352.409800][ T30] ? ns_capable+0x8a/0xf0 [ 352.414282][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 352.420143][ T30] rtnl_newlink+0xce2/0x2210 [ 352.424743][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.429795][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.434567][ T30] ? lock_release+0xbf/0xa30 [ 352.439289][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.444438][ T30] ? lock_release+0xbf/0xa30 [ 352.449224][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 352.454279][ T30] ? lock_release+0xbf/0xa30 [ 352.458938][ T30] ? deref_stack_reg+0x17c/0x210 [ 352.463894][ T30] ? __pfx_lock_release+0x10/0x10 [ 352.468969][ T30] ? stack_trace_save+0x118/0x1d0 [ 352.474019][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 352.479381][ T30] ? deref_stack_reg+0x17c/0x210 [ 352.484339][ T30] ? preempt_count_add+0x93/0x190 [ 352.489411][ T30] ? 0xffffffffa0000954 [ 352.493577][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 352.498928][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 352.504151][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.510343][ T30] ? kernel_text_address+0xa7/0xe0 [ 352.515462][ T30] ? __kernel_text_address+0xd/0x40 [ 352.520716][ T30] ? unwind_get_return_address+0x4d/0x90 [ 352.526355][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.531270][ T30] ? lock_release+0xbf/0xa30 [ 352.535888][ T30] ? __pfx_lock_release+0x10/0x10 [ 352.541109][ T30] ? bpf_lsm_capable+0x9/0x10 [ 352.545833][ T30] ? security_capable+0x7e/0x2d0 [ 352.551039][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.556117][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 352.561189][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 352.566315][ T30] ? lock_release+0xbf/0xa30 [ 352.570946][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.576439][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 352.581519][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.586292][ T30] ? lock_acquire+0xe3/0x550 [ 352.590934][ T30] netlink_rcv_skb+0x1e3/0x430 [ 352.595704][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.601365][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.606685][ T30] ? net_generic+0x1f/0x240 [ 352.611250][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.616477][ T30] netlink_unicast+0x7f6/0x990 [ 352.621292][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 352.626586][ T30] ? __virt_addr_valid+0x45f/0x530 [ 352.631761][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 352.636890][ T30] ? __check_object_size+0x47a/0x730 [ 352.642246][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 352.647028][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.652551][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 352.657518][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.662856][ T30] __sock_sendmsg+0x221/0x270 [ 352.667574][ T30] __sys_sendto+0x363/0x4c0 [ 352.672197][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 352.677239][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.682124][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 352.688349][ T30] ? xfd_validate_state+0x6e/0x150 [ 352.693481][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.699887][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.704730][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.711107][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.715878][ T30] __x64_sys_sendto+0xde/0x100 [ 352.720724][ T30] do_syscall_64+0xf3/0x230 [ 352.725237][ T30] ? clear_bhb_loop+0x35/0x90 [ 352.729985][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.735921][ T30] RIP: 0033:0x7f056af8ebbc [ 352.740574][ T30] RSP: 002b:00007ffd2831f970 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 352.749042][ T30] RAX: ffffffffffffffda RBX: 00007f056bcd4620 RCX: 00007f056af8ebbc [ 352.757222][ T30] RDX: 000000000000003c RSI: 00007f056bcd4670 RDI: 0000000000000003 [ 352.765252][ T30] RBP: 0000000000000000 R08: 00007ffd2831f9c4 R09: 000000000000000c [ 352.773286][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 352.781380][ T30] R13: 0000000000000000 R14: 00007f056bcd4670 R15: 0000000000000000 [ 352.789416][ T30] [ 352.792462][ T30] INFO: task syz.2.1494:11392 blocked for more than 144 seconds. [ 352.800261][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 352.807552][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.816259][ T30] task:syz.2.1494 state:D stack:22712 pid:11392 tgid:11391 ppid:5832 flags:0x00004004 [ 352.826520][ T30] Call Trace: [ 352.829829][ T30] [ 352.832767][ T30] __schedule+0x186c/0x4be0 [ 352.837286][ T30] ? schedule+0x90/0x320 [ 352.842777][ T30] ? schedule+0x90/0x320 [ 352.847067][ T30] ? __pfx___schedule+0x10/0x10 [ 352.852321][ T30] ? __pfx_lock_release+0x10/0x10 [ 352.858149][ T30] ? rcu_is_watching+0x15/0xb0 [ 352.862963][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 352.868976][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.875328][ T30] ? schedule+0x90/0x320 [ 352.879695][ T30] schedule+0x14b/0x320 [ 352.883892][ T30] schedule_preempt_disabled+0x13/0x30 [ 352.889419][ T30] __mutex_lock+0x817/0x1010 [ 352.894039][ T30] ? __mutex_lock+0x602/0x1010 [ 352.898917][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 352.905189][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 352.910285][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.916293][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 352.922428][ T30] wiphy_register+0x1be5/0x27b0 [ 352.927306][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 352.932556][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 352.937687][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 352.943892][ T30] ieee80211_register_hw+0x354e/0x4240 [ 352.949429][ T30] ? ieee80211_register_hw+0x15f1/0x4240 [ 352.955104][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 352.961571][ T30] ? __asan_memset+0x23/0x50 [ 352.966238][ T30] ? __hrtimer_init+0x170/0x250 [ 352.971193][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 352.976977][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 352.983183][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 352.988392][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 352.994151][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 353.000119][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 353.006583][ T30] genl_rcv_msg+0xb14/0xec0 [ 353.011139][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.016172][ T30] ? stack_trace_save+0x118/0x1d0 [ 353.021234][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 353.026607][ T30] ? stack_depot_save_flags+0x37/0x940 [ 353.032124][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 353.037237][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 353.042845][ T30] ? __pfx___might_resched+0x10/0x10 [ 353.048214][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.053005][ T30] ? lock_acquire+0xe3/0x550 [ 353.057623][ T30] netlink_rcv_skb+0x1e3/0x430 [ 353.062851][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.067970][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.073279][ T30] ? lock_release+0xbf/0xa30 [ 353.078256][ T30] ? __pfx___netlink_lookup+0x10/0x10 [ 353.083684][ T30] ? net_generic+0x1f/0x240 [ 353.088286][ T30] genl_rcv+0x28/0x40 [ 353.092312][ T30] netlink_unicast+0x7f6/0x990 [ 353.097121][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 353.102487][ T30] ? __virt_addr_valid+0x45f/0x530 [ 353.107631][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 353.112752][ T30] ? __check_object_size+0x47a/0x730 [ 353.118125][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 353.123009][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.128351][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 353.133310][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.138702][ T30] __sock_sendmsg+0x221/0x270 [ 353.143418][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 353.148269][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.153598][ T30] ? __fget_files+0x2a/0x410 [ 353.158321][ T30] ? __fget_files+0x2a/0x410 [ 353.163392][ T30] __sys_sendmsg+0x269/0x350 [ 353.168065][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.173309][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.179717][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.184546][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.189354][ T30] do_syscall_64+0xf3/0x230 [ 353.193974][ T30] ? clear_bhb_loop+0x35/0x90 [ 353.198746][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.204661][ T30] RIP: 0033:0x7f6e5e58cd29 [ 353.209111][ T30] RSP: 002b:00007f6e5f3bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.217525][ T30] RAX: ffffffffffffffda RBX: 00007f6e5e7a5fa0 RCX: 00007f6e5e58cd29 [ 353.225543][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 353.233575][ T30] RBP: 00007f6e5e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.241899][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.249951][ T30] R13: 0000000000000000 R14: 00007f6e5e7a5fa0 R15: 00007fffe9638748 [ 353.257987][ T30] [ 353.261029][ T30] INFO: task syz.2.1494:11396 blocked for more than 145 seconds. [ 353.269858][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 353.277251][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.286070][ T30] task:syz.2.1494 state:D stack:28176 pid:11396 tgid:11391 ppid:5832 flags:0x00000004 [ 353.296436][ T30] Call Trace: [ 353.299906][ T30] [ 353.302938][ T30] __schedule+0x186c/0x4be0 [ 353.307453][ T30] ? schedule+0x90/0x320 [ 353.311730][ T30] ? schedule+0x90/0x320 [ 353.315977][ T30] ? __pfx___schedule+0x10/0x10 [ 353.320931][ T30] ? __pfx_lock_release+0x10/0x10 [ 353.325977][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.330793][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 353.336805][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.343208][ T30] ? schedule+0x90/0x320 [ 353.347478][ T30] schedule+0x14b/0x320 [ 353.351705][ T30] schedule_preempt_disabled+0x13/0x30 [ 353.357199][ T30] __mutex_lock+0x817/0x1010 [ 353.361846][ T30] ? __mutex_lock+0x602/0x1010 [ 353.367084][ T30] ? genl_rcv_msg+0x121/0xec0 [ 353.371832][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 353.376969][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.381778][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.388158][ T30] ? lock_release+0xbf/0xa30 [ 353.392768][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.397558][ T30] ? radix_tree_lookup+0x238/0x290 [ 353.402736][ T30] genl_rcv_msg+0x121/0xec0 [ 353.407246][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 353.412393][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.417423][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 353.422701][ T30] ? kasan_save_track+0x51/0x80 [ 353.427573][ T30] ? __sys_sendto+0x363/0x4c0 [ 353.432392][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.437230][ T30] ? lock_acquire+0xe3/0x550 [ 353.441858][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 353.447241][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 353.452308][ T30] ? __pfx___might_resched+0x10/0x10 [ 353.457599][ T30] netlink_rcv_skb+0x1e3/0x430 [ 353.462413][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.467447][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.473343][ T30] ? lock_release+0xbf/0xa30 [ 353.478173][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 353.483696][ T30] genl_rcv+0x28/0x40 [ 353.487682][ T30] netlink_unicast+0x7f6/0x990 [ 353.492491][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 353.497802][ T30] ? __virt_addr_valid+0x45f/0x530 [ 353.502960][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 353.508066][ T30] ? __check_object_size+0x47a/0x730 [ 353.513407][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 353.518415][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.523723][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 353.528747][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.534075][ T30] __sock_sendmsg+0x221/0x270 [ 353.538832][ T30] __sys_sendto+0x363/0x4c0 [ 353.543359][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 353.548455][ T30] ? xfd_validate_state+0x6e/0x150 [ 353.553579][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.560058][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.564852][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.571723][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.576545][ T30] __x64_sys_sendto+0xde/0x100 [ 353.581436][ T30] do_syscall_64+0xf3/0x230 [ 353.585980][ T30] ? clear_bhb_loop+0x35/0x90 [ 353.590711][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.596617][ T30] RIP: 0033:0x7f6e5e58ebbc [ 353.601103][ T30] RSP: 002b:00007f6e5f379ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 353.609582][ T30] RAX: ffffffffffffffda RBX: 00007f6e5f379fc0 RCX: 00007f6e5e58ebbc [ 353.617605][ T30] RDX: 0000000000000024 RSI: 00007f6e5f37a010 RDI: 000000000000000d [ 353.625624][ T30] RBP: 0000000000000000 R08: 00007f6e5f379f14 R09: 000000000000000c [ 353.633643][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 353.641877][ T30] R13: 00007f6e5f379f68 R14: 00007f6e5f37a010 R15: 0000000000000000 [ 353.649916][ T30] [ 353.652949][ T30] INFO: task syz.0.1495:11399 blocked for more than 145 seconds. [ 353.660739][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 353.668094][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.677190][ T30] task:syz.0.1495 state:D stack:27184 pid:11399 tgid:11397 ppid:5833 flags:0x00000004 [ 353.687450][ T30] Call Trace: [ 353.690802][ T30] [ 353.693745][ T30] __schedule+0x186c/0x4be0 [ 353.698327][ T30] ? schedule+0x90/0x320 [ 353.702685][ T30] ? schedule+0x90/0x320 [ 353.706933][ T30] ? __pfx___schedule+0x10/0x10 [ 353.711822][ T30] ? __pfx_lock_release+0x10/0x10 [ 353.716853][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.721868][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 353.727840][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.734210][ T30] ? schedule+0x90/0x320 [ 353.738544][ T30] schedule+0x14b/0x320 [ 353.742731][ T30] schedule_preempt_disabled+0x13/0x30 [ 353.748246][ T30] __mutex_lock+0x817/0x1010 [ 353.752867][ T30] ? __mutex_lock+0x602/0x1010 [ 353.757665][ T30] ? genl_rcv_msg+0x121/0xec0 [ 353.762419][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 353.767452][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.772274][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.779193][ T30] ? lock_release+0xbf/0xa30 [ 353.783845][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.788661][ T30] ? radix_tree_lookup+0x238/0x290 [ 353.793781][ T30] genl_rcv_msg+0x121/0xec0 [ 353.798391][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 353.803527][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.808587][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 353.813794][ T30] ? kasan_save_track+0x51/0x80 [ 353.818724][ T30] ? __sys_sendto+0x363/0x4c0 [ 353.823537][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.828364][ T30] ? lock_acquire+0xe3/0x550 [ 353.832969][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 353.838427][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 353.843516][ T30] ? __pfx___might_resched+0x10/0x10 [ 353.848887][ T30] netlink_rcv_skb+0x1e3/0x430 [ 353.853692][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.858750][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.864033][ T30] ? lock_release+0xbf/0xa30 [ 353.868675][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 353.874157][ T30] genl_rcv+0x28/0x40 [ 353.878657][ T30] netlink_unicast+0x7f6/0x990 [ 353.883457][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 353.888806][ T30] ? __virt_addr_valid+0x45f/0x530 [ 353.893942][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 353.899001][ T30] ? __check_object_size+0x47a/0x730 [ 353.904297][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 353.909133][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.914480][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 353.919462][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.924752][ T30] __sock_sendmsg+0x221/0x270 [ 353.929484][ T30] __sys_sendto+0x363/0x4c0 [ 353.934007][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 353.939100][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 353.944234][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.950635][ T30] ? __pfx___up_read+0x10/0x10 [ 353.955439][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.961868][ T30] ? rcu_is_watching+0x15/0xb0 [ 353.966667][ T30] __x64_sys_sendto+0xde/0x100 [ 353.971476][ T30] do_syscall_64+0xf3/0x230 [ 353.976006][ T30] ? clear_bhb_loop+0x35/0x90 [ 353.981263][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.987199][ T30] RIP: 0033:0x7f72bb78ebbc [ 353.991648][ T30] RSP: 002b:00007f72bc642ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 354.000100][ T30] RAX: ffffffffffffffda RBX: 00007f72bc642fc0 RCX: 00007f72bb78ebbc [ 354.008135][ T30] RDX: 0000000000000020 RSI: 00007f72bc643010 RDI: 0000000000000068 [ 354.016129][ T30] RBP: 0000000000000000 R08: 00007f72bc642f14 R09: 000000000000000c [ 354.024156][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000068 [ 354.032165][ T30] R13: 00007f72bc642f68 R14: 00007f72bc643010 R15: 0000000000000000 [ 354.040297][ T30] [ 354.043351][ T30] INFO: task syz.3.1498:11408 blocked for more than 146 seconds. [ 354.051394][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 354.058862][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.067537][ T30] task:syz.3.1498 state:D stack:25616 pid:11408 tgid:11407 ppid:5837 flags:0x00000004 [ 354.078042][ T30] Call Trace: [ 354.081353][ T30] [ 354.084448][ T30] __schedule+0x186c/0x4be0 [ 354.089079][ T30] ? schedule+0x90/0x320 [ 354.093367][ T30] ? schedule+0x90/0x320 [ 354.100292][ T30] ? __pfx___schedule+0x10/0x10 [ 354.105160][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.110227][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.115009][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 354.121221][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.127600][ T30] ? schedule+0x90/0x320 [ 354.131978][ T30] schedule+0x14b/0x320 [ 354.136168][ T30] schedule_preempt_disabled+0x13/0x30 [ 354.141678][ T30] __mutex_lock+0x817/0x1010 [ 354.146302][ T30] ? __mutex_lock+0x602/0x1010 [ 354.151172][ T30] ? rtnl_newlink+0xce2/0x2210 [ 354.155964][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 354.161128][ T30] ? ns_capable+0x8a/0xf0 [ 354.165565][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 354.171450][ T30] rtnl_newlink+0xce2/0x2210 [ 354.176073][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.181171][ T30] ? unwind_get_return_address+0x4d/0x90 [ 354.187037][ T30] ? arch_stack_walk+0xfd/0x150 [ 354.191966][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.196740][ T30] ? lock_release+0xbf/0xa30 [ 354.201457][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 354.206519][ T30] ? lock_release+0xbf/0xa30 [ 354.211232][ T30] ? deref_stack_reg+0x17c/0x210 [ 354.216193][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.221264][ T30] ? stack_trace_save+0x118/0x1d0 [ 354.226305][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 354.231632][ T30] ? deref_stack_reg+0x17c/0x210 [ 354.236604][ T30] ? preempt_count_add+0x93/0x190 [ 354.241695][ T30] ? 0xffffffffa0000954 [ 354.245883][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 354.251235][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 354.256459][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 354.262687][ T30] ? kernel_text_address+0xa7/0xe0 [ 354.267840][ T30] ? __kernel_text_address+0xd/0x40 [ 354.273068][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.278282][ T30] ? lock_release+0xbf/0xa30 [ 354.282929][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 354.288905][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.293970][ T30] ? bpf_lsm_capable+0x9/0x10 [ 354.298700][ T30] ? security_capable+0x7e/0x2d0 [ 354.303644][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.308722][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 354.313707][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 354.319001][ T30] ? lock_release+0xbf/0xa30 [ 354.323618][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.329144][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 354.334186][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.339011][ T30] ? lock_acquire+0xe3/0x550 [ 354.343605][ T30] netlink_rcv_skb+0x1e3/0x430 [ 354.348401][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.353899][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.359347][ T30] ? net_generic+0x1f/0x240 [ 354.363904][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.369129][ T30] netlink_unicast+0x7f6/0x990 [ 354.373895][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 354.379248][ T30] ? __virt_addr_valid+0x45f/0x530 [ 354.384383][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 354.389473][ T30] ? __check_object_size+0x47a/0x730 [ 354.395080][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 354.399907][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.405194][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 354.410311][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.415624][ T30] __sock_sendmsg+0x221/0x270 [ 354.420383][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 354.425164][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.430561][ T30] ? __fget_files+0x2a/0x410 [ 354.435160][ T30] ? __fget_files+0x2a/0x410 [ 354.439881][ T30] __sys_sendmsg+0x269/0x350 [ 354.444507][ T30] ? __pfx_futex_wake+0x10/0x10 [ 354.449450][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.454613][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.460979][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.465750][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.470541][ T30] do_syscall_64+0xf3/0x230 [ 354.475041][ T30] ? clear_bhb_loop+0x35/0x90 [ 354.479767][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.485686][ T30] RIP: 0033:0x7fb79618cd29 [ 354.490235][ T30] RSP: 002b:00007fb796f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.498974][ T30] RAX: ffffffffffffffda RBX: 00007fb7963a5fa0 RCX: 00007fb79618cd29 [ 354.506974][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 354.515061][ T30] RBP: 00007fb79620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.523739][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.531943][ T30] R13: 0000000000000000 R14: 00007fb7963a5fa0 R15: 00007ffd1121bf38 [ 354.540200][ T30] [ 354.543339][ T30] INFO: task syz.3.1498:11409 blocked for more than 146 seconds. [ 354.551168][ T30] Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 354.558807][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.567477][ T30] task:syz.3.1498 state:D stack:25264 pid:11409 tgid:11407 ppid:5837 flags:0x00004004 [ 354.577810][ T30] Call Trace: [ 354.581121][ T30] [ 354.584078][ T30] __schedule+0x186c/0x4be0 [ 354.588648][ T30] ? schedule+0x90/0x320 [ 354.592902][ T30] ? schedule+0x90/0x320 [ 354.597341][ T30] ? __pfx___schedule+0x10/0x10 [ 354.602274][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.607304][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.612107][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 354.618046][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.624379][ T30] ? schedule+0x90/0x320 [ 354.628694][ T30] schedule+0x14b/0x320 [ 354.632874][ T30] schedule_preempt_disabled+0x13/0x30 [ 354.638397][ T30] __mutex_lock+0x817/0x1010 [ 354.643043][ T30] ? __mutex_lock+0x602/0x1010 [ 354.647981][ T30] ? rtnl_newlink+0xce2/0x2210 [ 354.652774][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 354.657870][ T30] ? ns_capable+0x8a/0xf0 [ 354.662206][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 354.668037][ T30] rtnl_newlink+0xce2/0x2210 [ 354.672639][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.677662][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.682600][ T30] ? lock_release+0xbf/0xa30 [ 354.687221][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.692047][ T30] ? lock_release+0xbf/0xa30 [ 354.696652][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 354.702067][ T30] ? lock_release+0xbf/0xa30 [ 354.706752][ T30] ? deref_stack_reg+0x17c/0x210 [ 354.711762][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.716879][ T30] ? stack_trace_save+0x118/0x1d0 [ 354.721938][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 354.727234][ T30] ? deref_stack_reg+0x17c/0x210 [ 354.732197][ T30] ? preempt_count_add+0x93/0x190 [ 354.737219][ T30] ? 0xffffffffa0000954 [ 354.741410][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 354.746702][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 354.752018][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 354.758460][ T30] ? kernel_text_address+0xa7/0xe0 [ 354.763607][ T30] ? __kernel_text_address+0xd/0x40 [ 354.768872][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.773663][ T30] ? lock_release+0xbf/0xa30 [ 354.778288][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 354.783945][ T30] ? __pfx_lock_release+0x10/0x10 [ 354.789008][ T30] ? apparmor_capable+0x13b/0x1b0 [ 354.794036][ T30] ? bpf_lsm_capable+0x9/0x10 [ 354.798780][ T30] ? security_capable+0x7e/0x2d0 [ 354.803962][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.809058][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 354.814001][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 354.819179][ T30] ? lock_release+0xbf/0xa30 [ 354.823790][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.829391][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 354.834459][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.839337][ T30] ? lock_acquire+0xe3/0x550 [ 354.843985][ T30] netlink_rcv_skb+0x1e3/0x430 [ 354.848797][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.854289][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.859651][ T30] ? net_generic+0x1f/0x240 [ 354.864181][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.869624][ T30] netlink_unicast+0x7f6/0x990 [ 354.874392][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 354.879750][ T30] ? __virt_addr_valid+0x45f/0x530 [ 354.884899][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 354.889956][ T30] ? __check_object_size+0x47a/0x730 [ 354.895253][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 354.900051][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.905527][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 354.910516][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.915804][ T30] __sock_sendmsg+0x221/0x270 [ 354.922587][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 354.927362][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.932682][ T30] ? __fget_files+0x2a/0x410 [ 354.937293][ T30] ? __fget_files+0x2a/0x410 [ 354.941988][ T30] __sys_sendmsg+0x269/0x350 [ 354.946599][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.951758][ T30] ? __se_sys_futex+0x3f9/0x480 [ 354.956619][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.963026][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.967860][ T30] ? rcu_is_watching+0x15/0xb0 [ 354.972672][ T30] do_syscall_64+0xf3/0x230 [ 354.977175][ T30] ? clear_bhb_loop+0x35/0x90 [ 354.982016][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.987981][ T30] RIP: 0033:0x7fb79618cd29 [ 354.992439][ T30] RSP: 002b:00007fb793ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.001103][ T30] RAX: ffffffffffffffda RBX: 00007fb7963a6080 RCX: 00007fb79618cd29 [ 355.010229][ T30] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000007 [ 355.018271][ T30] RBP: 00007fb79620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.026259][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.034308][ T30] R13: 0000000000000000 R14: 00007fb7963a6080 R15: 00007ffd1121bf38 [ 355.042361][ T30] [ 355.045407][ T30] INFO: lockdep is turned off. [ 355.050264][ T30] NMI backtrace for cpu 0 [ 355.050276][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 355.050291][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 355.050300][ T30] Call Trace: [ 355.050305][ T30] [ 355.050312][ T30] dump_stack_lvl+0x241/0x360 [ 355.050339][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.050380][ T30] ? __pfx__printk+0x10/0x10 [ 355.050401][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 355.050425][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 355.050484][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.050502][ T30] ? _printk+0xd5/0x120 [ 355.050521][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 355.050541][ T30] ? __pfx__printk+0x10/0x10 [ 355.050563][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 355.050580][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 355.050601][ T30] watchdog+0xff6/0x1040 [ 355.050620][ T30] ? watchdog+0x1ea/0x1040 [ 355.050640][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.050658][ T30] kthread+0x7a9/0x920 [ 355.050677][ T30] ? __pfx_kthread+0x10/0x10 [ 355.050710][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.050727][ T30] ? __pfx_kthread+0x10/0x10 [ 355.050745][ T30] ? __pfx_kthread+0x10/0x10 [ 355.050765][ T30] ? __pfx_kthread+0x10/0x10 [ 355.050782][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.050802][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 355.050823][ T30] ? __pfx_kthread+0x10/0x10 [ 355.050842][ T30] ret_from_fork+0x4b/0x80 [ 355.050857][ T30] ? __pfx_kthread+0x10/0x10 [ 355.050876][ T30] ret_from_fork_asm+0x1a/0x30 [ 355.050896][ T30] [ 355.050902][ T30] Sending NMI from CPU 0 to CPUs 1: [ 355.219390][ C1] NMI backtrace for cpu 1 [ 355.219406][ C1] CPU: 1 UID: 0 PID: 8016 Comm: kworker/u8:12 Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 355.219426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 355.219439][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 355.219469][ C1] RIP: 0010:trace_contention_begin+0x37/0x120 [ 355.219499][ C1] Code: 83 f8 08 73 40 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 b0 a4 1b 90 be 08 00 00 00 e8 d3 f5 8b 00 48 0f a3 1d 4b 96 a1 0e 73 12 c4 35 0b 00 84 c0 75 09 80 3d 9e b1 8b 0e 00 74 0f 5b 41 5e 5d [ 355.219513][ C1] RSP: 0018:ffffc900049ff900 EFLAGS: 00000257 [ 355.219527][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff817a0e5d [ 355.219539][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901ba4b0 [ 355.219550][ C1] RBP: ffffc900049ffac0 R08: ffffffff901ba4b7 R09: 1ffffffff2037496 [ 355.219563][ C1] R10: dffffc0000000000 R11: fffffbfff2037497 R12: 1ffff9200093ff38 [ 355.219576][ C1] R13: ffff88805d8b8768 R14: ffff88805d8b8700 R15: 0000000000000000 [ 355.219588][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 355.219603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.219614][ C1] CR2: 00007ffde32a4f98 CR3: 000000000e738000 CR4: 00000000003526f0 [ 355.219629][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.219640][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.219650][ C1] Call Trace: [ 355.219657][ C1] [ 355.219665][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 355.219694][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 355.219718][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.219747][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 355.219764][ C1] ? nmi_handle+0x14f/0x5a0 [ 355.219786][ C1] ? nmi_handle+0x2a/0x5a0 [ 355.219807][ C1] ? trace_contention_begin+0x37/0x120 [ 355.219833][ C1] ? default_do_nmi+0x63/0x160 [ 355.219854][ C1] ? exc_nmi+0x123/0x1f0 [ 355.219873][ C1] ? end_repeat_nmi+0xf/0x53 [ 355.219895][ C1] ? trace_contention_begin+0x2d/0x120 [ 355.219922][ C1] ? trace_contention_begin+0x37/0x120 [ 355.219948][ C1] ? trace_contention_begin+0x37/0x120 [ 355.219976][ C1] ? trace_contention_begin+0x37/0x120 [ 355.220021][ C1] [ 355.220027][ C1] [ 355.220035][ C1] __mutex_lock+0x1ad/0x1010 [ 355.220062][ C1] ? rcu_is_watching+0x15/0xb0 [ 355.220092][ C1] ? cfg80211_wiphy_work+0xcf/0x490 [ 355.220115][ C1] ? lock_acquire+0xe3/0x550 [ 355.220136][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 355.220165][ C1] ? __pfx_lock_release+0x10/0x10 [ 355.220187][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 355.220215][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.220239][ C1] ? process_scheduled_works+0x976/0x1840 [ 355.220258][ C1] cfg80211_wiphy_work+0xcf/0x490 [ 355.220283][ C1] ? process_scheduled_works+0x976/0x1840 [ 355.220302][ C1] process_scheduled_works+0xa66/0x1840 [ 355.220333][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.220354][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 355.220378][ C1] ? assign_work+0x364/0x3d0 [ 355.220398][ C1] worker_thread+0x870/0xd30 [ 355.220424][ C1] ? __kthread_parkme+0x169/0x1d0 [ 355.220448][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.220467][ C1] kthread+0x7a9/0x920 [ 355.220491][ C1] ? __pfx_worker_thread+0x10/0x10 [ 355.220510][ C1] ? __pfx_kthread+0x10/0x10 [ 355.220532][ C1] ? __pfx_kthread+0x10/0x10 [ 355.220555][ C1] ? rcu_is_watching+0x15/0xb0 [ 355.220580][ C1] ? __pfx_kthread+0x10/0x10 [ 355.220602][ C1] ? __pfx_kthread+0x10/0x10 [ 355.220625][ C1] ret_from_fork+0x4b/0x80 [ 355.220643][ C1] ? __pfx_kthread+0x10/0x10 [ 355.220666][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.220698][ C1] [ 355.221520][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 355.596075][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04046-g0ad9617c78ac #0 [ 355.606231][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 355.616373][ T30] Call Trace: [ 355.619655][ T30] [ 355.622590][ T30] dump_stack_lvl+0x241/0x360 [ 355.627283][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.632496][ T30] ? __pfx__printk+0x10/0x10 [ 355.637103][ T30] ? vscnprintf+0x5d/0x90 [ 355.641441][ T30] panic+0x349/0x880 [ 355.645349][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 355.651514][ T30] ? __pfx_panic+0x10/0x10 [ 355.655935][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 355.661315][ T30] ? __irq_work_queue_local+0x137/0x410 [ 355.666869][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 355.672367][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 355.678537][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 355.684724][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 355.690885][ T30] watchdog+0x1035/0x1040 [ 355.695219][ T30] ? watchdog+0x1ea/0x1040 [ 355.699645][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.704328][ T30] kthread+0x7a9/0x920 [ 355.708404][ T30] ? __pfx_kthread+0x10/0x10 [ 355.712998][ T30] ? __pfx_watchdog+0x10/0x10 [ 355.717688][ T30] ? __pfx_kthread+0x10/0x10 [ 355.722283][ T30] ? __pfx_kthread+0x10/0x10 [ 355.726892][ T30] ? __pfx_kthread+0x10/0x10 [ 355.731508][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.736734][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 355.741952][ T30] ? __pfx_kthread+0x10/0x10 [ 355.746553][ T30] ret_from_fork+0x4b/0x80 [ 355.750974][ T30] ? __pfx_kthread+0x10/0x10 [ 355.755569][ T30] ret_from_fork_asm+0x1a/0x30 [ 355.760356][ T30] [ 355.763766][ T30] Kernel Offset: disabled [ 355.768093][ T30] Rebooting in 86400 seconds..