last executing test programs: 41.858306476s ago: executing program 1 (id=228): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r1 = socket(0x1e, 0x1, 0x0) (rerun: 64) connect$llc(r1, &(0x7f0000000000)={0x1e, 0x20, 0x4, 0xff, 0x3, 0x7, @remote}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) (async) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 41.198555643s ago: executing program 1 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000000000000000000000000000000000255bd8dde39805998ce69dbf01000000000000004ca0532b6f60f5261ff42ef1429e73d4c7c8c99ab1ddcd8d506a5af2abab6e6920c80f7020912bf91f1768406c06ff8308aed240c1a0a72f6f0f", @ANYRES32=0x0, @ANYBLOB="0000000080000000140012800c0001006d6163766c616e000400028008000d00fcffffff0500100008000000"], 0x44}}, 0x0) 40.878583789s ago: executing program 1 (id=238): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0451de148"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xca6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1000}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x31a}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x805) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 40.149811731s ago: executing program 0 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f00000001c0)=0x400, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r1], 0x3c}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000200)={0x7, 'caif0\x00', {0x1}, 0x1}) (async, rerun: 64) sendto(r4, &(0x7f0000000d40)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (rerun: 64) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/56, 0x38}, {&(0x7f0000002cc0)=""/4109, 0x100d}, {&(0x7f0000000880)=""/136, 0x88}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000a80)=""/190, 0xbe}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000e80)=""/167, 0xa7}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f0000000f40)=""/246, 0xf6}, {&(0x7f0000000600)=""/168, 0xa8}], 0xa}, 0x4}], 0x1, 0x100, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x4, @any, 0x2, 0x2}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) 38.814401778s ago: executing program 0 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r1 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3c8a, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xde}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x70}}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 38.421862437s ago: executing program 0 (id=253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000a000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 38.174334381s ago: executing program 0 (id=255): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x0, 0x8}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000014}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x1, 0xd4}, &(0x7f0000000440)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r5, 0x101, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="4ed24bd84581271487dc"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8c0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffff7, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x9ece}, 0x90) 37.878293945s ago: executing program 0 (id=257): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010008dca17f27578d242f601040d0000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f00"], 0x54}}, 0x0) (fail_nth: 7) 37.198551888s ago: executing program 1 (id=259): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b'], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000000000)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x1}], 0x2, 0x0, 0x0, 0x8081}, 0x0) 36.438417937s ago: executing program 0 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000180)=r3) (rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000001c0)=0x1) (async) close(0x3) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 35.690566055s ago: executing program 1 (id=266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 35.475856226s ago: executing program 1 (id=268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x0, 0x8}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000014}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x1, 0xd4}, &(0x7f0000000440)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8c0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffff7, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x9ece}, 0x90) 13.353352061s ago: executing program 2 (id=309): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000280), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000380)=""/52, 0x10f, 0x34, 0x1, 0x20, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000020000886a66f284599848ee2958b388385c664ffed0db5827f1dbcbdd191bb47dbd5387f03df7cf061ba99dd263ee81b08b0fda045ba16feb72aa4937b4880888f4dc3c0e8cb1e44c1bdb7e92d51c17e6a9fd60c29234314bdb6fa8d9b5febfbac1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000060002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x4048850) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)={0x14, r5, 0xb09, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) 7.446063117s ago: executing program 2 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a0b000000000000000000010000000900010073797a300000000040000000030a05020000000000030000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) 7.030885992s ago: executing program 2 (id=316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000300000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.838232371s ago: executing program 2 (id=317): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000001114010000000000007e8dcfdf7dab3834000004669694df85197da50f0000257a9db33c20f05cad98669991589e58f2e8aa3b9ff9a17772d601b34620"], 0x18}}, 0x0) syz_emit_ethernet(0x1b2, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00"/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff000000000000000105000000100000000000000000000004"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) connect$netlink(r2, &(0x7f00000014c0)=@unspec, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x198, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080), 0x4) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/17, 0x11}, 0x8001}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$pptp(r0, &(0x7f00000005c0)={0x18, 0x2, {0x3, @local}}, 0x1e) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) 6.416247512s ago: executing program 2 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r2, 0x1, 0xfffffffc}, 0x14}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x4, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x3c}}, 0x0) 4.174407879s ago: executing program 2 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x81, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@timestamp_prespec={0x44, 0x4}, @rr={0x7, 0x7, 0xda, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private}, {@empty}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x6}]}}}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000000000000501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x51) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r8], 0x50}}, 0x0) 2.078856648s ago: executing program 3 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) (rerun: 64) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000006cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x200, 0xf, 0x10000, r4}}], 0x20}], 0x1, 0x10) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002500)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 1.99421821s ago: executing program 4 (id=331): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}}}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x5fa, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/25, 0x19}}], 0x1, 0x12002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.077052186s ago: executing program 4 (id=332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f000806132788a87c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 974.85243ms ago: executing program 3 (id=333): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000b0000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 714.572263ms ago: executing program 3 (id=334): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450a20250065000005219078ac14943c0a0101004e204e2304319078ca73267d01c07b0492"], 0x0) 713.687245ms ago: executing program 4 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a0b000000000000000000010000000900010073797a300000000040000000030a05020000000000060000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) 538.051342ms ago: executing program 3 (id=336): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x1, 0x8, 0x1, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @empty, {[@noop, @ssrr={0x89, 0x7, 0x57, [@local]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0x7, [0x6, 0xfffffffc]}, @cipso={0x86, 0x33, 0x3, [{0x7, 0xa, "8d66065ac21dae65"}, {0x2, 0xa, "b1c630dd3ec2eb68"}, {0x6, 0x8, "41388ac0abbf"}, {0x1, 0x7, "a1122e297d"}, {0x2, 0xa, "725a30f4a242e496"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0xfffffff9}, {@multicast2, 0x3}, {@private=0xa010100, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000020000000000000000a00000001200000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="04000000000000000000000008000000000100"/28], 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="b93a59cc5aa9"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}}, 0x0) 480.274417ms ago: executing program 4 (id=337): socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001e80)="f242214cc0818ac6", 0x8}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f0000000a00)="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", 0x45a}], 0x240}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea514388a562e9d593976eee139a450bb8ad", 0x45}, {&(0x7f0000000300)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234b6ca56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b69c374e3e7bd2df0eb19678eab74b0d1235894d2ad54a6bf7771d39142867c39bd1fad299d2b62cd296c293a32536d6b8d8b49df5c6f0c8a9baeb708a45088e68d55975b33f806d5e", 0x97}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000009c0)="0e", 0x1}], 0x1}}], 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1}, 0x8) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x61) 262.159783ms ago: executing program 3 (id=338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x1) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/179, 0xb3}], 0x7}, 0x60) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x4}}, 0xe8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x2, 0x14, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x20, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x35, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x83, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x4, 0xd, {{0x17, 0x4, 0x0, 0x3a, 0x5c, 0x68, 0x0, 0x0, 0x77, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xe6, 0x3, 0xd, [{@broadcast, 0x7}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010102, 0xffff}, {@remote, 0x6}, {@private=0xa010101, 0x26}]}, @rr={0x7, 0xb, 0x47, [@empty, @broadcast]}, @ssrr={0x89, 0xf, 0xd9, [@loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x128, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 261.555118ms ago: executing program 4 (id=339): r0 = socket(0xa, 0x3, 0x3a) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000002600000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x7ff, 0x3, 0xf, 0x7}, {0x3ff, 0x0, 0x1, 0x6}, {0x2, 0x1, 0xac, 0x8d}]}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) (async) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r5, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900030004000000040000000200000010080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540), 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000100)="18be3678a003cc741fa3860e88ae7cf76982a960015f10025f58361db0c6c8e3eab1bd169803787e537925cab3e43551e6744202a19a7b10c649161754bbaf89ec03bbef1a2d0b405ab0e80359eb62a4c3ed0404a2443bf0edbd2803f8dec7c91c90a33df36bc52fddb5a775429d31e961ef69d30feb563b8bf825f63a04d4041008c13461108ff35abc076b4030a37c313c715137206c7354dd10ac0ef193a00ceba1db4d4e4707", 0xa8, 0x20000000, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffb}}, 0x24) (async) r9 = socket(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf4, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7f", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$unix(r9, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) (rerun: 64) 57.812369ms ago: executing program 3 (id=340): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffd2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000008000000fcffffff4a4be1"], 0x50) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x686f) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x5, 0x0, 0x2, 0x0, 0x2baf1e3f}}, {0x4}}]}]}, 0xc8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000a2a0000aa08000000000400", @ANYRES64=r5, @ANYBLOB="43000000000000000000000000ea04a46c83f4b2", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="03000000020000000200"/28], 0xfffffffffffffecf) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) r12 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bind$inet(r12, &(0x7f0000004740)={0x2, 0x4e22, @empty}, 0x10) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b03f6ffe0ff64120200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r13}, 0x14) ioctl$HCIINQUIRY(r1, 0x400448df, &(0x7f0000000040)={0x0, 0x0, '\x00\b\x00'}) 0s ago: executing program 4 (id=341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000007680)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000f00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000780)="ff", 0x1}, {&(0x7f00000002c0)="8b750b1119b9fe779e9034e5e8fbe5a7c57b769e289e7db11211549bb7774d", 0x1f}], 0x2}}], 0x2, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, &(0x7f0000000080), 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket(0x28, 0x5, 0x0) unshare(0x68040200) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, 0x0, 0x880) r7 = syz_genetlink_get_family_id$devlink(0x0, r5) r8 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100026bd7000fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000080008a00", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) socket(0x28, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x24}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x803, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 50.654122][ T5219] cgroup: Unknown subsys name 'net' [ 50.782746][ T5219] cgroup: Unknown subsys name 'cpuset' [ 50.791559][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.124531][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.610170][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.614519][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.618672][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.625851][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.633758][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.641318][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.654213][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.658695][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.662805][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.676223][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.685642][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.693121][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.694720][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.700674][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.710690][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.717606][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.723606][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.736813][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.738659][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.751385][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.751475][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.753066][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.775687][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.783236][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.821824][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.834639][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.849199][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.860432][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.869798][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.877216][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.240739][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.310081][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 56.323761][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 56.438046][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.445861][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.453541][ T5235] bridge_slave_0: entered allmulticast mode [ 56.460320][ T5235] bridge_slave_0: entered promiscuous mode [ 56.475153][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 56.488811][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.497919][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.505586][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.512926][ T5235] bridge_slave_1: entered allmulticast mode [ 56.520354][ T5235] bridge_slave_1: entered promiscuous mode [ 56.636391][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.646100][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.653606][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.661744][ T5230] bridge_slave_0: entered allmulticast mode [ 56.668756][ T5230] bridge_slave_0: entered promiscuous mode [ 56.675558][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.682712][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.690220][ T5232] bridge_slave_0: entered allmulticast mode [ 56.697348][ T5232] bridge_slave_0: entered promiscuous mode [ 56.722666][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.732780][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.740136][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.747295][ T5230] bridge_slave_1: entered allmulticast mode [ 56.754843][ T5230] bridge_slave_1: entered promiscuous mode [ 56.762181][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.769691][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.776853][ T5232] bridge_slave_1: entered allmulticast mode [ 56.784198][ T5232] bridge_slave_1: entered promiscuous mode [ 56.859234][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.866340][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.874419][ T5248] bridge_slave_0: entered allmulticast mode [ 56.881660][ T5248] bridge_slave_0: entered promiscuous mode [ 56.891410][ T5235] team0: Port device team_slave_0 added [ 56.899807][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.911515][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.935302][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.942797][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.950657][ T5248] bridge_slave_1: entered allmulticast mode [ 56.957192][ T5248] bridge_slave_1: entered promiscuous mode [ 56.965619][ T5235] team0: Port device team_slave_1 added [ 56.987427][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.000724][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.010043][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.017181][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.025443][ T5229] bridge_slave_0: entered allmulticast mode [ 57.032823][ T5229] bridge_slave_0: entered promiscuous mode [ 57.055940][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.063075][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.089240][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.125000][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.132362][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.139704][ T5229] bridge_slave_1: entered allmulticast mode [ 57.146344][ T5229] bridge_slave_1: entered promiscuous mode [ 57.159657][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.166726][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.193747][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.207359][ T5230] team0: Port device team_slave_0 added [ 57.223115][ T5232] team0: Port device team_slave_0 added [ 57.239938][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.251802][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.267178][ T5230] team0: Port device team_slave_1 added [ 57.274988][ T5232] team0: Port device team_slave_1 added [ 57.328647][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.354466][ T5248] team0: Port device team_slave_0 added [ 57.367360][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.374665][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.401145][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.413554][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.421240][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.447243][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.460265][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.480168][ T5235] hsr_slave_0: entered promiscuous mode [ 57.486390][ T5235] hsr_slave_1: entered promiscuous mode [ 57.494861][ T5248] team0: Port device team_slave_1 added [ 57.501279][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.508731][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.535288][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.571065][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.578381][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.605255][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.628007][ T5229] team0: Port device team_slave_0 added [ 57.664261][ T5229] team0: Port device team_slave_1 added [ 57.683427][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.690853][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.717699][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.729719][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.736712][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.763763][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.764141][ T5242] Bluetooth: hci2: command tx timeout [ 57.793540][ T5232] hsr_slave_0: entered promiscuous mode [ 57.800299][ T5232] hsr_slave_1: entered promiscuous mode [ 57.806342][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.814380][ T5232] Cannot create hsr debugfs directory [ 57.827488][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.834592][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.834776][ T5242] Bluetooth: hci3: command tx timeout [ 57.860932][ T5238] Bluetooth: hci1: command tx timeout [ 57.866304][ T53] Bluetooth: hci0: command tx timeout [ 57.871982][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.908261][ T53] Bluetooth: hci4: command tx timeout [ 57.916458][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.923675][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.949958][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.985337][ T5230] hsr_slave_0: entered promiscuous mode [ 57.993606][ T5230] hsr_slave_1: entered promiscuous mode [ 58.000861][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.008624][ T5230] Cannot create hsr debugfs directory [ 58.069321][ T5248] hsr_slave_0: entered promiscuous mode [ 58.075751][ T5248] hsr_slave_1: entered promiscuous mode [ 58.082053][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.089670][ T5248] Cannot create hsr debugfs directory [ 58.196972][ T5229] hsr_slave_0: entered promiscuous mode [ 58.203626][ T5229] hsr_slave_1: entered promiscuous mode [ 58.210568][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.218298][ T5229] Cannot create hsr debugfs directory [ 58.334577][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.373514][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.385948][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.432325][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.514440][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.534227][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.545126][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.571429][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.613550][ T5230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.631415][ T5230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.641842][ T5230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.661639][ T5230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.722612][ T5248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.748552][ T5248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.769262][ T5248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.789674][ T5248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.832234][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.845040][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.864993][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.877365][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.924155][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.000158][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.032407][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.055620][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.062916][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.087196][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.106472][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.113598][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.153763][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.171689][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.185772][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.197300][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.204437][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.253197][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.260382][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.270551][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.277653][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.300017][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.315768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.323356][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.357514][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.380715][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.387986][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.422630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.429810][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.482133][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.546761][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.553962][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.639451][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.646603][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.692051][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.801213][ T5248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.815593][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.829926][ T53] Bluetooth: hci2: command tx timeout [ 59.873308][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.909662][ T5242] Bluetooth: hci0: command tx timeout [ 59.915141][ T5242] Bluetooth: hci3: command tx timeout [ 59.920660][ T53] Bluetooth: hci1: command tx timeout [ 59.949145][ T5235] veth0_vlan: entered promiscuous mode [ 59.974247][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.989443][ T5242] Bluetooth: hci4: command tx timeout [ 60.011847][ T5230] veth0_vlan: entered promiscuous mode [ 60.049740][ T5235] veth1_vlan: entered promiscuous mode [ 60.074465][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.086706][ T5230] veth1_vlan: entered promiscuous mode [ 60.164921][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.196477][ T5232] veth0_vlan: entered promiscuous mode [ 60.225632][ T5230] veth0_macvtap: entered promiscuous mode [ 60.235413][ T5235] veth0_macvtap: entered promiscuous mode [ 60.256321][ T5232] veth1_vlan: entered promiscuous mode [ 60.265221][ T5230] veth1_macvtap: entered promiscuous mode [ 60.294081][ T5235] veth1_macvtap: entered promiscuous mode [ 60.356527][ T5248] veth0_vlan: entered promiscuous mode [ 60.375607][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.386959][ T5248] veth1_vlan: entered promiscuous mode [ 60.397619][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.411154][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.423292][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.443265][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.459446][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.471697][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.483055][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.497705][ T5230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.507987][ T5230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.517970][ T5230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.526899][ T5230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.546358][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.557403][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.566545][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.575893][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.587274][ T5232] veth0_macvtap: entered promiscuous mode [ 60.597095][ T5232] veth1_macvtap: entered promiscuous mode [ 60.636193][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.647789][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.657845][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.668680][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.679900][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.714502][ T5229] veth0_vlan: entered promiscuous mode [ 60.726327][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.739200][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.749513][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.764527][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.775325][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.801835][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.811096][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.822725][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831849][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.849476][ T5229] veth1_vlan: entered promiscuous mode [ 60.856218][ T5248] veth0_macvtap: entered promiscuous mode [ 60.870888][ T5248] veth1_macvtap: entered promiscuous mode [ 60.952426][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.952426][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.952476][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.984199][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.996390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.997339][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.013847][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.025002][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.035073][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.045698][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.056554][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.084347][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.095126][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107697][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.119584][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.130157][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.140687][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.151792][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.161739][ T5229] veth0_macvtap: entered promiscuous mode [ 61.196465][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.206081][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.217238][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.226363][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.236806][ T5229] veth1_macvtap: entered promiscuous mode [ 61.247033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.260850][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.313584][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.322551][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.340238][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.363618][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.374049][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.384870][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.395062][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.406026][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.416218][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.426839][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.439133][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.443332][ T5230] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.522531][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.547626][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.562543][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.573362][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.590380][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.601207][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.611098][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.621964][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.633760][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.642690][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.651515][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.677556][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.687650][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.699311][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.708598][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.750089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.757968][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.823956][ T5321] netlink: 'syz.3.4': attribute type 27 has an invalid length. [ 61.832345][ T5321] C: renamed from team_slave_0 (while UP) [ 61.862203][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.871181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.909818][ T5242] Bluetooth: hci2: command tx timeout [ 61.989688][ T5242] Bluetooth: hci3: command tx timeout [ 61.995202][ T53] Bluetooth: hci1: command tx timeout [ 62.002668][ T5242] Bluetooth: hci0: command tx timeout [ 62.079683][ T5238] Bluetooth: hci4: command tx timeout [ 62.085530][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.093551][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.192506][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.201034][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.274819][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.307784][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.325530][ T5329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.389742][ T5238] block nbd0: Receive control failed (result -107) [ 62.417288][ T5334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 62.433177][ T5334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 62.526184][ T2502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.560986][ T2502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.967844][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 62.982732][ T5344] x_tables: duplicate entry at hook 3 [ 63.043493][ T5344] netlink: 'syz.3.11': attribute type 13 has an invalid length. [ 63.057721][ T5352] x_tables: duplicate underflow at hook 2 [ 63.083056][ T5344] veth0_macvtap: left promiscuous mode [ 63.097213][ T5344] macvtap0: entered allmulticast mode [ 63.123607][ T5344] macvtap0: refused to change device tx_queue_len [ 63.284621][ T5360] tipc: Started in network mode [ 63.297519][ T5360] tipc: Node identity ac1414aa, cluster identity 4711 [ 63.306082][ T5360] tipc: Enabled bearer , priority 10 [ 63.328590][ T5362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.684982][ T5378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.685750][ T5373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.756465][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 63.946761][ T5386] netlink: 64 bytes leftover after parsing attributes in process `syz.0.24'. [ 63.988985][ T5238] Bluetooth: hci2: command tx timeout [ 64.069510][ T5242] Bluetooth: hci1: command tx timeout [ 64.074999][ T53] Bluetooth: hci3: command tx timeout [ 64.080689][ T5238] Bluetooth: hci0: command tx timeout [ 64.148373][ T5238] Bluetooth: hci4: command tx timeout [ 64.156999][ T5398] Cannot find set identified by id 632 to match [ 64.170192][ T5395] tipc: Started in network mode [ 64.175103][ T5395] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.209753][ T5395] tipc: Enabled bearer , priority 10 [ 64.234771][ T5400] tipc: Started in network mode [ 64.241329][ T5400] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.276805][ T5400] tipc: Enabled bearer , priority 10 [ 64.428885][ T57] tipc: Node number set to 2886997162 [ 64.798651][ T5423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 64.841635][ T5423] bridge_slave_1: left allmulticast mode [ 64.847337][ T5423] bridge_slave_1: left promiscuous mode [ 64.859538][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.899592][ T5426] tipc: Enabling of bearer rejected, already enabled [ 64.979793][ T5429] tipc: Enabling of bearer rejected, already enabled [ 65.261899][ T5444] tipc: Enabling of bearer rejected, already enabled [ 65.335143][ T5450] vlan2: entered promiscuous mode [ 65.353358][ T5453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.353463][ T5282] tipc: Node number set to 2886997162 [ 65.365373][ T5450] macvtap0: entered promiscuous mode [ 65.397163][ T941] tipc: Node number set to 2886997162 [ 65.439686][ T5450] macvtap0: left promiscuous mode [ 65.542936][ T5457] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 65.607646][ T941] IPVS: starting estimator thread 0... [ 65.729690][ T5464] IPVS: using max 17 ests per chain, 40800 per kthread [ 65.731616][ T5462] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 65.765973][ T5462] tipc: Enabled bearer , priority 10 [ 65.798165][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 65.824677][ T5472] tipc: Started in network mode [ 65.848536][ T5472] tipc: Node identity ac1414aa, cluster identity 4711 [ 65.868285][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 65.879056][ T5472] tipc: Enabled bearer , priority 10 [ 65.885319][ T5462] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 65.896122][ T5471] sctp: failed to load transform for md5: -2 [ 66.138239][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 66.328242][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 66.412067][ T5502] tipc: Started in network mode [ 66.416993][ T5502] tipc: Node identity ac1414aa, cluster identity 4711 [ 66.446575][ T5502] tipc: Enabled bearer , priority 10 [ 66.529602][ T5508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 66.678203][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 66.730493][ T5512] sctp: [Deprecated]: syz.4.65 (pid 5512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.730493][ T5512] Use struct sctp_sack_info instead [ 66.928716][ T5522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.002907][ T941] tipc: Node number set to 2886997162 [ 67.337263][ T5538] __nla_validate_parse: 1 callbacks suppressed [ 67.337362][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 67.352679][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 67.558232][ T941] tipc: Node number set to 2886997162 [ 67.748251][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 67.808677][ T5554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.77'. [ 67.822811][ T5554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.77'. [ 68.157400][ T5569] Cannot find add_set index 0 as target [ 68.170648][ T5569] Bluetooth: MGMT ver 1.23 [ 68.294721][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 68.387200][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 68.388196][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 68.403823][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 68.428713][ T5576] netlink: 44 bytes leftover after parsing attributes in process `syz.3.84'. [ 68.639222][ T5592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.88'. [ 68.896147][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'. [ 68.905647][ T5613] netlink: 5 bytes leftover after parsing attributes in process `syz.2.96'. [ 69.063783][ T5619] netlink: 'syz.2.97': attribute type 21 has an invalid length. [ 69.189590][ T5626] gretap0: entered promiscuous mode [ 69.369953][ T5633] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 69.404799][ T5633] team0: Port device virt_wifi0 added [ 69.533914][ T5642] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET) [ 69.545833][ T5640] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 69.811807][ T5655] tipc: Can't bind to reserved service type 2 [ 70.055488][ T5668] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 70.347640][ T5678] can: request_module (can-proto-0) failed. [ 70.881103][ C1] net_ratelimit: 6 callbacks suppressed [ 70.881124][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.273570][ T5732] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 71.298230][ T5732] netlink: 'syz.4.137': attribute type 2 has an invalid length. [ 71.515778][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 71.908215][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 72.021760][ T5776] veth0_virt_wifi: entered promiscuous mode [ 72.079313][ T5778] Dead loop on virtual device ipvlan1, fix it urgently! [ 72.109171][ T5778] tipc: Enabling of bearer rejected, already enabled [ 72.118279][ T5778] Dead loop on virtual device ipvlan1, fix it urgently! [ 72.152072][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.171428][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.243488][ T5778] syz.2.154 (5778) used greatest stack depth: 7608 bytes left [ 72.548156][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 72.587453][ T5806] __nla_validate_parse: 21 callbacks suppressed [ 72.587474][ T5806] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.158'. [ 72.624874][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 72.640561][ T5806] openvswitch: netlink: ufid size 26 bytes exceeds the range (1, 16) [ 72.658370][ T5806] openvswitch: netlink: Message has 76 unknown bytes. [ 72.958149][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 73.026163][ T5782] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 73.084621][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 73.129797][ T5831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.164'. [ 73.284425][ T5838] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 73.369935][ T5841] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 73.378368][ T5841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.167'. [ 73.393605][ T5841] batman_adv: batadv0: Adding interface: vlan1 [ 73.404443][ T5841] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.438941][ T5841] batman_adv: batadv0: Interface activated: vlan1 [ 73.456961][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 73.470830][ T5842] tipc: Enabling of bearer rejected, already enabled [ 73.588224][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 73.742894][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 74.004856][ T5871] Bluetooth: MGMT ver 1.23 [ 74.038698][ T5869] Zero length message leads to an empty skb [ 74.260295][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 74.344115][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 74.349279][ T5893] tipc: Enabling of bearer rejected, already enabled [ 74.423522][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 74.437923][ T5895] x_tables: duplicate entry at hook 3 [ 74.563382][ T5903] netlink: 'syz.3.186': attribute type 13 has an invalid length. [ 74.579177][ T5903] macvtap0: refused to change device tx_queue_len [ 74.626768][ T5909] netlink: 'syz.4.191': attribute type 28 has an invalid length. [ 74.980452][ T5915] 0·: renamed from hsr_slave_1 (while UP) [ 75.027499][ T5915] 0·: entered allmulticast mode [ 75.240034][ T5933] tipc: Enabling of bearer rejected, already enabled [ 75.358529][ T2543] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.441508][ T5943] syzkaller0: tun_chr_ioctl cmd 35108 [ 75.871795][ T5965] x_tables: duplicate underflow at hook 1 [ 75.954194][ T5969] x_tables: duplicate underflow at hook 1 [ 76.002334][ T5974] warning: `syz.0.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.068195][ C1] net_ratelimit: 6 callbacks suppressed [ 76.068212][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 76.590778][ T5998] tipc: Enabling of bearer rejected, already enabled [ 76.708248][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 77.112371][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 77.273317][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 77.748210][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 77.809758][ T6029] __nla_validate_parse: 8 callbacks suppressed [ 77.809778][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'. [ 78.148687][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 78.788176][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 79.001636][ T6057] Dead loop on virtual device ipvlan1, fix it urgently! [ 79.188879][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 79.423228][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.223'. [ 79.832139][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 80.063770][ T6058] batman_adv: batadv0: Adding interface: macsec2 [ 80.074015][ T6058] batman_adv: batadv0: The MTU of interface macsec2 is too small (1436) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.110265][ T6058] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 80.152435][ T938] cfg80211: failed to load regulatory.db [ 80.198084][ C1] sched: DL replenish lagged too much [ 80.343995][ T6065] tipc: Enabling of bearer rejected, already enabled [ 81.229083][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 81.276958][ C1] net_ratelimit: 2 callbacks suppressed [ 81.276977][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 81.299020][ T6090] x_tables: duplicate entry at hook 3 [ 81.529938][ T6100] netlink: 'syz.0.236': attribute type 13 has an invalid length. [ 81.604396][ T6100] veth0_macvtap: left promiscuous mode [ 81.726091][ T6100] macvtap0: entered allmulticast mode [ 81.770205][ T6100] macvtap0: refused to change device tx_queue_len [ 81.908230][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 82.315681][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 82.359392][ T6123] tipc: Enabling of bearer rejected, already enabled [ 82.627663][ T6129] xt_hashlimit: max too large, truncated to 1048576 [ 82.948239][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.091025][ T6105] tap0: tun_chr_ioctl cmd 1074025677 [ 83.111109][ T6105] tap0: linktype set to 780 [ 83.145943][ T6132] netlink: 'syz.3.244': attribute type 6 has an invalid length. [ 83.352287][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.359848][ T6143] tipc: Enabling of bearer rejected, already enabled [ 83.419999][ T6145] vlan2: entered promiscuous mode [ 83.425092][ T6145] gretap0: entered promiscuous mode [ 83.988277][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 84.092106][ T6164] tipc: Enabling of bearer rejected, already enabled [ 84.179873][ T6166] tipc: Enabling of bearer rejected, already enabled [ 84.326778][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 84.369535][ T6168] FAULT_INJECTION: forcing a failure. [ 84.369535][ T6168] name failslab, interval 1, probability 0, space 0, times 1 [ 84.402098][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 84.419987][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.0.257 Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 84.430648][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.440743][ T6168] Call Trace: [ 84.444097][ T6168] [ 84.447048][ T6168] dump_stack_lvl+0x241/0x360 [ 84.451777][ T6168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.457004][ T6168] ? __pfx__printk+0x10/0x10 [ 84.461623][ T6168] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 84.467647][ T6168] ? __pfx___might_resched+0x10/0x10 [ 84.472975][ T6168] should_fail_ex+0x3b0/0x4e0 [ 84.477689][ T6168] should_failslab+0xac/0x100 [ 84.482394][ T6168] ? __alloc_skb+0x1c3/0x440 [ 84.487009][ T6168] kmem_cache_alloc_node_noprof+0x71/0x320 [ 84.492852][ T6168] __alloc_skb+0x1c3/0x440 [ 84.497331][ T6168] ? __pfx___alloc_skb+0x10/0x10 [ 84.502439][ T6168] ? netlink_ack_tlv_len+0x6e/0x200 [ 84.507683][ T6168] netlink_ack+0x13f/0xa30 [ 84.512131][ T6168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.517732][ T6168] netlink_rcv_skb+0x262/0x430 [ 84.522538][ T6168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.528028][ T6168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.533355][ T6168] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.538673][ T6168] netlink_unicast+0x7f6/0x990 [ 84.543487][ T6168] ? __pfx_netlink_unicast+0x10/0x10 [ 84.548810][ T6168] ? __virt_addr_valid+0x183/0x530 [ 84.553952][ T6168] ? __check_object_size+0x48e/0x900 [ 84.559277][ T6168] netlink_sendmsg+0x8e4/0xcb0 [ 84.564091][ T6168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.569507][ T6168] ? aa_sock_msg_perm+0x91/0x160 [ 84.574492][ T6168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.579822][ T6168] __sock_sendmsg+0x221/0x270 [ 84.584549][ T6168] ____sys_sendmsg+0x52a/0x7e0 [ 84.589353][ T6168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.594683][ T6168] __sys_sendmsg+0x292/0x380 [ 84.599306][ T6168] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.604474][ T6168] ? __pfx_vfs_write+0x10/0x10 [ 84.609291][ T6168] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.615747][ T6168] ? do_syscall_64+0x100/0x230 [ 84.620550][ T6168] ? do_syscall_64+0xb6/0x230 [ 84.625259][ T6168] do_syscall_64+0xf3/0x230 [ 84.629789][ T6168] ? clear_bhb_loop+0x35/0x90 [ 84.634500][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.640454][ T6168] RIP: 0033:0x7f00d357dff9 [ 84.644996][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.664644][ T6168] RSP: 002b:00007f00d434d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.673106][ T6168] RAX: ffffffffffffffda RBX: 00007f00d3735f80 RCX: 00007f00d357dff9 [ 84.681123][ T6168] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 84.689127][ T6168] RBP: 00007f00d434d090 R08: 0000000000000000 R09: 0000000000000000 [ 84.697127][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.705131][ T6168] R13: 0000000000000000 R14: 00007f00d3735f80 R15: 00007ffee219bbc8 [ 84.713146][ T6168] [ 85.028234][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 85.276994][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 85.430581][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 85.969545][ T6184] syzkaller0: entered promiscuous mode [ 85.994312][ T6184] syzkaller0: entered allmulticast mode [ 86.064721][ T12] syzkaller0: tun_net_xmit 48 [ 86.070463][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 86.484727][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.108261][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.526754][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 88.162141][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 88.395977][ T6211] can: request_module (can-proto-0) failed. [ 88.553615][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 89.188335][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 89.596753][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 90.231083][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 90.632058][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 91.268328][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 91.672747][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 92.308295][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 92.711532][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.348267][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.760328][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 94.392198][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 94.550946][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 94.793606][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 95.428300][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 95.846684][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 96.224439][ T6198] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 96.315887][ T6203] tipc: Enabling of bearer rejected, already enabled [ 96.880199][ C1] net_ratelimit: 1 callbacks suppressed [ 96.880228][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 97.508275][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 97.911057][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 98.241477][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.254979][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.263987][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.288902][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.304080][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.329006][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.392662][ T6250] netlink: 'syz.4.280': attribute type 29 has an invalid length. [ 98.463312][ T6264] netlink: 'syz.4.280': attribute type 29 has an invalid length. [ 98.548161][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 98.638843][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 98.844335][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.854316][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.863503][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.872967][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.905234][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.929287][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.951258][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 99.214307][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 99.713863][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 99.775084][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 99.851249][ T2552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.011914][ T6280] tipc: Enabling of bearer rejected, already enabled [ 100.471128][ T53] Bluetooth: hci2: command tx timeout [ 100.704304][ T2552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.013822][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 101.028899][ T53] Bluetooth: hci1: command tx timeout [ 101.076827][ T6309] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 101.383289][ T2552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.887421][ T2552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.234611][ T2552] bridge_slave_1: left allmulticast mode [ 102.266562][ T2552] bridge_slave_1: left promiscuous mode [ 102.276718][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.350503][ T2552] bridge_slave_0: left allmulticast mode [ 102.356477][ T2552] bridge_slave_0: left promiscuous mode [ 102.370930][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.550620][ T53] Bluetooth: hci2: command tx timeout [ 103.112352][ T53] Bluetooth: hci1: command tx timeout [ 104.254376][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.319278][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.415803][ T2552] bond0 (unregistering): Released all slaves [ 104.629228][ T53] Bluetooth: hci2: command tx timeout [ 104.927386][ T6311] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 104.958976][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 104.976450][ T6319] netlink: 'syz.4.293': attribute type 39 has an invalid length. [ 105.159178][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 105.189398][ T53] Bluetooth: hci1: command tx timeout [ 105.211365][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 105.317740][ T2552] tipc: Disabling bearer [ 105.349476][ T2552] tipc: Disabling bearer [ 105.384428][ T2552] tipc: Left network mode [ 105.655890][ T6332] tipc: Enabling of bearer rejected, already enabled [ 106.668451][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.717578][ T53] Bluetooth: hci2: command tx timeout [ 106.737474][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.798961][ T6258] bridge_slave_0: entered allmulticast mode [ 106.833903][ T6258] bridge_slave_0: entered promiscuous mode [ 106.928989][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.962685][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.018924][ T6258] bridge_slave_1: entered allmulticast mode [ 107.045159][ T6258] bridge_slave_1: entered promiscuous mode [ 107.269147][ T53] Bluetooth: hci1: command tx timeout [ 107.583586][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 107.659059][ T6365] netlink: 'syz.4.303': attribute type 10 has an invalid length. [ 107.666850][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 107.750017][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 107.806206][ T6364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.869487][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 108.034490][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 108.685705][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.153148][ T2552] hsr_slave_0: left promiscuous mode [ 109.250957][ T2552] hsr_slave_1: left promiscuous mode [ 109.314590][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.361690][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.444615][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.479523][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.635960][ T2552] veth1_macvtap: left promiscuous mode [ 109.663467][ T2552] veth0_macvtap: left promiscuous mode [ 109.693450][ T2552] veth1_vlan: left promiscuous mode [ 109.713560][ T2552] veth0_vlan: left promiscuous mode [ 111.465548][ T2552] team0 (unregistering): Port device virt_wifi0 removed [ 112.624623][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 112.832486][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 114.434582][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.748909][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 114.897849][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 115.284337][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 115.305725][ T6412] x_tables: duplicate entry at hook 3 [ 115.372740][ T6412] netlink: 'syz.2.317': attribute type 13 has an invalid length. [ 115.457616][ T6412] veth0_macvtap: left promiscuous mode [ 115.566746][ T6412] macvtap0: entered allmulticast mode [ 115.588008][ T6412] macvtap0: refused to change device tx_queue_len [ 115.775926][ T2552] IPVS: stop unused estimator thread 0... [ 117.764651][ T6258] team0: Port device team_slave_0 added [ 117.862802][ T6258] team0: Port device team_slave_1 added [ 118.095990][ T6421] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 118.199820][ T6421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.208013][ T6423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.320'. [ 118.521549][ T6428] netlink: 256 bytes leftover after parsing attributes in process `syz.2.321'. [ 118.586790][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 118.859848][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 121.225786][ T6465] netlink: 'syz.4.332': attribute type 39 has an invalid length. [ 121.475341][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 121.930196][ T6481] bond0: option mode: unable to set because the bond device has slaves [ 129.749042][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 133.599274][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.605687][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.295559][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.308814][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.344913][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.372154][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.381367][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 173.390906][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.428475][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.439773][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.459267][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.489958][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.508381][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.518769][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.619849][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.630745][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.639489][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.659530][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.679382][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.691099][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.817997][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.831286][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.839912][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.850629][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.858670][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 173.878604][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.960150][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.971783][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.980134][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.987985][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.997098][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 174.006330][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.428270][ T53] Bluetooth: hci5: command tx timeout [ 175.588411][ T53] Bluetooth: hci0: command tx timeout [ 175.748343][ T53] Bluetooth: hci3: command tx timeout [ 175.988316][ T53] Bluetooth: hci6: command tx timeout [ 176.068380][ T53] Bluetooth: hci7: command tx timeout [ 177.508253][ T53] Bluetooth: hci5: command tx timeout [ 177.671054][ T53] Bluetooth: hci0: command tx timeout [ 177.828335][ T53] Bluetooth: hci3: command tx timeout [ 178.068292][ T53] Bluetooth: hci6: command tx timeout [ 178.148389][ T53] Bluetooth: hci7: command tx timeout [ 179.588322][ T53] Bluetooth: hci5: command tx timeout [ 179.752703][ T53] Bluetooth: hci0: command tx timeout [ 179.908359][ T53] Bluetooth: hci3: command tx timeout [ 180.148365][ T53] Bluetooth: hci6: command tx timeout [ 180.228357][ T53] Bluetooth: hci7: command tx timeout [ 181.668380][ T53] Bluetooth: hci5: command tx timeout [ 181.834068][ T53] Bluetooth: hci0: command tx timeout [ 181.988355][ T53] Bluetooth: hci3: command tx timeout [ 182.228325][ T53] Bluetooth: hci6: command tx timeout [ 182.308260][ T53] Bluetooth: hci7: command tx timeout [ 195.038570][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.044928][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.114596][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 200.148986][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 222.708350][ T5241] Bluetooth: hci2: command 0x0406 tx timeout [ 222.723479][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 234.155168][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 234.164333][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 234.172729][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 234.180884][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 234.218910][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 234.236398][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 234.366852][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 234.377938][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 234.386540][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 234.399690][ T5242] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 234.411718][ T5242] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 234.426585][ T5242] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 234.438724][ T5241] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 234.464839][ T5241] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 234.473956][ T5241] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 234.488290][ T5241] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 234.504851][ T5241] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 234.513260][ T5241] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 234.639540][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 234.649517][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 234.660594][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 234.669064][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 234.677910][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 234.688580][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 234.736342][ T5241] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 234.745816][ T5241] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 234.755756][ T5241] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 234.768701][ T5241] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 234.787736][ T5241] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 234.800627][ T5241] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 236.308388][ T5238] Bluetooth: hci8: command tx timeout [ 236.468464][ T5238] Bluetooth: hci9: command tx timeout [ 236.548503][ T5238] Bluetooth: hci10: command tx timeout [ 236.708437][ T5238] Bluetooth: hci11: command tx timeout [ 236.868517][ T5238] Bluetooth: hci12: command tx timeout [ 238.388367][ T5238] Bluetooth: hci8: command tx timeout [ 238.548423][ T5238] Bluetooth: hci9: command tx timeout [ 238.628528][ T5238] Bluetooth: hci10: command tx timeout [ 238.788368][ T5238] Bluetooth: hci11: command tx timeout [ 238.948387][ T5238] Bluetooth: hci12: command tx timeout [ 240.468578][ T5238] Bluetooth: hci8: command tx timeout [ 240.628745][ T5238] Bluetooth: hci9: command tx timeout [ 240.708616][ T5238] Bluetooth: hci10: command tx timeout [ 240.868666][ T5238] Bluetooth: hci11: command tx timeout [ 241.028487][ T5238] Bluetooth: hci12: command tx timeout [ 242.548265][ T5238] Bluetooth: hci8: command tx timeout [ 242.711676][ T5238] Bluetooth: hci9: command tx timeout [ 242.788518][ T5238] Bluetooth: hci10: command tx timeout [ 242.953175][ T5238] Bluetooth: hci11: command tx timeout [ 243.108457][ T5238] Bluetooth: hci12: command tx timeout [ 256.471027][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.477542][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.668564][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 275.677045][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.718151][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.767495][ T30] task:kworker/u8:2 state:D stack:21488 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 275.888611][ T30] Workqueue: netns cleanup_net [ 275.893479][ T30] Call Trace: [ 275.896778][ T30] [ 275.974469][ T30] __schedule+0x1895/0x4b30 [ 275.998166][ T30] ? __pfx___schedule+0x10/0x10 [ 276.003179][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.055122][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 276.078316][ T30] ? kthread_data+0x52/0xd0 [ 276.083859][ T30] ? schedule+0x90/0x320 [ 276.120234][ T30] ? wq_worker_sleeping+0x66/0x240 [ 276.125430][ T30] ? schedule+0x90/0x320 [ 276.178301][ T30] schedule+0x14b/0x320 [ 276.182539][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.232245][ T30] __mutex_lock+0x6a7/0xd70 [ 276.236827][ T30] ? __mutex_lock+0x52a/0xd70 [ 276.288275][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 276.293034][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.336584][ T30] ? net_generic+0x1f/0x240 [ 276.355327][ T30] ppp_exit_net+0xe3/0x3d0 [ 276.378486][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 276.383585][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 276.421987][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 276.448210][ T30] cleanup_net+0x802/0xcc0 [ 276.452703][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 276.457681][ T30] ? process_scheduled_works+0x976/0x1850 [ 276.501621][ T30] process_scheduled_works+0xa63/0x1850 [ 276.507316][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.560656][ T30] ? assign_work+0x364/0x3d0 [ 276.565347][ T30] worker_thread+0x870/0xd30 [ 276.598238][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 276.604221][ T30] ? __kthread_parkme+0x169/0x1d0 [ 276.668197][ T30] ? __pfx_worker_thread+0x10/0x10 [ 276.673396][ T30] kthread+0x2f0/0x390 [ 276.677498][ T30] ? __pfx_worker_thread+0x10/0x10 [ 276.736419][ T30] ? __pfx_kthread+0x10/0x10 [ 276.768519][ T30] ret_from_fork+0x4b/0x80 [ 276.773011][ T30] ? __pfx_kthread+0x10/0x10 [ 276.777635][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.807662][ T30] [ 276.825115][ T30] INFO: task kworker/u8:8:2552 blocked for more than 144 seconds. [ 276.850521][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 276.877083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.896816][ T30] task:kworker/u8:8 state:D stack:21360 pid:2552 tgid:2552 ppid:2 flags:0x00004000 [ 276.927230][ T30] Workqueue: events_unbound linkwatch_event [ 276.945320][ T30] Call Trace: [ 276.954612][ T30] [ 276.957611][ T30] __schedule+0x1895/0x4b30 [ 276.975179][ T30] ? __pfx___schedule+0x10/0x10 [ 276.992390][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.997560][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 277.024239][ T30] ? kthread_data+0x52/0xd0 [ 277.037685][ T30] ? schedule+0x90/0x320 [ 277.054444][ T30] ? wq_worker_sleeping+0x66/0x240 [ 277.075340][ T30] ? schedule+0x90/0x320 [ 277.079787][ T30] schedule+0x14b/0x320 [ 277.083993][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.115330][ T30] __mutex_lock+0x6a7/0xd70 [ 277.124175][ T30] ? __mutex_lock+0x52a/0xd70 [ 277.142727][ T30] ? linkwatch_event+0xe/0x60 [ 277.147473][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.173872][ T30] ? process_scheduled_works+0x976/0x1850 [ 277.196472][ T30] linkwatch_event+0xe/0x60 [ 277.203252][ T30] process_scheduled_works+0xa63/0x1850 [ 277.235508][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.247454][ T30] ? assign_work+0x364/0x3d0 [ 277.265061][ T30] worker_thread+0x870/0xd30 [ 277.278321][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 277.284301][ T30] ? __kthread_parkme+0x169/0x1d0 [ 277.308335][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.314426][ T30] kthread+0x2f0/0x390 [ 277.332991][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.352948][ T30] ? __pfx_kthread+0x10/0x10 [ 277.357617][ T30] ret_from_fork+0x4b/0x80 [ 277.382656][ T30] ? __pfx_kthread+0x10/0x10 [ 277.387329][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.415616][ T30] [ 277.426470][ T30] INFO: task jbd2/sda1-8:4649 blocked for more than 145 seconds. [ 277.552840][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 277.573767][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.626197][ T30] task:jbd2/sda1-8 state:D stack:24528 pid:4649 tgid:4649 ppid:2 flags:0x00004000 [ 277.658120][ T30] Call Trace: [ 277.661475][ T30] [ 277.664439][ T30] __schedule+0x1895/0x4b30 [ 277.695572][ T30] ? __pfx___schedule+0x10/0x10 [ 277.715043][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.728297][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.734382][ T30] ? schedule+0x90/0x320 [ 277.754892][ T30] schedule+0x14b/0x320 [ 277.773559][ T30] io_schedule+0x8d/0x110 [ 277.777962][ T30] bit_wait_io+0x12/0xd0 [ 277.803122][ T30] __wait_on_bit+0xb0/0x2f0 [ 277.807704][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 277.831226][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 277.836767][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 277.862008][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 277.885320][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 277.896749][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 277.917575][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 277.935509][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 277.954895][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 277.975535][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 277.995106][ T30] ? __timer_delete_sync+0x15c/0x310 [ 278.006841][ T30] ? __timer_delete_sync+0x25d/0x310 [ 278.024133][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 278.043724][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 278.064048][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.083523][ T30] ? prepare_to_wait+0x186/0x210 [ 278.098247][ T30] ? finish_wait+0xd4/0x1e0 [ 278.102919][ T30] kjournald2+0x41c/0x7b0 [ 278.107290][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.145216][ T30] ? __pfx_kjournald2+0x10/0x10 [ 278.165814][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 278.179173][ T30] ? __kthread_parkme+0x169/0x1d0 [ 278.184288][ T30] ? __pfx_kjournald2+0x10/0x10 [ 278.206501][ T30] kthread+0x2f0/0x390 [ 278.218241][ T30] ? __pfx_kjournald2+0x10/0x10 [ 278.223252][ T30] ? __pfx_kthread+0x10/0x10 [ 278.227881][ T30] ret_from_fork+0x4b/0x80 [ 278.258270][ T30] ? __pfx_kthread+0x10/0x10 [ 278.262924][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.267743][ T30] [ 278.299059][ T30] INFO: task dhcpcd:4901 blocked for more than 145 seconds. [ 278.306400][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 278.378119][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.445889][ T30] task:dhcpcd state:D stack:20152 pid:4901 tgid:4901 ppid:4900 flags:0x00000002 [ 278.478665][ T30] Call Trace: [ 278.482089][ T30] [ 278.485046][ T30] __schedule+0x1895/0x4b30 [ 278.506033][ T30] ? __pfx___schedule+0x10/0x10 [ 278.524859][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.533795][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 278.549174][ T30] ? schedule+0x90/0x320 [ 278.553492][ T30] schedule+0x14b/0x320 [ 278.557681][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.591072][ T30] __mutex_lock+0x6a7/0xd70 [ 278.595664][ T30] ? __mutex_lock+0x52a/0xd70 [ 278.638319][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 278.644301][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 278.678421][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 278.683444][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 278.716588][ T30] ? __lock_acquire+0x1384/0x2050 [ 278.725271][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.744426][ T30] netlink_rcv_skb+0x1e3/0x430 [ 278.764284][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.775176][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.798286][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.803567][ T30] netlink_unicast+0x7f6/0x990 [ 278.834924][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 278.844749][ T30] ? __virt_addr_valid+0x183/0x530 [ 278.863584][ T30] ? __check_object_size+0x48e/0x900 [ 278.882635][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 278.887481][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.908286][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 278.913304][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.945571][ T30] __sock_sendmsg+0x221/0x270 [ 278.954596][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 278.971799][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.977159][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.004297][ T30] __sys_sendmsg+0x292/0x380 [ 279.014192][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.034507][ T30] ? netlink_bind+0xaeb/0xc90 [ 279.048706][ T30] ? __pfx___sys_bind+0x10/0x10 [ 279.067548][ T30] ? fd_install+0x35c/0x5d0 [ 279.082691][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.095477][ T30] ? do_syscall_64+0x100/0x230 [ 279.117357][ T30] ? do_syscall_64+0xb6/0x230 [ 279.128300][ T30] do_syscall_64+0xf3/0x230 [ 279.132871][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.137583][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.171531][ T30] RIP: 0033:0x7f7b48e39a4b [ 279.176021][ T30] RSP: 002b:00007ffd63b4d5b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.206404][ T30] RAX: ffffffffffffffda RBX: 00007f7b48d616c0 RCX: 00007f7b48e39a4b [ 279.233504][ T30] RDX: 0000000000000000 RSI: 00007ffd63b61768 RDI: 0000000000000018 [ 279.252851][ T30] RBP: 0000000000000018 R08: 0000000000000000 R09: 00007ffd63b61768 [ 279.279308][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 279.287347][ T30] R13: 00007ffd63b61768 R14: 0000000000000030 R15: 0000000000000001 [ 279.303907][ T30] [ 279.307136][ T30] INFO: task syz-executor:6258 blocked for more than 146 seconds. [ 279.326827][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 279.334887][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.411657][ T30] task:syz-executor state:D stack:21728 pid:6258 tgid:6258 ppid:1 flags:0x00004004 [ 279.427704][ T30] Call Trace: [ 279.437599][ T30] [ 279.444402][ T30] __schedule+0x1895/0x4b30 [ 279.452769][ T30] ? __pfx___schedule+0x10/0x10 [ 279.457776][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.467960][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.477338][ T30] ? schedule+0x90/0x320 [ 279.485393][ T30] schedule+0x14b/0x320 [ 279.495267][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.504670][ T30] __mutex_lock+0x6a7/0xd70 [ 279.517938][ T30] ? __mutex_lock+0x52a/0xd70 [ 279.526906][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.536074][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.545935][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.554780][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 279.565262][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.576361][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.584033][ T30] netlink_rcv_skb+0x1e3/0x430 [ 279.595053][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.603129][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.614550][ T30] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 279.621233][ T30] ? rtnetlink_rcv+0xd/0x20 [ 279.625791][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.638465][ T30] netlink_unicast+0x7f6/0x990 [ 279.643313][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 279.657592][ T30] ? __virt_addr_valid+0x183/0x530 [ 279.663062][ T30] ? __check_object_size+0x48e/0x900 [ 279.678146][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 279.683005][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.695180][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 279.701971][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.707341][ T30] __sock_sendmsg+0x221/0x270 [ 279.719936][ T30] __sys_sendto+0x39b/0x4f0 [ 279.724525][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 279.734664][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.742976][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 279.755402][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.765237][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.781447][ T30] __x64_sys_sendto+0xde/0x100 [ 279.786284][ T30] do_syscall_64+0xf3/0x230 [ 279.795810][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.803232][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.814347][ T30] RIP: 0033:0x7fa625b7fe8c [ 279.821506][ T30] RSP: 002b:00007ffd7d2137e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 279.837775][ T30] RAX: ffffffffffffffda RBX: 00007fa626864620 RCX: 00007fa625b7fe8c [ 279.853152][ T30] RDX: 000000000000006c RSI: 00007fa626864670 RDI: 0000000000000003 [ 279.863180][ T30] RBP: 0000000000000000 R08: 00007ffd7d213834 R09: 000000000000000c [ 279.878157][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 279.886212][ T30] R13: 0000000000000000 R14: 00007fa626864670 R15: 0000000000000000 [ 279.900980][ T30] [ 279.904130][ T30] INFO: task syz-executor:6267 blocked for more than 147 seconds. [ 279.919942][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 279.927624][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.942707][ T30] task:syz-executor state:D stack:21728 pid:6267 tgid:6267 ppid:1 flags:0x00000004 [ 279.955680][ T30] Call Trace: [ 279.964075][ T30] [ 279.967053][ T30] __schedule+0x1895/0x4b30 [ 279.981285][ T30] ? __pfx___schedule+0x10/0x10 [ 279.986213][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.998340][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 280.003970][ T30] ? schedule+0x90/0x320 [ 280.015988][ T30] schedule+0x14b/0x320 [ 280.020639][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.026154][ T30] __mutex_lock+0x6a7/0xd70 [ 280.038036][ T30] ? __mutex_lock+0x52a/0xd70 [ 280.042895][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.057297][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.062843][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.067961][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 280.083327][ T30] ? __lock_acquire+0x1384/0x2050 [ 280.093746][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.103230][ T30] netlink_rcv_skb+0x1e3/0x430 [ 280.111959][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.117586][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.127414][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.137962][ T30] netlink_unicast+0x7f6/0x990 [ 280.146591][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 280.156254][ T30] ? __virt_addr_valid+0x183/0x530 [ 280.165277][ T30] ? __check_object_size+0x48e/0x900 [ 280.174596][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 280.184565][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.193803][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 280.205612][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.215818][ T30] __sock_sendmsg+0x221/0x270 [ 280.224574][ T30] __sys_sendto+0x39b/0x4f0 [ 280.233454][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 280.242334][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.252367][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.262561][ T30] __x64_sys_sendto+0xde/0x100 [ 280.267390][ T30] do_syscall_64+0xf3/0x230 [ 280.275993][ T30] ? clear_bhb_loop+0x35/0x90 [ 280.287548][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.297408][ T30] RIP: 0033:0x7fac04f7fe8c [ 280.305681][ T30] RSP: 002b:00007ffe455faf00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 280.318178][ T30] RAX: ffffffffffffffda RBX: 00007fac05c64620 RCX: 00007fac04f7fe8c [ 280.332414][ T30] RDX: 0000000000000028 RSI: 00007fac05c64670 RDI: 0000000000000003 [ 280.343138][ T30] RBP: 0000000000000000 R08: 00007ffe455faf54 R09: 000000000000000c [ 280.357826][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 280.373098][ T30] R13: 0000000000000000 R14: 00007fac05c64670 R15: 0000000000000000 [ 280.382860][ T30] [ 280.387254][ T30] INFO: task syz.2.321:6428 blocked for more than 148 seconds. [ 280.402876][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 280.413259][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.435430][ T30] task:syz.2.321 state:D stack:23152 pid:6428 tgid:6424 ppid:5248 flags:0x00004004 [ 280.447173][ T30] Call Trace: [ 280.457716][ T30] [ 280.461045][ T30] __schedule+0x1895/0x4b30 [ 280.465614][ T30] ? __pfx___schedule+0x10/0x10 [ 280.478124][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.483229][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 280.498518][ T30] ? schedule+0x90/0x320 [ 280.502838][ T30] schedule+0x14b/0x320 [ 280.507034][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.520268][ T30] __mutex_lock+0x6a7/0xd70 [ 280.524848][ T30] ? __mutex_lock+0x52a/0xd70 [ 280.535740][ T30] ? dev_ioctl+0x706/0x1340 [ 280.543369][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.551301][ T30] ? apparmor_capable+0x13b/0x1b0 [ 280.556480][ T30] ? dev_load+0x21/0x1f0 [ 280.570709][ T30] dev_ioctl+0x706/0x1340 [ 280.575116][ T30] sock_do_ioctl+0x240/0x460 [ 280.586020][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 280.594035][ T30] sock_ioctl+0x626/0x8e0 [ 280.604833][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 280.611425][ T30] ? __fget_files+0x29/0x470 [ 280.616087][ T30] ? __fget_files+0x3f3/0x470 [ 280.627676][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 280.636528][ T30] __se_sys_ioctl+0xf9/0x170 [ 280.647138][ T30] do_syscall_64+0xf3/0x230 [ 280.654884][ T30] ? clear_bhb_loop+0x35/0x90 [ 280.664492][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.673176][ T30] RIP: 0033:0x7f3c0637dff9 [ 280.677647][ T30] RSP: 002b:00007f3c07200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.691515][ T30] RAX: ffffffffffffffda RBX: 00007f3c06535f80 RCX: 00007f3c0637dff9 [ 280.705982][ T30] RDX: 0000000020000440 RSI: 0000000000008922 RDI: 0000000000000004 [ 280.718230][ T30] RBP: 00007f3c063f0296 R08: 0000000000000000 R09: 0000000000000000 [ 280.733484][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.743127][ T30] R13: 0000000000000000 R14: 00007f3c06535f80 R15: 00007ffe6874f318 [ 280.758196][ T30] [ 280.761774][ T30] [ 280.761774][ T30] Showing all locks held in the system: [ 280.778267][ T30] 1 lock held by khungtaskd/30: [ 280.783172][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 280.798553][ T30] 4 locks held by kworker/u8:2/35: [ 280.803724][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.822318][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.842728][ T30] #2: ffffffff8fcc6210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 280.860855][ T30] #3: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 280.878606][ T30] 3 locks held by kworker/u8:7/2543: [ 280.883944][ T30] #0: ffff88802e4fc148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.903280][ T30] #1: ffffc90009297d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.920452][ T30] #2: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 280.936269][ T30] 3 locks held by kworker/u8:8/2552: [ 280.943247][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 280.961234][ T30] #1: ffffc90009347d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 280.982515][ T30] #2: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 280.995349][ T30] 1 lock held by dhcpcd/4901: [ 281.005075][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.018958][ T30] 2 locks held by getty/4989: [ 281.023694][ T30] #0: ffff88814b8430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.041188][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 281.056891][ T30] 1 lock held by syz-executor/5235: [ 281.066098][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 281.079037][ T30] 6 locks held by kworker/1:6/5283: [ 281.084290][ T30] 3 locks held by kworker/1:8/5333: [ 281.097021][ T30] 1 lock held by syz-executor/6258: [ 281.103786][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.122205][ T30] 1 lock held by syz-executor/6267: [ 281.127456][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.141099][ T30] 1 lock held by syz.2.321/6428: [ 281.146090][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 281.159585][ T30] 1 lock held by syz-executor/6508: [ 281.164834][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.178621][ T30] 1 lock held by syz-executor/6511: [ 281.183876][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.204596][ T30] 1 lock held by syz-executor/6514: [ 281.216001][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.233329][ T30] 1 lock held by syz-executor/6516: [ 281.240310][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.257653][ T30] 1 lock held by syz-executor/6518: [ 281.264432][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.280558][ T30] 1 lock held by syz-executor/6528: [ 281.285821][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.298131][ T30] 1 lock held by syz-executor/6531: [ 281.303383][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.325171][ T30] 1 lock held by syz-executor/6532: [ 281.334273][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.347873][ T30] 1 lock held by syz-executor/6538: [ 281.361551][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.374859][ T30] 1 lock held by syz-executor/6540: [ 281.383838][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.402249][ T30] [ 281.404627][ T30] ============================================= [ 281.404627][ T30] [ 281.417256][ T30] NMI backtrace for cpu 0 [ 281.421631][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 281.432310][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.442401][ T30] Call Trace: [ 281.445702][ T30] [ 281.448657][ T30] dump_stack_lvl+0x241/0x360 [ 281.453372][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.458603][ T30] ? __pfx__printk+0x10/0x10 [ 281.463233][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 281.468215][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.473790][ T30] ? _printk+0xd5/0x120 [ 281.477971][ T30] ? __pfx__printk+0x10/0x10 [ 281.482591][ T30] ? __wake_up_klogd+0xcc/0x110 [ 281.487475][ T30] ? __pfx__printk+0x10/0x10 [ 281.492098][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 281.497170][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.503270][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 281.509301][ T30] watchdog+0xff4/0x1040 [ 281.513577][ T30] ? watchdog+0x1ea/0x1040 [ 281.518035][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.522732][ T30] kthread+0x2f0/0x390 [ 281.526823][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.531535][ T30] ? __pfx_kthread+0x10/0x10 [ 281.536234][ T30] ret_from_fork+0x4b/0x80 [ 281.540674][ T30] ? __pfx_kthread+0x10/0x10 [ 281.545289][ T30] ret_from_fork_asm+0x1a/0x30 [ 281.550097][ T30] [ 281.554047][ T30] Sending NMI from CPU 0 to CPUs 1: [ 281.559742][ C1] NMI backtrace for cpu 1 [ 281.559756][ C1] CPU: 1 UID: 0 PID: 5283 Comm: kworker/1:6 Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 281.559774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.559784][ C1] Workqueue: events nsim_dev_trap_report_work [ 281.559808][ C1] RIP: 0010:preempt_count_sub+0x7/0x170 [ 281.559830][ C1] Code: c7 c0 3a 1d 90 e8 09 5a 9b 00 e9 66 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 <89> fb 48 c7 c0 40 39 3d 9a 48 c1 e8 03 49 be 00 00 00 00 00 fc ff [ 281.559846][ C1] RSP: 0018:ffffc90000a17b98 EFLAGS: 00000206 [ 281.559859][ C1] RAX: ffffc90004378000 RBX: ffffc90000a17c90 RCX: ffffc90004377f60 [ 281.559871][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 281.559881][ C1] RBP: ffffc90000a17c80 R08: ffffc90000a17cdf R09: 0000000000000000 [ 281.559892][ C1] R10: ffffc90000a17cd0 R11: fffff52000142f9c R12: dffffc0000000000 [ 281.559910][ C1] R13: ffffc90000a17c80 R14: ffffc90004370000 R15: ffffc90004377f58 [ 281.559922][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 281.559935][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.559947][ C1] CR2: 0000001b32e1dff8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 281.559960][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.559969][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.559979][ C1] Call Trace: [ 281.559985][ C1] [ 281.559992][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 281.560012][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 281.560033][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.560052][ C1] ? nmi_handle+0x2a/0x5a0 [ 281.560076][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 281.560094][ C1] ? nmi_handle+0x14f/0x5a0 [ 281.560109][ C1] ? nmi_handle+0x2a/0x5a0 [ 281.560124][ C1] ? preempt_count_sub+0x7/0x170 [ 281.560141][ C1] ? default_do_nmi+0x63/0x160 [ 281.560161][ C1] ? exc_nmi+0x123/0x1f0 [ 281.560179][ C1] ? end_repeat_nmi+0xf/0x53 [ 281.560202][ C1] ? preempt_count_sub+0x7/0x170 [ 281.560219][ C1] ? preempt_count_sub+0x7/0x170 [ 281.560237][ C1] ? preempt_count_sub+0x7/0x170 [ 281.560254][ C1] [ 281.560259][ C1] [ 281.560265][ C1] unwind_next_frame+0x18e6/0x22d0 [ 281.560285][ C1] ? ret_from_fork+0x4b/0x80 [ 281.560305][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.560324][ C1] arch_stack_walk+0x11c/0x150 [ 281.560343][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 281.560364][ C1] stack_trace_save+0x118/0x1d0 [ 281.560382][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 281.560400][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.560421][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.560441][ C1] kasan_save_track+0x3f/0x80 [ 281.560456][ C1] ? kasan_save_track+0x3f/0x80 [ 281.560470][ C1] ? kasan_save_free_info+0x40/0x50 [ 281.560487][ C1] ? __kasan_slab_free+0x59/0x70 [ 281.560502][ C1] ? kfree+0x1a0/0x440 [ 281.560518][ C1] ? skb_release_data+0x6a0/0x8a0 [ 281.560535][ C1] ? consume_skb+0x9f/0xf0 [ 281.560549][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 281.560564][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 281.560578][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 281.560593][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 281.560606][ C1] ? nf_hook_slow+0xc3/0x220 [ 281.560624][ C1] ? NF_HOOK+0x29e/0x450 [ 281.560639][ C1] ? NF_HOOK+0x3a4/0x450 [ 281.560654][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 281.560671][ C1] ? process_backlog+0x662/0x15b0 [ 281.560689][ C1] ? __napi_poll+0xcb/0x490 [ 281.560705][ C1] ? net_rx_action+0x89b/0x1240 [ 281.560722][ C1] ? handle_softirqs+0x2c5/0x980 [ 281.560741][ C1] ? do_softirq+0x11b/0x1e0 [ 281.560757][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 281.560774][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 281.560790][ C1] ? process_scheduled_works+0xa63/0x1850 [ 281.560808][ C1] ? worker_thread+0x870/0xd30 [ 281.560825][ C1] ? kthread+0x2f0/0x390 [ 281.560838][ C1] ? ret_from_fork+0x4b/0x80 [ 281.560871][ C1] kasan_save_free_info+0x40/0x50 [ 281.560889][ C1] __kasan_slab_free+0x59/0x70 [ 281.560910][ C1] ? skb_release_data+0x6a0/0x8a0 [ 281.560925][ C1] kfree+0x1a0/0x440 [ 281.560941][ C1] ? skb_release_data+0x6a0/0x8a0 [ 281.560959][ C1] skb_release_data+0x6a0/0x8a0 [ 281.560980][ C1] consume_skb+0x9f/0xf0 [ 281.560996][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 281.561013][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 281.561027][ C1] ? NF_HOOK+0x29e/0x450 [ 281.561044][ C1] ? nf_ip_checksum+0x13a/0x500 [ 281.561061][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 281.561078][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 281.561094][ C1] ? __lock_acquire+0x1384/0x2050 [ 281.561113][ C1] ? __pfx_validate_chain+0x10/0x10 [ 281.561133][ C1] nft_do_chain+0x4ad/0x1da0 [ 281.561155][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 281.561169][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 281.561203][ C1] nft_do_chain_inet+0x418/0x6b0 [ 281.561219][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 281.561233][ C1] ? ipt_do_table+0x312/0x1860 [ 281.561255][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 281.561269][ C1] nf_hook_slow+0xc3/0x220 [ 281.561287][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 281.561304][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 281.561321][ C1] NF_HOOK+0x29e/0x450 [ 281.561338][ C1] ? NF_HOOK+0x9a/0x450 [ 281.561354][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 281.561371][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 281.561391][ C1] ? ip_rcv_finish+0x406/0x560 [ 281.561409][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 281.561425][ C1] NF_HOOK+0x3a4/0x450 [ 281.561440][ C1] ? __lock_acquire+0x1384/0x2050 [ 281.561460][ C1] ? NF_HOOK+0x9a/0x450 [ 281.561475][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 281.561491][ C1] ? ip_rcv_core+0x801/0xd10 [ 281.561508][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 281.561528][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 281.561544][ C1] __netif_receive_skb+0x2bf/0x650 [ 281.561563][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 281.561582][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 281.561598][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.561617][ C1] ? __pfx_lock_release+0x10/0x10 [ 281.561636][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 281.561658][ C1] process_backlog+0x662/0x15b0 [ 281.561678][ C1] ? process_backlog+0x33b/0x15b0 [ 281.561700][ C1] ? __pfx_process_backlog+0x10/0x10 [ 281.561717][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.561738][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.561759][ C1] __napi_poll+0xcb/0x490 [ 281.561778][ C1] net_rx_action+0x89b/0x1240 [ 281.561805][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 281.561824][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 281.561860][ C1] handle_softirqs+0x2c5/0x980 [ 281.561880][ C1] ? do_softirq+0x11b/0x1e0 [ 281.561917][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 281.561939][ C1] do_softirq+0x11b/0x1e0 [ 281.561955][ C1] [ 281.561960][ C1] [ 281.561966][ C1] ? __pfx_do_softirq+0x10/0x10 [ 281.561983][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 281.562004][ C1] ? rcu_is_watching+0x15/0xb0 [ 281.562021][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 281.562040][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 281.562056][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 281.562074][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 281.562092][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 281.562111][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 281.562134][ C1] ? process_scheduled_works+0x976/0x1850 [ 281.562153][ C1] process_scheduled_works+0xa63/0x1850 [ 281.562185][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.562207][ C1] ? assign_work+0x364/0x3d0 [ 281.562227][ C1] worker_thread+0x870/0xd30 [ 281.562249][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.562267][ C1] ? __kthread_parkme+0x169/0x1d0 [ 281.562287][ C1] ? __pfx_worker_thread+0x10/0x10 [ 281.562305][ C1] kthread+0x2f0/0x390 [ 281.562319][ C1] ? __pfx_worker_thread+0x10/0x10 [ 281.562336][ C1] ? __pfx_kthread+0x10/0x10 [ 281.562351][ C1] ret_from_fork+0x4b/0x80 [ 281.562368][ C1] ? __pfx_kthread+0x10/0x10 [ 281.562382][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.562406][ C1] [ 282.416996][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 282.423901][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 282.434441][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.444697][ T30] Call Trace: [ 282.447994][ T30] [ 282.450941][ T30] dump_stack_lvl+0x241/0x360 [ 282.455655][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.460883][ T30] ? __pfx__printk+0x10/0x10 [ 282.465498][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.471520][ T30] ? vscnprintf+0x5d/0x90 [ 282.475877][ T30] panic+0x349/0x880 [ 282.479799][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.485992][ T30] ? __pfx_panic+0x10/0x10 [ 282.490434][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 282.495834][ T30] ? __irq_work_queue_local+0x137/0x410 [ 282.501501][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 282.506898][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.513170][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 282.519356][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 282.525805][ T30] watchdog+0x1033/0x1040 [ 282.530271][ T30] ? watchdog+0x1ea/0x1040 [ 282.534738][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.539453][ T30] kthread+0x2f0/0x390 [ 282.543551][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.548254][ T30] ? __pfx_kthread+0x10/0x10 [ 282.552873][ T30] ret_from_fork+0x4b/0x80 [ 282.557333][ T30] ? __pfx_kthread+0x10/0x10 [ 282.561965][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.566770][ T30] [ 282.570093][ T30] Kernel Offset: disabled [ 282.574424][ T30] Rebooting in 86400 seconds..