last executing test programs: 40.079459136s ago: executing program 1 (id=15): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000140)="bd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="db8baa69391612576d", 0x9}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) shutdown(r0, 0x1) 39.732298187s ago: executing program 1 (id=17): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 39.353754628s ago: executing program 1 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 38.929116391s ago: executing program 1 (id=20): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) connect$packet(0xffffffffffffffff, &(0x7f0000000140), 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6, @local}, 0x10) sendto$packet(r2, &(0x7f0000000040)="0203000008000000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 37.173249725s ago: executing program 1 (id=23): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 36.166320511s ago: executing program 1 (id=24): socket$netlink(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 35.354659231s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x8100, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 34.366073029s ago: executing program 2 (id=29): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) shutdown(r0, 0x1) 34.219800221s ago: executing program 2 (id=30): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x200, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}], 0x2, 0x20000000) 34.050499049s ago: executing program 2 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 26.020417926s ago: executing program 4 (id=53): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2b, 'cpuset'}]}, 0x8) 24.452878364s ago: executing program 4 (id=55): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632c77fbac141416ac14141694029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 24.063521645s ago: executing program 0 (id=56): bpf$PROG_LOAD(0x5, 0x0, 0x0) 23.076129334s ago: executing program 4 (id=57): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r0, 0x4}, 0x10) 22.612139231s ago: executing program 0 (id=59): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000008c0)="fc84", 0x2, 0x24008800, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x880) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 21.904825681s ago: executing program 4 (id=60): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xf6}, 0x8) 21.817939934s ago: executing program 0 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 21.506097392s ago: executing program 4 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 21.324181627s ago: executing program 3 (id=63): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) 20.739785081s ago: executing program 0 (id=64): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 20.361614677s ago: executing program 32 (id=24): socket$netlink(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 20.361515119s ago: executing program 3 (id=66): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x0) 20.361280903s ago: executing program 4 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000640)="448b7cff03000000", 0x8}, {&(0x7f0000000100)="36d1ce1e6d25a81a70", 0x9}], 0x3) 20.227704846s ago: executing program 0 (id=68): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @mcast2, 0x2}, 0x1c) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 19.253949936s ago: executing program 3 (id=69): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba", 0x34) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) close(r0) 18.855935743s ago: executing program 0 (id=70): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d1e14d526622757933515a8722807f2fcbabf21167549477f61961075d3e25f906a12586166a282004cadf739bccc84406d6e1fbbea5d16563492a9dd0a19b62ca683ceb79804463431a815d2f50db18c511f1b80941f15d0e1cf6", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES64=r5, @ANYRESHEX=r7, @ANYRES16=r1, @ANYRES16=r6, @ANYRES32=r3, @ANYRES8=r2, @ANYRES16=r7], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf", @ANYRES32=r12, @ANYBLOB="1400020000090000000000000000000000000001d6422d5825d70897cf0886731f3b8bb8fe26aa21d84aba38b6a776e2a5827844b18ff7a653ef8bac501dd797cbfa5d762f1744199369002b48a9"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0x0, 0x3, 0x6}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000180)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0x4b, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 18.524158539s ago: executing program 33 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 18.225748818s ago: executing program 3 (id=72): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xf6}, 0x8) 17.129234305s ago: executing program 3 (id=73): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 16.667959643s ago: executing program 3 (id=74): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 4.937140759s ago: executing program 34 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000640)="448b7cff03000000", 0x8}, {&(0x7f0000000100)="36d1ce1e6d25a81a70", 0x9}], 0x3) 619.206717ms ago: executing program 35 (id=70): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d1e14d526622757933515a8722807f2fcbabf21167549477f61961075d3e25f906a12586166a282004cadf739bccc84406d6e1fbbea5d16563492a9dd0a19b62ca683ceb79804463431a815d2f50db18c511f1b80941f15d0e1cf6", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES64=r5, @ANYRESHEX=r7, @ANYRES16=r1, @ANYRES16=r6, @ANYRES32=r3, @ANYRES8=r2, @ANYRES16=r7], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf", @ANYRES32=r12, @ANYBLOB="1400020000090000000000000000000000000001d6422d5825d70897cf0886731f3b8bb8fe26aa21d84aba38b6a776e2a5827844b18ff7a653ef8bac501dd797cbfa5d762f1744199369002b48a9"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0x0, 0x3, 0x6}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000180)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0x4b, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 0s ago: executing program 36 (id=74): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 75.246484][ T5786] cgroup: Unknown subsys name 'net' [ 75.467395][ T5786] cgroup: Unknown subsys name 'cpuset' [ 75.533207][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.102688][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.351633][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.398415][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.400418][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.401995][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.421010][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.421551][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.422327][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.427713][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.430238][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.430700][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.431198][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.433990][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.440653][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.444596][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.446512][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.448332][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.449106][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.450837][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.451967][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.454716][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.461170][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.463236][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.499033][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.570060][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.571893][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.386065][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 80.451140][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 80.505450][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 80.696484][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 80.813662][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 81.289678][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.290844][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.291216][ T5800] bridge_slave_0: entered allmulticast mode [ 81.293273][ T5800] bridge_slave_0: entered promiscuous mode [ 81.457662][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.457746][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.457863][ T5800] bridge_slave_1: entered allmulticast mode [ 81.459225][ T5800] bridge_slave_1: entered promiscuous mode [ 81.462034][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.462110][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.462218][ T5797] bridge_slave_0: entered allmulticast mode [ 81.483853][ T5804] Bluetooth: hci3: command tx timeout [ 81.484959][ T5797] bridge_slave_0: entered promiscuous mode [ 81.552609][ T5804] Bluetooth: hci2: command tx timeout [ 81.632659][ T5804] Bluetooth: hci0: command tx timeout [ 81.632843][ T61] Bluetooth: hci1: command tx timeout [ 81.632927][ T5804] Bluetooth: hci4: command tx timeout [ 81.660894][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.660972][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.661090][ T5797] bridge_slave_1: entered allmulticast mode [ 81.663079][ T5797] bridge_slave_1: entered promiscuous mode [ 81.664578][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.664751][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.664899][ T5796] bridge_slave_0: entered allmulticast mode [ 81.674919][ T5796] bridge_slave_0: entered promiscuous mode [ 81.933383][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.933530][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.933646][ T5796] bridge_slave_1: entered allmulticast mode [ 81.935058][ T5796] bridge_slave_1: entered promiscuous mode [ 82.087415][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.283407][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.283527][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.283715][ T5809] bridge_slave_0: entered allmulticast mode [ 82.285413][ T5809] bridge_slave_0: entered promiscuous mode [ 82.289960][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.294749][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.383599][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.383729][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.383900][ T5799] bridge_slave_0: entered allmulticast mode [ 82.385561][ T5799] bridge_slave_0: entered promiscuous mode [ 82.388214][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.388435][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.388598][ T5809] bridge_slave_1: entered allmulticast mode [ 82.390185][ T5809] bridge_slave_1: entered promiscuous mode [ 82.495770][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.616864][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.617085][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.617216][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.617366][ T5799] bridge_slave_1: entered allmulticast mode [ 82.619000][ T5799] bridge_slave_1: entered promiscuous mode [ 82.875334][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.015263][ T5800] team0: Port device team_slave_0 added [ 83.236333][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.239408][ T5800] team0: Port device team_slave_1 added [ 83.241028][ T5797] team0: Port device team_slave_0 added [ 83.336737][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.339154][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.434988][ T5797] team0: Port device team_slave_1 added [ 83.436685][ T5796] team0: Port device team_slave_0 added [ 83.439553][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.552830][ T5804] Bluetooth: hci3: command tx timeout [ 83.632879][ T5804] Bluetooth: hci2: command tx timeout [ 83.637387][ T5796] team0: Port device team_slave_1 added [ 83.712687][ T61] Bluetooth: hci0: command tx timeout [ 83.712853][ T5804] Bluetooth: hci4: command tx timeout [ 83.722649][ T5804] Bluetooth: hci1: command tx timeout [ 84.034644][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.034656][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.034670][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.275011][ T5809] team0: Port device team_slave_0 added [ 84.275959][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.275973][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.275993][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.277155][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.277164][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.277177][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.415707][ T5799] team0: Port device team_slave_0 added [ 84.417843][ T5809] team0: Port device team_slave_1 added [ 84.428255][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.428271][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.428294][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.429711][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.429722][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.429744][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.436354][ T5799] team0: Port device team_slave_1 added [ 84.561752][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.561769][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.561788][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.774282][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.774298][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.774322][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.866920][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.866932][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.866945][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.868015][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.868028][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.868051][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.085167][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.085183][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.085201][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.103916][ T5800] hsr_slave_0: entered promiscuous mode [ 85.105502][ T5800] hsr_slave_1: entered promiscuous mode [ 85.236008][ T5797] hsr_slave_0: entered promiscuous mode [ 85.236809][ T5797] hsr_slave_1: entered promiscuous mode [ 85.237504][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 85.237591][ T5797] Cannot create hsr debugfs directory [ 85.322255][ T5796] hsr_slave_0: entered promiscuous mode [ 85.324957][ T5796] hsr_slave_1: entered promiscuous mode [ 85.325810][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 85.325830][ T5796] Cannot create hsr debugfs directory [ 85.632636][ T5804] Bluetooth: hci3: command tx timeout [ 85.713446][ T5804] Bluetooth: hci2: command tx timeout [ 85.793581][ T5804] Bluetooth: hci1: command tx timeout [ 85.793616][ T5804] Bluetooth: hci4: command tx timeout [ 85.793782][ T61] Bluetooth: hci0: command tx timeout [ 85.821360][ T5809] hsr_slave_0: entered promiscuous mode [ 85.822122][ T5809] hsr_slave_1: entered promiscuous mode [ 85.823363][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 85.823385][ T5809] Cannot create hsr debugfs directory [ 85.966292][ T5799] hsr_slave_0: entered promiscuous mode [ 85.967032][ T5799] hsr_slave_1: entered promiscuous mode [ 85.967553][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 85.967574][ T5799] Cannot create hsr debugfs directory [ 86.837863][ T31] cfg80211: failed to load regulatory.db [ 87.243525][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.291890][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.308694][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.359513][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.460185][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.488804][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.506625][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.564251][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.677062][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.717909][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.729550][ T61] Bluetooth: hci3: command tx timeout [ 87.749650][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.783397][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.793191][ T61] Bluetooth: hci2: command tx timeout [ 87.872591][ T5804] Bluetooth: hci1: command tx timeout [ 87.872633][ T61] Bluetooth: hci0: command tx timeout [ 87.872663][ T5816] Bluetooth: hci4: command tx timeout [ 87.911480][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.952829][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.006143][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.065225][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.190238][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.238095][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.269384][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.271972][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.320072][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.395685][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.411761][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.445550][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.445741][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.487191][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.487309][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.528723][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.569721][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.569845][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.581144][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.612939][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.613059][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.681272][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.702798][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.719503][ T1530] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.719697][ T1530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.741656][ T1530] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.741801][ T1530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.839290][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.846886][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.897180][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.912923][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.941228][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.944494][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.983693][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.055296][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.055502][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.084482][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.084684][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.220693][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.441424][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.489765][ T5800] veth0_vlan: entered promiscuous mode [ 89.556742][ T5800] veth1_vlan: entered promiscuous mode [ 89.662987][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.741143][ T5800] veth0_macvtap: entered promiscuous mode [ 89.749100][ T5797] veth0_vlan: entered promiscuous mode [ 89.769226][ T5800] veth1_macvtap: entered promiscuous mode [ 89.798012][ T5797] veth1_vlan: entered promiscuous mode [ 89.827235][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.847774][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.867807][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.903874][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.928864][ T5799] veth0_vlan: entered promiscuous mode [ 89.955839][ T1413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.961421][ T1413] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.985552][ T1413] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.987979][ T1413] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.011019][ T5799] veth1_vlan: entered promiscuous mode [ 90.090747][ T5797] veth0_macvtap: entered promiscuous mode [ 90.171509][ T5797] veth1_macvtap: entered promiscuous mode [ 90.305503][ T5809] veth0_vlan: entered promiscuous mode [ 90.331138][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.389192][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.389898][ T5799] veth0_macvtap: entered promiscuous mode [ 90.408967][ T5809] veth1_vlan: entered promiscuous mode [ 90.410127][ T1530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.410155][ T1530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.455253][ T5799] veth1_macvtap: entered promiscuous mode [ 90.486322][ T1530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.504167][ T1530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.515604][ T1530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.540999][ T1530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.548100][ T1530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.548122][ T1530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.695596][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.744126][ T5796] veth0_vlan: entered promiscuous mode [ 90.791957][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.848934][ T5796] veth1_vlan: entered promiscuous mode [ 90.864099][ T3482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893496][ T5809] veth0_macvtap: entered promiscuous mode [ 90.895409][ T3482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.929185][ T3482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.955686][ T3482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.961156][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.961176][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.962146][ T5809] veth1_macvtap: entered promiscuous mode [ 91.081450][ T5918] tipc: Started in network mode [ 91.081482][ T5918] tipc: Node identity de841617ff75, cluster identity 4711 [ 91.082177][ T5918] tipc: Enabled bearer , priority 0 [ 91.106503][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.106523][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.179349][ T5918] tipc: Resetting bearer [ 91.230112][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.387885][ T5917] tipc: Disabling bearer [ 91.521166][ T5796] veth0_macvtap: entered promiscuous mode [ 91.549544][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.632679][ T5796] veth1_macvtap: entered promiscuous mode [ 91.652129][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664170][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.668795][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.668811][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.671183][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.717278][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.867461][ T1530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.867481][ T1530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.946714][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.159195][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.188317][ T1343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211360][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.222097][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252076][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.315604][ T5930] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.455859][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.455881][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478131][ T5934] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.285892][ T1413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.285914][ T1413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.470403][ T5970] Zero length message leads to an empty skb [ 98.126073][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.126092][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.988675][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.988695][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.973175][ T6053] netlink: 27 bytes leftover after parsing attributes in process `syz.4.49'. [ 114.683420][ T6092] syzkaller0: entered promiscuous mode [ 114.683447][ T6092] syzkaller0: entered allmulticast mode [ 115.867708][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.906037][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.913014][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.919295][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.920513][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.970749][ T6113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 117.364536][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.375897][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.381205][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.387370][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.389874][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.034769][ T61] Bluetooth: hci5: command tx timeout [ 119.872543][ T61] Bluetooth: hci6: command tx timeout [ 120.115567][ T61] Bluetooth: hci5: command tx timeout [ 121.953308][ T61] Bluetooth: hci6: command tx timeout [ 122.192507][ T61] Bluetooth: hci5: command tx timeout [ 124.153210][ T61] Bluetooth: hci6: command tx timeout [ 124.422173][ T61] Bluetooth: hci5: command tx timeout [ 126.943716][ T61] Bluetooth: hci6: command tx timeout [ 132.934936][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935022][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.105941][ T5816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.110368][ T5816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.212695][ T5816] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.221367][ T5816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.247794][ T5816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 136.216954][ T5816] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 136.241438][ T5816] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 136.251555][ T5816] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 136.252959][ T5816] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 136.253802][ T5816] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 137.238526][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 137.255503][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 137.257053][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 137.258345][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 137.259226][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 137.723176][ T61] Bluetooth: hci7: command tx timeout [ 138.272746][ T61] Bluetooth: hci8: command tx timeout [ 139.312518][ T61] Bluetooth: hci9: command tx timeout [ 139.792868][ T61] Bluetooth: hci7: command tx timeout [ 140.352519][ T61] Bluetooth: hci8: command tx timeout [ 141.412643][ T61] Bluetooth: hci9: command tx timeout [ 141.872581][ T61] Bluetooth: hci7: command tx timeout [ 142.439089][ T61] Bluetooth: hci8: command tx timeout [ 143.482589][ T61] Bluetooth: hci9: command tx timeout [ 143.962497][ T61] Bluetooth: hci7: command tx timeout [ 144.512944][ T61] Bluetooth: hci8: command tx timeout [ 145.568563][ T61] Bluetooth: hci9: command tx timeout [ 187.221385][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.231899][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.233174][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.299375][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.304341][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.591378][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.667703][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.668815][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.811824][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.387666][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.312451][ T5816] Bluetooth: hci0: command tx timeout [ 190.672815][ T5816] Bluetooth: hci4: command tx timeout [ 191.347204][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 191.349318][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 191.371003][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 191.380665][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 191.381774][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 191.392540][ T5816] Bluetooth: hci0: command tx timeout [ 193.113568][ T5816] Bluetooth: hci4: command tx timeout [ 193.472564][ T5816] Bluetooth: hci10: command tx timeout [ 193.472581][ T61] Bluetooth: hci0: command tx timeout [ 194.358967][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359051][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.827100][ T61] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 194.847480][ T61] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 194.850547][ T61] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 194.853093][ T61] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 194.853924][ T61] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 195.152474][ T61] Bluetooth: hci4: command tx timeout [ 195.722552][ T61] Bluetooth: hci10: command tx timeout [ 195.727415][ T5804] Bluetooth: hci0: command tx timeout [ 196.335553][ T5804] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 196.338973][ T5804] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 196.367754][ T5804] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 196.369584][ T5804] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 196.370423][ T5804] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 197.232498][ T5804] Bluetooth: hci4: command tx timeout [ 197.869862][ T5804] Bluetooth: hci10: command tx timeout [ 198.352564][ T5804] Bluetooth: hci11: command tx timeout [ 198.432616][ T5804] Bluetooth: hci12: command tx timeout [ 199.872795][ T5804] Bluetooth: hci10: command tx timeout [ 200.452498][ T5804] Bluetooth: hci11: command tx timeout [ 200.512578][ T5804] Bluetooth: hci12: command tx timeout [ 202.512628][ T5804] Bluetooth: hci11: command tx timeout [ 202.713176][ T5804] Bluetooth: hci12: command tx timeout [ 204.636713][ T61] Bluetooth: hci11: command tx timeout [ 204.752495][ T5804] Bluetooth: hci12: command tx timeout [ 206.848168][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 206.848346][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 206.848383][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 242.523210][ T5804] Bluetooth: hci6: command 0x0406 tx timeout [ 242.523265][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 251.497007][ T5814] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 251.871151][ T5816] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 251.874046][ T5804] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 252.158596][ T5807] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 252.202623][ T5807] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 252.204059][ T5807] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 252.205438][ T5807] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 252.234702][ T5814] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 252.239813][ T5814] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 252.254060][ T5814] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 253.998302][ T5814] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 254.000541][ T5814] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 254.178515][ T5814] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 254.241691][ T5814] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 254.282721][ T5814] Bluetooth: hci13: command tx timeout [ 254.283051][ T5814] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 254.369717][ T5814] Bluetooth: hci14: command tx timeout [ 255.797243][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.797350][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.891459][ T61] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 255.906972][ T61] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 255.908053][ T61] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 255.909652][ T61] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 255.957937][ T61] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 256.354059][ T5814] Bluetooth: hci13: command tx timeout [ 256.432756][ T5814] Bluetooth: hci14: command tx timeout [ 257.333420][ T5814] Bluetooth: hci15: command tx timeout [ 257.488032][ T61] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 257.527294][ T61] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 257.797791][ T61] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 257.799129][ T61] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 257.799949][ T61] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 257.874439][ T61] Bluetooth: hci7: command 0x0406 tx timeout [ 258.032690][ T61] Bluetooth: hci16: command tx timeout [ 258.454838][ T61] Bluetooth: hci13: command tx timeout [ 258.583391][ T5814] Bluetooth: hci14: command tx timeout [ 259.392432][ T5807] Bluetooth: hci15: command tx timeout [ 259.665839][ T38] INFO: task syz.0.70:6107 blocked for more than 143 seconds. [ 259.665870][ T38] Not tainted syzkaller #0 [ 259.665879][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.665887][ T38] task:syz.0.70 stat[ 259.665887][ T38] task:syz.0.70 state:D stack:23512 pid:6107 tgid:6106 ppid:5799 task_flags:0x400140 flags:0x00080002 [ 259.665954][ T38] Call Trace: [ 259.665963][ T38] [ 259.665978][ T38] __schedule+0x145f/0x5070 [ 259.666028][ T38] ? sched_clock_cpu+0x74/0x430 [ 259.666062][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 259.666095][ T38] ? __pfx___schedule+0x10/0x10 [ 259.666143][ T38] rt_mutex_schedule+0x77/0xf0 [ 259.666171][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 259.666209][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 259.666237][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 259.666263][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 259.666287][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 259.666322][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 259.666358][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 259.666377][ T38] mutex_lock_nested+0x16a/0x1d0 [ 259.666399][ T38] ? net_generic+0x1e/0x240 [ 259.666426][ T38] register_netdevice_notifier_net+0x1a/0xa0 [ 259.666450][ T38] ops_init+0x35c/0x5c0 [ 259.666481][ T38] setup_net+0x110/0x330 [ 259.666503][ T38] ? __pfx_setup_net+0x10/0x10 [ 259.666522][ T38] ? mutex_rt_init_lockdep+0x66/0x80 [ 259.666543][ T38] ? preinit_net+0x4a0/0x7a0 [ 259.666565][ T38] copy_net_ns+0x3e3/0x570 [ 259.666588][ T38] create_new_namespaces+0x3e7/0x6a0 [ 259.666614][ T38] ? security_capable+0x7e/0x2e0 [ 259.666640][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 259.666665][ T38] ksys_unshare+0x4c8/0x8c0 [ 259.666696][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 259.666720][ T38] ? rcu_is_watching+0x15/0xb0 [ 259.666750][ T38] __x64_sys_unshare+0x38/0x50 [ 259.666774][ T38] do_syscall_64+0xec/0xf80 [ 259.666793][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.666811][ T38] ? trace_irq_disable+0x37/0x100 [ 259.666830][ T38] ? clear_bhb_loop+0x60/0xb0 [ 259.666854][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.666872][ T38] RIP: 0033:0x7f7608fbf749 [ 259.666894][ T38] RSP: 002b:00007f7607226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 259.666914][ T38] RAX: ffffffffffffffda RBX: 00007f7609215fa0 RCX: 00007f7608fbf749 [ 259.666929][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 259.666941][ T38] RBP: 00007f7609043f91 R08: 0000000000000000 R09: 0000000000000000 [ 259.666954][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.666965][ T38] R13: 00007f7609216038 R14: 00007f7609215fa0 R15: 00007ffef4a042e8 [ 259.666998][ T38] [ 259.667006][ T38] INFO: task syz-executor:6112 blocked for more than 143 seconds. [ 259.667019][ T38] Not tainted syzkaller #0 [ 259.667028][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.667091][ T38] task:syz-executor state:D stack:26448 pid:6112 tgid:6112 ppid:1 task_flags:0x400140 flags:0x00080002 [ 259.667148][ T38] Call Trace: [ 259.667155][ T38] [ 259.667167][ T38] __schedule+0x145f/0x5070 [ 259.667221][ T38] ? __pfx___schedule+0x10/0x10 [ 259.667264][ T38] rt_mutex_schedule+0x77/0xf0 [ 259.667291][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 259.667315][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 259.667355][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 259.667381][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 259.667405][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 259.667441][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 259.667466][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 259.667493][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 259.667511][ T38] mutex_lock_nested+0x16a/0x1d0 [ 259.667540][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 259.667562][ T38] ? unwind_get_return_address+0x4d/0x90 [ 259.667588][ T38] ? arch_stack_walk+0xfc/0x150 [ 259.667612][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 259.667650][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 259.667670][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 259.667695][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 259.667715][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.667736][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 259.667774][ T38] netlink_rcv_skb+0x208/0x470 [ 259.667799][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.667822][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.667863][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.667894][ T38] netlink_unicast+0x846/0xa10 [ 259.667924][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 259.667945][ T38] ? __alloc_skb+0x198/0x3a0 [ 259.667966][ T38] ? netlink_sendmsg+0x642/0xb30 [ 259.667987][ T38] ? skb_put+0x11b/0x210 [ 259.668011][ T38] netlink_sendmsg+0x805/0xb30 [ 259.668045][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.668077][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.668101][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.668126][ T38] __sock_sendmsg+0x21c/0x270 [ 259.668162][ T38] __sys_sendto+0x3c7/0x520 [ 259.668186][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 259.668234][ T38] ? exc_page_fault+0x71/0xd0 [ 259.668255][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 259.668281][ T38] __x64_sys_sendto+0xde/0x100 [ 259.668306][ T38] do_syscall_64+0xec/0xf80 [ 259.668324][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.668342][ T38] ? trace_irq_disable+0x37/0x100 [ 259.668361][ T38] ? clear_bhb_loop+0x60/0xb0 [ 259.668384][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.668402][ T38] RIP: 0033:0x7f2ddcf415dc [ 259.668418][ T38] RSP: 002b:00007ffc1bf8c460 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 259.668437][ T38] RAX: ffffffffffffffda RBX: 00007f2dddcc4620 RCX: 00007f2ddcf415dc [ 259.668451][ T38] RDX: 0000000000000028 RSI: 00007f2dddcc4670 RDI: 0000000000000003 [ 259.668464][ T38] RBP: 0000000000000000 R08: 00007ffc1bf8c4b4 R09: 000000000000000c [ 259.668476][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 259.668487][ T38] R13: 0000000000000000 R14: 00007f2dddcc4670 R15: 0000000000000000 [ 259.668518][ T38] [ 259.668548][ T38] [ 259.668548][ T38] Showing all locks held in the system: [ 259.668558][ T38] 5 locks held by kworker/u8:1/13: [ 259.668570][ T38] 5 locks held by ksoftirqd/0/15: [ 259.668583][ T38] 4 locks held by rcuc/1/28: [ 259.668594][ T38] 1 lock held by khungtaskd/38: [ 259.668604][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 259.668689][ T38] 3 locks held by kworker/u8:17/3563: [ 259.668700][ T38] #0: ffff88814cf28938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 259.668746][ T38] #1: ffffc9000d4a7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 259.668793][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 259.668845][ T38] 2 locks held by getty/5556: [ 259.668856][ T38] #0: ffff88814d7240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 259.668903][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 259.668954][ T38] 3 locks held by kworker/1:5/5916: [ 259.668964][ T38] #0: ffff88813ff56138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 259.669010][ T38] #1: ffffc9000522fbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 259.669056][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 259.669106][ T38] 1 lock held by syz.1.24/5972: [ 259.669117][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 259.669171][ T38] 1 lock held by syz.2.31/5993: [ 259.669181][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 259.669227][ T38] 1 lock held by syz.4.67/6088: [ 259.669238][ T38] 2 locks held by syz.0.70/6107: [ 259.669248][ T38] #0: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 259.669291][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 259.669337][ T38] 1 lock held by syz-executor/6112: [ 259.669347][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669391][ T38] 1 lock held by syz.3.74/6121: [ 259.669402][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 259.669452][ T38] 1 lock held by syz-executor/6122: [ 259.669462][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669507][ T38] 1 lock held by syz-executor/6130: [ 259.669517][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669561][ T38] 1 lock held by syz-executor/6134: [ 259.669571][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669616][ T38] 1 lock held by syz-executor/6137: [ 259.669626][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669670][ T38] 3 locks held by kworker/1:11/6140: [ 259.669680][ T38] #0: ffff88813ff56138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 259.669725][ T38] #1: ffffc90005c5fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 259.669771][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf00 [ 259.669820][ T38] 1 lock held by syz-executor/6154: [ 259.669831][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669875][ T38] 1 lock held by syz-executor/6159: [ 259.669884][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669928][ T38] 1 lock held by syz-executor/6162: [ 259.669938][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.669982][ T38] 1 lock held by syz-executor/6166: [ 259.669993][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670037][ T38] 1 lock held by syz-executor/6169: [ 259.670047][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670093][ T38] 1 lock held by syz-executor/6187: [ 259.670104][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670154][ T38] 1 lock held by syz-executor/6189: [ 259.670164][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670209][ T38] 1 lock held by syz-executor/6193: [ 259.670220][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670264][ T38] 1 lock held by syz-executor/6197: [ 259.670274][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670318][ T38] 1 lock held by syz-executor/6199: [ 259.670328][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 259.670373][ T38] [ 259.670377][ T38] ============================================= [ 259.670377][ T38] [ 259.670393][ T38] NMI backtrace for cpu 0 [ 259.670419][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.670467][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.670491][ T38] Call Trace: [ 259.670506][ T38] [ 259.670521][ T38] dump_stack_lvl+0xe8/0x150 [ 259.670581][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 259.670635][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.670695][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 259.670721][ T38] sys_info+0x135/0x170 [ 259.670740][ T38] watchdog+0xf95/0xfe0 [ 259.670765][ T38] ? watchdog+0x20a/0xfe0 [ 259.670792][ T38] kthread+0x711/0x8a0 [ 259.670819][ T38] ? __pfx_watchdog+0x10/0x10 [ 259.670838][ T38] ? __pfx_kthread+0x10/0x10 [ 259.670858][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.670885][ T38] ? rt_spin_unlock+0x161/0x200 [ 259.670906][ T38] ? __pfx_kthread+0x10/0x10 [ 259.670931][ T38] ret_from_fork+0x510/0xa50 [ 259.670954][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.670972][ T38] ? __switch_to+0xc9e/0x1480 [ 259.671002][ T38] ? __pfx_kthread+0x10/0x10 [ 259.671026][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.671066][ T38] [ 259.671074][ T38] Sending NMI from CPU 0 to CPUs 1: [ 259.671107][ C1] NMI backtrace for cpu 1 [ 259.671121][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.671141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.671151][ C1] RIP: 0010:lock_release+0x78/0x3b0 [ 259.671175][ C1] Code: 84 95 02 00 00 83 3d 86 95 3e 0d 00 0f 84 1d 02 00 00 65 8b 05 b9 a7 16 10 85 c0 0f 85 0e 02 00 00 65 4c 8b 3c 25 08 10 b3 91 <41> 83 bf 8c 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e a0 b3 76 92 0f [ 259.671189][ C1] RSP: 0018:ffffc90000a2e450 EFLAGS: 00000246 [ 259.671204][ C1] RAX: 0000000000000000 RBX: ffffffff8fea5601 RCX: 0000000080000001 [ 259.671216][ C1] RDX: ffffc90000a2e501 RSI: ffffffff8b3f57c0 RDI: ffffffff8b3f5780 [ 259.671229][ C1] RBP: dffffc0000000000 R08: ffffc90000a2ee00 R09: 0000000000000000 [ 259.671242][ C1] R10: ffffc90000a2e5d8 R11: fffff52000145cbd R12: ffffc90000a2ee10 [ 259.671255][ C1] R13: ffffffff8173dd35 R14: ffffffff8d5ae940 R15: ffff88801be98000 [ 259.671268][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 259.671283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.671294][ C1] CR2: 00007f822f161fde CR3: 0000000036660000 CR4: 00000000003526f0 [ 259.671310][ C1] Call Trace: [ 259.671316][ C1] [ 259.671323][ C1] ? deref_stack_reg+0x19f/0x230 [ 259.671346][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 259.671367][ C1] unwind_next_frame+0x1ab1/0x23d0 [ 259.671391][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 259.671412][ C1] ? synproxy_send_tcp+0x3a7/0x700 [ 259.671437][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.671458][ C1] arch_stack_walk+0x11c/0x150 [ 259.671481][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 259.671507][ C1] stack_trace_save+0x9c/0xe0 [ 259.671526][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 259.671546][ C1] ? do_raw_spin_lock+0x121/0x290 [ 259.671568][ C1] kasan_save_track+0x3e/0x80 [ 259.671589][ C1] ? kasan_save_track+0x3e/0x80 [ 259.671609][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 259.671631][ C1] ? kmem_cache_alloc_noprof+0x18d/0x6c0 [ 259.671653][ C1] ? dst_alloc+0x105/0x170 [ 259.671674][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 259.671691][ C1] ? ip_route_output_key_hash+0x174/0x280 [ 259.671707][ C1] ? ip_route_output_flow+0x2a/0x150 [ 259.671730][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 259.671748][ C1] ? synproxy_send_tcp+0x3a7/0x700 [ 259.671791][ C1] ? __slab_alloc+0xc6/0x1f0 [ 259.671809][ C1] __kasan_slab_alloc+0x6c/0x80 [ 259.671832][ C1] ? dst_alloc+0x105/0x170 [ 259.671852][ C1] kmem_cache_alloc_noprof+0x18d/0x6c0 [ 259.671873][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 259.671906][ C1] dst_alloc+0x105/0x170 [ 259.671930][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 259.671951][ C1] ? ip_route_output_key_hash+0xc1/0x280 [ 259.671969][ C1] ip_route_output_key_hash+0x174/0x280 [ 259.671985][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 259.672004][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 259.672029][ C1] ip_route_output_flow+0x2a/0x150 [ 259.672051][ C1] ? ip_route_me_harder+0x6ae/0xf10 [ 259.672072][ C1] ip_route_me_harder+0x6c4/0xf10 [ 259.672096][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 259.672123][ C1] ? rcu_is_watching+0x15/0xb0 [ 259.672139][ C1] ? siphash_2u64+0x25/0x2a0 [ 259.672159][ C1] synproxy_send_tcp+0x3a7/0x700 [ 259.672187][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 259.672217][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 259.672241][ C1] ? nft_log_eval+0x688/0xab0 [ 259.672263][ C1] ? synproxy_pernet+0x45/0x270 [ 259.672283][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 259.672306][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 259.672322][ C1] ? nf_ip_checksum+0x13c/0x510 [ 259.672338][ C1] nft_synproxy_do_eval+0x345/0x570 [ 259.672358][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 259.672377][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 259.672399][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 259.672422][ C1] nft_do_chain+0x40c/0x1920 [ 259.672441][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 259.672466][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 259.672500][ C1] nft_do_chain_inet+0x25d/0x340 [ 259.672517][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 259.672539][ C1] ? NF_HOOK+0x9a/0x3a0 [ 259.672559][ C1] ? NF_HOOK+0x9a/0x3a0 [ 259.672579][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 259.672596][ C1] nf_hook_slow+0xc5/0x220 [ 259.672620][ C1] NF_HOOK+0x206/0x3a0 [ 259.672641][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.672662][ C1] ? NF_HOOK+0x9a/0x3a0 [ 259.672681][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 259.672699][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 259.672721][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.672743][ C1] ? skb_dst+0x4f/0xd0 [ 259.672764][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 259.672785][ C1] NF_HOOK+0x30c/0x3a0 [ 259.672806][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.672826][ C1] ? NF_HOOK+0x9a/0x3a0 [ 259.672845][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 259.672865][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.672901][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 259.672920][ C1] __netif_receive_skb+0x143/0x380 [ 259.672938][ C1] ? process_backlog+0x272/0x8f0 [ 259.672955][ C1] process_backlog+0x315/0x8f0 [ 259.672978][ C1] __napi_poll+0xae/0x520 [ 259.672995][ C1] net_rx_action+0x64a/0xdb0 [ 259.673020][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 259.673036][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 259.673065][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 259.673098][ C1] handle_softirqs+0x1df/0x650 [ 259.673123][ C1] __local_bh_enable_ip+0x171/0x2c0 [ 259.673142][ C1] ? rcu_cpu_kthread+0x211/0x1af0 [ 259.673165][ C1] rcu_cpu_kthread+0xbec/0x1af0 [ 259.673192][ C1] ? rcu_cpu_kthread+0x211/0x1af0 [ 259.673221][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 259.673245][ C1] ? schedule+0x91/0x360 [ 259.673271][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 259.673290][ C1] smpboot_thread_fn+0x542/0xa60 [ 259.673310][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 259.673334][ C1] kthread+0x711/0x8a0 [ 259.673356][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 259.673376][ C1] ? __pfx_kthread+0x10/0x10 [ 259.673396][ C1] ? rt_spin_unlock+0x150/0x200 [ 259.673419][ C1] ? rt_spin_unlock+0x161/0x200 [ 259.673439][ C1] ? __pfx_kthread+0x10/0x10 [ 259.673461][ C1] ret_from_fork+0x510/0xa50 [ 259.673480][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 259.673497][ C1] ? __switch_to+0xc9e/0x1480 [ 259.673522][ C1] ? __pfx_kthread+0x10/0x10 [ 259.673544][ C1] ret_from_fork_asm+0x1a/0x30 [ 259.673574][ C1] [ 259.722462][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 259.722495][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.722518][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.722528][ T38] Call Trace: [ 259.722536][ T38] [ 259.722545][ T38] vpanic+0x1e0/0x670 [ 259.722575][ T38] panic+0xb9/0xc0 [ 259.722598][ T38] ? __pfx_panic+0x10/0x10 [ 259.722624][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 259.722649][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 259.722677][ T38] watchdog+0xfdf/0xfe0 [ 259.722704][ T38] ? watchdog+0x20a/0xfe0 [ 259.722731][ T38] kthread+0x711/0x8a0 [ 259.722758][ T38] ? __pfx_watchdog+0x10/0x10 [ 259.722778][ T38] ? __pfx_kthread+0x10/0x10 [ 259.722799][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.722827][ T38] ? rt_spin_unlock+0x161/0x200 [ 259.722847][ T38] ? __pfx_kthread+0x10/0x10 [ 259.722871][ T38] ret_from_fork+0x510/0xa50 [ 259.722894][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.722912][ T38] ? __switch_to+0xc9e/0x1480 [ 259.722942][ T38] ? __pfx_kthread+0x10/0x10 [ 259.722967][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.723008][ T38] [ 259.723406][ T38] Kernel Offset: disabled