last executing test programs: 53.991717184s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 52.605127274s ago: executing program 2 (id=443): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 46.675736879s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 45.795050984s ago: executing program 2 (id=443): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 39.929934617s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 39.24714074s ago: executing program 2 (id=443): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 34.039461166s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 32.658538529s ago: executing program 2 (id=443): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 27.351374208s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 26.087858516s ago: executing program 2 (id=443): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 20.954009832s ago: executing program 3 (id=904): socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f000001b840), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_DELSETELEM={0x2b0, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x29c, 0x3, 0x0, 0x1, [{0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x12c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xf4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "144132edf0b7800569601899ce1b50f1ba11bcff30a4eaecb42a860442a01ebf816c94cd8fe553f9f5e73ad8215f63255b6191cc48829189be4ac1f1d8914807013c7d0d327dbcd69ebbac8a2bbe94632de36c5c7cfe6598f8165c8aa1389f1813d093a08eae10c848af16bdc2d62783b8c455dcebb05e1607fd3a1e48e4dd0cc0e5696dd1eef5281347130e7abb7549382af8c3fc438384fb15f65c0d4d66fdac6db5688cf56dfd435ad8acafd3638324e6eeb6492ad3483a9e105b054c9118e3e70d3f24eec269ca1bbe8edd8d98745e4821221661faa31e279d79b9e4d6a6106b7e6f70321460ea"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xf7}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "07cf939a4a20860ff70df4da18103ff24bc23344c764b86c295e466c0a0014f3e0d971cdce42527daee1bb22c70ec53edcb78b1996098fb3d83b8e68ff0203c0628ca59f77218769e20507680c5465a33c138602dcef804f360310927ee4924c562eb7f091cabde000d7ab138f93a2ef897e382a30e256431ca6e30bfc6748d7e29388f284380c846d27297e37b9fd11c28f7956b08ff3cbc4ba39ae5b2321b24311be35209ce8c882cc6b9831b513fec3ccd9dfc9dcf03ad291f076239aa52f0a1a4095f8978547511abff6a03bbf8545502df66475f3a2b7"}]}]}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}}, @NFT_MSG_NEWFLOWTABLE={0x14}], {0x14}}, 0x300}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 20.702105936s ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 19.347398235s ago: executing program 2 (id=443): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 18.129152288s ago: executing program 3 (id=906): syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x87, 0x0, @dev, @local}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x85e9a0ac464836ea, 0x4, 0x0, 0xfffffffffffffffb}]}, 0x0, 0x98e, 0x1c, &(0x7f00000000c0)=""/28, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xc, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x0, 0x2, 0x1, 0x1}, {0x4, 0x3, 0x6, 0x8}, {0x3, 0x2, 0x6, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x0, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x9, 0x3}, {0x1, 0x5, 0xb, 0xc}, {0x4, 0x5, 0xc, 0xc}], 0x10, 0x9, @void, @value}, 0x94) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 18.128492931s ago: executing program 4 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x148, 0x4c, 0x2500, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0x0, 0xff000000], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0x110, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x22}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x1}, {0x2, 0x6, 0x2}, {0x4, 0x3, 0x6}, 0x2, 0xfffffe01}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x2}, {0x4, 0x4, 0x3}, 0xd792, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000940)}}, {{&(0x7f00000009c0)={0xa, 0x4e21, 0xf1a, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10001}, 0x1c, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@tclass={{0x14, 0x29, 0x43, 0xff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5ce516b8}}], 0x30}}], 0x4, 0x40093) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x6000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) 18.12818138s ago: executing program 1 (id=908): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) sendmsg$nl_route(r0, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000055000107000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x38}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x4a12, 0x1, 0x24, 0xd2}, {0x7f, 0xa, 0x0, 0x4}, {0x200, 0x16, 0xb7, 0xa761}, {0x5111, 0xf9, 0x5, 0x2}, {0x4, 0x9, 0x6e, 0x5}, {0x9, 0x4, 0x6, 0x800}]}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 18.007546622s ago: executing program 4 (id=909): socket(0x40000000015, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x1f]}}, 0x5c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45310, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x8080) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) accept(r7, 0x0, 0x0) 17.868920841s ago: executing program 1 (id=910): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000001880)=ANY=[@ANYBLOB="0000000c0104000000003d000000604966cd0017060100000000000000000000fffffffffffffe8800000000000000000000000001014e244e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500401ff9078004400f6d9"], 0x4d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000580)="5ef87a3ed7a2bced69d470", 0xb}, {&(0x7f0000000600)="3ee216ec0d48686e3abd6db1e32166be01ec64ae286401607e5b8ebac019eb97ac8c31a384868662ad16df6cea41c5483c1c1a753abbcf1a02f27fbedc95d35b37c1191ba5975e3c344f4efd9c94ca4ec1365fcaf609f33583654c14e5dbbfd629f7e2305a65307a9acd0456df5ae81520426720832b6378cd3f4d", 0x7b}, {&(0x7f0000000680)}], 0x5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x40, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r11 = socket(0x15, 0x5, 0x0) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) getsockopt(r11, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 17.47675388s ago: executing program 4 (id=911): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000400)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x163}], 0x1, &(0x7f0000000540)=ANY=[], 0x58}, 0x4) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x0, 0x0) 17.265689809s ago: executing program 3 (id=912): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB], 0x1c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x10, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 17.26529584s ago: executing program 1 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 17.164741886s ago: executing program 3 (id=914): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket(0x9, 0x5, 0x3a) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000540), 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) sendmsg$rds(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x2, &(0x7f0000000100), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf25050000000c00058008000100657468008001068008000600000000000400050005000300bc00002900000000000000000000000000000000000000bda4a5c9000000000021000000332350f58707e1193bac8f6ab85a5aae267c158ab4326077a15892c207334e920000000400020088000300514a1ea061d97f075e29755819b756f3ee8154b7b5e45b971d167e89b0f6b01d9228530d6382b9b7f47a4dc39bef81e826d48616681d99d5ded24888f664f8db14a9ed57d301e436bbaf435da8ab4d4d98583f619aa90eb01b2105f33d707f105320581ae47f4aed42e6cb14429a2e9eab82e6c9ebeeadc784cf0244c6cc376ed47039704a00040067636d28616573290000000000000009000000000000000000000000000000002200000052e84041451ec479ca3e450eff630a0a0e83eb20ccc81fb6663fd8384782f8bc5bfc00004100040067636d2861657329000000000400000000000000000000000000000000000000190000009c4816a38ce7a9d897c8b908c1c60d4ba98062f3ef699d9d00"], 0x1a0}, 0x1, 0x0, 0x0, 0x40404}, 0x100) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x208, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46aa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b32}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "0e964d5d39fbc6431037c99dec525ac2632629d6142c59585621d80024672efa8b44c37be0a072ee1f9f2e4d24fd38359a36d26f06c4119f149e32f91b7b93adadff12ffca66c31ae15e721591093f24de87e56f45bd9154852b961557105625f421aa5d6446"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2fca}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000001c0)={r10, 0x3}, &(0x7f0000000200)=0x8) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0xfffffffffffffde6) 17.097111339s ago: executing program 1 (id=915): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0xbd7b}], 0x1, 0x40000000, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x14}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x3, 0x0, 0xb6}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000001400000004"], 0x20) 16.976972887s ago: executing program 3 (id=916): socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f000001b840), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_DELSETELEM={0x2b0, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x29c, 0x3, 0x0, 0x1, [{0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x12c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xf4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "144132edf0b7800569601899ce1b50f1ba11bcff30a4eaecb42a860442a01ebf816c94cd8fe553f9f5e73ad8215f63255b6191cc48829189be4ac1f1d8914807013c7d0d327dbcd69ebbac8a2bbe94632de36c5c7cfe6598f8165c8aa1389f1813d093a08eae10c848af16bdc2d62783b8c455dcebb05e1607fd3a1e48e4dd0cc0e5696dd1eef5281347130e7abb7549382af8c3fc438384fb15f65c0d4d66fdac6db5688cf56dfd435ad8acafd3638324e6eeb6492ad3483a9e105b054c9118e3e70d3f24eec269ca1bbe8edd8d98745e4821221661faa31e279d79b9e4d6a6106b7e6f70321460ea"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xf7}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "07cf939a4a20860ff70df4da18103ff24bc23344c764b86c295e466c0a0014f3e0d971cdce42527daee1bb22c70ec53edcb78b1996098fb3d83b8e68ff0203c0628ca59f77218769e20507680c5465a33c138602dcef804f360310927ee4924c562eb7f091cabde000d7ab138f93a2ef897e382a30e256431ca6e30bfc6748d7e29388f284380c846d27297e37b9fd11c28f7956b08ff3cbc4ba39ae5b2321b24311be35209ce8c882cc6b9831b513fec3ccd9dfc9dcf03ad291f076239aa52f0a1a4095f8978547511abff6a03bbf8545502df66475f3a2b7"}]}]}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}}, @NFT_MSG_NEWFLOWTABLE={0x14}], {0x14}}, 0x300}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 16.589049827s ago: executing program 4 (id=917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f", 0x16}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) 16.542106063s ago: executing program 4 (id=918): socketpair(0x29, 0x2, 0x1, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9c, 0x800, 0x81}, &(0x7f00000000c0)=0x10) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 16.153784594s ago: executing program 1 (id=919): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @mcast1, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 16.075146217s ago: executing program 3 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x148, 0x4c, 0x2500, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0x0, 0xff000000], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0x110, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x22}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x1}, {0x2, 0x6, 0x2}, {0x4, 0x3, 0x6}, 0x2, 0xfffffe01}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x2}, {0x4, 0x4, 0x3}, 0xd792, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000940)}}, {{&(0x7f00000009c0)={0xa, 0x4e21, 0xf1a, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10001}, 0x1c, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@tclass={{0x14, 0x29, 0x43, 0xff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5ce516b8}}], 0x30}}], 0x4, 0x40093) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x6000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) 16.060159519s ago: executing program 1 (id=921): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) sendmsg$nl_route(r0, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000055000107000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x38}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x4a12, 0x1, 0x24, 0xd2}, {0x7f, 0xa, 0x0, 0x4}, {0x200, 0x16, 0xb7, 0xa761}, {0x5111, 0xf9, 0x5, 0x2}, {0x4, 0x9, 0x6e, 0x5}, {0x9, 0x4, 0x6, 0x800}]}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 15.62430209s ago: executing program 4 (id=922): syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x87, 0x0, @dev, @local}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x85e9a0ac464836ea, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='GPL\x00', 0x98e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xc, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x0, 0x2, 0x1, 0x1}, {0x4, 0x3, 0x6, 0x8}, {0x3, 0x2, 0x6, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x0, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x9, 0x3}, {0x1, 0x5, 0xb, 0xc}, {0x4, 0x5, 0xc, 0xc}], 0x10, 0x9, @void, @value}, 0x94) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 1.032375379s ago: executing program 32 (id=921): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) sendmsg$nl_route(r0, 0x0, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000055000107000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x38}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f00000000c0)=[{0x4a12, 0x1, 0x24, 0xd2}, {0x7f, 0xa, 0x0, 0x4}, {0x200, 0x16, 0xb7, 0xa761}, {0x5111, 0xf9, 0x5, 0x2}, {0x4, 0x9, 0x6e, 0x5}, {0x9, 0x4, 0x6, 0x800}]}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.012871633s ago: executing program 33 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x148, 0x4c, 0x2500, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0x0, 0xff000000], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0x110, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x22}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x1}, {0x2, 0x6, 0x2}, {0x4, 0x3, 0x6}, 0x2, 0xfffffe01}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x2}, {0x4, 0x4, 0x3}, 0xd792, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000940)}}, {{&(0x7f00000009c0)={0xa, 0x4e21, 0xf1a, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10001}, 0x1c, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@tclass={{0x14, 0x29, 0x43, 0xff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5ce516b8}}], 0x30}}], 0x4, 0x40093) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x6000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) 0s ago: executing program 34 (id=922): syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x87, 0x0, @dev, @local}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x85e9a0ac464836ea, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='GPL\x00', 0x98e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xc, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x0, 0x2, 0x1, 0x1}, {0x4, 0x3, 0x6, 0x8}, {0x3, 0x2, 0x6, 0x8}, {0x1, 0x3, 0xf, 0x4}, {0x0, 0x3, 0x2, 0x6}, {0x3, 0x4, 0x9, 0x3}, {0x1, 0x5, 0xb, 0xc}, {0x4, 0x5, 0xc, 0xc}], 0x10, 0x9, @void, @value}, 0x94) unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): problems! [ 115.922370][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.980173][ T8486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.004217][ T8486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.027462][ T8486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.060050][ T8486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.088398][ T8725] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 116.230651][ T7206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.264173][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.277238][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.296461][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.310294][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.584858][ T7206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.815382][ T7206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.875773][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.936862][ T7206] bridge_slave_1: left allmulticast mode [ 116.944628][ T7206] bridge_slave_1: left promiscuous mode [ 116.950603][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.959261][ T7206] bridge_slave_0: left allmulticast mode [ 116.965127][ T7206] bridge_slave_0: left promiscuous mode [ 116.970739][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.095924][ T8758] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 117.118877][ T7206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.140025][ T7206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.151487][ T7206] bond0 (unregistering): Released all slaves [ 117.186397][ T8758] team0: Device veth1_macvtap failed to register rx_handler [ 117.253494][ T8758] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 117.261155][ T8758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.678'. [ 117.317242][ T8767] tipc: Enabling of bearer rejected, already enabled [ 117.341292][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.349024][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.356368][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.364207][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.371546][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.380779][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.723840][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.686'. [ 117.790323][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 117.838396][ T7206] hsr_slave_0: left promiscuous mode [ 117.845436][ T7206] hsr_slave_1: left promiscuous mode [ 117.851002][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.859275][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.867829][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.876491][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.886412][ T7206] veth1_macvtap: left promiscuous mode [ 117.894829][ T7206] veth0_macvtap: left promiscuous mode [ 117.901008][ T7206] veth1_vlan: left promiscuous mode [ 117.906593][ T7206] veth0_vlan: left promiscuous mode [ 118.219758][ T7206] team0 (unregistering): Port device team_slave_1 removed [ 118.243219][ T7206] team0 (unregistering): Port device team_slave_0 removed [ 118.309141][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 118.381560][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.389366][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.397259][ T8771] bridge_slave_0: entered allmulticast mode [ 118.404782][ T8771] bridge_slave_0: entered promiscuous mode [ 118.413299][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.420958][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.428844][ T8771] bridge_slave_1: entered allmulticast mode [ 118.435963][ T8771] bridge_slave_1: entered promiscuous mode [ 118.469825][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.490079][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.518296][ T8771] team0: Port device team_slave_0 added [ 118.525619][ T8771] team0: Port device team_slave_1 added [ 118.571296][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.579719][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.609473][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.648519][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.656217][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.730220][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.943556][ T7206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.954702][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.964233][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.971595][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.986625][ T8771] hsr_slave_0: entered promiscuous mode [ 118.996718][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.002815][ T8771] hsr_slave_1: entered promiscuous mode [ 119.015092][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.025413][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.027351][ T8771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.072794][ T8771] Cannot create hsr debugfs directory [ 119.085758][ T8841] tipc: Enabling of bearer rejected, already enabled [ 119.137989][ T7206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.244518][ T7206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.293042][ T8858] syzkaller0: entered promiscuous mode [ 119.298543][ T8858] syzkaller0: entered allmulticast mode [ 119.324158][ T7206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.394201][ T8869] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 119.441747][ T8869] veth1_macvtap: entered promiscuous mode [ 119.448615][ T8869] team0: Port device veth1_macvtap added [ 119.452880][ T5840] Bluetooth: hci1: command tx timeout [ 119.521933][ T8869] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 119.554270][ T8869] netlink: 224 bytes leftover after parsing attributes in process `syz.1.698'. [ 119.597395][ T7206] bridge_slave_1: left allmulticast mode [ 119.603776][ T7206] bridge_slave_1: left promiscuous mode [ 119.609467][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.619214][ T7206] bridge_slave_0: left allmulticast mode [ 119.625206][ T7206] bridge_slave_0: left promiscuous mode [ 119.630927][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.797136][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.700'. [ 119.811898][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 119.889224][ T7206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.901246][ T7206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.910678][ T7206] bond0 (unregistering): Released all slaves [ 119.981516][ T8844] chnl_net:caif_netlink_parms(): no params data found [ 120.275095][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.282288][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.305898][ T8844] bridge_slave_0: entered allmulticast mode [ 120.343423][ T8844] bridge_slave_0: entered promiscuous mode [ 120.357730][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.368731][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.377200][ T8844] bridge_slave_1: entered allmulticast mode [ 120.384506][ T8844] bridge_slave_1: entered promiscuous mode [ 120.401972][ T8771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.441027][ T8771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.459578][ T8844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.471425][ T8771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.487934][ T8844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.516511][ T8771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.555547][ T8844] team0: Port device team_slave_0 added [ 120.576627][ T8844] team0: Port device team_slave_1 added [ 120.635339][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.648950][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.686242][ T8844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.698350][ T8844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.705584][ T8844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.731828][ T8844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.761152][ T7206] hsr_slave_0: left promiscuous mode [ 120.776539][ T7206] hsr_slave_1: left promiscuous mode [ 120.782272][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.789907][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.809138][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.819518][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.836595][ T7206] veth1_macvtap: left promiscuous mode [ 120.842156][ T7206] veth0_macvtap: left promiscuous mode [ 120.848043][ T7206] veth1_vlan: left promiscuous mode [ 120.855067][ T7206] veth0_vlan: left promiscuous mode [ 121.011036][ T7206] team0 (unregistering): Port device team_slave_1 removed [ 121.024833][ T7206] team0 (unregistering): Port device team_slave_0 removed [ 121.085593][ T8844] hsr_slave_0: entered promiscuous mode [ 121.091535][ T8844] hsr_slave_1: entered promiscuous mode [ 121.099280][ T8844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.107195][ T8844] Cannot create hsr debugfs directory [ 121.119074][ T8927] tipc: Started in network mode [ 121.125531][ T8927] tipc: Node identity ac1414aa, cluster identity 4711 [ 121.132823][ T5840] Bluetooth: hci2: command tx timeout [ 121.132954][ T8927] tipc: Enabled bearer , priority 10 [ 121.254912][ T8940] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 121.318252][ T8935] syzkaller0: entered promiscuous mode [ 121.324003][ T8935] syzkaller0: entered allmulticast mode [ 121.347122][ T8940] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 121.357109][ T8940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.712'. [ 121.485897][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.501260][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'. [ 121.528754][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.532667][ T5840] Bluetooth: hci1: command tx timeout [ 121.537166][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 121.576304][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.583393][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.624722][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.631841][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.843058][ T8844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.867342][ T8844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.888014][ T8844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.918691][ T8844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.972125][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.102274][ T8771] veth0_vlan: entered promiscuous mode [ 122.195180][ T8771] veth1_vlan: entered promiscuous mode [ 122.226365][ T8844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.253055][ T9] tipc: Node number set to 2886997162 [ 122.276085][ T8771] veth0_macvtap: entered promiscuous mode [ 122.313802][ T8771] veth1_macvtap: entered promiscuous mode [ 122.345834][ T8844] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.377000][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.389587][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.402794][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.426366][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.447273][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.496024][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.520038][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.533927][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.545337][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.555319][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.566275][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.577463][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.590768][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.597891][ T7206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.611732][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.618856][ T7206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.647351][ T8771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.656471][ T8771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.691509][ T8771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.726754][ T8771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.936392][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.958407][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.993656][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.001495][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.088522][ T8844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.127111][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.3.723'. [ 123.169027][ T9038] tipc: Enabling of bearer rejected, already enabled [ 123.211435][ T8844] veth0_vlan: entered promiscuous mode [ 123.213725][ T5840] Bluetooth: hci2: command tx timeout [ 123.248541][ T8844] veth1_vlan: entered promiscuous mode [ 123.325243][ T8844] veth0_macvtap: entered promiscuous mode [ 123.368257][ T8844] veth1_macvtap: entered promiscuous mode [ 123.422056][ T9044] syzkaller0: entered promiscuous mode [ 123.433311][ T9044] syzkaller0: entered allmulticast mode [ 123.465278][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.479201][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 123.484024][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.501881][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 123.515757][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.530028][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.544673][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.583567][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.603390][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.760343][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.774387][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.786500][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.798604][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.810447][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.821202][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.834678][ T8844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.846393][ T8844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.859277][ T8844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.887639][ T7205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.909324][ T8844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.925465][ T8844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.937014][ T8844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.947362][ T8844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.010222][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.030395][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.055491][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.064042][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.247033][ T7205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.455006][ T9094] netlink: 'syz.3.727': attribute type 10 has an invalid length. [ 124.485167][ T9094] team0: Device veth1_macvtap failed to register rx_handler [ 124.561781][ T9101] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 124.590352][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.590397][ T9101] netlink: 224 bytes leftover after parsing attributes in process `syz.3.727'. [ 124.609630][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.617754][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.629975][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.640167][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.648660][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.801436][ T7205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.937950][ T7205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.971297][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 125.096161][ T7205] bridge_slave_1: left allmulticast mode [ 125.101903][ T7205] bridge_slave_1: left promiscuous mode [ 125.108116][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.116352][ T7205] bridge_slave_0: left allmulticast mode [ 125.121985][ T7205] bridge_slave_0: left promiscuous mode [ 125.128102][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.221432][ T7205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.231242][ T7205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.241793][ T7205] bond0 (unregistering): Released all slaves [ 125.258528][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.266496][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.274259][ T9102] bridge_slave_0: entered allmulticast mode [ 125.280902][ T9102] bridge_slave_0: entered promiscuous mode [ 125.295580][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.306780][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.314042][ T9102] bridge_slave_1: entered allmulticast mode [ 125.320343][ T9102] bridge_slave_1: entered promiscuous mode [ 125.347550][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.358218][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.378558][ T9102] team0: Port device team_slave_0 added [ 125.396041][ T9102] team0: Port device team_slave_1 added [ 125.427656][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.438528][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.464918][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.486918][ T7205] hsr_slave_0: left promiscuous mode [ 125.497339][ T7205] hsr_slave_1: left promiscuous mode [ 125.506656][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.514474][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.522191][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.533329][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.546134][ T7205] veth1_macvtap: left promiscuous mode [ 125.551643][ T7205] veth0_macvtap: left promiscuous mode [ 125.557588][ T7205] veth1_vlan: left promiscuous mode [ 125.565561][ T7205] veth0_vlan: left promiscuous mode [ 125.626125][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.642464][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.668859][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.769774][ T7205] team0 (unregistering): Port device team_slave_1 removed [ 125.795439][ T7205] team0 (unregistering): Port device team_slave_0 removed [ 125.895892][ T9141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 125.897038][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.926859][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.929606][ T9138] tipc: Enabling of bearer rejected, already enabled [ 125.946566][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.963643][ T9102] hsr_slave_0: entered promiscuous mode [ 125.973160][ T9102] hsr_slave_1: entered promiscuous mode [ 125.982745][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.983025][ T9102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.998963][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 126.006598][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.009511][ T9102] Cannot create hsr debugfs directory [ 126.106796][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.738'. [ 126.131767][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 126.440407][ T9166] syzkaller0: entered promiscuous mode [ 126.452471][ T9166] syzkaller0: entered allmulticast mode [ 126.586293][ T9145] chnl_net:caif_netlink_parms(): no params data found [ 126.648570][ T7205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.679220][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.687892][ T9181] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 126.697396][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.705951][ T9145] bridge_slave_0: entered allmulticast mode [ 126.712358][ T9145] bridge_slave_0: entered promiscuous mode [ 126.727286][ T7205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.738323][ T5145] Bluetooth: hci1: command tx timeout [ 126.747182][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.769588][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.786586][ T9145] bridge_slave_1: entered allmulticast mode [ 126.793815][ T9145] bridge_slave_1: entered promiscuous mode [ 126.821607][ T9181] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 126.830549][ T9181] netlink: 224 bytes leftover after parsing attributes in process `syz.4.740'. [ 126.867076][ T9145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.895028][ T9145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.907638][ T7205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.924690][ T9102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.960565][ T9102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.984578][ T9102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.015361][ T9145] team0: Port device team_slave_0 added [ 127.037493][ T9102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.084803][ T9145] team0: Port device team_slave_1 added [ 127.150866][ T7205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.189817][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.197082][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.224319][ T9145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.279156][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.290691][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.317688][ T9145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.440167][ T9145] hsr_slave_0: entered promiscuous mode [ 127.455585][ T9145] hsr_slave_1: entered promiscuous mode [ 127.471883][ T9145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.490178][ T9145] Cannot create hsr debugfs directory [ 127.532267][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'. [ 127.581230][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 127.618993][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.651160][ T7205] bridge_slave_1: left allmulticast mode [ 127.660222][ T7205] bridge_slave_1: left promiscuous mode [ 127.666525][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.678308][ T7205] bridge_slave_0: left allmulticast mode [ 127.684935][ T7205] bridge_slave_0: left promiscuous mode [ 127.691226][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.748247][ T9221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.750'. [ 127.903229][ T7205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.914481][ T7205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.924775][ T7205] bond0 (unregistering): Released all slaves [ 127.944742][ T9217] tipc: Enabling of bearer rejected, already enabled [ 127.982070][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.052135][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.059276][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.093701][ T5145] Bluetooth: hci2: command tx timeout [ 128.109764][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.116953][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.170084][ T9241] syzkaller0: entered promiscuous mode [ 128.176094][ T9241] syzkaller0: entered allmulticast mode [ 128.371090][ T7205] hsr_slave_0: left promiscuous mode [ 128.403833][ T7205] hsr_slave_1: left promiscuous mode [ 128.433914][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.453238][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.462266][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.471917][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.484515][ T7205] veth1_macvtap: left promiscuous mode [ 128.496725][ T7205] veth0_macvtap: left promiscuous mode [ 128.507854][ T7205] veth1_vlan: left promiscuous mode [ 128.514092][ T9270] netlink: 'syz.3.754': attribute type 10 has an invalid length. [ 128.524218][ T7205] veth0_vlan: left promiscuous mode [ 128.694105][ T9275] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 128.701758][ T9275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.754'. [ 128.771839][ T7205] team0 (unregistering): Port device team_slave_1 removed [ 128.784200][ T7205] team0 (unregistering): Port device team_slave_0 removed [ 128.812885][ T5145] Bluetooth: hci1: command tx timeout [ 128.838057][ T9270] team0: Device veth1_macvtap failed to register rx_handler [ 128.989077][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.009370][ T9145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.025594][ T9145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.038860][ T9145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.074684][ T9145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.099266][ C1] Unknown status report in ack skb [ 129.139099][ T9102] veth0_vlan: entered promiscuous mode [ 129.183690][ T9102] veth1_vlan: entered promiscuous mode [ 129.230597][ T9102] veth0_macvtap: entered promiscuous mode [ 129.266409][ T9295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 129.271830][ T9145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.277928][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 129.283916][ T9102] veth1_macvtap: entered promiscuous mode [ 129.345383][ T9145] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.369567][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.376696][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.388665][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.395776][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.431813][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.443051][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.455796][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.466562][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.477960][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.487124][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.762'. [ 129.500829][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.512578][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.524529][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.535697][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.546625][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.557538][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.570155][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.580480][ T9299] tipc: Enabling of bearer rejected, already enabled [ 129.602272][ T9102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.611613][ T9102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.621754][ T9102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.630924][ T9102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.764442][ T9145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.908493][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.918268][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.984653][ T9313] syzkaller0: entered promiscuous mode [ 129.990300][ T9313] syzkaller0: entered allmulticast mode [ 130.018476][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.028100][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.107401][ T9145] veth0_vlan: entered promiscuous mode [ 130.131667][ T9145] veth1_vlan: entered promiscuous mode [ 130.162322][ T9145] veth0_macvtap: entered promiscuous mode [ 130.184440][ T5145] Bluetooth: hci2: command tx timeout [ 130.200053][ T9145] veth1_macvtap: entered promiscuous mode [ 130.252736][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.274363][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.287829][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.298625][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.316667][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.327487][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.338580][ T9145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.361966][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.376086][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.386671][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.398787][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.408621][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.419454][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.429394][ T9145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.440154][ T9145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.450475][ T9323] netlink: 'syz.1.769': attribute type 10 has an invalid length. [ 130.459308][ T9145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.471741][ T9145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.492429][ T9145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.501126][ T9145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.511406][ T9145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.536428][ T9323] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 130.545399][ T9323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.769'. [ 130.589562][ T7205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.608117][ T7205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.628320][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.636532][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.781886][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.772'. [ 130.816274][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.005513][ T9340] tipc: Enabling of bearer rejected, already enabled [ 131.195683][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.555710][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.757806][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.777901][ C0] Unknown status report in ack skb [ 131.824233][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.832443][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.841256][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.849828][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.859372][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 131.867128][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.874318][ T62] bridge_slave_1: left allmulticast mode [ 131.879989][ T62] bridge_slave_1: left promiscuous mode [ 131.888045][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.905100][ T62] bridge_slave_0: left allmulticast mode [ 131.910758][ T62] bridge_slave_0: left promiscuous mode [ 131.916640][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.046615][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.057445][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.067302][ T62] bond0 (unregistering): Released all slaves [ 132.168883][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 132.219727][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.233453][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.240662][ T9353] bridge_slave_0: entered allmulticast mode [ 132.250168][ T9353] bridge_slave_0: entered promiscuous mode [ 132.261967][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.274030][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.281236][ T9353] bridge_slave_1: entered allmulticast mode [ 132.289651][ T9353] bridge_slave_1: entered promiscuous mode [ 132.324996][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.337995][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.369682][ T62] hsr_slave_0: left promiscuous mode [ 132.376675][ T62] hsr_slave_1: left promiscuous mode [ 132.384683][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.392129][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.400133][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.407953][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.420401][ T62] veth1_macvtap: left promiscuous mode [ 132.432480][ T62] veth0_macvtap: left promiscuous mode [ 132.446591][ T62] veth1_vlan: left promiscuous mode [ 132.451953][ T62] veth0_vlan: left promiscuous mode [ 132.578525][ T9353] team0: Port device team_slave_0 added [ 132.646788][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.656287][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.664453][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.688928][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.704537][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.716116][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.768019][ T62] team0 (unregistering): Port device team_slave_1 removed [ 132.786154][ T62] team0 (unregistering): Port device team_slave_0 removed [ 132.863304][ T9353] team0: Port device team_slave_1 added [ 132.921232][ T9394] syzkaller0: entered promiscuous mode [ 132.934413][ T9394] syzkaller0: entered allmulticast mode [ 132.974318][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.020720][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.027929][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.055431][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.071496][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.078687][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.105022][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.179365][ T9416] netlink: 'syz.4.784': attribute type 10 has an invalid length. [ 133.198940][ T9353] hsr_slave_0: entered promiscuous mode [ 133.207455][ T9353] hsr_slave_1: entered promiscuous mode [ 133.215705][ T9353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.224960][ T9353] Cannot create hsr debugfs directory [ 133.310799][ T9416] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 133.328082][ T9416] __nla_validate_parse: 2 callbacks suppressed [ 133.328097][ T9416] netlink: 224 bytes leftover after parsing attributes in process `syz.4.784'. [ 133.566893][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.621251][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 133.628836][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 133.646732][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 133.695344][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.779092][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.836656][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.851825][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.875302][ T9399] bridge_slave_0: entered allmulticast mode [ 133.896617][ T9399] bridge_slave_0: entered promiscuous mode [ 133.923770][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.930847][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.938514][ T5840] Bluetooth: hci1: command tx timeout [ 133.959359][ T9399] bridge_slave_1: entered allmulticast mode [ 133.970875][ T9399] bridge_slave_1: entered promiscuous mode [ 134.002894][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.789'. [ 134.038186][ T9353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.055693][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.069693][ T9456] tipc: Enabling of bearer rejected, already enabled [ 134.087659][ T9353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.098728][ T9353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.116502][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.128226][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.142755][ T9353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.180021][ T9399] team0: Port device team_slave_0 added [ 134.196356][ T9399] team0: Port device team_slave_1 added [ 134.220160][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.230231][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.257760][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.269750][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.279627][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.312807][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.391447][ T62] bridge_slave_1: left allmulticast mode [ 134.398017][ T62] bridge_slave_1: left promiscuous mode [ 134.412238][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.421658][ T62] bridge_slave_0: left allmulticast mode [ 134.427676][ T62] bridge_slave_0: left promiscuous mode [ 134.443427][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.566266][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.584712][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.601812][ T62] bond0 (unregistering): Released all slaves [ 134.618391][ T9399] hsr_slave_0: entered promiscuous mode [ 134.624983][ T9399] hsr_slave_1: entered promiscuous mode [ 134.631050][ T9399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.640717][ T9399] Cannot create hsr debugfs directory [ 134.800014][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.823610][ T5840] Bluetooth: hci2: command tx timeout [ 134.876787][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.901176][ T9481] syzkaller0: entered promiscuous mode [ 134.915325][ T9481] syzkaller0: entered allmulticast mode [ 134.931028][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.938164][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.048159][ T62] hsr_slave_0: left promiscuous mode [ 135.065324][ T62] hsr_slave_1: left promiscuous mode [ 135.079374][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.098539][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.111971][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.119687][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.130745][ T62] veth1_macvtap: left promiscuous mode [ 135.137663][ T62] veth0_macvtap: left promiscuous mode [ 135.144066][ T62] veth1_vlan: left promiscuous mode [ 135.149401][ T62] veth0_vlan: left promiscuous mode [ 135.186196][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 135.222012][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.229167][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.269985][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 135.330571][ T62] team0 (unregistering): Port device team_slave_1 removed [ 135.343160][ T62] team0 (unregistering): Port device team_slave_0 removed [ 135.360793][ T9506] netlink: 'syz.3.799': attribute type 10 has an invalid length. [ 135.423070][ T9506] team0: Device veth1_macvtap failed to register rx_handler [ 135.517805][ T9505] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 135.534741][ T9353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.543600][ T9505] netlink: 224 bytes leftover after parsing attributes in process `syz.3.799'. [ 135.571388][ T9399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.628904][ T9399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.665475][ T9399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.694332][ T9399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.900415][ T9353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.018028][ T5840] Bluetooth: hci1: command tx timeout [ 136.040139][ T9539] tipc: Enabling of bearer rejected, already enabled [ 136.066210][ T9353] veth0_vlan: entered promiscuous mode [ 136.120145][ T9353] veth1_vlan: entered promiscuous mode [ 136.140560][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.196549][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.244393][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.251506][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.304297][ T9353] veth0_macvtap: entered promiscuous mode [ 136.328172][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.335291][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.378563][ T9353] veth1_macvtap: entered promiscuous mode [ 136.459541][ T9399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.478849][ T9399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.491729][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.505177][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.515524][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.528074][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.540420][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.619513][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.632229][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.642299][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.656850][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.666743][ T9353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.677740][ T9353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.688230][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.709551][ T9353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.723112][ T9353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.731806][ T9353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.751598][ T9353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.774355][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.827901][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.850784][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.858915][ T9399] veth0_vlan: entered promiscuous mode [ 136.878941][ T9399] veth1_vlan: entered promiscuous mode [ 136.895977][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.903011][ T5840] Bluetooth: hci2: command tx timeout [ 136.904643][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.928097][ T9399] veth0_macvtap: entered promiscuous mode [ 136.937078][ T9399] veth1_macvtap: entered promiscuous mode [ 136.950683][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.961258][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.971700][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.985096][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.995242][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.010197][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.024461][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.045264][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.073417][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.087422][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.098442][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.108440][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.119288][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.129181][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.140062][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.153029][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.179884][ T9399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.200987][ T9399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.210266][ T9399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.219610][ T9399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.283654][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'. [ 137.307587][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 137.318525][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.331649][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.371156][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.381364][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.418710][ T9583] syzkaller0: entered promiscuous mode [ 137.430389][ T9583] syzkaller0: entered allmulticast mode [ 137.442378][ T9586] tipc: Enabling of bearer rejected, already enabled [ 137.610545][ T7207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.859995][ T7207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.192845][ T7207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.277792][ T9598] netlink: 'syz.1.816': attribute type 10 has an invalid length. [ 138.327962][ T9598] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 138.337181][ T9598] netlink: 224 bytes leftover after parsing attributes in process `syz.1.816'. [ 138.402966][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.410164][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.419732][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.429190][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.436883][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.446143][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.454559][ T7207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.535003][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 138.612727][ T7207] bridge_slave_1: left allmulticast mode [ 138.618601][ T7207] bridge_slave_1: left promiscuous mode [ 138.624458][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.634050][ T7207] bridge_slave_0: left allmulticast mode [ 138.639700][ T7207] bridge_slave_0: left promiscuous mode [ 138.645648][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.669680][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.677474][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.685160][ T9604] bridge_slave_0: entered allmulticast mode [ 138.691515][ T9604] bridge_slave_0: entered promiscuous mode [ 138.698950][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.706160][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.713631][ T9604] bridge_slave_1: entered allmulticast mode [ 138.720055][ T9604] bridge_slave_1: entered promiscuous mode [ 138.791111][ T7207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.800834][ T7207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.810437][ T7207] bond0 (unregistering): Released all slaves [ 138.829529][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.840539][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.870536][ T9604] team0: Port device team_slave_0 added [ 138.877725][ T9604] team0: Port device team_slave_1 added [ 138.900353][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.910812][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.939826][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.957884][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.965124][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.995563][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.037118][ T9604] hsr_slave_0: entered promiscuous mode [ 139.046755][ T9604] hsr_slave_1: entered promiscuous mode [ 139.053235][ T9604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.082024][ T9604] Cannot create hsr debugfs directory [ 139.187518][ T7207] hsr_slave_0: left promiscuous mode [ 139.207569][ T7207] hsr_slave_1: left promiscuous mode [ 139.223110][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.240646][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.248630][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.266885][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.301148][ T7207] veth1_macvtap: left promiscuous mode [ 139.316096][ T7207] veth0_macvtap: left promiscuous mode [ 139.321675][ T7207] veth1_vlan: left promiscuous mode [ 139.335536][ T7207] veth0_vlan: left promiscuous mode [ 139.380557][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.388861][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.396751][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.405839][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.415294][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.423048][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.576062][ T7207] team0 (unregistering): Port device team_slave_1 removed [ 139.595719][ T7207] team0 (unregistering): Port device team_slave_0 removed [ 139.769614][ T9643] chnl_net:caif_netlink_parms(): no params data found [ 139.861769][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.870936][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.883266][ T9643] bridge_slave_0: entered allmulticast mode [ 139.890566][ T9643] bridge_slave_0: entered promiscuous mode [ 139.918688][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.929752][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.976772][ T9643] bridge_slave_1: entered allmulticast mode [ 139.993683][ T9643] bridge_slave_1: entered promiscuous mode [ 140.038858][ T9643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.082016][ T9643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.106566][ T9604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.144107][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 140.154690][ T9604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.181145][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.203065][ T9604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.211385][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 140.223612][ T9643] team0: Port device team_slave_0 added [ 140.239040][ T9643] team0: Port device team_slave_1 added [ 140.254364][ T9604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.290351][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.305585][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.313319][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.341548][ T9643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.358519][ T9681] tipc: Enabling of bearer rejected, already enabled [ 140.367768][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.375008][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.402146][ T9643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.437357][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.494172][ T5840] Bluetooth: hci1: command tx timeout [ 140.544072][ T9643] hsr_slave_0: entered promiscuous mode [ 140.585966][ T9643] hsr_slave_1: entered promiscuous mode [ 140.605194][ T9643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.616550][ T9643] Cannot create hsr debugfs directory [ 140.641272][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.730256][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.864331][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.898006][ T3522] bridge_slave_1: left allmulticast mode [ 140.906023][ T3522] bridge_slave_1: left promiscuous mode [ 140.912192][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.922103][ T3522] bridge_slave_0: left allmulticast mode [ 140.928185][ T3522] bridge_slave_0: left promiscuous mode [ 140.934878][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.178339][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.196135][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.206100][ T3522] bond0 (unregistering): Released all slaves [ 141.219844][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.226971][ T7205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.246250][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.253364][ T7205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.285618][ T9722] syzkaller0: entered promiscuous mode [ 141.291090][ T9722] syzkaller0: entered allmulticast mode [ 141.502805][ T9731] netlink: 'syz.4.831': attribute type 10 has an invalid length. [ 141.535849][ T5840] Bluetooth: hci2: command tx timeout [ 141.611548][ T9731] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 141.626970][ T9731] netlink: 224 bytes leftover after parsing attributes in process `syz.4.831'. [ 141.695085][ T3522] hsr_slave_0: left promiscuous mode [ 141.701117][ T3522] hsr_slave_1: left promiscuous mode [ 141.707494][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.717326][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.745926][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.762840][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.773953][ T3522] veth1_macvtap: left promiscuous mode [ 141.779465][ T3522] veth0_macvtap: left promiscuous mode [ 141.785496][ T3522] veth1_vlan: left promiscuous mode [ 141.790762][ T3522] veth0_vlan: left promiscuous mode [ 141.857953][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.959585][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 141.971621][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 142.033714][ T9643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.074693][ T9643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.106612][ T9643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.118412][ T9643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.138663][ T9604] veth0_vlan: entered promiscuous mode [ 142.168263][ T9604] veth1_vlan: entered promiscuous mode [ 142.241136][ T9604] veth0_macvtap: entered promiscuous mode [ 142.261790][ T9604] veth1_macvtap: entered promiscuous mode [ 142.295816][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.326786][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.345817][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.357664][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.378742][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.399221][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.413610][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.836'. [ 142.445269][ T9643] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.459485][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.490319][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.514679][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.516665][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 142.532673][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.559758][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.573485][ T5840] Bluetooth: hci1: command tx timeout [ 142.579924][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.591108][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.601476][ T9787] tipc: Enabling of bearer rejected, already enabled [ 142.647411][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.654550][ T7205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.663652][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.670736][ T7205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.688445][ T9604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.697452][ T9604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.709084][ T9604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.720616][ T9604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.816610][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.837649][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.890834][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.901512][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.907035][ T9643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.950861][ T9643] veth0_vlan: entered promiscuous mode [ 142.974890][ T9643] veth1_vlan: entered promiscuous mode [ 142.991820][ T9643] veth0_macvtap: entered promiscuous mode [ 143.002363][ T9643] veth1_macvtap: entered promiscuous mode [ 143.020626][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.031226][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.041495][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.052947][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.063187][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.073737][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.084836][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.097753][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.108404][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.119441][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.129955][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.145061][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.156410][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.166278][ T9643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.179289][ T9643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.190704][ T9643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.206311][ T9643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.216259][ T9643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.225243][ T9643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.234396][ T9643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.297785][ T7207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.310503][ T7207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.330902][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.339087][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.468061][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.965579][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.215196][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.396122][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.619134][ T9813] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 144.630915][ T9813] team0: Device veth1_macvtap failed to register rx_handler [ 144.675031][ T9812] syzkaller0: entered promiscuous mode [ 144.681255][ T9812] syzkaller0: entered allmulticast mode [ 144.689786][ T3522] bridge_slave_1: left allmulticast mode [ 144.699345][ T3522] bridge_slave_1: left promiscuous mode [ 144.713906][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.765233][ T9819] netlink: 'syz.3.844': attribute type 1 has an invalid length. [ 144.781514][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.844'. [ 144.787087][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.799140][ T3522] bridge_slave_0: left allmulticast mode [ 144.812543][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.819735][ T3522] bridge_slave_0: left promiscuous mode [ 144.828970][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.829034][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.866322][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.874681][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.881861][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.097333][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.107159][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.117336][ T3522] bond0 (unregistering): Released all slaves [ 145.396641][ T3522] hsr_slave_0: left promiscuous mode [ 145.403054][ T3522] hsr_slave_1: left promiscuous mode [ 145.408848][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.420746][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.429309][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.439965][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.449570][ T3522] veth1_macvtap: left promiscuous mode [ 145.455806][ T3522] veth0_macvtap: left promiscuous mode [ 145.461319][ T3522] veth1_vlan: left promiscuous mode [ 145.466657][ T3522] veth0_vlan: left promiscuous mode [ 145.506810][ T9820] chnl_net:caif_netlink_parms(): no params data found [ 145.561686][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 145.576900][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 145.659280][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.669230][ T9820] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.677568][ T9820] bridge_slave_0: entered allmulticast mode [ 145.684397][ T9820] bridge_slave_0: entered promiscuous mode [ 145.691549][ T9820] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.699160][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.706356][ T9820] bridge_slave_1: entered allmulticast mode [ 145.713175][ T9820] bridge_slave_1: entered promiscuous mode [ 145.730219][ T9820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.741279][ T9820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.766035][ T9820] team0: Port device team_slave_0 added [ 145.774105][ T9820] team0: Port device team_slave_1 added [ 145.800613][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.807640][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.834144][ T9820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.846467][ T9820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.854077][ T9820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.885727][ T9820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.968730][ T9820] hsr_slave_0: entered promiscuous mode [ 145.984146][ T9820] hsr_slave_1: entered promiscuous mode [ 145.990108][ T9820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.012628][ T9820] Cannot create hsr debugfs directory [ 146.089375][ T9865] tipc: Enabling of bearer rejected, already enabled [ 146.116378][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'. [ 146.148435][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 146.187943][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.243822][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.251190][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.258858][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.273695][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.281159][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.288758][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.507371][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.630386][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.773649][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 146.816527][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.867290][ T9820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.894723][ T5145] Bluetooth: hci1: command tx timeout [ 146.909646][ T9820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.919557][ T9820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.937952][ T9820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.946850][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.954917][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.962110][ T9880] bridge_slave_0: entered allmulticast mode [ 146.968839][ T9880] bridge_slave_0: entered promiscuous mode [ 146.987051][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.995350][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.002541][ T9880] bridge_slave_1: entered allmulticast mode [ 147.009776][ T9880] bridge_slave_1: entered promiscuous mode [ 147.041683][ T3522] bridge_slave_1: left allmulticast mode [ 147.047992][ T3522] bridge_slave_1: left promiscuous mode [ 147.055392][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.064469][ T3522] bridge_slave_0: left allmulticast mode [ 147.070125][ T3522] bridge_slave_0: left promiscuous mode [ 147.076664][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.270833][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.280673][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.290751][ T3522] bond0 (unregistering): Released all slaves [ 147.301351][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.316761][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.351135][ T9880] team0: Port device team_slave_0 added [ 147.358729][ T9880] team0: Port device team_slave_1 added [ 147.389979][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.397006][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.423542][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.441390][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.449566][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.476263][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.531949][ T9880] hsr_slave_0: entered promiscuous mode [ 147.548640][ T9880] hsr_slave_1: entered promiscuous mode [ 147.574469][ T9880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.589737][ T9880] Cannot create hsr debugfs directory [ 147.641576][ T9820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.747166][ T3522] hsr_slave_0: left promiscuous mode [ 147.756147][ T3522] hsr_slave_1: left promiscuous mode [ 147.761829][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.770385][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.779033][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.793030][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.813131][ T3522] veth1_macvtap: left promiscuous mode [ 147.818644][ T3522] veth0_macvtap: left promiscuous mode [ 147.827753][ T3522] veth1_vlan: left promiscuous mode [ 147.833864][ T3522] veth0_vlan: left promiscuous mode [ 147.900259][ T9929] syzkaller0: entered promiscuous mode [ 147.905885][ T9929] syzkaller0: entered allmulticast mode [ 148.009634][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 148.028706][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 148.093721][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.861'. [ 148.125159][ T9820] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.133145][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 148.219783][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.226917][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.333140][ T5840] Bluetooth: hci2: command tx timeout [ 148.381394][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.388472][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.455168][ T9965] tipc: Enabling of bearer rejected, already enabled [ 148.689821][ T9990] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 148.770523][ T9820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.787483][ T9998] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 148.810745][ T9998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.866'. [ 148.894495][ T9880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.940798][ T9880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.972744][ T5145] Bluetooth: hci1: command tx timeout [ 148.982067][ T9880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.019028][ T9880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.047968][ T9820] veth0_vlan: entered promiscuous mode [ 149.078698][ T9820] veth1_vlan: entered promiscuous mode [ 149.188266][ T9820] veth0_macvtap: entered promiscuous mode [ 149.216576][ C0] Unknown status report in ack skb [ 149.235362][ T9820] veth1_macvtap: entered promiscuous mode [ 149.261630][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.306343][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.320312][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.334799][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.346955][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.364749][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.389364][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.420134][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.427262][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.439630][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.468670][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.487570][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.499224][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.515041][ T9820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.526055][ T9820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.537314][ T9820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.551504][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.558643][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.568546][ T9820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.580974][ T9820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.589784][ T9820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.598944][ T9820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.651086][ T9880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.696730][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.710909][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.747664][ T7206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.756425][ T7206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.845370][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.889352][ T9880] veth0_vlan: entered promiscuous mode [ 149.901257][ T9880] veth1_vlan: entered promiscuous mode [ 149.931978][ T9880] veth0_macvtap: entered promiscuous mode [ 149.942997][ T9880] veth1_macvtap: entered promiscuous mode [ 149.964742][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.975406][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.011615][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.042036][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.053803][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.067304][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.078876][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.096202][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.112235][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.130827][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.163387][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.181695][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.194996][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.204920][ T9880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.216655][ T9880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.228251][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.248797][ T9880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.258762][ T9880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.273132][ T9880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.288541][ T9880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.304845][ T7206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.317167][T10051] tipc: Enabling of bearer rejected, already enabled [ 150.387315][ T7206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.410969][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.413351][ T5145] Bluetooth: hci2: command tx timeout [ 150.425659][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.449792][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.464073][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.715113][ T7206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.995578][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.154590][ T7206] bridge_slave_1: left allmulticast mode [ 151.160272][ T7206] bridge_slave_1: left promiscuous mode [ 151.166811][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.178197][ T7206] bridge_slave_0: left allmulticast mode [ 151.184558][ T7206] bridge_slave_0: left promiscuous mode [ 151.190226][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.308582][ T7206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.354421][ T7206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.381954][ T7206] bond0 (unregistering): Released all slaves [ 151.583739][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.594633][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.601801][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.609601][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.618919][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.626108][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.692189][ T7206] hsr_slave_0: left promiscuous mode [ 151.699980][ T7206] hsr_slave_1: left promiscuous mode [ 151.706383][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.714036][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.721685][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.731483][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.741601][ T7206] veth1_macvtap: left promiscuous mode [ 151.749295][ T7206] veth0_macvtap: left promiscuous mode [ 151.755242][ T7206] veth1_vlan: left promiscuous mode [ 151.760513][ T7206] veth0_vlan: left promiscuous mode [ 151.851849][ T7206] team0 (unregistering): Port device team_slave_1 removed [ 151.867218][ T7206] team0 (unregistering): Port device team_slave_0 removed [ 151.996901][T10077] chnl_net:caif_netlink_parms(): no params data found [ 152.068265][T10077] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.076593][T10077] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.084363][T10077] bridge_slave_0: entered allmulticast mode [ 152.090984][T10077] bridge_slave_0: entered promiscuous mode [ 152.100556][T10077] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.109737][T10077] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.118028][T10077] bridge_slave_1: entered allmulticast mode [ 152.126711][T10077] bridge_slave_1: entered promiscuous mode [ 152.154831][T10077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.167518][T10077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.206844][T10077] team0: Port device team_slave_0 added [ 152.215190][T10077] team0: Port device team_slave_1 added [ 152.233746][T10077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.240696][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.267037][T10077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.279616][T10077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.287324][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.314180][T10077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.358363][T10077] hsr_slave_0: entered promiscuous mode [ 152.365112][T10077] hsr_slave_1: entered promiscuous mode [ 152.371074][T10077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.381133][T10077] Cannot create hsr debugfs directory [ 152.514253][ T7206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.623091][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.630442][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.638146][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.648717][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.656622][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.664241][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.778826][T10121] syzkaller0: entered promiscuous mode [ 152.785356][T10121] syzkaller0: entered allmulticast mode [ 153.042222][T10129] chnl_net:caif_netlink_parms(): no params data found [ 153.125155][ T7206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.164686][T10077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.177984][T10077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.187960][T10151] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 153.207057][ T7206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.219742][T10077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.232356][T10151] team0: Device veth1_macvtap failed to register rx_handler [ 153.241875][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.255480][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.271950][T10129] bridge_slave_0: entered allmulticast mode [ 153.279130][T10129] bridge_slave_0: entered promiscuous mode [ 153.290574][T10077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.308132][T10151] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 153.326417][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.332885][T10151] netlink: 224 bytes leftover after parsing attributes in process `syz.3.882'. [ 153.338116][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.353681][T10129] bridge_slave_1: entered allmulticast mode [ 153.370354][T10129] bridge_slave_1: entered promiscuous mode [ 153.383244][ T7206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.453885][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.492730][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.545192][T10129] team0: Port device team_slave_0 added [ 153.561502][T10129] team0: Port device team_slave_1 added [ 153.625470][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.637674][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.693121][ T5145] Bluetooth: hci1: command tx timeout [ 153.698611][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.736064][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.745459][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.772152][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.828930][ T7206] bridge_slave_1: left allmulticast mode [ 153.834881][ T7206] bridge_slave_1: left promiscuous mode [ 153.848663][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.878949][ T7206] bridge_slave_0: left allmulticast mode [ 153.886812][ T7206] bridge_slave_0: left promiscuous mode [ 153.909722][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.078327][ T7206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.088878][ T7206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.100466][ T7206] bond0 (unregistering): Released all slaves [ 154.129039][T10191] tipc: Enabling of bearer rejected, already enabled [ 154.152318][T10129] hsr_slave_0: entered promiscuous mode [ 154.159170][T10129] hsr_slave_1: entered promiscuous mode [ 154.165305][T10129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.173298][T10129] Cannot create hsr debugfs directory [ 154.278071][T10077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.435542][T10221] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 154.446074][T10077] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.481490][ T7206] hsr_slave_0: left promiscuous mode [ 154.516220][ T7206] hsr_slave_1: left promiscuous mode [ 154.535050][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.549871][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.565900][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.582710][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.591463][ T7206] veth1_macvtap: left promiscuous mode [ 154.597086][ T7206] veth0_macvtap: left promiscuous mode [ 154.604084][ T7206] veth1_vlan: left promiscuous mode [ 154.609352][ T7206] veth0_vlan: left promiscuous mode [ 154.699785][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.706931][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.723255][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.730365][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.738405][ T5145] Bluetooth: hci2: command tx timeout [ 154.858855][ T7206] team0 (unregistering): Port device team_slave_1 removed [ 154.870781][ T7206] team0 (unregistering): Port device team_slave_0 removed [ 155.175510][T10077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.294653][T10129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.327501][T10077] veth0_vlan: entered promiscuous mode [ 155.341486][T10129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.388436][T10260] syzkaller0: entered promiscuous mode [ 155.396725][T10260] syzkaller0: entered allmulticast mode [ 155.412947][T10129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.424526][T10129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.445943][T10077] veth1_vlan: entered promiscuous mode [ 155.672188][T10077] veth0_macvtap: entered promiscuous mode [ 155.672761][T10275] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 155.683039][T10077] veth1_macvtap: entered promiscuous mode [ 155.750801][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.761915][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.772816][ T5145] Bluetooth: hci1: command tx timeout [ 155.778291][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.789003][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.801889][T10077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.818669][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.829007][T10275] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 155.837124][T10275] netlink: 224 bytes leftover after parsing attributes in process `syz.4.896'. [ 155.851827][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.865295][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.875762][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.886965][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.907093][T10077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.934905][T10077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.959517][T10077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.991267][T10129] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.015187][T10077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.028854][T10077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.038069][T10077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.049234][T10077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.070327][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.077429][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.086784][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.093895][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.101877][T10287] tipc: Enabling of bearer rejected, already enabled [ 156.274501][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.282318][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.353272][ T7205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.384859][ T7205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.486136][T10129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.540823][ C0] Unknown status report in ack skb [ 156.578622][T10129] veth0_vlan: entered promiscuous mode [ 156.596515][T10129] veth1_vlan: entered promiscuous mode [ 156.626181][T10129] veth0_macvtap: entered promiscuous mode [ 156.637875][T10129] veth1_macvtap: entered promiscuous mode [ 156.666764][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.680774][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.691214][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.701710][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.712222][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.723068][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.733842][T10129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.746036][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.757809][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.768245][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.779861][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.790089][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.801099][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.811603][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.825767][ T5145] Bluetooth: hci2: command tx timeout [ 156.831458][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.842238][T10129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.858174][ T2890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.873114][T10129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.881802][T10129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.890989][T10129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.900336][T10129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.950437][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.961712][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.980175][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.988333][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.082993][ T2890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.285573][ T2890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.456820][ T2890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.531107][ T2890] bridge_slave_1: left allmulticast mode [ 157.537334][ T2890] bridge_slave_1: left promiscuous mode [ 157.543574][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.555707][ T2890] bridge_slave_0: left allmulticast mode [ 157.561364][ T2890] bridge_slave_0: left promiscuous mode [ 157.567192][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.696305][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.706831][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.717031][ T2890] bond0 (unregistering): Released all slaves [ 157.925473][ T2890] hsr_slave_0: left promiscuous mode [ 157.931188][ T2890] hsr_slave_1: left promiscuous mode [ 157.937442][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.946792][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.954480][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.961868][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.971357][ T2890] veth1_macvtap: left promiscuous mode [ 157.977031][ T2890] veth0_macvtap: left promiscuous mode [ 157.982732][ T2890] veth1_vlan: left promiscuous mode [ 157.987975][ T2890] veth0_vlan: left promiscuous mode [ 158.077089][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 158.088700][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 158.176412][T10354] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 158.375184][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.384667][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.391877][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.400083][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.409338][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.417254][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.523030][ T2890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.556292][T10362] chnl_net:caif_netlink_parms(): no params data found [ 158.596695][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.604260][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.611344][T10362] bridge_slave_0: entered allmulticast mode [ 158.618349][T10362] bridge_slave_0: entered promiscuous mode [ 158.625625][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.635079][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.642224][T10362] bridge_slave_1: entered allmulticast mode [ 158.649139][T10362] bridge_slave_1: entered promiscuous mode [ 158.676048][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.687495][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.712235][T10362] team0: Port device team_slave_0 added [ 158.720144][T10362] team0: Port device team_slave_1 added [ 158.741667][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.749669][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.777333][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.792028][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.799487][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.825782][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.869080][T10362] hsr_slave_0: entered promiscuous mode [ 158.875656][T10362] hsr_slave_1: entered promiscuous mode [ 158.881627][T10362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.889760][T10362] Cannot create hsr debugfs directory [ 159.250488][T10362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.265225][T10362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.275071][T10362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.284258][T10362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.340261][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.358210][T10362] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.369319][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.376445][ T7205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.416560][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.423681][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.477624][T10424] tipc: Enabling of bearer rejected, already enabled [ 159.683756][ T2890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.742334][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.766959][T10430] syzkaller0: entered promiscuous mode [ 159.772902][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.776460][T10442] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 159.789704][T10430] syzkaller0: entered allmulticast mode [ 159.797612][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.817101][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.825175][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.834986][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.000309][ T2890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.060208][T10362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.135154][ T2890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.181394][T10362] veth0_vlan: entered promiscuous mode [ 160.271735][T10362] veth1_vlan: entered promiscuous mode [ 160.366824][T10362] veth0_macvtap: entered promiscuous mode [ 160.398337][T10362] veth1_macvtap: entered promiscuous mode [ 160.470390][T10439] chnl_net:caif_netlink_parms(): no params data found [ 160.493555][ T5145] Bluetooth: hci1: command tx timeout [ 160.504712][ T2890] bridge_slave_1: left allmulticast mode [ 160.511102][ T2890] bridge_slave_1: left promiscuous mode [ 160.517599][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.537329][ T2890] bridge_slave_0: left allmulticast mode [ 160.543431][ T2890] bridge_slave_0: left promiscuous mode [ 160.549144][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.587081][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.599058][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.608927][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.619867][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.630004][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.640835][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.651575][T10362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.676164][ C1] Unknown status report in ack skb [ 160.757952][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.768916][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.781223][ T2890] bond0 (unregistering): Released all slaves [ 160.806481][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.822359][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.834497][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.845012][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.857327][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.867791][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.880079][T10362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.902419][T10362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.919849][T10362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.972940][T10362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.981661][T10362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.997582][T10362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.011264][T10362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.051254][T10439] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.071566][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.089500][T10439] bridge_slave_0: entered allmulticast mode [ 161.107326][T10439] bridge_slave_0: entered promiscuous mode [ 161.138201][T10439] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.151648][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.168563][T10439] bridge_slave_1: entered allmulticast mode [ 161.183886][T10439] bridge_slave_1: entered promiscuous mode [ 161.247978][T10439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.308017][T10439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.367108][T10439] team0: Port device team_slave_0 added [ 161.384456][T10545] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 161.852955][ T5145] Bluetooth: hci2: command tx timeout [ 162.572705][ T5145] Bluetooth: hci1: command tx timeout [ 163.932887][ T5145] Bluetooth: hci2: command tx timeout [ 164.652663][ T5145] Bluetooth: hci1: command tx timeout [ 166.012690][ T5145] Bluetooth: hci2: command tx timeout [ 166.742604][ T5145] Bluetooth: hci1: command tx timeout [ 168.092576][ T5145] Bluetooth: hci2: command tx timeout [ 176.022968][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 176.025584][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 176.615391][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.622654][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.629826][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.640562][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.647974][ T5145] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.655443][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.664908][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.672111][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.679875][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.687947][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.695627][ T5840] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 176.704306][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.590907][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.598328][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.605897][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.613827][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.621191][ T5840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 177.628906][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.732673][ T5840] Bluetooth: hci6: command tx timeout [ 178.732677][ T5145] Bluetooth: hci5: command tx timeout [ 179.692893][ T5145] Bluetooth: hci7: command tx timeout [ 180.812573][ T5145] Bluetooth: hci5: command tx timeout [ 180.815681][ T5840] Bluetooth: hci6: command tx timeout [ 181.772558][ T5840] Bluetooth: hci7: command tx timeout [ 182.892594][ T5840] Bluetooth: hci6: command tx timeout [ 182.902742][ T5840] Bluetooth: hci5: command tx timeout [ 183.852844][ T5840] Bluetooth: hci7: command tx timeout [ 184.972924][ T5840] Bluetooth: hci5: command tx timeout [ 184.973529][ T5145] Bluetooth: hci6: command tx timeout [ 185.932896][ T5145] Bluetooth: hci7: command tx timeout [ 194.414508][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.492852][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 219.937395][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 219.945566][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 219.953592][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 219.961206][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 219.968969][ T5840] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 219.977122][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 222.012856][ T5840] Bluetooth: hci8: command tx timeout [ 222.141469][ T5145] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 222.148738][ T5145] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 222.156948][ T5145] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 222.164789][ T5145] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 222.172165][ T5145] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 222.179984][ T5145] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 224.092496][ T5840] Bluetooth: hci8: command tx timeout [ 224.252532][ T5840] Bluetooth: hci9: command tx timeout [ 226.172696][ T5840] Bluetooth: hci8: command tx timeout [ 226.332788][ T5840] Bluetooth: hci9: command tx timeout [ 228.262496][ T5840] Bluetooth: hci8: command tx timeout [ 228.422520][ T5840] Bluetooth: hci9: command tx timeout [ 230.492838][ T5840] Bluetooth: hci9: command tx timeout [ 237.192919][ T5145] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 237.200468][ T5145] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 237.210007][ T5145] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 237.218096][ T5145] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 237.225922][ T5145] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 237.233204][ T5145] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 237.267705][ T5145] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 237.275145][ T5145] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 237.283296][ T5145] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 237.292934][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 237.300483][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 237.308324][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 237.656310][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 237.664070][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 237.671347][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 237.679214][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 237.687154][ T5840] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 237.694599][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 239.292520][ T54] Bluetooth: hci10: command tx timeout [ 239.372536][ T54] Bluetooth: hci11: command tx timeout [ 239.772506][ T54] Bluetooth: hci12: command tx timeout [ 241.372476][ T54] Bluetooth: hci10: command tx timeout [ 241.452485][ T54] Bluetooth: hci11: command tx timeout [ 241.852490][ T54] Bluetooth: hci12: command tx timeout [ 243.452511][ T54] Bluetooth: hci10: command tx timeout [ 243.532499][ T54] Bluetooth: hci11: command tx timeout [ 243.932499][ T54] Bluetooth: hci12: command tx timeout [ 245.532519][ T54] Bluetooth: hci10: command tx timeout [ 245.612672][ T54] Bluetooth: hci11: command tx timeout [ 246.012605][ T54] Bluetooth: hci12: command tx timeout [ 255.863892][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.599744][ T5145] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 281.609717][ T5145] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 281.617093][ T5145] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 281.624833][ T5145] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 281.632986][ T5145] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 281.640334][ T5145] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 283.532588][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 283.536850][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 283.692910][ T54] Bluetooth: hci13: command tx timeout [ 284.006532][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 284.014258][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 284.021570][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 284.029447][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 284.037433][ T5840] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 284.044842][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 285.772850][ T5840] Bluetooth: hci13: command tx timeout [ 286.093547][ T5840] Bluetooth: hci14: command tx timeout [ 287.852923][ T5840] Bluetooth: hci13: command tx timeout [ 288.172760][ T5840] Bluetooth: hci14: command tx timeout [ 289.932556][ T5840] Bluetooth: hci13: command tx timeout [ 290.252545][ T5840] Bluetooth: hci14: command tx timeout [ 292.342619][ T5840] Bluetooth: hci14: command tx timeout [ 298.171860][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 298.179848][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 298.187203][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 298.195164][ T5832] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 298.195333][ T5838] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 298.202551][ T5832] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 298.210100][ T5838] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 298.219563][ T5832] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 298.224329][ T5838] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 298.231442][ T5832] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 298.248003][ T5832] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 298.255385][ T5832] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 298.285938][ T5835] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 298.293372][ T5835] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 298.300743][ T5835] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 298.308852][ T5835] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 298.316724][ T5835] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 298.324140][ T5835] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 298.893014][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 298.894828][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 300.252510][ T54] Bluetooth: hci15: command tx timeout [ 300.332855][ T54] Bluetooth: hci16: command tx timeout [ 300.412482][ T54] Bluetooth: hci17: command tx timeout [ 302.342683][ T5145] Bluetooth: hci15: command tx timeout [ 302.412516][ T5145] Bluetooth: hci16: command tx timeout [ 302.492513][ T5145] Bluetooth: hci17: command tx timeout [ 304.012578][ T5145] Bluetooth: hci7: command 0x0406 tx timeout [ 304.413102][ T54] Bluetooth: hci15: command tx timeout [ 304.492757][ T54] Bluetooth: hci16: command tx timeout [ 304.572640][ T54] Bluetooth: hci17: command tx timeout [ 306.492563][ T54] Bluetooth: hci15: command tx timeout [ 306.572500][ T54] Bluetooth: hci16: command tx timeout [ 306.652709][ T54] Bluetooth: hci17: command tx timeout [ 315.373124][ T30] INFO: task kworker/u8:5:2890 blocked for more than 143 seconds. [ 315.380964][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 315.388641][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.397510][ T30] task:kworker/u8:5 state:D stack:23216 pid:2890 tgid:2890 ppid:2 flags:0x00004000 [ 315.407726][ T30] Workqueue: netns cleanup_net [ 315.412540][ T30] Call Trace: [ 315.415817][ T30] [ 315.418732][ T30] __schedule+0x1850/0x4c30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 315.423459][ T30] ? schedule+0x90/0x320 [ 315.428149][ T30] ? lock_release+0xbf/0xa30 [ 315.433095][ T30] ? __pfx___schedule+0x10/0x10 [ 315.438023][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.443182][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.453348][ T30] ? kthread_data+0x52/0xd0 [ 315.471126][ T30] ? schedule+0x90/0x320 [ 315.476268][ T30] ? wq_worker_sleeping+0x66/0x240 [ 315.481652][ T30] ? schedule+0x90/0x320 [ 315.488435][ T30] schedule+0x14b/0x320 [ 315.493642][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.499116][ T30] __mutex_lock+0x7e7/0xee0 [ 315.503732][ T30] ? __mutex_lock+0x5ef/0xee0 [ 315.508416][ T30] ? unregister_netdevice_many_notify+0x1c2c/0x2030 [ 315.515294][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.520331][ T30] ? __pfx___might_resched+0x10/0x10 [ 315.525635][ T30] ? __pfx_device_del+0x10/0x10 [ 315.530492][ T30] unregister_netdevice_many_notify+0x1c2c/0x2030 [ 315.537048][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 315.544087][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.548858][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.553916][ T30] unregister_netdevice_queue+0x303/0x370 [ 315.559646][ T30] ? __pfx_up_write+0x10/0x10 [ 315.564355][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 315.570643][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 315.576667][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 315.582315][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 315.588175][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 315.594554][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.599329][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 315.604958][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 315.610536][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 315.616636][ T30] hwsim_exit_net+0x5c1/0x670 [ 315.621322][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 315.626582][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 315.632671][ T30] cleanup_net+0x812/0xd60 [ 315.637096][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 315.642017][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.646805][ T30] ? process_scheduled_works+0x976/0x1840 [ 315.652563][ T30] process_scheduled_works+0xa66/0x1840 [ 315.658125][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.664413][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 315.669974][ T30] ? assign_work+0x364/0x3d0 [ 315.674578][ T30] worker_thread+0x870/0xd30 [ 315.679173][ T30] ? __kthread_parkme+0x169/0x1d0 [ 315.684255][ T30] ? __pfx_worker_thread+0x10/0x10 [ 315.689381][ T30] kthread+0x2f0/0x390 [ 315.693702][ T30] ? __pfx_worker_thread+0x10/0x10 [ 315.698823][ T30] ? __pfx_kthread+0x10/0x10 [ 315.703453][ T30] ret_from_fork+0x4b/0x80 [ 315.707887][ T30] ? __pfx_kthread+0x10/0x10 [ 315.712498][ T30] ret_from_fork_asm+0x1a/0x30 [ 315.717267][ T30] [ 315.720288][ T30] INFO: task dhcpcd:5500 blocked for more than 143 seconds. [ 315.727841][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 315.735489][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.744179][ T30] task:dhcpcd state:D stack:21200 pid:5500 tgid:5500 ppid:5499 flags:0x00000002 [ 315.754665][ T30] Call Trace: [ 315.757950][ T30] [ 315.760866][ T30] __schedule+0x1850/0x4c30 [ 315.765391][ T30] ? stack_depot_save_flags+0x37/0x940 [ 315.770880][ T30] ? schedule+0x90/0x320 [ 315.775222][ T30] ? lock_release+0xbf/0xa30 [ 315.779818][ T30] ? __pfx___schedule+0x10/0x10 [ 315.784877][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.789891][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.794683][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.800582][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.806943][ T30] ? schedule+0x90/0x320 [ 315.811199][ T30] schedule+0x14b/0x320 [ 315.815611][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.821086][ T30] __mutex_lock+0x7e7/0xee0 [ 315.825632][ T30] ? __mutex_lock+0x5ef/0xee0 [ 315.830316][ T30] ? rtnl_dumpit+0x99/0x200 [ 315.834848][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.839880][ T30] ? __build_skb_around+0x245/0x3d0 [ 315.845360][ T30] ? __alloc_skb+0x28f/0x440 [ 315.849952][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 315.854939][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 315.860346][ T30] rtnl_dumpit+0x99/0x200 [ 315.864696][ T30] netlink_dump+0x64d/0xe10 [ 315.869222][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 315.874512][ T30] ? __netlink_lookup+0x780/0x890 [ 315.879549][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 315.884593][ T30] ? stack_trace_save+0x118/0x1d0 [ 315.889619][ T30] __netlink_dump_start+0x5a2/0x790 [ 315.894844][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 315.900232][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 315.905380][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.910840][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 315.915794][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 315.921207][ T30] ? lock_acquire+0xe3/0x550 [ 315.925829][ T30] netlink_rcv_skb+0x1e3/0x430 [ 315.930622][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.936347][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.941661][ T30] ? net_generic+0x1f/0x240 [ 315.946205][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.951416][ T30] netlink_unicast+0x7f6/0x990 [ 315.956200][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.961494][ T30] ? __virt_addr_valid+0x45f/0x530 [ 315.966809][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 315.971821][ T30] ? __check_object_size+0x47a/0x730 [ 315.977149][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.981920][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.987222][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.991993][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.997168][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.002490][ T30] __sock_sendmsg+0x221/0x270 [ 316.007167][ T30] __sys_sendto+0x363/0x4c0 [ 316.011654][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 316.017232][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.023638][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.029978][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.035291][ T30] __x64_sys_sendto+0xde/0x100 [ 316.040118][ T30] do_syscall_64+0xf3/0x230 [ 316.044674][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.049362][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.055780][ T30] RIP: 0033:0x7fe0fe896ad7 [ 316.060203][ T30] RSP: 002b:00007fff51454ae8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 316.068958][ T30] RAX: ffffffffffffffda RBX: 00007fff51455c10 RCX: 00007fe0fe896ad7 [ 316.076965][ T30] RDX: 0000000000000014 RSI: 00007fff51455b30 RDI: 000000000000000c [ 316.084971][ T30] RBP: 00007fff51455ba0 R08: 00007fff51455b14 R09: 000000000000000c [ 316.093778][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 316.101760][ T30] R13: 00007fff51455b14 R14: 00007fff51455b30 R15: 0000000000000105 [ 316.110035][ T30] [ 316.113134][ T30] INFO: task kworker/u8:12:7205 blocked for more than 144 seconds. [ 316.121020][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 316.128866][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.137617][ T30] task:kworker/u8:12 state:D stack:23920 pid:7205 tgid:7205 ppid:2 flags:0x00004000 [ 316.147831][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 316.154920][ T30] Call Trace: [ 316.158232][ T30] [ 316.161150][ T30] __schedule+0x1850/0x4c30 [ 316.165734][ T30] ? schedule+0x90/0x320 [ 316.169986][ T30] ? lock_release+0xbf/0xa30 [ 316.174657][ T30] ? __pfx___schedule+0x10/0x10 [ 316.179522][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.184901][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.189678][ T30] ? kthread_data+0x52/0xd0 [ 316.194192][ T30] ? schedule+0x90/0x320 [ 316.198444][ T30] ? wq_worker_sleeping+0x66/0x240 [ 316.203620][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 316.208646][ T30] ? schedule+0x90/0x320 [ 316.213134][ T30] schedule+0x14b/0x320 [ 316.217294][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.222787][ T30] __mutex_lock+0x7e7/0xee0 [ 316.227295][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.231956][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 316.238414][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.243743][ T30] ? lock_release+0xbf/0xa30 [ 316.248348][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 316.254686][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 316.260348][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.265387][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 316.271374][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 316.278454][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.283253][ T30] ? process_scheduled_works+0x976/0x1840 [ 316.288973][ T30] process_scheduled_works+0xa66/0x1840 [ 316.294556][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.300542][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 316.306356][ T30] ? assign_work+0x364/0x3d0 [ 316.310951][ T30] worker_thread+0x870/0xd30 [ 316.315600][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.321497][ T30] ? __kthread_parkme+0x169/0x1d0 [ 316.326539][ T30] ? __pfx_worker_thread+0x10/0x10 [ 316.331650][ T30] kthread+0x2f0/0x390 [ 316.335964][ T30] ? __pfx_worker_thread+0x10/0x10 [ 316.341097][ T30] ? __pfx_kthread+0x10/0x10 [ 316.345705][ T30] ret_from_fork+0x4b/0x80 [ 316.350133][ T30] ? __pfx_kthread+0x10/0x10 [ 316.354740][ T30] ret_from_fork_asm+0x1a/0x30 [ 316.359526][ T30] [ 316.362790][ T30] INFO: task kworker/u8:13:7206 blocked for more than 144 seconds. [ 316.370677][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 316.378631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.387325][ T30] task:kworker/u8:13 state:D stack:20528 pid:7206 tgid:7206 ppid:2 flags:0x00004000 [ 316.397648][ T30] Workqueue: events_unbound linkwatch_event [ 316.403567][ T30] Call Trace: [ 316.406844][ T30] [ 316.409759][ T30] __schedule+0x1850/0x4c30 [ 316.414286][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 316.419241][ T30] ? schedule+0x90/0x320 [ 316.423770][ T30] ? lock_release+0xbf/0xa30 [ 316.428379][ T30] ? __pfx___schedule+0x10/0x10 [ 316.433255][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.438282][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.443069][ T30] ? kthread_data+0x52/0xd0 [ 316.447573][ T30] ? schedule+0x90/0x320 [ 316.451815][ T30] ? wq_worker_sleeping+0x66/0x240 [ 316.457139][ T30] ? schedule+0x90/0x320 [ 316.461426][ T30] schedule+0x14b/0x320 [ 316.465613][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.471074][ T30] __mutex_lock+0x7e7/0xee0 [ 316.475625][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.480306][ T30] ? linkwatch_event+0xe/0x60 [ 316.485250][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.490302][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 316.496302][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.501070][ T30] ? process_scheduled_works+0x976/0x1840 [ 316.506802][ T30] linkwatch_event+0xe/0x60 [ 316.511310][ T30] process_scheduled_works+0xa66/0x1840 [ 316.517065][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.523068][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 316.528621][ T30] ? assign_work+0x364/0x3d0 [ 316.533238][ T30] worker_thread+0x870/0xd30 [ 316.537857][ T30] ? __kthread_parkme+0x169/0x1d0 [ 316.543160][ T30] ? __pfx_worker_thread+0x10/0x10 [ 316.548295][ T30] kthread+0x2f0/0x390 [ 316.552369][ T30] ? __pfx_worker_thread+0x10/0x10 [ 316.557508][ T30] ? __pfx_kthread+0x10/0x10 [ 316.562082][ T30] ret_from_fork+0x4b/0x80 [ 316.566564][ T30] ? __pfx_kthread+0x10/0x10 [ 316.571165][ T30] ret_from_fork_asm+0x1a/0x30 [ 316.576151][ T30] [ 316.579182][ T30] INFO: task kworker/u8:14:7207 blocked for more than 144 seconds. [ 316.587094][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 316.594731][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.603645][ T30] task:kworker/u8:14 state:D stack:22448 pid:7207 tgid:7207 ppid:2 flags:0x00004000 [ 316.613841][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 316.619808][ T30] Call Trace: [ 316.623105][ T30] [ 316.626037][ T30] __schedule+0x1850/0x4c30 [ 316.630531][ T30] ? schedule+0x90/0x320 [ 316.634990][ T30] ? lock_release+0xbf/0xa30 [ 316.639585][ T30] ? __pfx___schedule+0x10/0x10 [ 316.644460][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.649487][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.654323][ T30] ? kthread_data+0x52/0xd0 [ 316.658858][ T30] ? schedule+0x90/0x320 [ 316.663382][ T30] ? wq_worker_sleeping+0x66/0x240 [ 316.668501][ T30] ? schedule+0x90/0x320 [ 316.672768][ T30] schedule+0x14b/0x320 [ 316.676932][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.682372][ T30] __mutex_lock+0x7e7/0xee0 [ 316.686938][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.691601][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 316.696937][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.701970][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 316.707212][ T30] addrconf_dad_work+0xd0/0x16f0 [ 316.712165][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 316.717813][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.723107][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 316.728573][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.734965][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.739738][ T30] ? process_scheduled_works+0x976/0x1840 [ 316.745471][ T30] process_scheduled_works+0xa66/0x1840 [ 316.751022][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.757207][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 316.762776][ T30] ? assign_work+0x364/0x3d0 [ 316.767392][ T30] worker_thread+0x870/0xd30 [ 316.771992][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.777915][ T30] ? __kthread_parkme+0x169/0x1d0 [ 316.783218][ T30] ? __pfx_worker_thread+0x10/0x10 [ 316.788342][ T30] kthread+0x2f0/0x390 [ 316.792478][ T30] ? __pfx_worker_thread+0x10/0x10 [ 316.797597][ T30] ? __pfx_kthread+0x10/0x10 [ 316.802205][ T30] ret_from_fork+0x4b/0x80 [ 316.806635][ T30] ? __pfx_kthread+0x10/0x10 [ 316.811229][ T30] ret_from_fork_asm+0x1a/0x30 [ 316.816238][ T30] [ 316.819258][ T30] INFO: task syz-executor:10362 blocked for more than 144 seconds. [ 316.827185][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 316.834836][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.843722][ T30] task:syz-executor state:D stack:21392 pid:10362 tgid:10362 ppid:1 flags:0x00004004 [ 316.853917][ T30] Call Trace: [ 316.857233][ T30] [ 316.860153][ T30] __schedule+0x1850/0x4c30 [ 316.864680][ T30] ? schedule+0x90/0x320 [ 316.868954][ T30] ? lock_release+0xbf/0xa30 [ 316.873803][ T30] ? __pfx___schedule+0x10/0x10 [ 316.878662][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.883701][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.888498][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.894428][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.900771][ T30] ? schedule+0x90/0x320 [ 316.905287][ T30] schedule+0x14b/0x320 [ 316.909462][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.914938][ T30] __mutex_lock+0x7e7/0xee0 [ 316.919430][ T30] ? __mutex_lock+0x5ef/0xee0 [ 316.924136][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 316.930340][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.935579][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.941553][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 316.947561][ T30] wiphy_register+0x1be5/0x27b0 [ 316.952448][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 316.957674][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 316.963029][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 316.969106][ T30] ieee80211_register_hw+0x30fb/0x3e10 [ 316.974668][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.981011][ T30] ? ieee80211_register_hw+0x14c1/0x3e10 [ 316.986694][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 316.992687][ T30] ? __asan_memset+0x23/0x50 [ 316.997264][ T30] ? __hrtimer_init+0x170/0x250 [ 317.002107][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 317.007859][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 317.013970][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 317.019125][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 317.025093][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 317.030708][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 317.037083][ T30] genl_rcv_msg+0xb14/0xec0 [ 317.041574][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.046610][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 317.051816][ T30] ? kasan_save_track+0x51/0x80 [ 317.056875][ T30] ? __sys_sendto+0x363/0x4c0 [ 317.061547][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.066605][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 317.072159][ T30] ? __pfx___might_resched+0x10/0x10 [ 317.077492][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.082271][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.087515][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.092822][ T30] ? lock_release+0xbf/0xa30 [ 317.097419][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 317.102907][ T30] genl_rcv+0x28/0x40 [ 317.106933][ T30] netlink_unicast+0x7f6/0x990 [ 317.111681][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.117193][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.122311][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.127349][ T30] ? __check_object_size+0x47a/0x730 [ 317.132819][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.137600][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.144057][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.149034][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.154374][ T30] __sock_sendmsg+0x221/0x270 [ 317.159055][ T30] __sys_sendto+0x363/0x4c0 [ 317.163889][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 317.168930][ T30] ? xfd_validate_state+0x6e/0x150 [ 317.174354][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.180690][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.185513][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.191850][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.196633][ T30] __x64_sys_sendto+0xde/0x100 [ 317.201420][ T30] do_syscall_64+0xf3/0x230 [ 317.206139][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.210805][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.216759][ T30] RIP: 0033:0x7f7cf8387bbc [ 317.221176][ T30] RSP: 002b:00007fff539c4830 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.229759][ T30] RAX: ffffffffffffffda RBX: 00007f7cf90a4620 RCX: 00007f7cf8387bbc [ 317.237963][ T30] RDX: 0000000000000024 RSI: 00007f7cf90a4670 RDI: 0000000000000003 [ 317.245972][ T30] RBP: 0000000000000000 R08: 00007fff539c4884 R09: 000000000000000c [ 317.253965][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 317.261948][ T30] R13: 0000000000000000 R14: 00007f7cf90a4670 R15: 0000000000000000 [ 317.270184][ T30] [ 317.273258][ T30] INFO: task syz-executor:10439 blocked for more than 145 seconds. [ 317.281151][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 317.288785][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.298793][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.306410][ T30] task:syz-executor state:D stack:21488 pid:10439 tgid:10439 ppid:1 flags:0x00000004 [ 317.316595][ T30] Call Trace: [ 317.319870][ T30] [ 317.323043][ T30] __schedule+0x1850/0x4c30 [ 317.327597][ T30] ? schedule+0x90/0x320 [ 317.331844][ T30] ? lock_release+0xbf/0xa30 [ 317.336451][ T30] ? __pfx___schedule+0x10/0x10 [ 317.341306][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.346347][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.351119][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.357222][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.363633][ T30] ? schedule+0x90/0x320 [ 317.367881][ T30] schedule+0x14b/0x320 [ 317.372023][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.377531][ T30] __mutex_lock+0x7e7/0xee0 [ 317.382042][ T30] ? __mutex_lock+0x5ef/0xee0 [ 317.386951][ T30] ? rtnl_newlink+0xce2/0x2210 [ 317.391736][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.396804][ T30] ? ns_capable+0x8a/0xf0 [ 317.401140][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 317.406958][ T30] rtnl_newlink+0xce2/0x2210 [ 317.411559][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 317.416800][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.421557][ T30] ? lock_acquire+0xe3/0x550 [ 317.426187][ T30] ? alloc_slab_page+0x6a/0x110 [ 317.431048][ T30] ? allocate_slab+0x5a/0x2b0 [ 317.435736][ T30] ? ___slab_alloc+0xc27/0x14a0 [ 317.440593][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.445564][ T30] ? lock_release+0xbf/0xa30 [ 317.450143][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.455182][ T30] ? lock_release+0xbf/0xa30 [ 317.459776][ T30] ? deref_stack_reg+0x17c/0x210 [ 317.464724][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.469750][ T30] ? stack_trace_save+0x118/0x1d0 [ 317.475044][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 317.480337][ T30] ? deref_stack_reg+0x17c/0x210 [ 317.485290][ T30] ? preempt_count_add+0x93/0x190 [ 317.490324][ T30] ? 0xffffffffa0000958 [ 317.494517][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 317.499803][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 317.505240][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.511414][ T30] ? kernel_text_address+0xa7/0xe0 [ 317.516566][ T30] ? __kernel_text_address+0xd/0x40 [ 317.521772][ T30] ? unwind_get_return_address+0x4d/0x90 [ 317.527429][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.532199][ T30] ? lock_release+0xbf/0xa30 [ 317.537030][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.542044][ T30] ? apparmor_capable+0x13b/0x1b0 [ 317.547104][ T30] ? bpf_lsm_capable+0x9/0x10 [ 317.551795][ T30] ? security_capable+0x7e/0x2d0 [ 317.556763][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 317.561792][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 317.566972][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 317.572081][ T30] ? lock_release+0xbf/0xa30 [ 317.576724][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.582189][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 317.587277][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.592050][ T30] ? lock_acquire+0xe3/0x550 [ 317.596848][ T30] netlink_rcv_skb+0x1e3/0x430 [ 317.601601][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.607086][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.612378][ T30] ? net_generic+0x1f/0x240 [ 317.616919][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.622160][ T30] netlink_unicast+0x7f6/0x990 [ 317.627110][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 317.632433][ T30] ? __virt_addr_valid+0x45f/0x530 [ 317.637557][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 317.642600][ T30] ? __check_object_size+0x47a/0x730 [ 317.647939][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 317.652911][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.658187][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 317.663199][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.668493][ T30] __sock_sendmsg+0x221/0x270 [ 317.673192][ T30] __sys_sendto+0x363/0x4c0 [ 317.677706][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 317.682990][ T30] ? __phys_addr+0xba/0x170 [ 317.687499][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.693887][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.700248][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.705031][ T30] __x64_sys_sendto+0xde/0x100 [ 317.709831][ T30] do_syscall_64+0xf3/0x230 [ 317.714543][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.719207][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.725137][ T30] RIP: 0033:0x7f6487b87bbc [ 317.729572][ T30] RSP: 002b:00007ffd9152d260 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.738014][ T30] RAX: ffffffffffffffda RBX: 00007f64888a4620 RCX: 00007f6487b87bbc [ 317.746238][ T30] RDX: 0000000000000028 RSI: 00007f64888a4670 RDI: 0000000000000003 [ 317.754279][ T30] RBP: 0000000000000000 R08: 00007ffd9152d2b4 R09: 000000000000000c [ 317.762256][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 317.770264][ T30] R13: 0000000000000000 R14: 00007f64888a4670 R15: 0000000000000000 [ 317.778379][ T30] [ 317.781397][ T30] INFO: task syz.3.920:10550 blocked for more than 145 seconds. [ 317.789071][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 317.796718][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.805592][ T30] task:syz.3.920 state:D stack:28176 pid:10550 tgid:10548 ppid:5841 flags:0x00000004 [ 317.815778][ T30] Call Trace: [ 317.819054][ T30] [ 317.821967][ T30] __schedule+0x1850/0x4c30 [ 317.826493][ T30] ? schedule+0x90/0x320 [ 317.830744][ T30] ? lock_release+0xbf/0xa30 [ 317.835536][ T30] ? __pfx___schedule+0x10/0x10 [ 317.840376][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.845424][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.850275][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 317.856214][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.862796][ T30] ? schedule+0x90/0x320 [ 317.867077][ T30] schedule+0x14b/0x320 [ 317.871242][ T30] schedule_preempt_disabled+0x13/0x30 [ 317.876753][ T30] __mutex_lock+0x7e7/0xee0 [ 317.881283][ T30] ? __mutex_lock+0x5ef/0xee0 [ 317.886009][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 317.891231][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 317.896522][ T30] ? __pfx___futex_wait+0x10/0x10 [ 317.901541][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.906861][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 317.911906][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 317.917296][ T30] ? aa_sk_perm+0x96d/0xab0 [ 317.921812][ T30] ? rcu_is_watching+0x15/0xb0 [ 317.926835][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 317.931686][ T30] ? lock_release+0xbf/0xa30 [ 317.936395][ T30] ip_setsockopt+0x63/0x100 [ 317.940942][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 317.946855][ T30] do_sock_setsockopt+0x3af/0x720 [ 317.951889][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 317.957656][ T30] ? __fget_files+0x395/0x410 [ 317.962367][ T30] ? __fget_files+0x2a/0x410 [ 317.967011][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 317.972228][ T30] do_syscall_64+0xf3/0x230 [ 317.976762][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.981448][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.987562][ T30] RIP: 0033:0x7fb96ed85d29 [ 317.991975][ T30] RSP: 002b:00007fb96ebf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 318.000411][ T30] RAX: ffffffffffffffda RBX: 00007fb96ef75fa0 RCX: 00007fb96ed85d29 [ 318.008421][ T30] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000004 [ 318.016772][ T30] RBP: 00007fb96ee01b08 R08: 0000000000000108 R09: 0000000000000000 [ 318.024785][ T30] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000000 [ 318.032848][ T30] R13: 0000000000000000 R14: 00007fb96ef75fa0 R15: 00007ffc89c36648 [ 318.040835][ T30] [ 318.044125][ T30] INFO: task syz.3.920:10554 blocked for more than 146 seconds. [ 318.051755][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 318.059554][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.068243][ T30] task:syz.3.920 state:D stack:26448 pid:10554 tgid:10548 ppid:5841 flags:0x00000004 [ 318.078657][ T30] Call Trace: [ 318.081940][ T30] [ 318.084886][ T30] __schedule+0x1850/0x4c30 [ 318.089419][ T30] ? schedule+0x90/0x320 [ 318.093718][ T30] ? lock_release+0xbf/0xa30 [ 318.098318][ T30] ? __pfx___schedule+0x10/0x10 [ 318.103437][ T30] ? __pfx_lock_release+0x10/0x10 [ 318.108531][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.113327][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.119237][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.125607][ T30] ? schedule+0x90/0x320 [ 318.129882][ T30] schedule+0x14b/0x320 [ 318.134305][ T30] schedule_preempt_disabled+0x13/0x30 [ 318.139775][ T30] __mutex_lock+0x7e7/0xee0 [ 318.144307][ T30] ? __mutex_lock+0x5ef/0xee0 [ 318.148994][ T30] ? rtnl_newlink+0xce2/0x2210 [ 318.153822][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 318.158861][ T30] ? ns_capable+0x8a/0xf0 [ 318.163444][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 318.169243][ T30] rtnl_newlink+0xce2/0x2210 [ 318.174924][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.179966][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 318.186105][ T30] ? netlink_deliver_tap+0x19d/0x1b0 [ 318.191449][ T30] ? netlink_unicast+0x7c4/0x990 [ 318.196519][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 318.201513][ T30] ? __sock_sendmsg+0x221/0x270 [ 318.206800][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 318.211736][ T30] ? __sys_sendmsg+0x269/0x350 [ 318.216575][ T30] ? do_syscall_64+0xf3/0x230 [ 318.221269][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.227793][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.234172][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.238979][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.244312][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.250649][ T30] ? lock_release+0xbf/0xa30 [ 318.255254][ T30] ? nlmon_xmit+0xaf/0x100 [ 318.259716][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.264945][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.269723][ T30] ? lock_release+0xbf/0xa30 [ 318.274631][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 318.280296][ T30] ? __pfx_lock_release+0x10/0x10 [ 318.285750][ T30] ? apparmor_capable+0x13b/0x1b0 [ 318.290767][ T30] ? bpf_lsm_capable+0x9/0x10 [ 318.295665][ T30] ? security_capable+0x7e/0x2d0 [ 318.300708][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.306214][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 318.311172][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 318.316355][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.321823][ T30] ? ref_tracker_free+0x643/0x7e0 [ 318.327200][ T30] netlink_rcv_skb+0x1e3/0x430 [ 318.331958][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.337465][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.343290][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.348497][ T30] netlink_unicast+0x7f6/0x990 [ 318.353298][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 318.358583][ T30] ? __virt_addr_valid+0x45f/0x530 [ 318.364048][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 318.369075][ T30] ? __check_object_size+0x47a/0x730 [ 318.374400][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 318.379172][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.384823][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 318.389753][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.395182][ T30] __sock_sendmsg+0x221/0x270 [ 318.399870][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 318.405219][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.410523][ T30] ? __fget_files+0x2a/0x410 [ 318.415226][ T30] ? __fget_files+0x2a/0x410 [ 318.419829][ T30] __sys_sendmsg+0x269/0x350 [ 318.424779][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.429893][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.436236][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.441057][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.446179][ T30] do_syscall_64+0xf3/0x230 [ 318.450676][ T30] ? clear_bhb_loop+0x35/0x90 [ 318.455406][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.461306][ T30] RIP: 0033:0x7fb96ed85d29 [ 318.466088][ T30] RSP: 002b:00007fb96ebd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.474550][ T30] RAX: ffffffffffffffda RBX: 00007fb96ef76080 RCX: 00007fb96ed85d29 [ 318.482823][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 318.490782][ T30] RBP: 00007fb96ee01b08 R08: 0000000000000000 R09: 0000000000000000 [ 318.498838][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.507105][ T30] R13: 0000000000000001 R14: 00007fb96ef76080 R15: 00007ffc89c36648 [ 318.515212][ T30] [ 318.518247][ T30] INFO: task syz.1.921:10552 blocked for more than 146 seconds. [ 318.526377][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 318.534070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.543001][ T30] task:syz.1.921 state:D stack:28176 pid:10552 tgid:10551 ppid:5828 flags:0x00000004 [ 318.553215][ T30] Call Trace: [ 318.556540][ T30] [ 318.559457][ T30] __schedule+0x1850/0x4c30 [ 318.564393][ T30] ? schedule+0x90/0x320 [ 318.568645][ T30] ? lock_release+0xbf/0xa30 [ 318.573345][ T30] ? __pfx___schedule+0x10/0x10 [ 318.578203][ T30] ? __pfx_lock_release+0x10/0x10 [ 318.583748][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.588525][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.594447][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.600828][ T30] ? schedule+0x90/0x320 [ 318.605493][ T30] schedule+0x14b/0x320 [ 318.609662][ T30] schedule_preempt_disabled+0x13/0x30 [ 318.615571][ T30] __mutex_lock+0x7e7/0xee0 [ 318.620129][ T30] ? __mutex_lock+0x5ef/0xee0 [ 318.624884][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 318.630332][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 318.635467][ T30] ? __pfx___futex_wait+0x10/0x10 [ 318.640619][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 318.646229][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 318.651306][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 318.657216][ T30] ? aa_sk_perm+0x96d/0xab0 [ 318.661752][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.666556][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 318.671412][ T30] ? lock_release+0xbf/0xa30 [ 318.676492][ T30] ip_setsockopt+0x63/0x100 [ 318.681008][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 318.686955][ T30] do_sock_setsockopt+0x3af/0x720 [ 318.691984][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 318.697866][ T30] ? __fget_files+0x395/0x410 [ 318.702625][ T30] ? __fget_files+0x2a/0x410 [ 318.707260][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 318.712960][ T30] do_syscall_64+0xf3/0x230 [ 318.717473][ T30] ? clear_bhb_loop+0x35/0x90 [ 318.722133][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.728050][ T30] RIP: 0033:0x7fd5e7d85d29 [ 318.733168][ T30] RSP: 002b:00007fd5e8ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 318.741596][ T30] RAX: ffffffffffffffda RBX: 00007fd5e7f75fa0 RCX: 00007fd5e7d85d29 [ 318.749610][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004 [ 318.757943][ T30] RBP: 00007fd5e7e01b08 R08: 000000000000000c R09: 0000000000000000 [ 318.766317][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 318.774725][ T30] R13: 0000000000000000 R14: 00007fd5e7f75fa0 R15: 00007ffc1d49fa58 [ 318.782916][ T30] [ 318.785968][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 318.795495][ T30] INFO: task syz.1.921:10555 blocked for more than 146 seconds. [ 318.803154][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 318.810820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.820008][ T30] task:syz.1.921 state:D stack:27728 pid:10555 tgid:10551 ppid:5828 flags:0x00000004 [ 318.830224][ T30] Call Trace: [ 318.834073][ T30] [ 318.837045][ T30] __schedule+0x1850/0x4c30 [ 318.841536][ T30] ? schedule+0x90/0x320 [ 318.845899][ T30] ? lock_release+0xbf/0xa30 [ 318.850498][ T30] ? __pfx___schedule+0x10/0x10 [ 318.855761][ T30] ? __pfx_lock_release+0x10/0x10 [ 318.860777][ T30] ? rcu_is_watching+0x15/0xb0 [ 318.865558][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.871462][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.878296][ T30] ? schedule+0x90/0x320 [ 318.882583][ T30] schedule+0x14b/0x320 [ 318.886750][ T30] schedule_preempt_disabled+0x13/0x30 [ 318.892208][ T30] __mutex_lock+0x7e7/0xee0 [ 318.897334][ T30] ? __mutex_lock+0x5ef/0xee0 [ 318.902043][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 318.907249][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 318.912282][ T30] ? bpf_lsm_capable+0x9/0x10 [ 318.917331][ T30] ? security_capable+0x7e/0x2d0 [ 318.922260][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 318.927227][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 318.932347][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.938174][ T30] ? ref_tracker_free+0x643/0x7e0 [ 318.943231][ T30] netlink_rcv_skb+0x1e3/0x430 [ 318.948018][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.954073][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.959398][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.964660][ T30] netlink_unicast+0x7f6/0x990 [ 318.969427][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 318.975317][ T30] ? __virt_addr_valid+0x45f/0x530 [ 318.980443][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 318.985509][ T30] ? __check_object_size+0x47a/0x730 [ 318.990799][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 318.996097][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.001401][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 319.006373][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.011869][ T30] __sock_sendmsg+0x221/0x270 [ 319.017018][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 319.021802][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.027136][ T30] ? __fget_files+0x2a/0x410 [ 319.031731][ T30] ? __fget_files+0x2a/0x410 [ 319.036700][ T30] __sys_sendmsg+0x269/0x350 [ 319.041282][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.046448][ T30] ? lock_release+0xbf/0xa30 [ 319.051046][ T30] ? __se_sys_futex+0x3f9/0x480 [ 319.056494][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.063126][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.067918][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.072829][ T30] do_syscall_64+0xf3/0x230 [ 319.077365][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.082023][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.087968][ T30] RIP: 0033:0x7fd5e7d85d29 [ 319.092691][ T30] RSP: 002b:00007fd5e8c80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.101114][ T30] RAX: ffffffffffffffda RBX: 00007fd5e7f76080 RCX: 00007fd5e7d85d29 [ 319.109101][ T30] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000005 [ 319.117157][ T30] RBP: 00007fd5e7e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 319.125431][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.133540][ T30] R13: 0000000000000000 R14: 00007fd5e7f76080 R15: 00007ffc1d49fa58 [ 319.141543][ T30] [ 319.144675][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 319.153971][ T30] INFO: task syz.1.921:10556 blocked for more than 147 seconds. [ 319.161624][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 319.169290][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.177969][ T30] task:syz.1.921 state:D stack:28176 pid:10556 tgid:10551 ppid:5828 flags:0x00000004 [ 319.188362][ T30] Call Trace: [ 319.191632][ T30] [ 319.194607][ T30] __schedule+0x1850/0x4c30 [ 319.199121][ T30] ? schedule+0x90/0x320 [ 319.203401][ T30] ? lock_release+0xbf/0xa30 [ 319.207998][ T30] ? __pfx___schedule+0x10/0x10 [ 319.215564][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.220610][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.225404][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.231301][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.237650][ T30] ? schedule+0x90/0x320 [ 319.241921][ T30] schedule+0x14b/0x320 [ 319.246306][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.251771][ T30] __mutex_lock+0x7e7/0xee0 [ 319.256305][ T30] ? __mutex_lock+0x5ef/0xee0 [ 319.261016][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 319.266259][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.271340][ T30] ? __pfx___futex_wait+0x10/0x10 [ 319.276610][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 319.281915][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 319.286987][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 319.292370][ T30] ? aa_sk_perm+0x96d/0xab0 [ 319.297052][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.301810][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.306903][ T30] ? lock_release+0xbf/0xa30 [ 319.311513][ T30] ip_setsockopt+0x63/0x100 [ 319.316037][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.321933][ T30] do_sock_setsockopt+0x3af/0x720 [ 319.327026][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 319.332830][ T30] ? __fget_files+0x395/0x410 [ 319.337513][ T30] ? __fget_files+0x2a/0x410 [ 319.342086][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 319.347313][ T30] do_syscall_64+0xf3/0x230 [ 319.351854][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.356557][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.362708][ T30] RIP: 0033:0x7fd5e7d85d29 [ 319.367124][ T30] RSP: 002b:00007fd5e8c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.375709][ T30] RAX: ffffffffffffffda RBX: 00007fd5e7f76160 RCX: 00007fd5e7d85d29 [ 319.383747][ T30] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000006 [ 319.391765][ T30] RBP: 00007fd5e7e01b08 R08: 0000000000000010 R09: 0000000000000000 [ 319.399997][ T30] R10: 0000000020004b00 R11: 0000000000000246 R12: 0000000000000000 [ 319.408001][ T30] R13: 0000000000000000 R14: 00007fd5e7f76160 R15: 00007ffc1d49fa58 [ 319.416073][ T30] [ 319.419108][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 319.428349][ T30] INFO: task syz.1.921:10557 blocked for more than 147 seconds. [ 319.436050][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 319.443707][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.452700][ T30] task:syz.1.921 state:D stack:27824 pid:10557 tgid:10551 ppid:5828 flags:0x00000004 [ 319.462912][ T30] Call Trace: [ 319.466182][ T30] [ 319.469103][ T30] __schedule+0x1850/0x4c30 [ 319.473637][ T30] ? schedule+0x90/0x320 [ 319.477883][ T30] ? lock_release+0xbf/0xa30 [ 319.482726][ T30] ? __pfx___schedule+0x10/0x10 [ 319.487603][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.492669][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.497438][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.503371][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.509703][ T30] ? schedule+0x90/0x320 [ 319.514208][ T30] schedule+0x14b/0x320 [ 319.518369][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.523845][ T30] __mutex_lock+0x7e7/0xee0 [ 319.528353][ T30] ? __mutex_lock+0x5ef/0xee0 [ 319.533063][ T30] ? genl_rcv_msg+0x121/0xec0 [ 319.537753][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.543059][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.547840][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.554218][ T30] ? lock_release+0xbf/0xa30 [ 319.558812][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.563597][ T30] ? radix_tree_lookup+0x238/0x290 [ 319.568712][ T30] genl_rcv_msg+0x121/0xec0 [ 319.573473][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 319.578594][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.583633][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 319.588845][ T30] ? kasan_save_track+0x51/0x80 [ 319.593732][ T30] ? __sys_sendto+0x363/0x4c0 [ 319.598427][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.603456][ T30] ? lock_acquire+0xe3/0x550 [ 319.608059][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 319.613478][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 319.618504][ T30] ? __pfx___might_resched+0x10/0x10 [ 319.623834][ T30] netlink_rcv_skb+0x1e3/0x430 [ 319.628605][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.633922][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.639215][ T30] ? lock_release+0xbf/0xa30 [ 319.643861][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 319.649327][ T30] genl_rcv+0x28/0x40 [ 319.653342][ T30] netlink_unicast+0x7f6/0x990 [ 319.658116][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 319.663659][ T30] ? __virt_addr_valid+0x45f/0x530 [ 319.668778][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 319.673855][ T30] ? __check_object_size+0x47a/0x730 [ 319.679154][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 319.683982][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.689275][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 319.694457][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.699759][ T30] __sock_sendmsg+0x221/0x270 [ 319.704484][ T30] __sys_sendto+0x363/0x4c0 [ 319.709003][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 319.714059][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 319.719113][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.725656][ T30] ? __pfx___up_read+0x10/0x10 [ 319.730420][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.736760][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.741564][ T30] __x64_sys_sendto+0xde/0x100 [ 319.746351][ T30] do_syscall_64+0xf3/0x230 [ 319.750858][ T30] ? clear_bhb_loop+0x35/0x90 [ 319.755734][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.761642][ T30] RIP: 0033:0x7fd5e7d87bbc [ 319.766070][ T30] RSP: 002b:00007fd5e8c3cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 319.774571][ T30] RAX: ffffffffffffffda RBX: 00007fd5e8c3cfc0 RCX: 00007fd5e7d87bbc [ 319.782802][ T30] RDX: 0000000000000020 RSI: 00007fd5e8c3d010 RDI: 0000000000000009 [ 319.790814][ T30] RBP: 0000000000000000 R08: 00007fd5e8c3cf14 R09: 000000000000000c [ 319.798796][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 319.806810][ T30] R13: 00007fd5e8c3cf68 R14: 00007fd5e8c3d010 R15: 0000000000000000 [ 319.815040][ T30] [ 319.818068][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 319.827156][ T30] INFO: task syz.4.922:10560 blocked for more than 147 seconds. [ 319.834846][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 319.842709][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.851375][ T30] task:syz.4.922 state:D stack:25104 pid:10560 tgid:10559 ppid:5844 flags:0x00004004 [ 319.861628][ T30] Call Trace: [ 319.864976][ T30] [ 319.867897][ T30] __schedule+0x1850/0x4c30 [ 319.872669][ T30] ? schedule+0x90/0x320 [ 319.876924][ T30] ? lock_release+0xbf/0xa30 [ 319.881497][ T30] ? __pfx___schedule+0x10/0x10 [ 319.886358][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.891384][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.896186][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.902108][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.908646][ T30] ? schedule+0x90/0x320 [ 319.912914][ T30] schedule+0x14b/0x320 [ 319.917081][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.922568][ T30] __mutex_lock+0x7e7/0xee0 [ 319.927087][ T30] ? __mutex_lock+0x5ef/0xee0 [ 319.931776][ T30] ? register_nexthop_notifier+0x84/0x290 [ 319.937829][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.942913][ T30] ? net_generic+0x1f/0x240 [ 319.947423][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.952170][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.956957][ T30] ? __asan_memset+0x23/0x50 [ 319.961550][ T30] register_nexthop_notifier+0x84/0x290 [ 319.967334][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 319.973165][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 319.979414][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 319.985591][ T30] ? __asan_memset+0x23/0x50 [ 319.990179][ T30] ops_init+0x31e/0x590 [ 319.994541][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 319.999941][ T30] setup_net+0x287/0x9e0 [ 320.004208][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 320.009767][ T30] ? __pfx_setup_net+0x10/0x10 [ 320.014763][ T30] copy_net_ns+0x33f/0x570 [ 320.019187][ T30] create_new_namespaces+0x425/0x7b0 [ 320.024689][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 320.030398][ T30] ksys_unshare+0x57d/0xa70 [ 320.034934][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 320.039962][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.044766][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.051101][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.056077][ T30] __x64_sys_unshare+0x38/0x40 [ 320.060849][ T30] do_syscall_64+0xf3/0x230 [ 320.065384][ T30] ? clear_bhb_loop+0x35/0x90 [ 320.070069][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.076007][ T30] RIP: 0033:0x7f6a95785d29 [ 320.080424][ T30] RSP: 002b:00007f6a964d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.089082][ T30] RAX: ffffffffffffffda RBX: 00007f6a95975fa0 RCX: 00007f6a95785d29 [ 320.097138][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 320.105153][ T30] RBP: 00007f6a95801b08 R08: 0000000000000000 R09: 0000000000000000 [ 320.113343][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.121303][ T30] R13: 0000000000000000 R14: 00007f6a95975fa0 R15: 00007fffa18bfc98 [ 320.129300][ T30] [ 320.132317][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 320.141354][ T30] INFO: task syz.4.922:10561 blocked for more than 148 seconds. [ 320.149123][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 320.156809][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.165490][ T30] task:syz.4.922 state:D stack:24320 pid:10561 tgid:10559 ppid:5844 flags:0x00000004 [ 320.175878][ T30] Call Trace: [ 320.179162][ T30] [ 320.182075][ T30] __schedule+0x1850/0x4c30 [ 320.186606][ T30] ? schedule+0x90/0x320 [ 320.190855][ T30] ? lock_release+0xbf/0xa30 [ 320.195473][ T30] ? __pfx___schedule+0x10/0x10 [ 320.200334][ T30] ? __pfx_lock_release+0x10/0x10 [ 320.205641][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.210420][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 320.216371][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.222721][ T30] ? schedule+0x90/0x320 [ 320.226954][ T30] schedule+0x14b/0x320 [ 320.231108][ T30] schedule_preempt_disabled+0x13/0x30 [ 320.236781][ T30] __mutex_lock+0x7e7/0xee0 [ 320.241297][ T30] ? __mutex_lock+0x5ef/0xee0 [ 320.245994][ T30] ? register_nexthop_notifier+0x84/0x290 [ 320.251725][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 320.256932][ T30] ? net_generic+0x1f/0x240 [ 320.261451][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.266881][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.271670][ T30] ? __asan_memset+0x23/0x50 [ 320.276306][ T30] register_nexthop_notifier+0x84/0x290 [ 320.281853][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 320.287991][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 320.294567][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 320.300731][ T30] ? __asan_memset+0x23/0x50 [ 320.305387][ T30] ops_init+0x31e/0x590 [ 320.309546][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 320.314943][ T30] setup_net+0x287/0x9e0 [ 320.319195][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 320.325039][ T30] ? __pfx_setup_net+0x10/0x10 [ 320.329811][ T30] copy_net_ns+0x33f/0x570 [ 320.334289][ T30] create_new_namespaces+0x425/0x7b0 [ 320.339661][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 320.345419][ T30] ksys_unshare+0x57d/0xa70 [ 320.349948][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 320.355169][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.359923][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.366282][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.371052][ T30] __x64_sys_unshare+0x38/0x40 [ 320.375879][ T30] do_syscall_64+0xf3/0x230 [ 320.380391][ T30] ? clear_bhb_loop+0x35/0x90 [ 320.385280][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.391174][ T30] RIP: 0033:0x7f6a95785d29 [ 320.395633][ T30] RSP: 002b:00007f6a935f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.404072][ T30] RAX: ffffffffffffffda RBX: 00007f6a95976080 RCX: 00007f6a95785d29 [ 320.412041][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 320.420334][ T30] RBP: 00007f6a95801b08 R08: 0000000000000000 R09: 0000000000000000 [ 320.428334][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.436327][ T30] R13: 0000000000000000 R14: 00007f6a95976080 R15: 00007fffa18bfc98 [ 320.444602][ T30] [ 320.447623][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 320.456669][ T30] INFO: task syz.4.922:10562 blocked for more than 148 seconds. [ 320.464347][ T30] Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 320.471968][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.480843][ T30] task:syz.4.922 state:D stack:24400 pid:10562 tgid:10559 ppid:5844 flags:0x00000004 [ 320.491047][ T30] Call Trace: [ 320.494385][ T30] [ 320.497318][ T30] __schedule+0x1850/0x4c30 [ 320.501807][ T30] ? schedule+0x90/0x320 [ 320.506282][ T30] ? lock_release+0xbf/0xa30 [ 320.510881][ T30] ? __pfx___schedule+0x10/0x10 [ 320.515746][ T30] ? __pfx_lock_release+0x10/0x10 [ 320.520781][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.525579][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 320.531473][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.538003][ T30] ? schedule+0x90/0x320 [ 320.542234][ T30] schedule+0x14b/0x320 [ 320.546430][ T30] schedule_preempt_disabled+0x13/0x30 [ 320.551892][ T30] __mutex_lock+0x7e7/0xee0 [ 320.556422][ T30] ? __mutex_lock+0x5ef/0xee0 [ 320.561113][ T30] ? genl_rcv_msg+0x121/0xec0 [ 320.566050][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 320.571083][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.575870][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.582200][ T30] ? lock_release+0xbf/0xa30 [ 320.586808][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.591590][ T30] ? radix_tree_lookup+0x238/0x290 [ 320.596938][ T30] genl_rcv_msg+0x121/0xec0 [ 320.601444][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 320.606606][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.611628][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 320.616841][ T30] ? kasan_save_track+0x51/0x80 [ 320.621698][ T30] ? __sys_sendto+0x363/0x4c0 [ 320.626577][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.631329][ T30] ? lock_acquire+0xe3/0x550 [ 320.635940][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 320.641314][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 320.646352][ T30] ? __pfx___might_resched+0x10/0x10 [ 320.651650][ T30] netlink_rcv_skb+0x1e3/0x430 [ 320.656617][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.661630][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.666944][ T30] ? lock_release+0xbf/0xa30 [ 320.671541][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 320.677028][ T30] genl_rcv+0x28/0x40 [ 320.681039][ T30] netlink_unicast+0x7f6/0x990 [ 320.686074][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 320.691371][ T30] ? __virt_addr_valid+0x45f/0x530 [ 320.696510][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 320.701536][ T30] ? __check_object_size+0x47a/0x730 [ 320.706836][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 320.711612][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.717098][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 320.722045][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.727355][ T30] __sock_sendmsg+0x221/0x270 [ 320.732052][ T30] __sys_sendto+0x363/0x4c0 [ 320.736583][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 320.741622][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 320.746853][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.753205][ T30] ? __pfx___up_read+0x10/0x10 [ 320.757983][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.764320][ T30] ? rcu_is_watching+0x15/0xb0 [ 320.769091][ T30] __x64_sys_sendto+0xde/0x100 [ 320.774122][ T30] do_syscall_64+0xf3/0x230 [ 320.778633][ T30] ? clear_bhb_loop+0x35/0x90 [ 320.783332][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.789232][ T30] RIP: 0033:0x7f6a95787bbc [ 320.793664][ T30] RSP: 002b:00007f6a935d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 320.802092][ T30] RAX: ffffffffffffffda RBX: 00007f6a935d3fc0 RCX: 00007f6a95787bbc [ 320.810323][ T30] RDX: 0000000000000024 RSI: 00007f6a935d4010 RDI: 000000000000000a [ 320.818333][ T30] RBP: 0000000000000000 R08: 00007f6a935d3f14 R09: 000000000000000c [ 320.826324][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 320.834527][ T30] R13: 00007f6a935d3f68 R14: 00007f6a935d4010 R15: 0000000000000000 [ 320.842547][ T30] [ 320.845567][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 320.854610][ T30] INFO: lockdep is turned off. [ 320.859375][ T30] NMI backtrace for cpu 1 [ 320.863687][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 320.874194][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 320.884245][ T30] Call Trace: [ 320.887573][ T30] [ 320.890499][ T30] dump_stack_lvl+0x241/0x360 [ 320.895168][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.900350][ T30] ? __pfx__printk+0x10/0x10 [ 320.904925][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 320.911845][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 320.916768][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 320.922217][ T30] ? _printk+0xd5/0x120 [ 320.926391][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 320.932360][ T30] ? __pfx__printk+0x10/0x10 [ 320.936947][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 320.942914][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 320.948913][ T30] watchdog+0xff6/0x1040 [ 320.953177][ T30] ? watchdog+0x1ea/0x1040 [ 320.957583][ T30] ? __pfx_watchdog+0x10/0x10 [ 320.962249][ T30] kthread+0x2f0/0x390 [ 320.966309][ T30] ? __pfx_watchdog+0x10/0x10 [ 320.970975][ T30] ? __pfx_kthread+0x10/0x10 [ 320.975557][ T30] ret_from_fork+0x4b/0x80 [ 320.979969][ T30] ? __pfx_kthread+0x10/0x10 [ 320.984557][ T30] ret_from_fork_asm+0x1a/0x30 [ 320.989313][ T30] [ 320.992731][ T30] Sending NMI from CPU 1 to CPUs 0: [ 320.997955][ C0] NMI backtrace for cpu 0 [ 320.997967][ C0] CPU: 0 UID: 0 PID: 5188 Comm: syslogd Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 320.997987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 320.997996][ C0] RIP: 0010:__schedule+0xa93/0x4c30 [ 320.998017][ C0] Code: 08 00 74 08 48 89 df e8 3b 5a 38 f6 48 8b 3b 48 83 c7 18 be ff ff ff ff e8 ca 2a ff ff 85 c0 0f 84 e6 0f 00 00 48 8b 44 24 20 <48> 8d 98 38 0b 00 00 48 85 c0 0f 84 89 00 00 00 48 89 d8 48 c1 e8 [ 320.998031][ C0] RSP: 0018:ffffc90003337500 EFLAGS: 00000046 [ 320.998046][ C0] RAX: ffff8880b863e880 RBX: ffff88807c5833f8 RCX: dffffc0000000000 [ 320.998058][ C0] RDX: 0000000000000000 RSI: ffffffff8c5fb200 RDI: ffffffff8c5fb1c0 [ 320.998076][ C0] RBP: ffffc90003337718 R08: ffffffff901a58f7 R09: 1ffffffff2034b1e [ 320.998088][ C0] R10: dffffc0000000000 R11: fffffbfff2034b1f R12: ffffc90003337620 [ 320.998100][ C0] R13: ffff8880b863f390 R14: 1ffff110170c7e72 R15: dffffc0000000000 [ 320.998113][ C0] FS: 00007f0d7ed6f380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 320.998128][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.998139][ C0] CR2: 000055c8f74a8238 CR3: 00000000332e4000 CR4: 00000000003526f0 [ 320.998154][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.998164][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.998174][ C0] Call Trace: [ 320.998180][ C0] [ 320.998186][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 320.998203][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 320.998221][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 320.998243][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 320.998258][ C0] ? nmi_handle+0x14f/0x5a0 [ 320.998276][ C0] ? nmi_handle+0x2a/0x5a0 [ 320.998293][ C0] ? __schedule+0xa93/0x4c30 [ 320.998309][ C0] ? default_do_nmi+0x63/0x160 [ 320.998325][ C0] ? exc_nmi+0x123/0x1f0 [ 320.998339][ C0] ? end_repeat_nmi+0xf/0x53 [ 320.998364][ C0] ? __schedule+0xa93/0x4c30 [ 320.998380][ C0] ? __schedule+0xa93/0x4c30 [ 320.998397][ C0] ? __schedule+0xa93/0x4c30 [ 320.998414][ C0] [ 320.998419][ C0] [ 320.998424][ C0] ? __kernel_text_address+0xd/0x40 [ 320.998444][ C0] ? arch_stack_walk+0xfd/0x150 [ 320.998465][ C0] ? schedule+0x90/0x320 [ 320.998481][ C0] ? lock_release+0xbf/0xa30 [ 320.998498][ C0] ? __pfx___schedule+0x10/0x10 [ 320.998514][ C0] ? lock_release+0xbf/0xa30 [ 320.998531][ C0] ? __pfx_lock_release+0x10/0x10 [ 320.998548][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 320.998565][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.998583][ C0] ? schedule+0x90/0x320 [ 320.998599][ C0] schedule+0x14b/0x320 [ 320.998616][ C0] schedule_timeout+0xb0/0x290 [ 320.998631][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 320.998646][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.998668][ C0] ? prepare_to_wait_exclusive+0x84/0x230 [ 320.998688][ C0] __skb_wait_for_more_packets+0x399/0x600 [ 320.998710][ C0] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 320.998730][ C0] ? __pfx_receiver_wake_function+0x10/0x10 [ 320.998749][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 320.998773][ C0] __unix_dgram_recvmsg+0x34a/0x12f0 [ 320.998795][ C0] ? aa_sk_perm+0x96d/0xab0 [ 320.998816][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 320.998835][ C0] ? aa_file_perm+0x3ef/0xf50 [ 320.998852][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.998873][ C0] ? folio_unlock+0x10e/0x170 [ 320.998893][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 320.998909][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 320.998928][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 320.998948][ C0] sock_recvmsg+0x22f/0x280 [ 320.998965][ C0] sock_read_iter+0x2c4/0x3d0 [ 320.998986][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 320.999010][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 320.999030][ C0] ? security_file_permission+0x74/0x280 [ 320.999053][ C0] vfs_read+0x991/0xb70 [ 320.999075][ C0] ? __pfx_vfs_read+0x10/0x10 [ 320.999090][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.999115][ C0] ksys_read+0x18f/0x2b0 [ 320.999130][ C0] ? __pfx_ksys_read+0x10/0x10 [ 320.999144][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.999164][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.999184][ C0] do_syscall_64+0xf3/0x230 [ 320.999203][ C0] ? clear_bhb_loop+0x35/0x90 [ 320.999217][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.999237][ C0] RIP: 0033:0x7f0d7eec3b6a [ 320.999249][ C0] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 320.999262][ C0] RSP: 002b:00007ffeb0ef3f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.999278][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0d7eec3b6a [ 320.999290][ C0] RDX: 00000000000000ff RSI: 000056463d400950 RDI: 0000000000000000 [ 320.999300][ C0] RBP: 000056463d400910 R08: 0000000000000001 R09: 0000000000000000 [ 320.999311][ C0] R10: 00007f0d7f0623a3 R11: 0000000000000246 R12: 000056463d40099c [ 320.999321][ C0] R13: 000056463d400950 R14: 0000000000000000 R15: 00007f0d7f0a6a80 [ 320.999338][ C0] [ 321.000011][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 321.504259][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 321.514747][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.524793][ T30] Call Trace: [ 321.528059][ T30] [ 321.530990][ T30] dump_stack_lvl+0x241/0x360 [ 321.535664][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.540863][ T30] ? __pfx__printk+0x10/0x10 [ 321.545446][ T30] ? vscnprintf+0x5d/0x90 [ 321.549764][ T30] panic+0x349/0x880 [ 321.553658][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 321.559805][ T30] ? __pfx_panic+0x10/0x10 [ 321.564209][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 321.569574][ T30] ? __irq_work_queue_local+0x137/0x410 [ 321.575136][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 321.580505][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 321.586649][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 321.592795][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 321.598936][ T30] watchdog+0x1035/0x1040 [ 321.603256][ T30] ? watchdog+0x1ea/0x1040 [ 321.607665][ T30] ? __pfx_watchdog+0x10/0x10 [ 321.612349][ T30] kthread+0x2f0/0x390 [ 321.616407][ T30] ? __pfx_watchdog+0x10/0x10 [ 321.621072][ T30] ? __pfx_kthread+0x10/0x10 [ 321.625652][ T30] ret_from_fork+0x4b/0x80 [ 321.630058][ T30] ? __pfx_kthread+0x10/0x10 [ 321.634645][ T30] ret_from_fork_asm+0x1a/0x30 [ 321.639416][ T30] [ 321.642683][ T30] Kernel Offset: disabled [ 321.647006][ T30] Rebooting in 86400 seconds..