last executing test programs: 32.625514567s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x3}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="8b0310516cc39a35a549", @TCF_META_TYPE_VAR='3', @TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x74}}, 0x0) 31.54454064s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6, 0x0, 0x0, 0x1fffff}]}) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) 31.401689374s ago: executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 31.281717566s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x8001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 31.229753968s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000540)=0xb22, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000300)="4a871a0e7606db92d0dab507aedd29cf1ffe4a56e4954d112c80bb47a44420ee3c4f28c63aedcf4c44ed214cd5e4974b53756576d9fb2a277c8598436d34939c29f8f68b58e9e3e477f5b6c16166d7bf3c67d53a8b1cee66521a63619ce25589ffc4386187a52d6a033371d153dd3c504109636027467fd00973017dd8d1261394", &(0x7f0000000480)=""/171}, 0x20) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x8020000) 31.047630527s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 30.932958355s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r1, 0x0, 0x40) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002016800", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000", @ANYRES32, @ANYBLOB="08000200ac"], 0x20}}, 0x0) 30.897216704s ago: executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)="884bcebf1aac88", 0x7}], 0x1}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"/51], 0xfdef) 30.877942903s ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6, 0x0, 0x0, 0x1fffff}]}) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) 30.832589554s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 30.768160609s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 30.702957967s ago: executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0), 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r6], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r6}) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 30.653522242s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000540)=0xb22, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000300)="4a871a0e7606db92d0dab507aedd29cf1ffe4a56e4954d112c80bb47a44420ee3c4f28c63aedcf4c44ed214cd5e4974b53756576d9fb2a277c8598436d34939c29f8f68b58e9e3e477f5b6c16166d7bf3c67d53a8b1cee66521a63619ce25589ffc4386187a52d6a033371d153dd3c504109636027467fd00973017dd8d1261394", &(0x7f0000000480)=""/171}, 0x20) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x8020000) 30.614601133s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5400000010000800"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0a0002000180c200000000000a000100bbbbbbbbbbbb0000"], 0x54}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={r4, 0x38, "f342cd59d382e09667650deefc481a4d86e1ed0e289966e35366e000ddaeb1ab1ee817ada4dbcfbfeadcfe4a831bfb5bd3cdd294598bae1f"}, &(0x7f0000000340)=0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) ioctl$FS_IOC_GETFSMAP(r5, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) 30.495950035s ago: executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87043000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c00000c00e100080007"], 0x34}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) getsockname$packet(r0, 0x0, &(0x7f0000000300)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x307}, 0x0, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.474292806s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 30.337316136s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) 30.336551963s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='cq_poll\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac000800000000001c000000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000400), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x18, r7, 0xcc071acbf25dbf8f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 30.320142757s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000011c0000000000000000851000000669f0f529f7aa79a9adc752afc100000018000000008a"], 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pi6 \x00'}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x84, 0x0, r6}, {0xffffffffbe08dbd9, 0x0, 0x0, 0x4, 0xffffffffffffff7f, 0x3f, 0x1f, 0xfffffffffffffff7}, {0x3, 0x0, 0x7, 0x2}, 0x9, 0x6e6bbf, 0x0, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x3500, 0x4, 0x0, 0x1f, 0xc000, 0x6, 0x9}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x5, 0x8, 0x80000001, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000a80)=0x1, 0x4) openat$cgroup_ro(r8, 0x0, 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x1f4, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1d8, 0x11d, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x26, 0x7, 0x3214, 0x3ff, 0x7f, 0xffff, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x871, 0x8, 0x81, 0x101, 0xe5, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x7e26, 0xeea2, 0x8, 0x5, 0x327, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x87, 0x2, 0x2, 0x370, 0x5, 0xe1, 0x1]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbdf8, 0x584, 0x7, 0x4, 0x28, 0x101, 0xef3]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3d, 0x4, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4ff, 0x0, 0x4, 0xfffb, 0x6, 0x0, 0x9b2f, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x0, 0xb, 0xb, 0x22, 0x3, 0x1, 0x18, 0x16, 0x0, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x77bf, 0x9, 0x0, 0x1, 0x200, 0x6]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x1}, {0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x2}, {0x5, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x7}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x2, 0x5}, {0x4}, {}, {0x2}, {0x4, 0x9}, {0x5, 0x4}, {0x1, 0x7}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x8}, {}, {0x2, 0x3}, {0x7, 0xa}, {0x6}, {0x3}, {}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7f, 0xff81, 0x0, 0x0, 0x2, 0x7ab]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x3, 0x5}, {}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x8}, {0x7}, {0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x1, 0x4, 0xed6, 0x20, 0x4]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {}, {0x0, 0x5}, {}, {0x7}, {}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x45}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x2040080}, 0x40040c5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xd1, 0x5c, &(0x7f0000000240)="8c10e915b14b9147426e00dabc518e0394eb4dcd4ea6060021a270e2af93dd241d42adef87bedcc43f033e4451ca96e491afb26e30fd9045ab9d44b80f3e733eb3d831c61a9d57f453a83c84e6af8f3b580513bb8d8df3d9e57436f540a1075c9998176f6fac0a97abeba01742ea5375efe26526d39579672f36255e412e4c23fc309510ab77060c33532c01039ef806a1a7b387a5183ce71b5e8329aa52e462b6a034dc64fb52e8d1122235f893a3256c039e63c0fd3086a6e41fa3770862e2c949cdbd77ecc4d48fbb037e94847e153b", &(0x7f0000000340)=""/92, 0x3, 0x0, 0x49, 0x1c, &(0x7f00000003c0)="09b6719555028143f11f330dbaf32b1ce6c5a17c6af202c9d52f91b7774157607e401fb0d2cce86ff03d21fc201d9a3e6ac56fa84d2784471e4ad44c8024f7cc578809fcca53d2e617", &(0x7f0000000500)="8d5e319d3bebcb2e097b3e4a932567de06182b6962f6764d75a1dd8a", 0x6, 0x0, 0x4}, 0x50) 30.240939774s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r1, 0x0, 0x40) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002016800", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000", @ANYRES32, @ANYBLOB="08000200ac"], 0x20}}, 0x0) 30.240678619s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x7, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 30.156665447s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 30.121617926s ago: executing program 0: socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 30.103941893s ago: executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)="884bcebf1aac88", 0x7}], 0x1}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"/51], 0xfdef) 30.024674543s ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6, 0x0, 0x0, 0x1fffff}]}) write$ppp(r0, &(0x7f0000000440)='\x00\x00', 0x2) 476.791604ms ago: executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000005800128009000100766c616e000000004800028006000100000000000600050081000000340003800c00010009000000000000000c000100000000007a0700000c00010020000000000000000c00010000000000ff01000008000500", @ANYRES32, @ANYBLOB="432df432c413f55b2e8aef00bfc0f5510750fdfd09a7f27cddd37f77f17a9bf55572b6353cc17110e4868449d0312f188e"], 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008801}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000002060108000000000000000500000005f4045bfc0800000900020073797a30000000000c000300000000683a69700005000100f7ffffff0400050001000000d24b2cf2fbc6db41e31f96ca5464609433a5a30e68b3579600e3b918648452841761024127d28c3bfd3c9cccbc00c36b2f3ae5872f5ba7bbca750dae90aa61db9cbe930669ab2e7cc0b9d56f6dc08860fc2f10575673b0f46726102190149e307d22ad7726cb00"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9), 0x10) 274.862327ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 214.21723ms ago: executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0), 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r6}) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 87.792469ms ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5400000010000800"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0a0002000180c200000000000a000100bbbbbbbbbbbb0000"], 0x54}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={r4, 0x38, "f342cd59d382e09667650deefc481a4d86e1ed0e289966e35366e000ddaeb1ab1ee817ada4dbcfbfeadcfe4a831bfb5bd3cdd294598bae1f"}, &(0x7f0000000340)=0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) ioctl$FS_IOC_GETFSMAP(r5, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) 0s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000540)=0xb22, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000300)="4a871a0e7606db92d0dab507aedd29cf1ffe4a56e4954d112c80bb47a44420ee3c4f28c63aedcf4c44ed214cd5e4974b53756576d9fb2a277c8598436d34939c29f8f68b58e9e3e477f5b6c16166d7bf3c67d53a8b1cee66521a63619ce25589ffc4386187a52d6a033371d153dd3c504109636027467fd00973017dd8d1261394", &(0x7f0000000480)=""/171}, 0x20) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8020000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. 2024/06/10 06:22:41 fuzzer started 2024/06/10 06:22:41 dialing manager at 10.128.0.169:30016 [ 57.467544][ T5087] cgroup: Unknown subsys name 'net' [ 57.657232][ T5087] cgroup: Unknown subsys name 'rlimit' 2024/06/10 06:22:43 starting 5 executor processes [ 58.726508][ T5096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.739142][ T5096] syz-executor (5096) used greatest stack depth: 18800 bytes left [ 59.830592][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.834140][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.838811][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.847093][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.856437][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.867137][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.868365][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.882968][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.884824][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.890706][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.898129][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.905339][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.913120][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.920363][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.927528][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.933659][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.940319][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.951135][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.955282][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.968673][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.968822][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.977815][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.984186][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.991170][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.000313][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.006477][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.012037][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.027332][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.047342][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.054973][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.547827][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 60.656601][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 60.709158][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 60.758049][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 60.805586][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.813158][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.820789][ T5109] bridge_slave_0: entered allmulticast mode [ 60.827653][ T5109] bridge_slave_0: entered promiscuous mode [ 60.840183][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.847502][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.854961][ T5109] bridge_slave_1: entered allmulticast mode [ 60.861759][ T5109] bridge_slave_1: entered promiscuous mode [ 60.905610][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 60.952345][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.959634][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.967263][ T5120] bridge_slave_0: entered allmulticast mode [ 60.974000][ T5120] bridge_slave_0: entered promiscuous mode [ 61.017459][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.024931][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.032176][ T5120] bridge_slave_1: entered allmulticast mode [ 61.038886][ T5120] bridge_slave_1: entered promiscuous mode [ 61.057881][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.071669][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.181273][ T5109] team0: Port device team_slave_0 added [ 61.187521][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.198644][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.206742][ T5107] bridge_slave_0: entered allmulticast mode [ 61.214261][ T5107] bridge_slave_0: entered promiscuous mode [ 61.223948][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.231213][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.238355][ T5107] bridge_slave_1: entered allmulticast mode [ 61.245391][ T5107] bridge_slave_1: entered promiscuous mode [ 61.252906][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.260011][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.267524][ T5106] bridge_slave_0: entered allmulticast mode [ 61.274542][ T5106] bridge_slave_0: entered promiscuous mode [ 61.283644][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.290915][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.298070][ T5106] bridge_slave_1: entered allmulticast mode [ 61.306301][ T5106] bridge_slave_1: entered promiscuous mode [ 61.315745][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.342558][ T5109] team0: Port device team_slave_1 added [ 61.382344][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.428646][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.435728][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.462539][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.507738][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.515092][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.522408][ T5108] bridge_slave_0: entered allmulticast mode [ 61.529181][ T5108] bridge_slave_0: entered promiscuous mode [ 61.544207][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.551526][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.577662][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.591676][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.604628][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.616351][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.629370][ T5120] team0: Port device team_slave_0 added [ 61.638583][ T5120] team0: Port device team_slave_1 added [ 61.656440][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.663719][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.671432][ T5108] bridge_slave_1: entered allmulticast mode [ 61.678163][ T5108] bridge_slave_1: entered promiscuous mode [ 61.730228][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.785360][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.823647][ T5107] team0: Port device team_slave_0 added [ 61.834678][ T5106] team0: Port device team_slave_0 added [ 61.843614][ T5106] team0: Port device team_slave_1 added [ 61.859082][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.866213][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.892224][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.906939][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.932815][ T5109] hsr_slave_0: entered promiscuous mode [ 61.939762][ T5109] hsr_slave_1: entered promiscuous mode [ 61.949195][ T5107] team0: Port device team_slave_1 added [ 61.974294][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.981509][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.008044][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.021673][ T5118] Bluetooth: hci2: command tx timeout [ 62.044004][ T5108] team0: Port device team_slave_0 added [ 62.062004][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.069089][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.095508][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.106193][ T5118] Bluetooth: hci3: command tx timeout [ 62.111058][ T5121] Bluetooth: hci1: command tx timeout [ 62.112099][ T53] Bluetooth: hci0: command tx timeout [ 62.117332][ T5121] Bluetooth: hci4: command tx timeout [ 62.160596][ T5108] team0: Port device team_slave_1 added [ 62.181454][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.188475][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.215068][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.226717][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.233978][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.260176][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.299812][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.306966][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.333266][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.355698][ T5120] hsr_slave_0: entered promiscuous mode [ 62.362600][ T5120] hsr_slave_1: entered promiscuous mode [ 62.368835][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.377225][ T5120] Cannot create hsr debugfs directory [ 62.388098][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.395673][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.422240][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.438784][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.446843][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.473019][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.547392][ T5106] hsr_slave_0: entered promiscuous mode [ 62.554484][ T5106] hsr_slave_1: entered promiscuous mode [ 62.561505][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.569165][ T5106] Cannot create hsr debugfs directory [ 62.687292][ T5107] hsr_slave_0: entered promiscuous mode [ 62.694315][ T5107] hsr_slave_1: entered promiscuous mode [ 62.700407][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.708158][ T5107] Cannot create hsr debugfs directory [ 62.781681][ T5108] hsr_slave_0: entered promiscuous mode [ 62.787963][ T5108] hsr_slave_1: entered promiscuous mode [ 62.795154][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.803082][ T5108] Cannot create hsr debugfs directory [ 63.114332][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.149207][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.167192][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.184923][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.208543][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.221777][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.235587][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.245607][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.340060][ T5107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.352157][ T5107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.363637][ T5107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.376301][ T5107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.462093][ T5106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.486917][ T5106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.507409][ T5106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.537019][ T5106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.618663][ T5108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.630217][ T5108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.668719][ T5108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.680012][ T5108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.707125][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.777107][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.824871][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.834683][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.842184][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.884099][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.891288][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.907399][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.934886][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.967598][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.974822][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.003836][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.011070][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.048888][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.095394][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.102592][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.110059][ T5121] Bluetooth: hci2: command tx timeout [ 64.117833][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.125048][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.157039][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.180951][ T5117] Bluetooth: hci0: command tx timeout [ 64.181024][ T5118] Bluetooth: hci1: command tx timeout [ 64.186376][ T5117] Bluetooth: hci4: command tx timeout [ 64.197672][ T5121] Bluetooth: hci3: command tx timeout [ 64.238637][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.288210][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.309099][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.349118][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.360181][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.434510][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.441745][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.477128][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.484565][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.553972][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.561154][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.622816][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.629971][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.666168][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.779647][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.855019][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.870359][ T5109] veth0_vlan: entered promiscuous mode [ 64.931853][ T5109] veth1_vlan: entered promiscuous mode [ 65.093573][ T5109] veth0_macvtap: entered promiscuous mode [ 65.112252][ T5120] veth0_vlan: entered promiscuous mode [ 65.128232][ T5120] veth1_vlan: entered promiscuous mode [ 65.167701][ T5109] veth1_macvtap: entered promiscuous mode [ 65.219995][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.260051][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.305832][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.343692][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.353646][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.363018][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.372384][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.408640][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.474485][ T5120] veth0_macvtap: entered promiscuous mode [ 65.513626][ T5107] veth0_vlan: entered promiscuous mode [ 65.525412][ T5120] veth1_macvtap: entered promiscuous mode [ 65.573015][ T5108] veth0_vlan: entered promiscuous mode [ 65.629843][ T3841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.635939][ T5106] veth0_vlan: entered promiscuous mode [ 65.650588][ T3841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.654068][ T5107] veth1_vlan: entered promiscuous mode [ 65.687788][ T5106] veth1_vlan: entered promiscuous mode [ 65.724793][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.736088][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.747556][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.759512][ T5108] veth1_vlan: entered promiscuous mode [ 65.780033][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.793577][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.794896][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.814743][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.818590][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.841597][ T5107] veth0_macvtap: entered promiscuous mode [ 65.865759][ T5107] veth1_macvtap: entered promiscuous mode [ 65.900560][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.912138][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.922207][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.935076][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.970042][ T5106] veth0_macvtap: entered promiscuous mode [ 65.988259][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.002531][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.012913][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.024115][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.036325][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.069754][ T5108] veth0_macvtap: entered promiscuous mode [ 66.080639][ T5106] veth1_macvtap: entered promiscuous mode [ 66.109997][ T5108] veth1_macvtap: entered promiscuous mode [ 66.124361][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.136674][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.149098][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.182537][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.185826][ T5121] Bluetooth: hci2: command tx timeout [ 66.196674][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.230395][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.247413][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.259711][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.261508][ T5121] Bluetooth: hci3: command tx timeout [ 66.275475][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.276027][ T5117] Bluetooth: hci4: command tx timeout [ 66.291666][ T5118] Bluetooth: hci1: command tx timeout [ 66.291711][ T5118] Bluetooth: hci0: command tx timeout [ 66.305954][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.316865][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.332062][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.347322][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.358982][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.369493][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.380440][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.390357][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.404260][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.414206][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.425590][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.438655][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.463022][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.476222][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.486573][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.497083][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.507334][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.520338][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.532615][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.545154][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.555690][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.566150][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.576922][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.587328][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.598027][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.608020][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.618540][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.632323][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.645584][ T5107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.654903][ T5107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.664145][ T5107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.672993][ T5107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695264][ T5108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.704273][ T5108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.713113][ T5108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.724885][ T5108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.741901][ T5106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.751311][ T5106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.760308][ T5106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.770212][ T5106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.886243][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.902862][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.012352][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.031777][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.045784][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.062182][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.099245][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.112437][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.225381][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.243703][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.363295][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.393309][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.470067][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.476990][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.487205][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.511372][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.546704][ T5210] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.884961][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.897855][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.911003][ T5218] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 68.207863][ T5229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.266184][ T5117] Bluetooth: hci2: command tx timeout [ 68.341607][ T5121] Bluetooth: hci3: command tx timeout [ 68.342894][ T53] Bluetooth: hci0: command tx timeout [ 68.347656][ T5121] Bluetooth: hci1: command tx timeout [ 68.359425][ T5117] Bluetooth: hci4: command tx timeout [ 68.426553][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.562020][ T5247] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.686482][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.755932][ T5252] lo speed is unknown, defaulting to 1000 [ 68.784648][ T5252] lo speed is unknown, defaulting to 1000 [ 68.822277][ T5252] lo speed is unknown, defaulting to 1000 [ 69.027984][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.256231][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.284153][ T5272] Zero length message leads to an empty skb [ 69.397886][ T5195] lo speed is unknown, defaulting to 1000 [ 69.409228][ T5252] infiniband syz1: set active [ 69.420616][ T5252] infiniband syz1: added lo [ 69.626273][ T5252] RDS/IB: syz1: added [ 69.631673][ T5252] smc: adding ib device syz1 with port count 1 [ 69.638824][ T5252] smc: ib device syz1 port 1 has pnetid [ 69.677108][ T5195] lo speed is unknown, defaulting to 1000 [ 69.685676][ T5252] lo speed is unknown, defaulting to 1000 [ 69.695252][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.881583][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.984006][ T5252] lo speed is unknown, defaulting to 1000 [ 70.263636][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.435349][ T5252] lo speed is unknown, defaulting to 1000 [ 70.572350][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.823156][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.852721][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.071040][ T5252] lo speed is unknown, defaulting to 1000 [ 71.709180][ T5252] lo speed is unknown, defaulting to 1000 [ 71.878405][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.887664][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.686809][ T5375] __nla_validate_parse: 4 callbacks suppressed [ 72.686831][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.745746][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.780141][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.953202][ T5388] rdma_rxe: rxe_newlink: failed to add lo [ 73.416578][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.441839][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.551615][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.675555][ T5418] syz1: rxe_newlink: already configured on lo [ 74.105494][ T5438] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.198500][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.243151][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.283723][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.484637][ T5457] rdma_rxe: rxe_newlink: failed to add lo [ 74.511258][ T5454] pim6reg1: entered promiscuous mode [ 74.519258][ T5454] pim6reg1: entered allmulticast mode [ 74.913316][ T5474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.104265][ T5525] lo speed is unknown, defaulting to 1000 [ 76.659077][ T5551] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.694752][ T5551] Cannot find set identified by id 0 to match [ 77.010492][ T1148] cfg80211: failed to load regulatory.db [ 77.904823][ T5600] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 78.305099][ T5616] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 78.431899][ T5616] team0: Port device wlan1 added [ 78.446175][ T5618] __nla_validate_parse: 6 callbacks suppressed [ 78.446195][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.160449][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.320963][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.421119][ T5661] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 79.719121][ T5661] team0: Port device wlan1 added [ 80.121763][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.300640][ T4543] udevd[4543]: worker [5100] terminated by signal 33 (Unknown signal 33) [ 80.314778][ T5702] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 80.325929][ T4543] udevd[4543]: worker [5100] failed while handling '/devices/virtual/block/loop3' [ 80.430342][ T5702] team0: Port device wlan1 added [ 80.783726][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.403103][ T5747] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 81.659241][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.257970][ T5784] syzkaller0: entered promiscuous mode [ 82.269119][ T5784] syzkaller0: entered allmulticast mode [ 83.742263][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.933645][ T5825] tap0: tun_chr_ioctl cmd 2147767507 [ 84.091545][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.409294][ T5848] syzkaller0: entered promiscuous mode [ 84.430925][ T5848] syzkaller0: entered allmulticast mode [ 84.807434][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.099938][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.254791][ T5893] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.534814][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.564737][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.651224][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.864123][ T5921] syzkaller0: entered promiscuous mode [ 86.877496][ T5921] syzkaller0: entered allmulticast mode [ 86.885679][ T5927] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.904447][ T5934] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.771375][ T5968] __nla_validate_parse: 3 callbacks suppressed [ 88.771395][ T5968] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.801455][ T5967] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.037386][ T5981] netlink: 193372 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.058401][ T5981] netlink: zone id is out of range [ 89.066000][ T5981] netlink: zone id is out of range [ 89.073788][ T5981] netlink: zone id is out of range [ 89.079189][ T5981] netlink: zone id is out of range [ 89.084668][ T5981] netlink: zone id is out of range [ 89.092195][ T5981] netlink: zone id is out of range [ 89.131505][ T5981] netlink: zone id is out of range [ 89.147846][ T5981] netlink: zone id is out of range [ 89.157036][ T5981] netlink: zone id is out of range [ 89.164856][ T5981] netlink: zone id is out of range [ 89.194109][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.205394][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.278293][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.561425][ T6008] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.773513][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.819341][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.901885][ T6026] netlink: 193372 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.605306][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.614870][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.628899][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.643420][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.652942][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.663838][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.684554][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.692340][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.699693][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.707401][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.720885][ T5118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 120.728365][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.757601][ T5117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.766952][ T5117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.788981][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.792191][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 120.812647][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 120.821375][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 120.823206][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.837642][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 120.845331][ T5122] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 120.846316][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 120.859778][ T5122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.860221][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 120.901748][ T5122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 120.914994][ T5122] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 120.927857][ T5122] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 120.937220][ T5122] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 120.951136][ T5122] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 120.958578][ T5122] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 122.820916][ T5122] Bluetooth: hci5: command tx timeout [ 122.826806][ T5122] Bluetooth: hci6: command tx timeout [ 122.901380][ T5118] Bluetooth: hci7: command tx timeout [ 122.909611][ T5122] Bluetooth: hci8: command tx timeout [ 122.991420][ T5122] Bluetooth: hci9: command tx timeout [ 124.900856][ T5118] Bluetooth: hci5: command tx timeout [ 124.908049][ T5122] Bluetooth: hci6: command tx timeout [ 124.984810][ T5122] Bluetooth: hci8: command tx timeout [ 124.990263][ T5122] Bluetooth: hci7: command tx timeout [ 125.060920][ T5122] Bluetooth: hci9: command tx timeout [ 126.980931][ T5118] Bluetooth: hci5: command tx timeout [ 126.987500][ T5122] Bluetooth: hci6: command tx timeout [ 127.061523][ T5118] Bluetooth: hci8: command tx timeout [ 127.067733][ T5122] Bluetooth: hci7: command tx timeout [ 127.140898][ T5122] Bluetooth: hci9: command tx timeout [ 129.066324][ T5122] Bluetooth: hci6: command tx timeout [ 129.070678][ T5118] Bluetooth: hci5: command tx timeout [ 129.141191][ T5118] Bluetooth: hci7: command tx timeout [ 129.141206][ T5122] Bluetooth: hci8: command tx timeout [ 129.220845][ T5122] Bluetooth: hci9: command tx timeout [ 133.311221][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.317584][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.868027][ T5126] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 185.877904][ T5126] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 185.896383][ T5126] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 185.915194][ T5114] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 185.925174][ T5125] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 185.934872][ T5125] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 185.945090][ T5110] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 185.958430][ T5110] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 185.969552][ T6083] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 185.978588][ T6083] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 185.986934][ T6083] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 185.988062][ T6087] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 185.995134][ T6083] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 186.011209][ T6083] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 186.012558][ T6087] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 186.036817][ T6087] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 186.043365][ T6083] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 186.050910][ T6090] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 186.051956][ T6090] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 186.059415][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 186.066580][ T6090] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 186.075915][ T6083] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 186.079554][ T6090] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 186.087922][ T6083] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 186.104039][ T5126] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 186.113007][ T6090] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 186.123737][ T6090] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 186.145481][ T6090] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 186.155779][ T5114] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 186.163490][ T5114] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 186.580883][ T5110] Bluetooth: hci3: command 0x0406 tx timeout [ 186.580966][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 186.586987][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 186.595809][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 186.603613][ T5125] Bluetooth: hci1: command 0x0406 tx timeout [ 188.100802][ T4488] Bluetooth: hci10: command tx timeout [ 188.184891][ T5125] Bluetooth: hci14: command tx timeout [ 188.184912][ T5118] Bluetooth: hci12: command tx timeout [ 188.197834][ T4488] Bluetooth: hci11: command tx timeout [ 188.260973][ T4488] Bluetooth: hci13: command tx timeout [ 190.180790][ T4488] Bluetooth: hci10: command tx timeout [ 190.260796][ T5125] Bluetooth: hci14: command tx timeout [ 190.260947][ T5118] Bluetooth: hci12: command tx timeout [ 190.267134][ T4488] Bluetooth: hci11: command tx timeout [ 190.340939][ T4488] Bluetooth: hci13: command tx timeout [ 192.267678][ T4488] Bluetooth: hci10: command tx timeout [ 192.340947][ T4488] Bluetooth: hci11: command tx timeout [ 192.340960][ T5118] Bluetooth: hci14: command tx timeout [ 192.352249][ T5118] Bluetooth: hci12: command tx timeout [ 192.421251][ T4488] Bluetooth: hci13: command tx timeout [ 194.340871][ T4488] Bluetooth: hci10: command tx timeout [ 194.420829][ T4488] Bluetooth: hci12: command tx timeout [ 194.420901][ T5118] Bluetooth: hci14: command tx timeout [ 194.430737][ T4488] Bluetooth: hci11: command tx timeout [ 194.500910][ T4488] Bluetooth: hci13: command tx timeout [ 194.756318][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.777037][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.460724][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 241.468405][ T30] Not tainted 6.10.0-rc2-syzkaller-00229-g0579f2724904 #0 [ 241.483037][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.494058][ T30] task:kworker/u8:2 state:D stack:21032 pid:35 tgid:35 ppid:2 flags:0x00004000 2024/06/10 06:25:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 241.507836][ T30] Workqueue: events_unbound bpf_map_free_deferred [ 241.549714][ T30] Call Trace: [ 241.566787][ T30] [ 241.569757][ T30] __schedule+0x17e8/0x4a20 [ 241.576600][ T30] ? __pfx___schedule+0x10/0x10 [ 241.581604][ T30] ? __pfx_lock_release+0x10/0x10 [ 241.586639][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 241.597588][ T30] ? kthread_data+0x52/0xd0 [ 241.602162][ T30] ? schedule+0x90/0x320 [ 241.606418][ T30] ? wq_worker_sleeping+0x66/0x240 [ 241.617204][ T30] ? schedule+0x90/0x320 [ 241.625401][ T30] schedule+0x14b/0x320 [ 241.629593][ T30] schedule_preempt_disabled+0x13/0x30 [ 241.639565][ T30] __mutex_lock+0x6a4/0xd70 [ 241.644348][ T30] ? __mutex_lock+0x527/0xd70 [ 241.649055][ T30] ? bpf_map_offload_map_free+0x14/0x80 [ 241.660402][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 241.665490][ T30] ? percpu_ref_put+0x1f/0x250 [ 241.670274][ T30] bpf_map_offload_map_free+0x14/0x80 [ 241.684547][ T30] bpf_map_free_deferred+0xe6/0x110 [ 241.689782][ T30] ? process_scheduled_works+0x945/0x1830 [ 241.700119][ T30] process_scheduled_works+0xa2c/0x1830 [ 241.707274][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 241.717874][ T30] ? assign_work+0x364/0x3d0 [ 241.723493][ T30] worker_thread+0x86d/0xd70 [ 241.728118][ T30] ? __kthread_parkme+0x169/0x1d0 [ 241.739530][ T30] ? __pfx_worker_thread+0x10/0x10 [ 241.744717][ T30] kthread+0x2f0/0x390 [ 241.748802][ T30] ? __pfx_worker_thread+0x10/0x10 [ 241.759531][ T30] ? __pfx_kthread+0x10/0x10 [ 241.764195][ T30] ret_from_fork+0x4b/0x80 [ 241.768627][ T30] ? __pfx_kthread+0x10/0x10 [ 241.778817][ T30] ret_from_fork_asm+0x1a/0x30 [ 241.784036][ T30] [ 241.789514][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 241.806244][ T30] Not tainted 6.10.0-rc2-syzkaller-00229-g0579f2724904 #0 [ 241.841038][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.849764][ T30] task:kworker/u8:3 state:D stack:22032 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 241.880652][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 241.886694][ T30] Call Trace: [ 241.889979][ T30] [ 241.902544][ T30] __schedule+0x17e8/0x4a20 [ 241.907120][ T30] ? __pfx___schedule+0x10/0x10 [ 241.920617][ T30] ? __pfx_lock_release+0x10/0x10 [ 241.926086][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 241.950742][ T30] ? kthread_data+0x52/0xd0 [ 241.955287][ T30] ? schedule+0x90/0x320 [ 241.959539][ T30] ? wq_worker_sleeping+0x66/0x240 [ 241.970632][ T30] ? schedule+0x90/0x320 [ 241.974903][ T30] schedule+0x14b/0x320 [ 241.979094][ T30] schedule_preempt_disabled+0x13/0x30 [ 242.000628][ T30] __mutex_lock+0x6a4/0xd70 [ 242.005268][ T30] ? mark_lock+0x9a/0x350 [ 242.009610][ T30] ? __mutex_lock+0x527/0xd70 [ 242.029595][ T30