last executing test programs: 1m29.175667802s ago: executing program 4 (id=192): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x80800) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc16ad4b33cc00", 0x7}, {&(0x7f0000000040)="00f90056d9026009ef9d0744e195bd45fda2e7a9", 0x1}, {&(0x7f0000000180)="d98fc0fd899de85d0181f175c0879edee9eb1955dd0fad2d2e32da1055493b3711819c1670ec6e9e85e3a71defdaaa8755a45b4608b8aac0f6f52006784656490c5a1139a8b043a6d61622a907da007aaa4d4a2d63bb0890a65c5e49273f73cf7bc7adade15ae70449979a11615bb4"}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000400000047d58838068b91000000344a635c516c3ce23174e300f08a822605f27584bdc64b8fffd9278af0bac93a309830f3da0f682f5adc02ad648a9d063279e25f8480cd68df4d8e97d4f5f91d8934a2f24a75ffffaf3f9543bcf8c83191e9d1f34f4bdfd362259b351944cb3c41c6200c40ae8d37e25b1733a60a9b8100bba2453eba26dff6ce55277b9e6590f6ae978b32d997ba540517f4a9dcc6b2"], 0x4e) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x1, @remote}, {0x2, 0x4e21, @loopback}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfff}) 1m16.825307955s ago: executing program 3 (id=662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="a2aaaaaaab494c6b6cddb56e08f19f00001c0000000000020000"], 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote, 0x34, r1}) (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote, 0x34, r1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xa, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xa, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xafab}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0xfdef}}, 0x0) sendto(r5, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="0200"], 0x10) socket$inet6(0xa, 0x1, 0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x7b, 0x6, 0x30, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x8, 0xfb5, 0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x493a, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x493a, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m16.650564615s ago: executing program 3 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x1d8}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fedbdf254b0000000e00a80066697273746e616d65000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@gettaction={0x1c, 0x32, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x2400c845) 1m16.426961698s ago: executing program 3 (id=676): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x1f4, 0x50}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1m10.166870718s ago: executing program 3 (id=676): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x1f4, 0x50}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 43.891001879s ago: executing program 4 (id=192): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x80800) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc16ad4b33cc00", 0x7}, {&(0x7f0000000040)="00f90056d9026009ef9d0744e195bd45fda2e7a9", 0x1}, {&(0x7f0000000180)="d98fc0fd899de85d0181f175c0879edee9eb1955dd0fad2d2e32da1055493b3711819c1670ec6e9e85e3a71defdaaa8755a45b4608b8aac0f6f52006784656490c5a1139a8b043a6d61622a907da007aaa4d4a2d63bb0890a65c5e49273f73cf7bc7adade15ae70449979a11615bb4"}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000400000047d58838068b91000000344a635c516c3ce23174e300f08a822605f27584bdc64b8fffd9278af0bac93a309830f3da0f682f5adc02ad648a9d063279e25f8480cd68df4d8e97d4f5f91d8934a2f24a75ffffaf3f9543bcf8c83191e9d1f34f4bdfd362259b351944cb3c41c6200c40ae8d37e25b1733a60a9b8100bba2453eba26dff6ce55277b9e6590f6ae978b32d997ba540517f4a9dcc6b2"], 0x4e) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x1, @remote}, {0x2, 0x4e21, @loopback}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfff}) 37.932433844s ago: executing program 4 (id=192): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x80800) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc16ad4b33cc00", 0x7}, {&(0x7f0000000040)="00f90056d9026009ef9d0744e195bd45fda2e7a9", 0x1}, {&(0x7f0000000180)="d98fc0fd899de85d0181f175c0879edee9eb1955dd0fad2d2e32da1055493b3711819c1670ec6e9e85e3a71defdaaa8755a45b4608b8aac0f6f52006784656490c5a1139a8b043a6d61622a907da007aaa4d4a2d63bb0890a65c5e49273f73cf7bc7adade15ae70449979a11615bb4"}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000400000047d58838068b91000000344a635c516c3ce23174e300f08a822605f27584bdc64b8fffd9278af0bac93a309830f3da0f682f5adc02ad648a9d063279e25f8480cd68df4d8e97d4f5f91d8934a2f24a75ffffaf3f9543bcf8c83191e9d1f34f4bdfd362259b351944cb3c41c6200c40ae8d37e25b1733a60a9b8100bba2453eba26dff6ce55277b9e6590f6ae978b32d997ba540517f4a9dcc6b2"], 0x4e) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x1, @remote}, {0x2, 0x4e21, @loopback}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfff}) 33.161991481s ago: executing program 4 (id=192): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x80800) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc16ad4b33cc00", 0x7}, {&(0x7f0000000040)="00f90056d9026009ef9d0744e195bd45fda2e7a9", 0x1}, {&(0x7f0000000180)="d98fc0fd899de85d0181f175c0879edee9eb1955dd0fad2d2e32da1055493b3711819c1670ec6e9e85e3a71defdaaa8755a45b4608b8aac0f6f52006784656490c5a1139a8b043a6d61622a907da007aaa4d4a2d63bb0890a65c5e49273f73cf7bc7adade15ae70449979a11615bb4"}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000400000047d58838068b91000000344a635c516c3ce23174e300f08a822605f27584bdc64b8fffd9278af0bac93a309830f3da0f682f5adc02ad648a9d063279e25f8480cd68df4d8e97d4f5f91d8934a2f24a75ffffaf3f9543bcf8c83191e9d1f34f4bdfd362259b351944cb3c41c6200c40ae8d37e25b1733a60a9b8100bba2453eba26dff6ce55277b9e6590f6ae978b32d997ba540517f4a9dcc6b2"], 0x4e) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x1, @remote}, {0x2, 0x4e21, @loopback}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfff}) 27.878288861s ago: executing program 4 (id=192): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x80800) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc16ad4b33cc00", 0x7}, {&(0x7f0000000040)="00f90056d9026009ef9d0744e195bd45fda2e7a9", 0x1}, {&(0x7f0000000180)="d98fc0fd899de85d0181f175c0879edee9eb1955dd0fad2d2e32da1055493b3711819c1670ec6e9e85e3a71defdaaa8755a45b4608b8aac0f6f52006784656490c5a1139a8b043a6d61622a907da007aaa4d4a2d63bb0890a65c5e49273f73cf7bc7adade15ae70449979a11615bb4"}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000400000047d58838068b91000000344a635c516c3ce23174e300f08a822605f27584bdc64b8fffd9278af0bac93a309830f3da0f682f5adc02ad648a9d063279e25f8480cd68df4d8e97d4f5f91d8934a2f24a75ffffaf3f9543bcf8c83191e9d1f34f4bdfd362259b351944cb3c41c6200c40ae8d37e25b1733a60a9b8100bba2453eba26dff6ce55277b9e6590f6ae978b32d997ba540517f4a9dcc6b2"], 0x4e) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x1, @remote}, {0x2, 0x4e21, @loopback}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfff}) 25.670026193s ago: executing program 2 (id=1748): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@bridge_setlink={0x17, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES]}, 0x2c}}, 0x0) (async) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async, rerun: 64) r3 = socket(0x1d, 0x2, 0x6) (rerun: 64) recvfrom$rxrpc(r3, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004809}, 0x4000) r5 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4c0ddb65}, 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="650100001b16b912e16434caf3fae9254c2bda2ce7f68c928ba81e959a5511f67625d5556b2dde2a08157d3a6d53583fb978336de01d8bf939a47154e62e537c2385a46600000000f6b8dd64fa20356ffaba4b7eadd55a225c42"], 0x188}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0000000}}, 0x1c) 25.583933685s ago: executing program 2 (id=1749): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000054, &(0x7f0000000080)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x45}}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x0, 0x0, 0x0, 0x2c}, 0x44004) r3 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000000c0)='\x00\x00\x00\x00\xc4*\x96\xce\x00P\xee\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5100000000000000000000020000000000484000ff03000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r8, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000007c0)='%-010d \x00'}, 0x22) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000080007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r11 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f0000000080)="1579728f2bb1992e45c9f605c39b35faaff1c3de74abe972edfd1f9f846ba7d00fd241bde7a769af03aca31943e6bf55c3cf44233469b0d4a4a2c1263c751565", 0xfffffde0, 0x4000040, 0x0, 0x0) 25.308385712s ago: executing program 3 (id=676): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x1f4, 0x50}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 22.497683826s ago: executing program 2 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000900)=ANY=[@ANYBLOB="d4ab2cf8", @ANYRES16=r1, @ANYBLOB="050426bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000405}, 0x2c040804) 22.468848203s ago: executing program 2 (id=1781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000d04fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128000000c0002bc438008000700050000004f8538e1120d0000005cdf1819ffe53fd2ce968fce88f7e127ce8a9ed21bf4aacd8785a2171bb65ab47ac78f42ac1fe00f90774b53aa375bb65fedd2346ad42a622bcdf403146cfc3d57dfb2eca882a550835de330b77a88543c45ab378761b052f00d18ca74097bf2f154bd824cf5457700"/161], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xd}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000180000082bbd7000fddbdf251d010066bb2e8415703855590008000500fbfefd08"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x8010) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x2, 0x2000000000903}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="f97120e21e60f7d1da1e139284a40e4236572f68d8a7ec003a552952583c0d006cf0875cb8b6a90e4ceb75697b0f4c290feaf2b594cb5b4004300c224ceae53fee438b7dbcd70400c952bae0581fe031edd2da902f113f23f7e58cca2642c6acda7a416bf95e3ac359ff879f10785f97a1dbc4d99142736aa1f69d14570eb87ed3f7ac85fc2f5412d1145a1e1cfaa36b0648a00f4933995d0ad1f27f0ab7dcf66d87f50dafb8212e5299b09f4abb3193c97d96", 0xb3}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000000)="202fcdd436ec", 0x6}, {&(0x7f0000000540)="5067e05d331a103e605b5ba245129fce184cc8533435058020e615d352b5352d46c624cee936a3941b394f9478b6fb5b403734207e6c1daae17ddf2cef768775ed877d43c3bf5cc1fcf2bcc423b9f863bff6ce75d658baf77e2c5962618bf8dd7c9a9a09030d8c12a90eabc1ff5e278562502f4c36df1bec090808949fa6a09c0869508b61d67340fc6584d0d4e37fd55ccf51b7e8feb603fb13a0bfedc607c1a3a0b525a31ec7a24a8d53159b884d1562c224d1bcc35f5e7777c226e5cca03b9e0bd9ce060551fad30322989deda7f2de3ece422d3fad2f6f55ff1592d0e2ed799bc70257a65edfc76adcc2fa9ea763dec308", 0xf3}], 0x4}}], 0x1, 0x2400885c) r3 = socket(0x11, 0x800000003, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200"], 0x10) socket$inet6(0xa, 0x1, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r6, {0x0, 0x302}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xf1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x8, 0x3, 0x0, 0x9, 0x9}}, {0x4}}]}]}, 0x50}, 0x1, 0x7a00}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0xa, "b0ee578d746ef1a507e9"}, &(0x7f0000000640)=0x12) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={r8, @in6={{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x41}}, 0x287, 0x8, 0x6d, 0x6, 0x5, 0x3, 0x8}, &(0x7f0000000680)=0x9c) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x4008092) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB="6000000001070103000000000000000002000001080005400000000000000000000000010900010073797a30000000000c0003400000000000000001240007800800014000000002080002400000000808000240800000010800024000000fff"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0x1}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0xfffffffc, 0x2, 0xfffffffc}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 22.22730553s ago: executing program 2 (id=1784): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000007c0)="458d1fca4f1d0461442e12c4d90f415e934058153b9b1faca44ed5f590ee47724fe6f560d2d6483e7f5ccc9f360207f117fafd8f5ad5c2d0e60a4e2af0e10b793ed8e9532a", 0x45}], 0x1) (async) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0xa, 0x0) close(r3) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000356000)=0x20001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) connect$802154_dgram(r5, &(0x7f0000000340)={0x24, @long={0x3, 0x2, {0x100}}}, 0x14) (async) sendto$inet6(r3, 0x0, 0x4, 0x0, 0x0, 0x0) 22.020666657s ago: executing program 2 (id=1788): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000d711807000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.183557624s ago: executing program 4 (id=192): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) accept4$netrom(r1, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x80800) (async) r3 = accept4(r1, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc16ad4b33cc00", 0x7}, {&(0x7f0000000040)="00f90056d9026009ef9d0744e195bd45fda2e7a9", 0x1}, {&(0x7f0000000180)="d98fc0fd899de85d0181f175c0879edee9eb1955dd0fad2d2e32da1055493b3711819c1670ec6e9e85e3a71defdaaa8755a45b4608b8aac0f6f52006784656490c5a1139a8b043a6d61622a907da007aaa4d4a2d63bb0890a65c5e49273f73cf7bc7adade15ae70449979a11615bb4"}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040e0300050200000000000400000047d58838068b91000000344a635c516c3ce23174e300f08a822605f27584bdc64b8fffd9278af0bac93a309830f3da0f682f5adc02ad648a9d063279e25f8480cd68df4d8e97d4f5f91d8934a2f24a75ffffaf3f9543bcf8c83191e9d1f34f4bdfd362259b351944cb3c41c6200c40ae8d37e25b1733a60a9b8100bba2453eba26dff6ce55277b9e6590f6ae978b32d997ba540517f4a9dcc6b2"], 0x4e) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x1, @remote}, {0x2, 0x4e21, @loopback}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0xfff}) 19.485733703s ago: executing program 3 (id=676): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x1f4, 0x50}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 17.805928149s ago: executing program 1 (id=1822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) close(r7) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0) connect$unix(r4, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040), 0x4) r8 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x5, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xdd13, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}]}, &(0x7f0000000440)=0x32) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r9, 0x9}, 0x8) 17.718514005s ago: executing program 1 (id=1824): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008015}, 0x4000080) (async) socket(0x848000000015, 0x805, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000040)="2f019c28", 0xfffffffffffffd45, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x80, @loopback}, 0x1c) (async) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) bind$qrtr(r4, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) (async) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) shutdown(r3, 0x0) 17.228785973s ago: executing program 0 (id=1828): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000004000c0002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'ip6gretap0\x00', 0x7}) 17.1355728s ago: executing program 0 (id=1829): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 17.084589212s ago: executing program 0 (id=1830): syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp0\x00'}) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) 17.014167694s ago: executing program 0 (id=1831): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x5}, 0x8) 16.856743871s ago: executing program 1 (id=1832): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 16.695256012s ago: executing program 1 (id=1833): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x2c, 0x5, r4, 0x2e}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="5996fc58a551aa67e5e4f24c95e71f123ac969a913b49114c7b17fd242efe498800ffcac24d38175a0869e6998bd196b6e949ba2a998eb58d27b0241aee6e6b736538e6243858b166b98f013509d02d57fa78f1be4133ce0cf3016b066cf9792409cc9d4da12b5e153c91ce9d774c6932f9e0504805c78415bbbbbf922b78e7e229894", 0x83}, {&(0x7f0000000300)="f5982781e5219bc4a09ecf9dc5b6ece5e44b0ff53ca0202aeb1fc8ba187ad150a74664df92f28c48126bfff0d713ca5ce9f26dd0863890574fec706a7dd482d910323b2c9547cdc26a540783b13bda45cdfe02a6f6ba149c8b13713e5dcb45029ec71240369be4c7f3", 0x69}], 0x2, 0x0, 0x0, 0x4000080}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4030000", @ANYRES16=r5, @ANYBLOB="02c7000300000b85e571671aca476f763ab800", @ANYRES32=r4, @ANYBLOB="5800028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040009000e010300000006008003040000000b00060807000000018007090800000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=r4, @ANYBLOB="f00002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400010402074303000008000100", @ANYRES32=r4, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="4c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040001000108030000002c0804400500000008000100", @ANYRES32=r4, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB], 0x3d4}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r8, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={0x0, @initdev, @multicast1}, &(0x7f00000005c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000dc0)={0x6e4, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaf6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xa, 0x9, 0x1c, 0x1}, {0x8, 0x9, 0xf, 0x3}, {0x4, 0x81, 0x81, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0x24c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.61400708s ago: executing program 1 (id=1834): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001780)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1, 0xff, 0xb, 0x2, 0x9}, 0x20) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x1}, &(0x7f0000000080)=0x8) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x16, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @ldst={0x2, 0x2, 0x4, 0xb, 0x3, 0x40, 0xfffffffffffffff0}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40}, @alu={0x4, 0x0, 0xa, 0xa, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x6048, 0x17, &(0x7f0000000040)=""/23, 0x41100, 0x3, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x8, 0x2, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r0, r0, r6, r0], 0x0, 0x10, 0x9211, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)={0x54, r9, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) openat$cgroup_ro(r0, &(0x7f0000000740)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001740)={'broute\x00', 0x0, 0x0, 0x0, [0x42, 0x1, 0x7, 0x0, 0x4, 0x6], 0x0, 0x0}, 0x78) 16.611792712s ago: executing program 1 (id=1835): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvfrom$unix(r0, &(0x7f00000020c0)=""/4096, 0x1000, 0x40000201, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/114, 0x72}], 0x1}}], 0x1, 0x40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0500feffffff000000000f00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8990, &(0x7f00000002c0)={'veth1_vlan\x00'}) 16.202318829s ago: executing program 0 (id=1836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r4, 0x800, 0x38f, 0x3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r5, 0x7}, &(0x7f0000000240)=0x8) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1010, r6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x91, 0x6, "bfadf9142e81016e94909dafddb5d423482d26fcbea47f33045a1c151d2a919c3614ed8b1194a543c50a57cae05adcc6bd9d7e6baa5131cd54bff0222ed5db9f6ca125d34f61740c17ecb9fd94f85542a6e6ae8757b7ae82e8829e37e9edf2e82bc5eaf0fc593a686e3568b8a965d09f6c78b5f2e9d548b818794686c6e27ce5526149c7583becfa0b0b0f5e92"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004) 15.340980878s ago: executing program 0 (id=1837): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000d4aed6002100010000000000000000000200000000000000000000535200003a1143543ba8fc025c2783000000000000000000000014000f8e0e0b"], 0x30}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 1.027895555s ago: executing program 32 (id=1835): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvfrom$unix(r0, &(0x7f00000020c0)=""/4096, 0x1000, 0x40000201, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/114, 0x72}], 0x1}}], 0x1, 0x40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0500feffffff000000000f00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8990, &(0x7f00000002c0)={'veth1_vlan\x00'}) 0s ago: executing program 33 (id=1837): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000d4aed6002100010000000000000000000200000000000000000000535200003a1143543ba8fc025c2783000000000000000000000014000f8e0e0b"], 0x30}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) kernel console output (not intermixed with test programs): . [ 87.680402][ T8647] lo speed is unknown, defaulting to 1000 [ 87.687646][ T8708] tipc: Enabling of bearer rejected, failed to enable media [ 87.702209][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 87.713435][ T8707] netlink: 288 bytes leftover after parsing attributes in process `syz.1.805'. [ 87.861623][ T8728] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.900129][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 87.909624][ T8728] netlink: 272 bytes leftover after parsing attributes in process `syz.1.810'. [ 87.921638][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 87.934759][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 87.948112][ T8735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.813'. [ 87.961861][ T8735] tipc: Enabling of bearer rejected, already enabled [ 88.044771][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 88.220644][ T8773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.822'. [ 88.252574][ T8775] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 88.267866][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.824'. [ 88.402259][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.471058][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.539857][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.575944][ T8813] netlink: 'syz.2.834': attribute type 12 has an invalid length. [ 88.619100][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.724977][ T8827] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.744417][ T31] bridge_slave_1: left allmulticast mode [ 88.756873][ T31] bridge_slave_1: left promiscuous mode [ 88.762579][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.777073][ T31] bridge_slave_0: left allmulticast mode [ 88.789736][ T31] bridge_slave_0: left promiscuous mode [ 88.796053][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.796189][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.814067][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.821751][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.830907][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.838490][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.850942][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.971014][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.981875][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.991841][ T31] bond0 (unregistering): Released all slaves [ 89.019112][ T8832] lo speed is unknown, defaulting to 1000 [ 89.028850][ T8832] lo speed is unknown, defaulting to 1000 [ 89.084737][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 89.234358][ T31] hsr_slave_0: left promiscuous mode [ 89.260228][ T31] hsr_slave_1: left promiscuous mode [ 89.271498][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.279428][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.287278][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.295038][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.305001][ T31] veth1_macvtap: left promiscuous mode [ 89.310571][ T31] veth0_macvtap: left promiscuous mode [ 89.316265][ T31] veth1_vlan: left promiscuous mode [ 89.321586][ T31] veth0_vlan: left promiscuous mode [ 89.500668][ T31] team0 (unregistering): Port device team_slave_1 removed [ 89.515862][ T31] team0 (unregistering): Port device team_slave_0 removed [ 89.649440][ T8832] chnl_net:caif_netlink_parms(): no params data found [ 89.722516][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.734137][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.747766][ T8832] bridge_slave_0: entered allmulticast mode [ 89.765222][ T8832] bridge_slave_0: entered promiscuous mode [ 89.780290][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.827446][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.836870][ T8832] bridge_slave_1: entered allmulticast mode [ 89.844325][ T8832] bridge_slave_1: entered promiscuous mode [ 89.928922][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.935462][ T8907] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 89.942975][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.053078][ T8832] team0: Port device team_slave_0 added [ 90.062334][ T8832] team0: Port device team_slave_1 added [ 90.111722][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.123757][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.124778][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 90.177616][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.189931][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.237136][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.326303][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.413983][ T8832] hsr_slave_0: entered promiscuous mode [ 90.428049][ T8832] hsr_slave_1: entered promiscuous mode [ 90.434388][ T8832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.447387][ T8832] Cannot create hsr debugfs directory [ 90.690761][ T8950] xt_nat: multiple ranges no longer supported [ 90.691771][ T8951] xt_nat: multiple ranges no longer supported [ 90.925033][ T5846] Bluetooth: hci3: command tx timeout [ 90.936497][ T8832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.980799][ T8832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.013686][ T8832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.047831][ T8832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.161311][ T8979] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 91.168716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 91.182941][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.186558][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.213064][ T8832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.252705][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.259854][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.299839][ T8832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.314243][ T8832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.334420][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.341565][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.487858][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.581334][ T8832] veth0_vlan: entered promiscuous mode [ 91.616832][ T8832] veth1_vlan: entered promiscuous mode [ 91.672166][ T8832] veth0_macvtap: entered promiscuous mode [ 91.729399][ T8832] veth1_macvtap: entered promiscuous mode [ 91.757098][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.769546][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.779616][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.802706][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.813346][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.828152][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.838852][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.849705][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.860764][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.871546][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.882888][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.899586][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.911400][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.925390][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.940756][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.954161][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.965286][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.975207][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.985972][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.996992][ T8832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.011438][ T8832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.023296][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.071064][ T8832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.084720][ T8832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.093540][ T8832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.107300][ T8832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.204814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 92.211952][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.223967][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.268753][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.277476][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.375585][ T8920] Set syz1 is full, maxelem 65536 reached [ 92.806615][ T9050] __nla_validate_parse: 52 callbacks suppressed [ 92.806628][ T9050] netlink: 188 bytes leftover after parsing attributes in process `syz.0.893'. [ 93.004894][ T5846] Bluetooth: hci3: command 0x041b tx timeout [ 93.068702][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'. [ 93.092937][ T9067] lo speed is unknown, defaulting to 1000 [ 93.099757][ T9067] lo speed is unknown, defaulting to 1000 [ 93.244767][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 93.317019][ T9079] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 93.690977][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 94.032492][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 94.104968][ T9122] netlink: 'syz.2.915': attribute type 18 has an invalid length. [ 94.150055][ T9131] dvmrp0: entered allmulticast mode [ 94.249223][ T9142] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 94.284778][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 94.422080][ T9158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.600041][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805646f000: rx timeout, send abort [ 94.608516][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805646f000: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 94.623034][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805646f400: rx timeout, send abort [ 94.631429][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805646f400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 94.828179][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 95.150131][ T9191] tipc: MTU too low for tipc bearer [ 95.156814][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 95.167242][ T9191] netlink: 'syz.2.937': attribute type 15 has an invalid length. [ 95.175307][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 95.262725][ T9197] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 95.324874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 95.354179][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.360778][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.368103][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.377606][ T9204] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.391923][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.398989][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.406533][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.413594][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.421206][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.428680][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.436018][ T9204] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.508913][ T9210] netlink: 'syz.2.943': attribute type 4 has an invalid length. [ 95.559361][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 95.661092][ T9220] lo speed is unknown, defaulting to 1000 [ 95.668429][ T9220] lo speed is unknown, defaulting to 1000 [ 95.712805][ T9220] virt_wifi0 speed is unknown, defaulting to 1000 [ 95.811990][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 95.911642][ T9228] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 95.919897][ T9228] netlink: 224 bytes leftover after parsing attributes in process `syz.2.950'. [ 95.995746][ T9237] syzkaller1: entered promiscuous mode [ 96.001323][ T9237] syzkaller1: entered allmulticast mode [ 96.283912][ T9255] can: request_module (can-proto-0) failed. [ 96.364815][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 97.404781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 97.444486][ T9319] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.986094][ T9328] netlink: 'syz.2.978': attribute type 5 has an invalid length. [ 97.993770][ T9328] __nla_validate_parse: 4 callbacks suppressed [ 97.993783][ T9328] netlink: 140 bytes leftover after parsing attributes in process `syz.2.978'. [ 98.064836][ T9332] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 98.113268][ T9332] netlink: 116 bytes leftover after parsing attributes in process `syz.2.980'. [ 98.228201][ T9344] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.983'. [ 98.237722][ T9344] openvswitch: netlink: Flow key attr not present in new flow. [ 98.318560][ T9348] x_tables: duplicate underflow at hook 2 [ 98.324540][ T9348] x_tables: duplicate underflow at hook 2 [ 98.331079][ T9348] x_tables: duplicate underflow at hook 2 [ 98.337097][ T9348] x_tables: duplicate underflow at hook 2 [ 98.343006][ T9348] x_tables: duplicate underflow at hook 2 [ 98.349980][ T9348] x_tables: duplicate underflow at hook 2 [ 98.356140][ T9348] x_tables: duplicate underflow at hook 2 [ 98.406883][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 98.422708][ T9355] delete_channel: no stack [ 98.444807][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 98.507832][ T9360] netlink: 'syz.1.989': attribute type 11 has an invalid length. [ 98.563140][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 99.001463][ T9367] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 99.051799][ T9367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.059742][ T9367] bond2: (slave bond3): making interface the new active one [ 99.067677][ T9367] bond2: (slave bond3): Enslaving as an active interface with an up link [ 99.163969][ T9373] netlink: 'syz.2.993': attribute type 3 has an invalid length. [ 99.202501][ T9380] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 99.355950][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 99.410215][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.458759][ T9399] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 99.484753][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 99.494577][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 99.505873][ T9403] xt_bpf: check failed: parse error [ 99.598764][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1006'. [ 99.632043][ T9418] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1008'. [ 100.015300][ T9449] netlink: 'syz.0.1020': attribute type 7 has an invalid length. [ 100.023246][ T9451] veth1_macvtap: left promiscuous mode [ 100.031928][ T9453] netlink: 'syz.0.1020': attribute type 7 has an invalid length. [ 100.033640][ T9451] macsec0: entered promiscuous mode [ 100.070501][ T9451] veth1_macvtap: entered promiscuous mode [ 100.076815][ T9451] macsec0: left promiscuous mode [ 100.085511][ T9457] lo speed is unknown, defaulting to 1000 [ 100.091991][ T9457] lo speed is unknown, defaulting to 1000 [ 100.132328][ T9460] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1023'. [ 100.162306][ T9457] virt_wifi0 speed is unknown, defaulting to 1000 [ 100.524748][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 100.603309][ T9502] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 100.649766][ T9513] xt_ecn: cannot match TCP bits for non-tcp packets [ 100.653840][ T9514] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 100.983136][ T9556] ipt_REJECT: TCP_RESET invalid for non-tcp [ 101.061705][ T9567] netlink: 'syz.0.1057': attribute type 29 has an invalid length. [ 101.074955][ T9567] netlink: 'syz.0.1057': attribute type 29 has an invalid length. [ 101.119966][ T9572] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 101.232196][ T9585] netlink: 'syz.0.1065': attribute type 21 has an invalid length. [ 101.388141][ T9600] IPVS: Unknown mcast interface: netpci0 [ 101.427542][ T9604] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 101.564735][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 102.339990][ T9696] netlink: 'syz.0.1098': attribute type 39 has an invalid length. [ 102.393896][ T9702] netlink: 'syz.0.1100': attribute type 4 has an invalid length. [ 102.420324][ T9702] infiniband syz0: set down [ 102.425742][ T5882] lo speed is unknown, defaulting to 1000 [ 102.425749][ T5992] lo speed is unknown, defaulting to 1000 [ 102.425792][ T5992] lo speed is unknown, defaulting to 1000 [ 102.604768][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 102.606877][ T9722] delete_channel: no stack [ 103.100479][ T9780] __nla_validate_parse: 15 callbacks suppressed [ 103.100500][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 103.129417][ T9780] bond4: entered promiscuous mode [ 103.134933][ T9780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.153031][ T9774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.164033][ T9774] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.174848][ T9774] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 103.186571][ T9774] bond4: (slave vxcan3): making interface the new active one [ 103.193965][ T9774] vxcan3: entered promiscuous mode [ 103.200286][ T9774] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 103.218231][ T9784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.230168][ T9784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.240177][ T9784] bond0 (unregistering): (slave ): Releasing backup interface [ 103.248538][ T9784] bond0 (unregistering): Released all slaves [ 103.330512][ T9791] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 103.464663][ T9799] netlink: 'syz.1.1133': attribute type 11 has an invalid length. [ 103.510901][ T9804] openvswitch: netlink: EtherType 50a is less than min 600 [ 103.645229][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 103.677590][ T9817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1139'. [ 103.797249][ T9819] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 103.904570][ T9829] veth0: entered promiscuous mode [ 103.911761][ T9829] lo: entered promiscuous mode [ 103.921016][ T9829] lo: left promiscuous mode [ 103.925810][ T9829] veth0: left promiscuous mode [ 104.000462][ T9833] netlink: zone id is out of range [ 104.121653][ T9848] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1150'. [ 104.153613][ T9850] syzkaller1: entered promiscuous mode [ 104.159346][ T9850] syzkaller1: entered allmulticast mode [ 104.298107][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 104.684765][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 105.160663][ T9863] syz.0.1157: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 105.165528][ T9865] sctp: [Deprecated]: syz.2.1156 (pid 9865) Use of int in max_burst socket option. [ 105.165528][ T9865] Use struct sctp_assoc_value instead [ 105.181246][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.0.1157 Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 105.181274][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 105.181285][ T9863] Call Trace: [ 105.181290][ T9863] [ 105.181297][ T9863] dump_stack_lvl+0x241/0x360 [ 105.181329][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.181351][ T9863] ? __pfx__printk+0x10/0x10 [ 105.181372][ T9863] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 105.181397][ T9863] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 105.181422][ T9863] warn_alloc+0x278/0x410 [ 105.181440][ T9863] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 105.181458][ T9863] ? __pfx_warn_alloc+0x10/0x10 [ 105.181475][ T9863] ? kasan_save_track+0x3f/0x80 [ 105.181492][ T9863] ? __kasan_kmalloc+0x98/0xb0 [ 105.181510][ T9863] ? xsk_setsockopt+0x4ea/0x950 [ 105.181528][ T9863] ? do_sock_setsockopt+0x3af/0x720 [ 105.181545][ T9863] ? __x64_sys_setsockopt+0x1ee/0x280 [ 105.181561][ T9863] ? do_syscall_64+0xf3/0x230 [ 105.181575][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.181596][ T9863] __vmalloc_node_range_noprof+0x126/0x1380 [ 105.181624][ T9863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.181644][ T9863] ? __kasan_kmalloc+0x98/0xb0 [ 105.181664][ T9863] vmalloc_user_noprof+0x74/0x80 [ 105.181681][ T9863] ? xskq_create+0xb6/0x170 [ 105.181698][ T9863] xskq_create+0xb6/0x170 [ 105.181718][ T9863] xsk_init_queue+0xa1/0x100 [ 105.181737][ T9863] xsk_setsockopt+0x4ea/0x950 [ 105.181757][ T9863] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.181773][ T9863] ? rcu_is_watching+0x15/0xb0 [ 105.181795][ T9863] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.181810][ T9863] ? lock_release+0xbf/0xa30 [ 105.181829][ T9863] ? aa_sock_opt_perm+0x79/0x120 [ 105.181855][ T9863] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.181873][ T9863] do_sock_setsockopt+0x3af/0x720 [ 105.181892][ T9863] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.181911][ T9863] ? __fget_files+0x395/0x410 [ 105.181933][ T9863] ? __fget_files+0x2a/0x410 [ 105.181957][ T9863] __x64_sys_setsockopt+0x1ee/0x280 [ 105.181976][ T9863] do_syscall_64+0xf3/0x230 [ 105.181991][ T9863] ? clear_bhb_loop+0x35/0x90 [ 105.182008][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.182025][ T9863] RIP: 0033:0x7f6daaf8cd29 [ 105.182039][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.182052][ T9863] RSP: 002b:00007f6dabeb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.182070][ T9863] RAX: ffffffffffffffda RBX: 00007f6dab1a5fa0 RCX: 00007f6daaf8cd29 [ 105.182081][ T9863] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 105.182091][ T9863] RBP: 00007f6dab00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 105.182101][ T9863] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.182111][ T9863] R13: 0000000000000000 R14: 00007f6dab1a5fa0 R15: 00007fffae2c4cf8 [ 105.182128][ T9863] [ 105.182135][ T9863] Mem-Info: [ 105.300115][ T9874] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1160'. [ 105.305952][ T9863] active_anon:4000 inactive_anon:0 isolated_anon:0 [ 105.305952][ T9863] active_file:1229 inactive_file:38323 isolated_file:0 [ 105.305952][ T9863] unevictable:768 dirty:62 writeback:0 [ 105.305952][ T9863] slab_reclaimable:11403 slab_unreclaimable:111853 [ 105.305952][ T9863] mapped:28255 shmem:1441 pagetables:601 [ 105.305952][ T9863] sec_pagetables:0 bounce:0 [ 105.305952][ T9863] kernel_misc_reclaimable:0 [ 105.305952][ T9863] free:1329097 free_pcp:196 free_cma:0 [ 105.306016][ T9863] Node 0 active_anon:16000kB inactive_anon:0kB active_file:4916kB inactive_file:153216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113020kB dirty:248kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12504kB pagetables:2404kB sec_pagetables:0kB all_unreclaimable? no [ 105.582284][ T9863] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 105.612804][ T9863] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.640609][ T9863] lowmem_reserve[]: 0 2490 2491 0 0 [ 105.648974][ T9890] validate_nla: 1 callbacks suppressed [ 105.648990][ T9890] netlink: 'syz.2.1166': attribute type 8 has an invalid length. [ 105.657601][ T9863] Node 0 [ 105.684300][ T9863] DMA32 free:1394400kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:15856kB inactive_anon:0kB active_file:4916kB inactive_file:152660kB unevictable:1536kB writepending:248kB present:3129332kB managed:2550704kB mlocked:0kB bounce:0kB free_pcp:1700kB local_pcp:840kB free_cma:0kB [ 105.719417][ T9898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1169'. [ 105.720269][ T9863] lowmem_reserve[]: [ 105.728450][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 105.743671][ T9863] 0 0 0 0 0 [ 105.747189][ T9863] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:556kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 105.752125][ T9900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1169'. [ 105.782059][ T9863] lowmem_reserve[]: 0 0 0 0 0 [ 105.788838][ T9863] Node 1 Normal free:3905624kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.821525][ T9863] lowmem_reserve[]: 0 0 0 0 0 [ 105.827995][ T9863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.847359][ T9863] Node 0 DMA32: 543*4kB (UE) 311*8kB (UME) 305*16kB (UME) 144*32kB (UME) 68*64kB (UME) 31*128kB (UM) 20*256kB (UM) 9*512kB (UM) 7*1024kB (UME) 6*2048kB (UME) 328*4096kB (M) = 1395140kB [ 105.867942][ T9863] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 105.881086][ T9863] Node 1 Normal: 190*4kB (UM) 61*8kB (UME) 40*16kB (UME) 208*32kB (UME) 97*64kB (UME) 24*128kB (UME) 17*256kB (UME) 11*512kB (UM) 5*1024kB (UM) 1*2048kB (E) 945*4096kB (UM) = 3905696kB [ 105.901605][ T9863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.912456][ T9863] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.922003][ T9863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.926975][ T9912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1172'. [ 105.932007][ T9863] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.950512][ T9912] C: renamed from team_slave_0 (while UP) [ 105.959571][ T9912] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 105.966343][ T9863] 40993 total pagecache pages [ 105.972715][ T9912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 105.974746][ T9863] 0 pages in swap cache [ 105.993035][ T9863] Free swap = 124996kB [ 105.997603][ T9863] Total swap = 124996kB [ 105.997845][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 106.001817][ T9863] 2097051 pages RAM [ 106.001827][ T9863] 0 pages HighMem/MovableOnly [ 106.001833][ T9863] 427589 pages reserved [ 106.001839][ T9863] 0 pages cma reserved [ 106.065423][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 106.368504][ T9949] dvmrp0: entered allmulticast mode [ 106.408271][ T9952] lo speed is unknown, defaulting to 1000 [ 106.414847][ T9952] lo speed is unknown, defaulting to 1000 [ 106.486697][ T9952] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.567930][ T9967] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 106.693273][ T9979] syzkaller1: entered promiscuous mode [ 106.698974][ T9979] syzkaller1: entered allmulticast mode [ 106.731154][ T9979] vcan0: entered allmulticast mode [ 106.747860][ T9979] vcan0 (unregistering): left allmulticast mode [ 106.764758][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 106.830203][ T9991] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 106.842186][ T9991] netlink: 'syz.0.1199': attribute type 2 has an invalid length. [ 106.996757][T10001] nftables ruleset with unbound chain [ 107.082523][T10011] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 107.145442][T10019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.175216][T10024] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 107.453063][T10056] delete_channel: no stack [ 107.805889][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.077778][T10118] x_tables: duplicate underflow at hook 1 [ 108.112516][T10123] __nla_validate_parse: 9 callbacks suppressed [ 108.112531][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 108.272928][T10141] syzkaller1: entered allmulticast mode [ 108.281739][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1246'. [ 108.294295][T10143] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 108.361170][T10147] netlink: 'syz.0.1249': attribute type 4 has an invalid length. [ 108.407775][T10152] openvswitch: netlink: Duplicate key (type 32). [ 108.439743][T10157] netlink: 'syz.2.1253': attribute type 3 has an invalid length. [ 108.448302][T10157] netlink: 'syz.2.1253': attribute type 3 has an invalid length. [ 108.509586][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 108.537135][T10167] bridge_slave_1: left allmulticast mode [ 108.542841][T10167] bridge_slave_1: left promiscuous mode [ 108.549511][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.620388][T10175] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 108.844760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.865910][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 108.971209][T10200] net veth1_virt_wifi : renamed from virt_wifi0 [ 109.053407][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1266'. [ 109.102779][T10213] macvlan0: entered promiscuous mode [ 109.109334][T10213] macvlan0: left promiscuous mode [ 109.182124][T10220] geneve2: entered promiscuous mode [ 109.189107][T10220] geneve2: entered allmulticast mode [ 109.267619][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1273'. [ 109.306832][T10231] "syz.2.1274" (10231) uses obsolete ecb(arc4) skcipher [ 109.315965][T10236] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1275'. [ 109.373492][T10243] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1277'. [ 109.412856][T10246] netlink: 'syz.0.1278': attribute type 3 has an invalid length. [ 109.460151][T10257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.546933][T10269] netlink: 'syz.2.1284': attribute type 2 has an invalid length. [ 109.712248][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 109.858627][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.884743][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.124442][T10324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1303'. [ 110.141549][T10324] bridge0: left allmulticast mode [ 110.148968][T10324] bridge0: left promiscuous mode [ 110.312191][T10336] lo speed is unknown, defaulting to 1000 [ 110.319632][T10336] lo speed is unknown, defaulting to 1000 [ 110.393568][T10336]  speed is unknown, defaulting to 1000 [ 110.479335][T10333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.924744][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 111.243183][T10403] validate_nla: 2 callbacks suppressed [ 111.243196][T10403] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 111.447219][T10429] ieee802154 phy1 wpan1: encryption failed: -22 [ 111.579754][T10447] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 111.587704][T10447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.859169][T10467] netlink: 'syz.2.1347': attribute type 7 has an invalid length. [ 111.965059][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.365541][T10490] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (642), value rounded to 33554130 ms [ 113.004719][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.208761][T10545] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 113.224909][T10545] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 113.409097][T10553] netlink: set zone limit has 8 unknown bytes [ 113.416951][T10553] netlink: 'syz.1.1374': attribute type 10 has an invalid length. [ 113.426196][T10553] netlink: 'syz.1.1374': attribute type 8 has an invalid length. [ 113.443334][T10553] __nla_validate_parse: 11 callbacks suppressed [ 113.443350][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 113.589606][T10556] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 113.628710][T10556] team0: Device hsr_slave_0 failed to register rx_handler [ 113.774342][T10574] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 113.827724][T10574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.834531][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 114.044826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 114.220889][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.231144][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.240379][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.241900][T10603] netlink: 'syz.2.1389': attribute type 10 has an invalid length. [ 114.249789][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.267617][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.276936][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.287430][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.296758][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 114.354034][T10609] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 114.361524][T10609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.398450][T10614] netlink: 'syz.0.1392': attribute type 8 has an invalid length. [ 114.500528][T10618] x_tables: unsorted entry at hook 3 [ 114.673062][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.718818][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.780388][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.846122][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.945083][ T1138] bridge_slave_1: left allmulticast mode [ 114.953926][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.956223][ T1138] bridge_slave_1: left promiscuous mode [ 114.970288][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.976421][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.979105][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.995538][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.002912][ T1138] bridge_slave_0: left allmulticast mode [ 115.003051][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.016438][ T1138] bridge_slave_0: left promiscuous mode [ 115.022053][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.023035][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.084778][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 115.140360][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.150309][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.160992][ T1138] bond0 (unregistering): Released all slaves [ 115.183255][T10644] lo speed is unknown, defaulting to 1000 [ 115.190087][T10644] lo speed is unknown, defaulting to 1000 [ 115.460904][T10644] chnl_net:caif_netlink_parms(): no params data found [ 115.529467][ T1138] hsr_slave_0: left promiscuous mode [ 115.555916][ T1138] hsr_slave_1: left promiscuous mode [ 115.562240][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.570547][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.584184][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.602568][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.630754][ T1138] veth1_macvtap: left promiscuous mode [ 115.636661][ T1138] veth0_macvtap: left promiscuous mode [ 115.642545][ T1138] veth1_vlan: left promiscuous mode [ 115.654316][ T1138] veth0_vlan: left promiscuous mode [ 115.831050][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 115.845041][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 115.929117][T10705] netlink: 'syz.2.1420': attribute type 11 has an invalid length. [ 115.943287][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.951352][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.969876][T10644] bridge_slave_0: entered allmulticast mode [ 115.978025][T10644] bridge_slave_0: entered promiscuous mode [ 115.985681][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.992822][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.000445][T10644] bridge_slave_1: entered allmulticast mode [ 116.010717][T10644] bridge_slave_1: entered promiscuous mode [ 116.044363][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.062203][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.090584][T10644] team0: Port device team_slave_0 added [ 116.098117][T10644] team0: Port device team_slave_1 added [ 116.107636][T10719] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 116.122022][T10719] ax25_connect(): syz.0.1423 uses autobind, please contact jreuter@yaina.de [ 116.130896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.143129][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.151301][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.177818][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.190071][T10722] tls_set_device_offload: netdev not found [ 116.197945][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.209668][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.236212][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.270415][T10644] hsr_slave_0: entered promiscuous mode [ 116.279083][T10644] hsr_slave_1: entered promiscuous mode [ 116.287221][T10644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.295661][T10644] Cannot create hsr debugfs directory [ 116.415097][T10734] (unnamed net_device) (uninitialized): option mode: invalid value (110) [ 116.446851][T10738] netlink: 'syz.0.1429': attribute type 21 has an invalid length. [ 116.455039][T10738] netlink: 'syz.0.1429': attribute type 11 has an invalid length. [ 116.565291][T10644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.573776][T10644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.582291][T10644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.591361][T10644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.636717][T10644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.651116][T10644] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.662425][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.669569][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.682044][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.689136][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.780383][T10644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.892421][T10644] veth0_vlan: entered promiscuous mode [ 116.925443][T10644] veth1_vlan: entered promiscuous mode [ 116.950458][T10644] veth0_macvtap: entered promiscuous mode [ 116.961776][T10644] veth1_macvtap: entered promiscuous mode [ 116.976241][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.987396][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.998086][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.008791][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.019255][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.030104][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.040110][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.051163][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.061370][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.072135][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.083469][T10644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.096227][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.104281][ T5835] Bluetooth: hci1: command tx timeout [ 117.107119][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.122671][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.137279][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.148009][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.158779][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.164747][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.168959][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.186367][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.196279][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.206968][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.218279][T10644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.229992][T10644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.239202][T10644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.248170][T10644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.257643][T10644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.297392][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.307213][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.323153][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.333037][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.070976][T10788] netlink: 'syz.2.1440': attribute type 25 has an invalid length. [ 118.204770][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 118.269726][T10812] lo speed is unknown, defaulting to 1000 [ 118.278573][T10812] lo speed is unknown, defaulting to 1000 [ 118.444294][T10829] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 118.681653][T10847] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 118.691090][T10847] __nla_validate_parse: 73 callbacks suppressed [ 118.691107][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 118.784347][T10861] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 118.793735][T10861] batman_adv: batadv0: Adding interface: wlan0 [ 118.804164][T10861] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.811941][T10863] No such timeout policy "syz0" [ 118.834504][T10861] batman_adv: batadv0: Interface activated: wlan0 [ 118.968998][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 119.119110][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'. [ 119.174871][ T5835] Bluetooth: hci1: command 0x041b tx timeout [ 119.236660][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 119.244741][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.248251][T10903] openvswitch: netlink: IP tunnel dst address not specified [ 119.364401][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 119.374374][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 119.395765][T10929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1490'. [ 119.427945][ T5846] block nbd3: Receive control failed (result -107) [ 119.464846][T10929] nbd3: detected capacity change from 0 to 256 [ 119.527126][T10945] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 119.562963][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 119.653095][T10960] netlink: 'syz.2.1498': attribute type 2 has an invalid length. [ 119.661414][T10960] netlink: 'syz.2.1498': attribute type 9 has an invalid length. [ 119.669563][T10960] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1498'. [ 119.710002][T10967] netlink: 'syz.1.1499': attribute type 4 has an invalid length. [ 119.722444][T10967] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1499'. [ 120.060898][T11018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.066000][T11016] lo: entered allmulticast mode [ 120.080792][T11020] pim6reg: entered allmulticast mode [ 120.087041][T11016] lo: left allmulticast mode [ 120.197652][T11037] xt_l2tp: v2 sid > 0xffff: 262144 [ 120.221760][T11035] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 120.251970][T11040] netlink: 'syz.1.1523': attribute type 21 has an invalid length. [ 120.260328][T11040] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.268904][T11040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.276167][T11040] IPv6: NLM_F_CREATE should be set when creating new route [ 120.283394][T11040] IPv6: NLM_F_CREATE should be set when creating new route [ 120.285504][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.290626][T11040] IPv6: NLM_F_CREATE should be set when creating new route [ 120.656625][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.711598][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.759735][ T1108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.821209][ T1108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.870304][ T1108] bridge_slave_1: left allmulticast mode [ 120.876469][ T1108] bridge_slave_1: left promiscuous mode [ 120.882228][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.890750][ T1108] bridge_slave_0: left allmulticast mode [ 120.897014][ T1108] bridge_slave_0: left promiscuous mode [ 120.902798][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.000607][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.010575][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.021359][ T1108] bond0 (unregistering): Released all slaves [ 121.288227][T11088] infiniband syz0: set active [ 121.324782][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 121.346518][ T3678] lo speed is unknown, defaulting to 1000 [ 121.352675][ T5882] lo speed is unknown, defaulting to 1000 [ 121.369084][ T3678] lo speed is unknown, defaulting to 1000 [ 121.418119][T11097] xfrm1: entered allmulticast mode [ 121.533908][ T1108] hsr_slave_0: left promiscuous mode [ 121.552477][ T1108] hsr_slave_1: left promiscuous mode [ 121.560529][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.560592][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.570108][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.583888][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.591418][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.591646][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.600368][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.615023][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.622280][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.623076][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.639377][ T1108] veth1_macvtap: left promiscuous mode [ 121.645214][ T1108] veth0_macvtap: left promiscuous mode [ 121.650781][ T1108] veth1_vlan: left promiscuous mode [ 121.656632][ T1108] veth0_vlan: left promiscuous mode [ 121.780018][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 121.793001][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 121.881791][T11111] lo speed is unknown, defaulting to 1000 [ 121.896559][T11111] lo speed is unknown, defaulting to 1000 [ 121.906341][T11130] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20000 [ 122.061695][T11111] chnl_net:caif_netlink_parms(): no params data found [ 122.115970][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.123573][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.131540][T11111] bridge_slave_0: entered allmulticast mode [ 122.138593][T11111] bridge_slave_0: entered promiscuous mode [ 122.148493][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.156098][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.163386][T11111] bridge_slave_1: entered allmulticast mode [ 122.171011][T11111] bridge_slave_1: entered promiscuous mode [ 122.192160][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.211245][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.227584][T11150] tipc: Enabled bearer , priority 0 [ 122.241271][T11149] tipc: Disabling bearer [ 122.250114][T11111] team0: Port device team_slave_0 added [ 122.258681][T11111] team0: Port device team_slave_1 added [ 122.273674][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.281174][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.307327][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.320210][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.328290][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.358349][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.364742][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.387211][T11112] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 122.405216][T11111] hsr_slave_0: entered promiscuous mode [ 122.415565][T11111] hsr_slave_1: entered promiscuous mode [ 122.421654][T11111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.431135][T11111] Cannot create hsr debugfs directory [ 122.511380][T11165] validate_nla: 4 callbacks suppressed [ 122.511399][T11165] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 122.620846][T11171] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 122.636387][T11171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.807585][T11111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.824125][T11111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.842050][T11111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.867421][T11111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.892108][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.899269][T11111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.906657][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.913762][T11111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.934850][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.945884][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.048465][T11111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.086322][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.108957][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.116122][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.132012][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.139175][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.216001][T11215] veth3: entered allmulticast mode [ 123.357881][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.404728][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 123.564036][T11111] veth0_vlan: entered promiscuous mode [ 123.574558][T11111] veth1_vlan: entered promiscuous mode [ 123.593712][T11111] veth0_macvtap: entered promiscuous mode [ 123.602850][T11111] veth1_macvtap: entered promiscuous mode [ 123.627686][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.638836][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.650394][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.655790][ T5835] Bluetooth: hci1: command tx timeout [ 123.671147][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.681647][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.696629][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.715221][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.727111][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.737554][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.764931][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.782959][T11111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.818667][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.842329][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.853326][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.864017][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.891764][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.904435][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.914881][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.925618][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.942664][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.953404][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.964469][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.010065][T11111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.019976][T11111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.030564][T11111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.042009][T11111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.103106][T11111] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 124.119022][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.143557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.161852][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.183963][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.192512][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.358282][T11297] __nla_validate_parse: 16 callbacks suppressed [ 124.358297][T11297] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.1597'. [ 124.380267][T11297] openvswitch: netlink: Flow key attr not present in new flow. [ 124.442368][T11313] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.444752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 124.452643][T11313] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.471550][T11313] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.481046][T11313] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.491784][T11313] geneve2: entered promiscuous mode [ 124.497462][T11313] geneve2: entered allmulticast mode [ 124.504175][T11313] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.512952][T11313] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.521772][T11313] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.530667][T11313] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.552262][T11315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1604'. [ 124.620915][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 124.651071][T11326] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1607'. [ 124.660799][T11326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1607'. [ 124.722216][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'. [ 124.797428][T11336] tipc: Enabling of bearer rejected, failed to enable media [ 124.804261][T11339] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 124.827965][T11339] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.070543][T11376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1620'. [ 125.267152][T11404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1631'. [ 125.276553][T11404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1631'. [ 125.348362][T11407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1632'. [ 125.443994][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.472123][T11424] netlink: 'syz.0.1635': attribute type 5 has an invalid length. [ 125.484788][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.496033][T11424] : entered promiscuous mode [ 125.521764][T11427] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 126.103682][T11436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 126.116031][T11435] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 126.129107][T11435] set match dimension is over the limit! [ 126.317106][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.328113][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.335911][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.343615][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.351581][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.359035][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.372819][T11466] geneve2: entered promiscuous mode [ 126.382223][T11466] geneve2: entered allmulticast mode [ 126.388797][T11463] netlink: 'syz.0.1646': attribute type 21 has an invalid length. [ 126.418074][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.437120][T11458] lo speed is unknown, defaulting to 1000 [ 126.443646][T11458] lo speed is unknown, defaulting to 1000 [ 126.524747][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.586484][T11479] IPv6: sit3: Disabled Multicast RS [ 126.654093][T11458] chnl_net:caif_netlink_parms(): no params data found [ 126.753341][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.761089][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.770400][T11458] bridge_slave_0: entered allmulticast mode [ 126.777822][T11458] bridge_slave_0: entered promiscuous mode [ 126.791238][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.808311][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.815918][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.823147][T11458] bridge_slave_1: entered allmulticast mode [ 126.830716][T11458] bridge_slave_1: entered promiscuous mode [ 126.844231][T11499] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 126.881387][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.893350][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.912958][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.944911][T11458] team0: Port device team_slave_0 added [ 126.964063][T11458] team0: Port device team_slave_1 added [ 127.016175][T11513] netlink: get zone limit has 8 unknown bytes [ 127.024586][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.038189][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.072003][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.094538][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.102377][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.134038][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.203119][ T11] bridge_slave_1: left allmulticast mode [ 127.213553][ T11] bridge_slave_1: left promiscuous mode [ 127.219985][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.232719][ T11] bridge_slave_0: left allmulticast mode [ 127.239966][ T11] bridge_slave_0: left promiscuous mode [ 127.251022][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.299854][T11458] hsr_slave_0: entered promiscuous mode [ 127.307887][T11458] hsr_slave_1: entered promiscuous mode [ 127.314459][T11458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.323600][T11458] Cannot create hsr debugfs directory [ 127.429801][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.452840][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.463133][ T11] bond0 (unregistering): Released all slaves [ 127.564797][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.783429][T11547] geneve1: entered promiscuous mode [ 127.853081][ T11] hsr_slave_0: left promiscuous mode [ 127.860915][T11551] sctp: [Deprecated]: syz.2.1675 (pid 11551) Use of int in max_burst socket option deprecated. [ 127.860915][T11551] Use struct sctp_assoc_value instead [ 127.878524][ T11] hsr_slave_1: left promiscuous mode [ 127.889139][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.897231][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.905676][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.913243][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.922348][ T11] veth1_macvtap: left promiscuous mode [ 127.930801][ T11] veth0_macvtap: left promiscuous mode [ 127.937002][ T11] veth1_vlan: left promiscuous mode [ 127.942472][ T11] veth0_vlan: left promiscuous mode [ 128.090842][ T11] team0 (unregistering): Port device team_slave_1 removed [ 128.103852][ T11] team0 (unregistering): Port device team_slave_0 removed [ 128.121495][T11563] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 128.184045][T11563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.215287][T11458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.226009][T11458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.242746][T11458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.252210][T11458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.263330][T11569] dvmrp0: entered allmulticast mode [ 128.272635][T11569] netlink: 'syz.1.1679': attribute type 4 has an invalid length. [ 128.336196][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.351477][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.362921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.370197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.388478][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.395660][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.445186][ T5846] Bluetooth: hci1: command tx timeout [ 128.563209][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.604781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.734127][T11458] veth0_vlan: entered promiscuous mode [ 128.755495][T11458] veth1_vlan: entered promiscuous mode [ 128.795754][T11458] veth0_macvtap: entered promiscuous mode [ 128.805915][T11458] veth1_macvtap: entered promiscuous mode [ 128.827146][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.839396][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.850077][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.864568][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.876790][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.887764][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.898194][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.914781][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.928798][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.939747][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.955964][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.976555][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.988688][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.999425][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.011391][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.021539][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.032353][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.042301][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.053861][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.063857][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.074533][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.085587][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.101936][T11615] lo speed is unknown, defaulting to 1000 [ 129.127404][T11458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.137054][T11458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.146117][T11458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.155105][T11458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.171352][T11615] lo speed is unknown, defaulting to 1000 [ 129.233253][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.250043][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.269519][T11458] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 129.279751][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.294195][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.314084][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.322448][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.340821][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.358005][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.387148][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.400886][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.780097][T11654] __nla_validate_parse: 10 callbacks suppressed [ 129.780116][T11654] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1703'. [ 129.930328][T11660] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 129.972636][T11662] bond7: entered promiscuous mode [ 129.978390][T11662] bond7: entered allmulticast mode [ 129.983774][T11662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 130.036117][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'. [ 130.052619][T11667] tipc: Started in network mode [ 130.058129][T11667] tipc: Node identity 92f2c313b4b5, cluster identity 4711 [ 130.066051][T11667] tipc: Enabled bearer , priority 0 [ 130.073412][T11667] syzkaller0: entered promiscuous mode [ 130.079002][T11667] syzkaller0: entered allmulticast mode [ 130.094305][T11667] tipc: Resetting bearer [ 130.101275][T11667] syzkaller0: tun_net_xmit 90 [ 130.108170][T11666] tipc: Resetting bearer [ 130.116592][T11666] tipc: Disabling bearer [ 130.184919][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 130.540006][T11681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1713'. [ 130.540012][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1713'. [ 130.590379][T11684] lo speed is unknown, defaulting to 1000 [ 130.597146][T11684] lo speed is unknown, defaulting to 1000 [ 130.684799][ C1] net_ratelimit: 29 callbacks suppressed [ 130.684821][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.727845][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.502136][T11700] tap0: tun_chr_ioctl cmd 2148553947 [ 131.673340][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 131.709945][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.724748][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.738423][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.745998][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.753598][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.761626][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 131.769486][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.799983][T11720] lo speed is unknown, defaulting to 1000 [ 131.806627][T11720] lo speed is unknown, defaulting to 1000 [ 131.807722][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 131.902479][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 131.950435][T11739] sctp: [Deprecated]: syz.2.1730 (pid 11739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.950435][T11739] Use struct sctp_sack_info instead [ 132.015655][T11720] chnl_net:caif_netlink_parms(): no params data found [ 132.068196][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1732'. [ 132.084586][T11747] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 132.092443][T11747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1733'. [ 132.103073][T11747] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 132.118086][T11747] geneve0: entered promiscuous mode [ 132.168655][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.176424][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.184205][T11720] bridge_slave_0: entered allmulticast mode [ 132.191183][T11720] bridge_slave_0: entered promiscuous mode [ 132.203998][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.215532][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.222774][T11720] bridge_slave_1: entered allmulticast mode [ 132.229829][T11720] bridge_slave_1: entered promiscuous mode [ 132.288186][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.299766][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.377821][T11720] team0: Port device team_slave_0 added [ 132.389834][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.404157][T11720] team0: Port device team_slave_1 added [ 132.436781][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.443936][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.473070][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.485287][T11773] syzkaller0: refused to change device tx_queue_len [ 132.493845][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.501786][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.528582][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.553635][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.581661][T11720] hsr_slave_0: entered promiscuous mode [ 132.587925][T11720] hsr_slave_1: entered promiscuous mode [ 132.594133][T11720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.603204][T11720] Cannot create hsr debugfs directory [ 132.666843][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.749085][ T1138] bridge_slave_1: left allmulticast mode [ 132.756417][ T1138] bridge_slave_1: left promiscuous mode [ 132.762336][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.769815][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.778828][ T1138] bridge_slave_0: left allmulticast mode [ 132.784497][ T1138] bridge_slave_0: left promiscuous mode [ 132.790452][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.923950][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.934872][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.945565][ T1138] bond0 (unregistering): Released all slaves [ 132.968192][T11794] lo speed is unknown, defaulting to 1000 [ 132.978022][T11794] lo speed is unknown, defaulting to 1000 [ 133.088110][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.164026][T11808] sctp: [Deprecated]: syz.1.1750 (pid 11808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.164026][T11808] Use struct sctp_sack_info instead [ 133.368000][ T1138] hsr_slave_0: left promiscuous mode [ 133.373820][ T1138] hsr_slave_1: left promiscuous mode [ 133.379734][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.387475][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.395528][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.402995][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.413843][ T1138] veth1_macvtap: left promiscuous mode [ 133.423341][ T1138] veth0_macvtap: left promiscuous mode [ 133.435120][ T1138] veth1_vlan: left promiscuous mode [ 133.440451][ T1138] veth0_vlan: left promiscuous mode [ 133.750934][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 133.763909][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 133.770055][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.779579][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.786866][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.794560][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.802680][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.804755][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.809882][ T5846] Bluetooth: hci1: command tx timeout [ 133.824136][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.874198][T11720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.925483][T11720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.944235][T11720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.959843][T11843] lo speed is unknown, defaulting to 1000 [ 133.966585][T11720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.980464][T11843] lo speed is unknown, defaulting to 1000 [ 134.077188][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.114256][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.148373][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.155535][T10922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.167545][T11857] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 134.174298][T11859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.182628][T11859] IPv6: NLM_F_CREATE should be set when creating new route [ 134.204147][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.211447][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.273880][T11720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.288790][T11720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.404005][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.430971][T11843] chnl_net:caif_netlink_parms(): no params data found [ 134.526801][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.597053][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.606234][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.613955][T11843] bridge_slave_0: entered allmulticast mode [ 134.622037][T11843] bridge_slave_0: entered promiscuous mode [ 134.633531][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.650048][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.662466][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.670106][T11843] bridge_slave_1: entered allmulticast mode [ 134.677791][T11843] bridge_slave_1: entered promiscuous mode [ 134.688764][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.753617][T11843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.773913][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.788752][T11843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.818319][T11843] team0: Port device team_slave_0 added [ 134.834863][T11843] team0: Port device team_slave_1 added [ 134.844823][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.864958][T11843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.871938][T11843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.898398][T11843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.910161][T11843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.917304][T11843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.944019][T11843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.977220][T11843] hsr_slave_0: entered promiscuous mode [ 134.983468][T11843] hsr_slave_1: entered promiscuous mode [ 134.989583][T11843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.997345][T11843] Cannot create hsr debugfs directory [ 135.034473][ T1138] bridge_slave_1: left allmulticast mode [ 135.040358][ T1138] bridge_slave_1: left promiscuous mode [ 135.046574][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.056090][ T1138] bridge_slave_0: left allmulticast mode [ 135.061835][ T1138] bridge_slave_0: left promiscuous mode [ 135.067773][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.192904][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.203665][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.214058][ T1138] bond0 (unregistering): Released all slaves [ 135.273787][T11720] veth0_vlan: entered promiscuous mode [ 135.290011][T11720] veth1_vlan: entered promiscuous mode [ 135.317731][T11720] veth0_macvtap: entered promiscuous mode [ 135.325735][T11720] veth1_macvtap: entered promiscuous mode [ 135.343408][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.358808][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.368902][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.379566][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.389425][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.400139][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.410641][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.421324][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.431210][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.441691][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.452500][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.467587][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.479047][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.489655][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.501801][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.513498][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.524406][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.534298][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.545006][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.555026][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.566688][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.578510][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.600778][T11720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.610085][T11720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.619642][T11720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.629445][T11720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.663626][T11913] tipc: Failed to remove unknown binding: 66,1,1/0:3892054458/3892054460 [ 135.691924][T11913] tipc: Failed to remove unknown binding: 66,1,1/0:3892054458/3892054460 [ 135.712194][T11720] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 135.722938][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.755843][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.763778][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.856184][T11919] netlink: 'syz.0.1776': attribute type 15 has an invalid length. [ 135.864134][T11919] __nla_validate_parse: 9 callbacks suppressed [ 135.864148][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 135.884758][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.892659][ T5846] Bluetooth: hci1: command tx timeout [ 135.898542][ T5846] Bluetooth: hci3: command tx timeout [ 135.927591][T11918] netlink: 'syz.0.1776': attribute type 15 has an invalid length. [ 135.947047][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 135.963450][T10922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.976909][T10922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.038479][T11843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.054315][T11843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.109588][ T1138] hsr_slave_0: left promiscuous mode [ 136.117975][ T1138] hsr_slave_1: left promiscuous mode [ 136.123764][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.132726][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.144540][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 136.159890][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.169399][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.182249][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 136.182260][ T1138] veth1_macvtap: left promiscuous mode [ 136.182298][ T1138] veth0_macvtap: left promiscuous mode [ 136.203534][ T1138] veth1_vlan: left promiscuous mode [ 136.209212][ T1138] veth0_vlan: left promiscuous mode [ 136.239501][T11939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1778'. [ 136.270330][T11843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.358303][T11942] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1783'. [ 136.383836][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 136.394714][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 136.439084][T11843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.472146][ T5829] bond0: (slave syz_tun): Releasing backup interface [ 136.589400][T11843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.613349][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 136.623390][T11843] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.634097][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.641315][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.677232][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.684457][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.916685][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 136.924896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 136.957314][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 136.996096][T11843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.059557][T11980] veth0_to_team: entered promiscuous mode [ 137.066435][T11980] veth0_to_team: entered allmulticast mode [ 137.093069][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.100821][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.108360][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.116724][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.124428][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.132086][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.157011][T11843] veth0_vlan: entered promiscuous mode [ 137.167868][T11843] veth1_vlan: entered promiscuous mode [ 137.187888][T11843] veth0_macvtap: entered promiscuous mode [ 137.202219][T11843] veth1_macvtap: entered promiscuous mode [ 137.241195][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.257328][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.267946][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.278725][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.288690][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.299496][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.309713][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.320349][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.330559][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.341500][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.352479][T11843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.364355][T11983] lo speed is unknown, defaulting to 1000 [ 137.388813][ T2971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.418752][T11983] lo speed is unknown, defaulting to 1000 [ 137.419067][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.454754][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.484862][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.504713][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.524988][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.548585][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.568967][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.589723][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.611049][T11843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.622171][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.633354][T11843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.643902][T11843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.658851][T11843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.668526][T11843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.677660][T11843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.752071][T11843] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 137.762158][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.784940][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.792782][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.830361][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.838899][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.847330][ T2971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.864412][T11983] chnl_net:caif_netlink_parms(): no params data found [ 137.924282][T11983] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.932747][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.940714][T11983] bridge_slave_0: entered allmulticast mode [ 137.948868][T11983] bridge_slave_0: entered promiscuous mode [ 137.956632][T11983] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.963746][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.971028][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.978729][T11983] bridge_slave_1: entered allmulticast mode [ 137.985987][T11983] bridge_slave_1: entered promiscuous mode [ 138.003180][T11983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.014197][T11983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.035387][T11983] team0: Port device team_slave_0 added [ 138.042220][T11983] team0: Port device team_slave_1 added [ 138.063609][T11983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.070935][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.097562][T11983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.110227][T11983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.117388][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.145251][T11983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.173497][T11983] hsr_slave_0: entered promiscuous mode [ 138.179745][T11983] hsr_slave_1: entered promiscuous mode [ 138.185720][T11983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.193333][T11983] Cannot create hsr debugfs directory [ 138.214145][ T2971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.303506][T11983] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.345292][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 138.371302][ T2971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.409758][T11983] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.484988][T11983] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.525199][ T2971] bridge_slave_1: left allmulticast mode [ 138.534714][ T2971] bridge_slave_1: left promiscuous mode [ 138.540449][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.559585][ T2971] bridge_slave_0: left allmulticast mode [ 138.566517][ T2971] bridge_slave_0: left promiscuous mode [ 138.572230][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.589692][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.601193][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.608653][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.617328][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.625538][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.633485][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.651972][T11983] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.748305][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.760225][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.771084][ T2971] bond0 (unregistering): Released all slaves [ 138.822040][T12024] lo speed is unknown, defaulting to 1000 [ 138.835253][T12024] lo speed is unknown, defaulting to 1000 [ 138.880096][T11983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.922786][T11983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.956217][T11983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.999442][T11983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.006301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.050249][T12042] lo speed is unknown, defaulting to 1000 [ 139.059889][T12042] lo speed is unknown, defaulting to 1000 [ 139.166307][ T5846] Bluetooth: hci0: command tx timeout [ 139.349495][T12024] chnl_net:caif_netlink_parms(): no params data found [ 139.385101][ T2971] hsr_slave_0: left promiscuous mode [ 139.410284][ T2971] hsr_slave_1: left promiscuous mode [ 139.419105][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.427263][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.435193][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.442689][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.452182][ T2971] veth1_macvtap: left promiscuous mode [ 139.458139][ T2971] veth0_macvtap: left promiscuous mode [ 139.463666][ T2971] veth1_vlan: left promiscuous mode [ 139.469077][ T2971] veth0_vlan: left promiscuous mode [ 139.583013][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 139.598744][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 139.672209][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.679519][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.687185][T12024] bridge_slave_0: entered allmulticast mode [ 139.693757][T12024] bridge_slave_0: entered promiscuous mode [ 139.703231][T11983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.710814][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.718115][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.726509][T12024] bridge_slave_1: entered allmulticast mode [ 139.733211][T12024] bridge_slave_1: entered promiscuous mode [ 139.753254][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.769214][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.787696][T11983] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.802333][T12024] team0: Port device team_slave_0 added [ 139.809822][T12024] team0: Port device team_slave_1 added [ 139.828143][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.835275][T10922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.883768][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.903421][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.932087][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.951289][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.958530][T10922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.986181][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.995413][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.029742][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.044752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.117640][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.126080][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.133402][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.141788][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.149881][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.157745][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.231320][T12070] netlink: 'syz.0.1812': attribute type 1 has an invalid length. [ 140.239847][T12070] netlink: 'syz.0.1812': attribute type 3 has an invalid length. [ 140.247858][T12070] NCSI netlink: No device for ifindex 0 [ 140.259615][T12024] hsr_slave_0: entered promiscuous mode [ 140.267490][T12024] hsr_slave_1: entered promiscuous mode [ 140.273501][T12024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.281644][T12024] Cannot create hsr debugfs directory [ 140.309599][T12067] lo speed is unknown, defaulting to 1000 [ 140.325093][T12070] netlink: zone id is out of range [ 140.330382][T12070] netlink: zone id is out of range [ 140.341469][T12070] netlink: zone id is out of range [ 140.348073][T12070] netlink: zone id is out of range [ 140.356547][T12070] netlink: zone id is out of range [ 140.368960][T12067] lo speed is unknown, defaulting to 1000 [ 140.419461][ T2971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.470843][T12082] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.500145][T11983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.539003][ T2971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.558779][T12086] netlink: 'syz.0.1817': attribute type 11 has an invalid length. [ 140.632826][T12090] xt_ecn: cannot match TCP bits for non-tcp packets [ 140.668110][T12095] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20002 [ 140.684786][ T5835] Bluetooth: hci1: command tx timeout [ 140.704116][T11983] veth0_vlan: entered promiscuous mode [ 140.721864][ T2971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.744497][T11983] veth1_vlan: entered promiscuous mode [ 140.771534][T11983] veth0_macvtap: entered promiscuous mode [ 140.780357][T11983] veth1_macvtap: entered promiscuous mode [ 140.790554][T12099] sctp: [Deprecated]: syz.1.1822 (pid 12099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.790554][T12099] Use struct sctp_sack_info instead [ 140.813923][T12067] chnl_net:caif_netlink_parms(): no params data found [ 140.860785][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.874088][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.884493][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.895556][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.905523][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.916271][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.929346][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.940249][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.950192][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.960899][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.972140][T11983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.981892][T12109] __nla_validate_parse: 5 callbacks suppressed [ 140.981910][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 140.982059][ T2971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.020469][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.031227][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.041085][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.052735][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.063232][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.079180][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.090193][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.106339][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.116725][T11983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.128235][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.139200][T11983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.172135][T11983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.183066][T11983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.197443][T11983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.206610][T11983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.248299][ T5835] Bluetooth: hci0: command tx timeout [ 141.269970][T12024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.292517][T12024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.303003][T12024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.312791][T12067] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.320491][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.328834][T12067] bridge_slave_0: entered allmulticast mode [ 141.336577][T12067] bridge_slave_0: entered promiscuous mode [ 141.347658][T12024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.348192][T12130] SET target dimension over the limit! [ 141.362339][T12067] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.369948][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.377670][T12067] bridge_slave_1: entered allmulticast mode [ 141.384486][T12067] bridge_slave_1: entered promiscuous mode [ 141.398288][T12130] : renamed from ip6gretap0 (while UP) [ 141.429905][T12067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.441343][T12067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.451864][ T2971] bridge_slave_1: left allmulticast mode [ 141.458571][ T2971] bridge_slave_1: left promiscuous mode [ 141.464265][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.474455][ T2971] bridge_slave_0: left allmulticast mode [ 141.483938][ T2971] bridge_slave_0: left promiscuous mode [ 141.491315][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.570190][T12137] sctp: [Deprecated]: syz.0.1831 (pid 12137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.570190][T12137] Use struct sctp_sack_info instead [ 141.648657][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.660112][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.670053][ T2971] bond0 (unregistering): Released all slaves [ 141.705196][T11983] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 141.717629][T11983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.720486][T12139] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 141.730024][T12067] team0: Port device team_slave_0 added [ 141.744269][T12067] team0: Port device team_slave_1 added [ 141.746653][T12139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1832'. [ 141.774099][T12139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1832'. [ 141.783597][T12139] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1832'. [ 141.793067][T12139] netlink: 'syz.1.1832': attribute type 6 has an invalid length. [ 141.802547][T12139] netlink: 'syz.1.1832': attribute type 5 has an invalid length. [ 141.811023][T12139] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1832'. [ 141.822683][T10922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.839314][T12067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.846455][T10922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.857068][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.885865][T12067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.205194][ T5846] Bluetooth: hci3: command tx timeout [ 142.765034][ T5846] Bluetooth: hci1: command tx timeout [ 143.325381][ T5846] Bluetooth: hci0: command tx timeout [ 144.285063][ T5846] Bluetooth: hci3: command tx timeout [ 144.844954][ T5846] Bluetooth: hci1: command tx timeout [ 145.404885][ T5846] Bluetooth: hci0: command tx timeout [ 146.365251][ T5846] Bluetooth: hci3: command tx timeout [ 146.925013][ T5846] Bluetooth: hci1: command tx timeout [ 148.455225][ T5846] Bluetooth: hci3: command tx timeout [ 150.524906][ T5846] Bluetooth: hci3: command tx timeout [ 157.637792][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.645351][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.652598][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.660369][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.667841][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.675117][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.649343][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.656723][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.663960][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.671917][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.679561][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.687576][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.724816][ T5846] Bluetooth: hci5: command tx timeout [ 160.764753][ T5846] Bluetooth: hci6: command tx timeout [ 161.805117][ T5846] Bluetooth: hci5: command tx timeout [ 162.844766][ T5846] Bluetooth: hci6: command tx timeout [ 163.884833][ T5846] Bluetooth: hci5: command tx timeout [ 164.924787][ T5846] Bluetooth: hci6: command tx timeout [ 165.965002][ T5846] Bluetooth: hci5: command tx timeout [ 167.005336][ T5846] Bluetooth: hci6: command tx timeout [ 176.124855][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 194.529139][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.177017][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.184303][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.191641][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.200025][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.207618][ T5835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 197.215318][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.244792][ T5835] Bluetooth: hci7: command tx timeout [ 199.989345][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 199.996947][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 200.004174][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 200.012115][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 200.019786][ T5846] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 200.027129][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 201.325094][ T5846] Bluetooth: hci7: command tx timeout [ 201.503756][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 201.511100][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 201.518325][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 201.527962][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 201.535522][ T5835] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 201.542728][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 202.044952][ T5835] Bluetooth: hci8: command tx timeout [ 203.405025][ T5835] Bluetooth: hci7: command tx timeout [ 203.564824][ T5835] Bluetooth: hci9: command tx timeout [ 204.124929][ T5835] Bluetooth: hci8: command tx timeout [ 205.484691][ T5835] Bluetooth: hci7: command tx timeout [ 205.645341][ T5835] Bluetooth: hci9: command tx timeout [ 206.204769][ T5835] Bluetooth: hci8: command tx timeout [ 207.724843][ T5835] Bluetooth: hci9: command tx timeout [ 208.284836][ T5835] Bluetooth: hci8: command tx timeout [ 209.804843][ T5835] Bluetooth: hci9: command tx timeout [ 218.554538][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 218.561987][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 218.569478][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 218.577184][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 218.585187][ T5846] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 218.592537][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 219.566044][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 219.573396][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 219.583592][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 219.591471][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 219.600301][ T5835] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 219.607641][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 220.605019][ T5846] Bluetooth: hci10: command tx timeout [ 221.654978][ T5846] Bluetooth: hci11: command tx timeout [ 222.687136][ T5846] Bluetooth: hci10: command tx timeout [ 223.724753][ T5846] Bluetooth: hci11: command tx timeout [ 224.764781][ T5846] Bluetooth: hci10: command tx timeout [ 225.804795][ T5846] Bluetooth: hci11: command tx timeout [ 226.844824][ T5846] Bluetooth: hci10: command tx timeout [ 227.884747][ T5846] Bluetooth: hci11: command tx timeout [ 252.924878][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 255.968085][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.624194][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 257.632231][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 257.640024][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 257.649349][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 257.657257][ T5835] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 257.664907][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 259.724802][ T5835] Bluetooth: hci12: command tx timeout [ 261.537051][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 261.544396][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 261.552090][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 261.560308][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 261.569165][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 261.577105][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 261.805036][ T5834] Bluetooth: hci12: command tx timeout [ 263.154056][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 263.161444][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 263.168744][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 263.172651][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 263.181673][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 263.189813][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 263.197495][ T5835] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 263.205366][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 263.644827][ T5835] Bluetooth: hci13: command tx timeout [ 263.884905][ T5835] Bluetooth: hci12: command tx timeout [ 265.244774][ T5835] Bluetooth: hci14: command tx timeout [ 265.724740][ T5835] Bluetooth: hci13: command tx timeout [ 265.964755][ T5835] Bluetooth: hci12: command tx timeout [ 267.324759][ T5834] Bluetooth: hci14: command tx timeout [ 267.804810][ T5834] Bluetooth: hci13: command tx timeout [ 268.284785][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 269.404850][ T5835] Bluetooth: hci14: command tx timeout [ 269.884994][ T5835] Bluetooth: hci13: command tx timeout [ 271.484759][ T5835] Bluetooth: hci14: command tx timeout [ 279.189856][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 279.197576][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 279.205169][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 279.212991][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 279.220731][ T5834] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 279.228203][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 280.203481][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 280.211412][ T5834] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 280.218794][ T5834] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 280.226559][ T5834] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 280.234149][ T5834] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 280.241557][ T5834] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 281.245078][ T5835] Bluetooth: hci15: command tx timeout [ 282.284929][ T53] Bluetooth: hci16: command tx timeout [ 283.324766][ T53] Bluetooth: hci15: command tx timeout [ 283.644960][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 283.651004][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 284.365111][ T5834] Bluetooth: hci16: command tx timeout [ 285.407409][ T5834] Bluetooth: hci15: command tx timeout [ 286.444819][ T5834] Bluetooth: hci16: command tx timeout [ 287.484822][ T5834] Bluetooth: hci15: command tx timeout [ 288.524744][ T5834] Bluetooth: hci16: command tx timeout [ 294.364843][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 294.372343][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 294.379863][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.389359][ T30] task:kworker/0:0 state:D stack:23472 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 294.399639][ T30] Workqueue: events ovs_dp_masks_rebalance [ 294.405507][ T30] Call Trace: [ 294.408804][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.411730][ T30] __schedule+0x186c/0x4be0 [ 294.416583][ T30] ? try_to_wake_up+0x959/0x1470 [ 294.421650][ T30] ? schedule+0x90/0x320 [ 294.425979][ T30] ? schedule+0x90/0x320 [ 294.430590][ T30] ? __pfx___schedule+0x10/0x10 [ 294.435499][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 294.440623][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.446041][ T30] ? kick_pool+0x45c/0x620 [ 294.452904][ T30] ? schedule+0x90/0x320 [ 294.468933][ T30] ? rcu_is_watching+0x15/0xb0 [ 294.473755][ T30] ? schedule+0x90/0x320 [ 294.490139][ T30] schedule+0x14b/0x320 [ 294.494352][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.500099][ T30] __mutex_lock+0x817/0x1010 [ 294.504855][ T30] ? __mutex_lock+0x602/0x1010 [ 294.509643][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 294.515186][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.520204][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 294.525929][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.530980][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.537321][ T30] ? process_scheduled_works+0x976/0x1840 [ 294.543024][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 294.548532][ T30] process_scheduled_works+0xa66/0x1840 [ 294.554099][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.560195][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 294.565779][ T30] ? assign_work+0x364/0x3d0 [ 294.570391][ T30] worker_thread+0x870/0xd30 [ 294.575208][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.580222][ T30] ? __pfx_worker_thread+0x10/0x10 [ 294.585387][ T30] kthread+0x7a9/0x920 [ 294.589569][ T30] ? __pfx_kthread+0x10/0x10 [ 294.594197][ T30] ? __pfx_worker_thread+0x10/0x10 [ 294.599368][ T30] ? __pfx_kthread+0x10/0x10 [ 294.604038][ T30] ? __pfx_kthread+0x10/0x10 [ 294.609043][ T30] ? __pfx_kthread+0x10/0x10 [ 294.613670][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.619247][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 294.624532][ T30] ? __pfx_kthread+0x10/0x10 [ 294.629205][ T30] ret_from_fork+0x4b/0x80 [ 294.633608][ T30] ? __pfx_kthread+0x10/0x10 [ 294.638371][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.643122][ T30] [ 294.646199][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 294.653838][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 294.661190][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.670139][ T30] task:kworker/u8:1 state:D stack:21424 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 294.680739][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 294.687900][ T30] Call Trace: [ 294.691304][ T30] [ 294.694250][ T30] __schedule+0x186c/0x4be0 [ 294.698979][ T30] ? schedule+0x90/0x320 [ 294.703331][ T30] ? schedule+0x90/0x320 [ 294.709895][ T30] ? __pfx___schedule+0x10/0x10 [ 294.715201][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.720243][ T30] ? rcu_is_watching+0x15/0xb0 [ 294.725379][ T30] ? kthread_data+0x52/0xd0 [ 294.729905][ T30] ? schedule+0x90/0x320 [ 294.734160][ T30] ? wq_worker_sleeping+0x66/0x240 [ 294.739329][ T30] ? schedule+0x90/0x320 [ 294.743613][ T30] schedule+0x14b/0x320 [ 294.747838][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.753311][ T30] __mutex_lock+0x817/0x1010 [ 294.758334][ T30] ? __mutex_lock+0x602/0x1010 [ 294.763121][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 294.769717][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.774891][ T30] ? rcu_is_watching+0x15/0xb0 [ 294.779670][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 294.786268][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 294.792197][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.797350][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 294.803634][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 294.810686][ T30] ? rcu_is_watching+0x15/0xb0 [ 294.815758][ T30] ? process_scheduled_works+0x976/0x1840 [ 294.821578][ T30] process_scheduled_works+0xa66/0x1840 [ 294.827343][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.833342][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 294.839127][ T30] ? assign_work+0x364/0x3d0 [ 294.843848][ T30] worker_thread+0x870/0xd30 [ 294.849309][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.854377][ T30] ? __pfx_worker_thread+0x10/0x10 [ 294.859552][ T30] kthread+0x7a9/0x920 [ 294.863626][ T30] ? __pfx_kthread+0x10/0x10 [ 294.868275][ T30] ? __pfx_worker_thread+0x10/0x10 [ 294.873414][ T30] ? __pfx_kthread+0x10/0x10 [ 294.878185][ T30] ? __pfx_kthread+0x10/0x10 [ 294.882844][ T30] ? __pfx_kthread+0x10/0x10 [ 294.887499][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.892721][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 294.898013][ T30] ? __pfx_kthread+0x10/0x10 [ 294.902612][ T30] ret_from_fork+0x4b/0x80 [ 294.907526][ T30] ? __pfx_kthread+0x10/0x10 [ 294.912147][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.916955][ T30] [ 294.920113][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 294.927867][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 294.935419][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.944086][ T30] task:kworker/u8:3 state:D stack:21360 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 294.954397][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 294.960507][ T30] Call Trace: [ 294.963776][ T30] [ 294.967019][ T30] __schedule+0x186c/0x4be0 [ 294.971544][ T30] ? schedule+0x90/0x320 [ 294.975901][ T30] ? schedule+0x90/0x320 [ 294.980246][ T30] ? __pfx___schedule+0x10/0x10 [ 294.985181][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.990231][ T30] ? rcu_is_watching+0x15/0xb0 [ 294.995343][ T30] ? kthread_data+0x52/0xd0 [ 294.999991][ T30] ? schedule+0x90/0x320 [ 295.004307][ T30] ? wq_worker_sleeping+0x66/0x240 [ 295.009643][ T30] ? schedule+0x90/0x320 [ 295.013927][ T30] schedule+0x14b/0x320 [ 295.018210][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.023798][ T30] __mutex_lock+0x817/0x1010 [ 295.028733][ T30] ? __mutex_lock+0x602/0x1010 [ 295.033516][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 295.038853][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.043982][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 295.049225][ T30] addrconf_dad_work+0x10e/0x16a0 [ 295.054283][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.059582][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 295.065198][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.071549][ T30] ? rcu_is_watching+0x15/0xb0 [ 295.076339][ T30] ? process_scheduled_works+0x976/0x1840 [ 295.082049][ T30] process_scheduled_works+0xa66/0x1840 [ 295.088027][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.094029][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 295.099692][ T30] ? assign_work+0x364/0x3d0 [ 295.104374][ T30] worker_thread+0x870/0xd30 [ 295.109084][ T30] ? __kthread_parkme+0x169/0x1d0 [ 295.114137][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.119448][ T30] kthread+0x7a9/0x920 [ 295.123510][ T30] ? __pfx_kthread+0x10/0x10 [ 295.128231][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.133366][ T30] ? __pfx_kthread+0x10/0x10 [ 295.137981][ T30] ? __pfx_kthread+0x10/0x10 [ 295.142562][ T30] ? __pfx_kthread+0x10/0x10 [ 295.147451][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.152664][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.157901][ T30] ? __pfx_kthread+0x10/0x10 [ 295.162571][ T30] ret_from_fork+0x4b/0x80 [ 295.167091][ T30] ? __pfx_kthread+0x10/0x10 [ 295.171713][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.176794][ T30] [ 295.179824][ T30] INFO: task kworker/0:2:57 blocked for more than 144 seconds. [ 295.188220][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 295.195697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.204629][ T30] task:kworker/0:2 state:D stack:23120 pid:57 tgid:57 ppid:2 flags:0x00004000 [ 295.215119][ T30] Workqueue: events ovs_dp_masks_rebalance [ 295.220963][ T30] Call Trace: [ 295.224229][ T30] [ 295.227286][ T30] __schedule+0x186c/0x4be0 [ 295.231840][ T30] ? try_to_wake_up+0x959/0x1470 [ 295.236864][ T30] ? schedule+0x90/0x320 [ 295.241118][ T30] ? schedule+0x90/0x320 [ 295.245695][ T30] ? __pfx___schedule+0x10/0x10 [ 295.250585][ T30] ? preempt_schedule+0xe1/0xf0 [ 295.255458][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 295.260574][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.265649][ T30] ? kick_pool+0x45c/0x620 [ 295.270071][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 295.275771][ T30] ? schedule+0x90/0x320 [ 295.280006][ T30] schedule+0x14b/0x320 [ 295.284167][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.289668][ T30] __mutex_lock+0x817/0x1010 [ 295.294291][ T30] ? __mutex_lock+0x602/0x1010 [ 295.299085][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 295.304902][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.309974][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 295.315639][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.320746][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.327188][ T30] ? process_scheduled_works+0x976/0x1840 [ 295.332929][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 295.338342][ T30] process_scheduled_works+0xa66/0x1840 [ 295.343912][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.349962][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 295.355528][ T30] ? assign_work+0x364/0x3d0 [ 295.360120][ T30] worker_thread+0x870/0xd30 [ 295.364954][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.370859][ T30] ? __kthread_parkme+0x169/0x1d0 [ 295.375910][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.381014][ T30] kthread+0x7a9/0x920 [ 295.385190][ T30] ? __pfx_kthread+0x10/0x10 [ 295.389789][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.395203][ T30] ? __pfx_kthread+0x10/0x10 [ 295.399796][ T30] ? __pfx_kthread+0x10/0x10 [ 295.404383][ T30] ? __pfx_kthread+0x10/0x10 [ 295.409192][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.414495][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.419757][ T30] ? __pfx_kthread+0x10/0x10 [ 295.424358][ T30] ret_from_fork+0x4b/0x80 [ 295.429088][ T30] ? __pfx_kthread+0x10/0x10 [ 295.433694][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.438492][ T30] [ 295.441527][ T30] INFO: task kworker/1:1:81 blocked for more than 144 seconds. [ 295.449106][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 295.456604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.465397][ T30] task:kworker/1:1 state:D stack:21904 pid:81 tgid:81 ppid:2 flags:0x00004000 [ 295.475624][ T30] Workqueue: events ovs_dp_masks_rebalance [ 295.481470][ T30] Call Trace: [ 295.488039][ T30] [ 295.491107][ T30] __schedule+0x186c/0x4be0 [ 295.495734][ T30] ? schedule+0x90/0x320 [ 295.500011][ T30] ? schedule+0x90/0x320 [ 295.504334][ T30] ? __pfx___schedule+0x10/0x10 [ 295.509362][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 295.514528][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.519729][ T30] ? kick_pool+0x1bd/0x620 [ 295.524161][ T30] ? schedule+0x90/0x320 [ 295.528712][ T30] ? rcu_is_watching+0x15/0xb0 [ 295.533494][ T30] ? schedule+0x90/0x320 [ 295.537859][ T30] schedule+0x14b/0x320 [ 295.542026][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.547546][ T30] __mutex_lock+0x817/0x1010 [ 295.552178][ T30] ? __mutex_lock+0x602/0x1010 [ 295.557125][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 295.562504][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.567640][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 295.573326][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.578401][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.585067][ T30] ? process_scheduled_works+0x976/0x1840 [ 295.590799][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 295.596131][ T30] process_scheduled_works+0xa66/0x1840 [ 295.601938][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.608061][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 295.613787][ T30] ? assign_work+0x364/0x3d0 [ 295.618699][ T30] worker_thread+0x870/0xd30 [ 295.623315][ T30] ? __kthread_parkme+0x169/0x1d0 [ 295.628542][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.633681][ T30] kthread+0x7a9/0x920 [ 295.637805][ T30] ? __pfx_kthread+0x10/0x10 [ 295.642394][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.647894][ T30] ? __pfx_kthread+0x10/0x10 [ 295.652533][ T30] ? __pfx_kthread+0x10/0x10 [ 295.657183][ T30] ? __pfx_kthread+0x10/0x10 [ 295.661783][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.667028][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.672246][ T30] ? __pfx_kthread+0x10/0x10 [ 295.677061][ T30] ret_from_fork+0x4b/0x80 [ 295.681507][ T30] ? __pfx_kthread+0x10/0x10 [ 295.686249][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.691062][ T30] [ 295.694152][ T30] INFO: task kworker/u8:8:2971 blocked for more than 144 seconds. [ 295.702186][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 295.709897][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.719616][ T30] task:kworker/u8:8 state:D stack:23536 pid:2971 tgid:2971 ppid:2 flags:0x00004000 [ 295.729932][ T30] Workqueue: netns cleanup_net [ 295.734901][ T30] Call Trace: [ 295.738182][ T30] [ 295.741103][ T30] __schedule+0x186c/0x4be0 [ 295.745659][ T30] ? schedule+0x90/0x320 [ 295.749921][ T30] ? schedule+0x90/0x320 [ 295.754189][ T30] ? __pfx___schedule+0x10/0x10 [ 295.759066][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.764110][ T30] ? rcu_is_watching+0x15/0xb0 [ 295.769195][ T30] ? kthread_data+0x52/0xd0 [ 295.773717][ T30] ? schedule+0x90/0x320 [ 295.778048][ T30] ? wq_worker_sleeping+0x66/0x240 [ 295.783259][ T30] ? schedule+0x90/0x320 [ 295.787619][ T30] schedule+0x14b/0x320 [ 295.791799][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.797624][ T30] __mutex_lock+0x817/0x1010 [ 295.802407][ T30] ? __mutex_lock+0x602/0x1010 [ 295.807434][ T30] ? unregister_netdevice_many_notify+0x1c2c/0x2030 [ 295.814172][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.819339][ T30] ? __pfx___might_resched+0x10/0x10 [ 295.825123][ T30] ? __pfx_device_del+0x10/0x10 [ 295.830030][ T30] unregister_netdevice_many_notify+0x1c2c/0x2030 [ 295.836649][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 295.843460][ T30] ? rcu_is_watching+0x15/0xb0 [ 295.848276][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.853331][ T30] unregister_netdevice_queue+0x303/0x370 [ 295.859219][ T30] ? __pfx_up_write+0x10/0x10 [ 295.863922][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 295.870184][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 295.875936][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 295.881575][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 295.887876][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 295.894225][ T30] ? rcu_is_watching+0x15/0xb0 [ 295.899166][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 295.904593][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 295.910170][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 295.916508][ T30] hwsim_exit_net+0x5c1/0x670 [ 295.921292][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 295.926633][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 295.932475][ T30] cleanup_net+0x812/0xd60 [ 295.937042][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 295.941985][ T30] ? rcu_is_watching+0x15/0xb0 [ 295.947173][ T30] ? process_scheduled_works+0x976/0x1840 [ 295.953009][ T30] process_scheduled_works+0xa66/0x1840 [ 295.958591][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.964638][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 295.970210][ T30] ? assign_work+0x364/0x3d0 [ 295.975100][ T30] worker_thread+0x870/0xd30 [ 295.979701][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.985629][ T30] ? __kthread_parkme+0x169/0x1d0 [ 295.990663][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.995802][ T30] kthread+0x7a9/0x920 [ 295.999963][ T30] ? __pfx_kthread+0x10/0x10 [ 296.005093][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.010250][ T30] ? __pfx_kthread+0x10/0x10 [ 296.015024][ T30] ? __pfx_kthread+0x10/0x10 [ 296.019721][ T30] ? __pfx_kthread+0x10/0x10 [ 296.024391][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.029640][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 296.035118][ T30] ? __pfx_kthread+0x10/0x10 [ 296.039720][ T30] ret_from_fork+0x4b/0x80 [ 296.044151][ T30] ? __pfx_kthread+0x10/0x10 [ 296.049000][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.053784][ T30] [ 296.056827][ T30] INFO: task kworker/1:2:3678 blocked for more than 145 seconds. [ 296.065072][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 296.072503][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.081255][ T30] task:kworker/1:2 state:D stack:23280 pid:3678 tgid:3678 ppid:2 flags:0x00004000 [ 296.091455][ T30] Workqueue: events ovs_dp_masks_rebalance [ 296.097474][ T30] Call Trace: [ 296.100745][ T30] [ 296.103751][ T30] __schedule+0x186c/0x4be0 [ 296.108429][ T30] ? try_to_wake_up+0x959/0x1470 [ 296.113393][ T30] ? schedule+0x90/0x320 [ 296.117721][ T30] ? schedule+0x90/0x320 [ 296.121953][ T30] ? __pfx___schedule+0x10/0x10 [ 296.127288][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 296.132447][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.137642][ T30] ? kick_pool+0x45c/0x620 [ 296.142051][ T30] ? schedule+0x90/0x320 [ 296.146336][ T30] ? rcu_is_watching+0x15/0xb0 [ 296.151202][ T30] ? schedule+0x90/0x320 [ 296.155649][ T30] schedule+0x14b/0x320 [ 296.159801][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.165301][ T30] __mutex_lock+0x817/0x1010 [ 296.169907][ T30] ? __mutex_lock+0x602/0x1010 [ 296.174705][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.180065][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.185385][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 296.191130][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.196198][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.202556][ T30] ? process_scheduled_works+0x976/0x1840 [ 296.208322][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.213569][ T30] process_scheduled_works+0xa66/0x1840 [ 296.219297][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.225386][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 296.231036][ T30] ? assign_work+0x364/0x3d0 [ 296.235658][ T30] worker_thread+0x870/0xd30 [ 296.240257][ T30] ? __kthread_parkme+0x169/0x1d0 [ 296.245667][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.250894][ T30] kthread+0x7a9/0x920 [ 296.255001][ T30] ? __pfx_kthread+0x10/0x10 [ 296.259693][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.264948][ T30] ? __pfx_kthread+0x10/0x10 [ 296.269558][ T30] ? __pfx_kthread+0x10/0x10 [ 296.274140][ T30] ? __pfx_kthread+0x10/0x10 [ 296.278956][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.284180][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 296.289619][ T30] ? __pfx_kthread+0x10/0x10 [ 296.294241][ T30] ret_from_fork+0x4b/0x80 [ 296.298761][ T30] ? __pfx_kthread+0x10/0x10 [ 296.303465][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.308555][ T30] [ 296.311588][ T30] INFO: task kworker/1:3:5832 blocked for more than 145 seconds. [ 296.319325][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 296.326630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.335598][ T30] task:kworker/1:3 state:D stack:24560 pid:5832 tgid:5832 ppid:2 flags:0x00004000 [ 296.345794][ T30] Workqueue: events ovs_dp_masks_rebalance [ 296.351635][ T30] Call Trace: [ 296.354933][ T30] [ 296.357848][ T30] __schedule+0x186c/0x4be0 [ 296.362342][ T30] ? try_to_wake_up+0x959/0x1470 [ 296.367666][ T30] ? schedule+0x90/0x320 [ 296.371926][ T30] ? schedule+0x90/0x320 [ 296.376253][ T30] ? __pfx___schedule+0x10/0x10 [ 296.381098][ T30] ? preempt_schedule+0xe1/0xf0 [ 296.385994][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 296.391122][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.396429][ T30] ? kick_pool+0x45c/0x620 [ 296.400861][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 296.406289][ T30] ? schedule+0x90/0x320 [ 296.410538][ T30] schedule+0x14b/0x320 [ 296.414761][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.420315][ T30] __mutex_lock+0x817/0x1010 [ 296.425323][ T30] ? __mutex_lock+0x602/0x1010 [ 296.430120][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.435663][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.440675][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 296.446398][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.451443][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.457935][ T30] ? process_scheduled_works+0x976/0x1840 [ 296.463641][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.468865][ T30] process_scheduled_works+0xa66/0x1840 [ 296.474407][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.480400][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 296.486343][ T30] ? assign_work+0x364/0x3d0 [ 296.490989][ T30] worker_thread+0x870/0xd30 [ 296.495612][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 296.501505][ T30] ? __kthread_parkme+0x169/0x1d0 [ 296.506577][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.511815][ T30] kthread+0x7a9/0x920 [ 296.516151][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.521361][ T30] ? __pfx_kthread+0x10/0x10 [ 296.526064][ T30] ? __pfx_kthread+0x10/0x10 [ 296.530682][ T30] ? rcu_is_watching+0x15/0xb0 [ 296.535616][ T30] ? __pfx_kthread+0x10/0x10 [ 296.540219][ T30] ? __pfx_kthread+0x10/0x10 [ 296.545081][ T30] ret_from_fork+0x4b/0x80 [ 296.549511][ T30] ? __pfx_kthread+0x10/0x10 [ 296.554086][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.559111][ T30] [ 296.562131][ T30] INFO: task kworker/1:6:5882 blocked for more than 145 seconds. [ 296.569958][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 296.577377][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.586191][ T30] task:kworker/1:6 state:D stack:23184 pid:5882 tgid:5882 ppid:2 flags:0x00004000 [ 296.596783][ T30] Workqueue: events ovs_dp_masks_rebalance [ 296.602627][ T30] Call Trace: [ 296.606348][ T30] [ 296.609336][ T30] __schedule+0x186c/0x4be0 [ 296.613870][ T30] ? schedule+0x90/0x320 [ 296.618159][ T30] ? schedule+0x90/0x320 [ 296.622472][ T30] ? __pfx___schedule+0x10/0x10 [ 296.627394][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 296.632536][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.637921][ T30] ? kick_pool+0x1bd/0x620 [ 296.642374][ T30] ? schedule+0x90/0x320 [ 296.646666][ T30] ? rcu_is_watching+0x15/0xb0 [ 296.651443][ T30] ? schedule+0x90/0x320 [ 296.655702][ T30] schedule+0x14b/0x320 [ 296.659864][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.665684][ T30] __mutex_lock+0x817/0x1010 [ 296.670307][ T30] ? __mutex_lock+0x602/0x1010 [ 296.675098][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.680545][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.685651][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 296.691383][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.696571][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.703079][ T30] ? process_scheduled_works+0x976/0x1840 [ 296.708951][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.714274][ T30] process_scheduled_works+0xa66/0x1840 [ 296.719990][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.726311][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 296.731979][ T30] ? assign_work+0x364/0x3d0 [ 296.736639][ T30] worker_thread+0x870/0xd30 [ 296.741347][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 296.747742][ T30] ? __kthread_parkme+0x169/0x1d0 [ 296.752795][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.758386][ T30] kthread+0x7a9/0x920 [ 296.762554][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.767736][ T30] ? __pfx_kthread+0x10/0x10 [ 296.772347][ T30] ? __pfx_kthread+0x10/0x10 [ 296.777068][ T30] ? rcu_is_watching+0x15/0xb0 [ 296.781841][ T30] ? __pfx_kthread+0x10/0x10 [ 296.786581][ T30] ? __pfx_kthread+0x10/0x10 [ 296.791158][ T30] ret_from_fork+0x4b/0x80 [ 296.795698][ T30] ? __pfx_kthread+0x10/0x10 [ 296.800638][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.805418][ T30] [ 296.808423][ T30] INFO: task kworker/0:3:5884 blocked for more than 145 seconds. [ 296.816560][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 296.823859][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.832575][ T30] task:kworker/0:3 state:D stack:24976 pid:5884 tgid:5884 ppid:2 flags:0x00004000 [ 296.843064][ T30] Workqueue: events ovs_dp_masks_rebalance [ 296.849201][ T30] Call Trace: [ 296.852499][ T30] [ 296.855602][ T30] __schedule+0x186c/0x4be0 [ 296.860130][ T30] ? try_to_wake_up+0x959/0x1470 [ 296.865244][ T30] ? schedule+0x90/0x320 [ 296.869503][ T30] ? schedule+0x90/0x320 [ 296.873774][ T30] ? __pfx___schedule+0x10/0x10 [ 296.878938][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 296.884060][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.889184][ T30] ? kick_pool+0x45c/0x620 [ 296.893612][ T30] ? schedule+0x90/0x320 [ 296.897940][ T30] ? rcu_is_watching+0x15/0xb0 [ 296.902993][ T30] ? schedule+0x90/0x320 [ 296.907995][ T30] schedule+0x14b/0x320 [ 296.912173][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.917672][ T30] __mutex_lock+0x817/0x1010 [ 296.922289][ T30] ? __mutex_lock+0x602/0x1010 [ 296.928613][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.934467][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.939676][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 296.945481][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.950526][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.956887][ T30] ? process_scheduled_works+0x976/0x1840 [ 296.962713][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 296.968250][ T30] process_scheduled_works+0xa66/0x1840 [ 296.973837][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.979855][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 296.985454][ T30] ? assign_work+0x364/0x3d0 [ 296.990231][ T30] worker_thread+0x870/0xd30 [ 296.995262][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.000345][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.005514][ T30] kthread+0x7a9/0x920 [ 297.009603][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.014768][ T30] ? __pfx_kthread+0x10/0x10 [ 297.019391][ T30] ? __pfx_kthread+0x10/0x10 [ 297.023983][ T30] ? rcu_is_watching+0x15/0xb0 [ 297.028939][ T30] ? __pfx_kthread+0x10/0x10 [ 297.033554][ T30] ? __pfx_kthread+0x10/0x10 [ 297.038270][ T30] ret_from_fork+0x4b/0x80 [ 297.042801][ T30] ? __pfx_kthread+0x10/0x10 [ 297.047571][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.052447][ T30] [ 297.055741][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 297.064918][ T30] INFO: task kworker/0:4:5911 blocked for more than 146 seconds. [ 297.072730][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 297.080086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.089577][ T30] task:kworker/0:4 state:D stack:23312 pid:5911 tgid:5911 ppid:2 flags:0x00004000 [ 297.099847][ T30] Workqueue: events ovs_dp_masks_rebalance [ 297.105861][ T30] Call Trace: [ 297.109174][ T30] [ 297.112114][ T30] __schedule+0x186c/0x4be0 [ 297.116898][ T30] ? try_to_wake_up+0x959/0x1470 [ 297.121956][ T30] ? schedule+0x90/0x320 [ 297.126474][ T30] ? schedule+0x90/0x320 [ 297.130747][ T30] ? __pfx___schedule+0x10/0x10 [ 297.135664][ T30] ? preempt_schedule+0xe1/0xf0 [ 297.140629][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 297.146182][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.151330][ T30] ? kick_pool+0x45c/0x620 [ 297.155865][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 297.161429][ T30] ? schedule+0x90/0x320 [ 297.165789][ T30] schedule+0x14b/0x320 [ 297.169984][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.175598][ T30] __mutex_lock+0x817/0x1010 [ 297.180533][ T30] ? __mutex_lock+0x602/0x1010 [ 297.185403][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 297.191053][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.196825][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 297.202674][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.208143][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.214506][ T30] ? process_scheduled_works+0x976/0x1840 [ 297.220790][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 297.226160][ T30] process_scheduled_works+0xa66/0x1840 [ 297.231748][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.237970][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 297.243544][ T30] ? assign_work+0x364/0x3d0 [ 297.248287][ T30] worker_thread+0x870/0xd30 [ 297.253193][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.259209][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.264285][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.269659][ T30] kthread+0x7a9/0x920 [ 297.274034][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.279202][ T30] ? __pfx_kthread+0x10/0x10 [ 297.283789][ T30] ? __pfx_kthread+0x10/0x10 [ 297.288424][ T30] ? rcu_is_watching+0x15/0xb0 [ 297.293232][ T30] ? __pfx_kthread+0x10/0x10 [ 297.298123][ T30] ? __pfx_kthread+0x10/0x10 [ 297.303131][ T30] ret_from_fork+0x4b/0x80 [ 297.307660][ T30] ? __pfx_kthread+0x10/0x10 [ 297.312394][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.317471][ T30] [ 297.320825][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 297.330266][ T30] INFO: task kworker/0:5:5992 blocked for more than 146 seconds. [ 297.338154][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 297.345682][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.354450][ T30] task:kworker/0:5 state:D stack:22448 pid:5992 tgid:5992 ppid:2 flags:0x00004000 [ 297.364966][ T30] Workqueue: events ovs_dp_masks_rebalance [ 297.370815][ T30] Call Trace: [ 297.374195][ T30] [ 297.377161][ T30] __schedule+0x186c/0x4be0 [ 297.381669][ T30] ? schedule+0x90/0x320 [ 297.386057][ T30] ? schedule+0x90/0x320 [ 297.390419][ T30] ? __pfx___schedule+0x10/0x10 [ 297.396346][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 297.401836][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.407058][ T30] ? kick_pool+0x1bd/0x620 [ 297.411539][ T30] ? schedule+0x90/0x320 [ 297.415920][ T30] ? rcu_is_watching+0x15/0xb0 [ 297.420714][ T30] ? schedule+0x90/0x320 [ 297.425361][ T30] schedule+0x14b/0x320 [ 297.429538][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.435095][ T30] __mutex_lock+0x817/0x1010 [ 297.439717][ T30] ? __mutex_lock+0x602/0x1010 [ 297.444502][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 297.449912][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.455243][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 297.461237][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.466289][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.472663][ T30] ? process_scheduled_works+0x976/0x1840 [ 297.478487][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 297.483692][ T30] process_scheduled_works+0xa66/0x1840 [ 297.489648][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.495736][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 297.501335][ T30] ? assign_work+0x364/0x3d0 [ 297.506286][ T30] worker_thread+0x870/0xd30 [ 297.511571][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.516797][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.521952][ T30] kthread+0x7a9/0x920 [ 297.526101][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.531293][ T30] ? __pfx_kthread+0x10/0x10 [ 297.535946][ T30] ? __pfx_kthread+0x10/0x10 [ 297.540535][ T30] ? rcu_is_watching+0x15/0xb0 [ 297.545670][ T30] ? __pfx_kthread+0x10/0x10 [ 297.550280][ T30] ? __pfx_kthread+0x10/0x10 [ 297.554901][ T30] ret_from_fork+0x4b/0x80 [ 297.559404][ T30] ? __pfx_kthread+0x10/0x10 [ 297.563996][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.568904][ T30] [ 297.571929][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 297.581134][ T30] INFO: task syz-executor:11983 blocked for more than 146 seconds. [ 297.589098][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 297.596763][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.606328][ T30] task:syz-executor state:D stack:21296 pid:11983 tgid:11983 ppid:1 flags:0x00004004 [ 297.617270][ T30] Call Trace: [ 297.620573][ T30] [ 297.623541][ T30] __schedule+0x186c/0x4be0 [ 297.628095][ T30] ? schedule+0x90/0x320 [ 297.632364][ T30] ? schedule+0x90/0x320 [ 297.636776][ T30] ? __pfx___schedule+0x10/0x10 [ 297.641625][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.646688][ T30] ? rcu_is_watching+0x15/0xb0 [ 297.651465][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.657423][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.663817][ T30] ? schedule+0x90/0x320 [ 297.668373][ T30] schedule+0x14b/0x320 [ 297.672537][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.678019][ T30] __mutex_lock+0x817/0x1010 [ 297.682600][ T30] ? __mutex_lock+0x602/0x1010 [ 297.687871][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 297.694180][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.699594][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.705692][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 297.711880][ T30] wiphy_register+0x1be5/0x27b0 [ 297.716884][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 297.722695][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 297.728146][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 297.734284][ T30] ieee80211_register_hw+0x354e/0x4240 [ 297.739898][ T30] ? ieee80211_register_hw+0x1681/0x4240 [ 297.745594][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 297.751423][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 297.757432][ T30] ? __asan_memset+0x23/0x50 [ 297.762165][ T30] ? __hrtimer_init+0x170/0x250 [ 297.767130][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 297.772872][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 297.778989][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 297.784264][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 297.790141][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.796968][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 297.804011][ T30] genl_rcv_msg+0xb14/0xec0 [ 297.808785][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.814105][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 297.820737][ T30] ? kasan_save_track+0x51/0x80 [ 297.827093][ T30] ? __sys_sendto+0x363/0x4c0 [ 297.833023][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 297.838996][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.844658][ T30] ? __pfx___might_resched+0x10/0x10 [ 297.849982][ T30] netlink_rcv_skb+0x1e3/0x430 [ 297.855058][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.860111][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.865670][ T30] ? lock_release+0xbf/0xa30 [ 297.870291][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 297.875955][ T30] genl_rcv+0x28/0x40 [ 297.880233][ T30] netlink_unicast+0x7f6/0x990 [ 297.885853][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 297.891708][ T30] ? __virt_addr_valid+0x45f/0x530 [ 297.897189][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 297.902697][ T30] ? __check_object_size+0x47a/0x730 [ 297.908413][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 297.913833][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.920027][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 297.925317][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.930769][ T30] __sock_sendmsg+0x221/0x270 [ 297.935479][ T30] __sys_sendto+0x363/0x4c0 [ 297.939992][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 297.945349][ T30] ? __phys_addr+0xba/0x170 [ 297.949868][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.956263][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.962583][ T30] ? rcu_is_watching+0x15/0xb0 [ 297.967503][ T30] __x64_sys_sendto+0xde/0x100 [ 297.972284][ T30] do_syscall_64+0xf3/0x230 [ 297.977064][ T30] ? clear_bhb_loop+0x35/0x90 [ 297.981747][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.987773][ T30] RIP: 0033:0x7f533998ebbc [ 297.992201][ T30] RSP: 002b:00007ffdffe50f40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.001445][ T30] RAX: ffffffffffffffda RBX: 00007f533a6d4620 RCX: 00007f533998ebbc [ 298.009598][ T30] RDX: 0000000000000024 RSI: 00007f533a6d4670 RDI: 0000000000000003 [ 298.018072][ T30] RBP: 0000000000000000 R08: 00007ffdffe50f94 R09: 000000000000000c [ 298.026643][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 298.035713][ T30] R13: 0000000000000000 R14: 00007f533a6d4670 R15: 0000000000000000 [ 298.044489][ T30] [ 298.047602][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 298.056936][ T30] INFO: task syz-executor:12024 blocked for more than 147 seconds. [ 298.065150][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 298.072540][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.081255][ T30] task:syz-executor state:D stack:21072 pid:12024 tgid:12024 ppid:1 flags:0x00000004 [ 298.091494][ T30] Call Trace: [ 298.095124][ T30] [ 298.098187][ T30] __schedule+0x186c/0x4be0 [ 298.102781][ T30] ? schedule+0x90/0x320 [ 298.107257][ T30] ? schedule+0x90/0x320 [ 298.111589][ T30] ? __pfx___schedule+0x10/0x10 [ 298.117020][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.122162][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.127720][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.133703][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.140207][ T30] ? schedule+0x90/0x320 [ 298.144489][ T30] schedule+0x14b/0x320 [ 298.148701][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.154164][ T30] __mutex_lock+0x817/0x1010 [ 298.158899][ T30] ? __mutex_lock+0x602/0x1010 [ 298.163682][ T30] ? inet6_rtm_newaddr+0x7f3/0xef0 [ 298.168805][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.173885][ T30] ? __nla_parse+0x40/0x60 [ 298.178321][ T30] ? nla_memcmp+0x62/0x90 [ 298.182660][ T30] inet6_rtm_newaddr+0x7f3/0xef0 [ 298.187929][ T30] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 298.193430][ T30] ? bpf_lsm_capable+0x9/0x10 [ 298.198191][ T30] ? security_capable+0x7e/0x2d0 [ 298.203326][ T30] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 298.209152][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 298.215492][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.220632][ T30] ? lock_release+0xbf/0xa30 [ 298.225373][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.231397][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 298.236459][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.241244][ T30] ? lock_acquire+0xe3/0x550 [ 298.246255][ T30] netlink_rcv_skb+0x1e3/0x430 [ 298.251043][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.256634][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.262025][ T30] ? net_generic+0x1f/0x240 [ 298.266606][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.271814][ T30] netlink_unicast+0x7f6/0x990 [ 298.276960][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 298.282355][ T30] ? __virt_addr_valid+0x45f/0x530 [ 298.287526][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 298.292578][ T30] ? __check_object_size+0x47a/0x730 [ 298.298885][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 298.304438][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.311506][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 298.317904][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.323318][ T30] __sock_sendmsg+0x221/0x270 [ 298.328617][ T30] __sys_sendto+0x363/0x4c0 [ 298.333290][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 298.338701][ T30] ? __phys_addr+0xba/0x170 [ 298.343408][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.349873][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.356344][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.361134][ T30] __x64_sys_sendto+0xde/0x100 [ 298.366354][ T30] do_syscall_64+0xf3/0x230 [ 298.370871][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.375602][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.382015][ T30] RIP: 0033:0x7fbe0118ebbc [ 298.386478][ T30] RSP: 002b:00007ffc602129e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.395226][ T30] RAX: ffffffffffffffda RBX: 00007fbe01ed4620 RCX: 00007fbe0118ebbc [ 298.404082][ T30] RDX: 0000000000000040 RSI: 00007fbe01ed4670 RDI: 0000000000000003 [ 298.412216][ T30] RBP: 0000000000000000 R08: 00007ffc60212a34 R09: 000000000000000c [ 298.420224][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 298.428680][ T30] R13: 0000000000000000 R14: 00007fbe01ed4670 R15: 0000000000000000 [ 298.436726][ T30] [ 298.439751][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 298.448861][ T30] INFO: task syz-executor:12067 blocked for more than 147 seconds. [ 298.457212][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 298.464509][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.473292][ T30] task:syz-executor state:D stack:22032 pid:12067 tgid:12067 ppid:1 flags:0x00000004 [ 298.483562][ T30] Call Trace: [ 298.487132][ T30] [ 298.490097][ T30] __schedule+0x186c/0x4be0 [ 298.494820][ T30] ? schedule+0x90/0x320 [ 298.500975][ T30] ? schedule+0x90/0x320 [ 298.506012][ T30] ? __pfx___schedule+0x10/0x10 [ 298.511544][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.517111][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.521916][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.528010][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.534333][ T30] ? schedule+0x90/0x320 [ 298.538652][ T30] schedule+0x14b/0x320 [ 298.542802][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.548494][ T30] __mutex_lock+0x817/0x1010 [ 298.553087][ T30] ? __mutex_lock+0x602/0x1010 [ 298.557908][ T30] ? rtnl_newlink+0xce2/0x2210 [ 298.562683][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.567764][ T30] ? ns_capable+0x8a/0xf0 [ 298.572103][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 298.578239][ T30] rtnl_newlink+0xce2/0x2210 [ 298.582910][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.587975][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.592761][ T30] ? lock_release+0xbf/0xa30 [ 298.598430][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.603544][ T30] ? lock_release+0xbf/0xa30 [ 298.608986][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 298.614489][ T30] ? lock_release+0xbf/0xa30 [ 298.619585][ T30] ? deref_stack_reg+0x17c/0x210 [ 298.624589][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.629722][ T30] ? stack_trace_save+0x118/0x1d0 [ 298.635054][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 298.640447][ T30] ? deref_stack_reg+0x17c/0x210 [ 298.645481][ T30] ? preempt_count_add+0x93/0x190 [ 298.650516][ T30] ? 0xffffffffa000085c [ 298.654700][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 298.659988][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 298.665553][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.671716][ T30] ? kernel_text_address+0xa7/0xe0 [ 298.676842][ T30] ? __kernel_text_address+0xd/0x40 [ 298.682142][ T30] ? unwind_get_return_address+0x4d/0x90 [ 298.688334][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.693352][ T30] ? lock_release+0xbf/0xa30 [ 298.698672][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.703811][ T30] ? apparmor_capable+0x13b/0x1b0 [ 298.708958][ T30] ? bpf_lsm_capable+0x9/0x10 [ 298.714282][ T30] ? security_capable+0x7e/0x2d0 [ 298.719460][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.724602][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 298.729712][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.735524][ T30] ? lock_release+0xbf/0xa30 [ 298.740140][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.746095][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 298.751129][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.755986][ T30] ? lock_acquire+0xe3/0x550 [ 298.760587][ T30] netlink_rcv_skb+0x1e3/0x430 [ 298.765689][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.771162][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.776487][ T30] ? net_generic+0x1f/0x240 [ 298.781187][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.786552][ T30] netlink_unicast+0x7f6/0x990 [ 298.791548][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 298.798493][ T30] ? __virt_addr_valid+0x45f/0x530 [ 298.804907][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 298.810129][ T30] ? __check_object_size+0x47a/0x730 [ 298.815672][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 298.820991][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.826611][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 298.831655][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.837009][ T30] __sock_sendmsg+0x221/0x270 [ 298.841707][ T30] __sys_sendto+0x363/0x4c0 [ 298.846413][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 298.851775][ T30] ? __phys_addr+0xba/0x170 [ 298.856583][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.862904][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.869312][ T30] ? rcu_is_watching+0x15/0xb0 [ 298.874092][ T30] __x64_sys_sendto+0xde/0x100 [ 298.878934][ T30] do_syscall_64+0xf3/0x230 [ 298.883452][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.888419][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.894346][ T30] RIP: 0033:0x7f309b98ebbc [ 298.899834][ T30] RSP: 002b:00007fffbbc6c880 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.910036][ T30] RAX: ffffffffffffffda RBX: 00007f309c6d4620 RCX: 00007f309b98ebbc [ 298.919678][ T30] RDX: 0000000000000028 RSI: 00007f309c6d4670 RDI: 0000000000000003 [ 298.928335][ T30] RBP: 0000000000000000 R08: 00007fffbbc6c8d4 R09: 000000000000000c [ 298.936584][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 298.944846][ T30] R13: 0000000000000000 R14: 00007f309c6d4670 R15: 0000000000000000 [ 298.952854][ T30] [ 298.955924][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 298.965102][ T30] INFO: task syz.1.1835:12152 blocked for more than 147 seconds. [ 298.972826][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 298.980407][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.989630][ T30] task:syz.1.1835 state:D stack:27600 pid:12152 tgid:12150 ppid:5836 flags:0x00000004 [ 299.000360][ T30] Call Trace: [ 299.003844][ T30] [ 299.007157][ T30] __schedule+0x186c/0x4be0 [ 299.011700][ T30] ? schedule+0x90/0x320 [ 299.016426][ T30] ? schedule+0x90/0x320 [ 299.020704][ T30] ? __pfx___schedule+0x10/0x10 [ 299.025704][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.030758][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.035841][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 299.041752][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.048233][ T30] ? schedule+0x90/0x320 [ 299.052557][ T30] schedule+0x14b/0x320 [ 299.056762][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.062240][ T30] __mutex_lock+0x817/0x1010 [ 299.067108][ T30] ? __mutex_lock+0x602/0x1010 [ 299.071919][ T30] ? genl_rcv_msg+0x121/0xec0 [ 299.076684][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.082515][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.087541][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.094011][ T30] ? lock_release+0xbf/0xa30 [ 299.099229][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.103994][ T30] ? radix_tree_lookup+0x238/0x290 [ 299.109213][ T30] genl_rcv_msg+0x121/0xec0 [ 299.113737][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 299.119008][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.124108][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 299.129573][ T30] ? kasan_save_track+0x51/0x80 [ 299.134577][ T30] ? __sys_sendto+0x363/0x4c0 [ 299.139262][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.144019][ T30] ? lock_acquire+0xe3/0x550 [ 299.149161][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 299.155057][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 299.160187][ T30] ? __pfx___might_resched+0x10/0x10 [ 299.165566][ T30] netlink_rcv_skb+0x1e3/0x430 [ 299.170353][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.175444][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.180754][ T30] ? lock_release+0xbf/0xa30 [ 299.185657][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 299.191145][ T30] genl_rcv+0x28/0x40 [ 299.196065][ T30] netlink_unicast+0x7f6/0x990 [ 299.201426][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 299.207162][ T30] ? __virt_addr_valid+0x45f/0x530 [ 299.213048][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 299.218971][ T30] ? __check_object_size+0x47a/0x730 [ 299.225492][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 299.231138][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.236603][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 299.241558][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.247241][ T30] __sock_sendmsg+0x221/0x270 [ 299.251940][ T30] __sys_sendto+0x363/0x4c0 [ 299.256534][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 299.261603][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.268067][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.274409][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.279340][ T30] __x64_sys_sendto+0xde/0x100 [ 299.284361][ T30] do_syscall_64+0xf3/0x230 [ 299.288942][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.293611][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.299685][ T30] RIP: 0033:0x7f63d118ebbc [ 299.304122][ T30] RSP: 002b:00007f63d1f9aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 299.312836][ T30] RAX: ffffffffffffffda RBX: 00007f63d1f9afc0 RCX: 00007f63d118ebbc [ 299.320868][ T30] RDX: 0000000000000020 RSI: 00007f63d1f9b010 RDI: 0000000000000008 [ 299.328952][ T30] RBP: 0000000000000000 R08: 00007f63d1f9af14 R09: 000000000000000c [ 299.337182][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 299.345267][ T30] R13: 00007f63d1f9af68 R14: 00007f63d1f9b010 R15: 0000000000000000 [ 299.353254][ T30] [ 299.356316][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 299.365646][ T30] INFO: task syz.1.1835:12153 blocked for more than 148 seconds. [ 299.373361][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 299.380762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.389554][ T30] task:syz.1.1835 state:D stack:27056 pid:12153 tgid:12150 ppid:5836 flags:0x00000004 [ 299.400306][ T30] Call Trace: [ 299.403592][ T30] [ 299.406621][ T30] __schedule+0x186c/0x4be0 [ 299.411206][ T30] ? schedule+0x90/0x320 [ 299.415564][ T30] ? schedule+0x90/0x320 [ 299.419822][ T30] ? __pfx___schedule+0x10/0x10 [ 299.424934][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.429974][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.434768][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 299.440757][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.447103][ T30] ? schedule+0x90/0x320 [ 299.451340][ T30] schedule+0x14b/0x320 [ 299.455856][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.461322][ T30] __mutex_lock+0x817/0x1010 [ 299.465971][ T30] ? __mutex_lock+0x602/0x1010 [ 299.470741][ T30] ? genl_rcv_msg+0x121/0xec0 [ 299.475483][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.480514][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.485769][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.492242][ T30] ? lock_release+0xbf/0xa30 [ 299.496896][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.501756][ T30] ? radix_tree_lookup+0x238/0x290 [ 299.507019][ T30] genl_rcv_msg+0x121/0xec0 [ 299.511635][ T30] ? __dev_queue_xmit+0x2f4/0x3f50 [ 299.517115][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.522190][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 299.527522][ T30] ? kasan_save_track+0x51/0x80 [ 299.532391][ T30] ? __sys_sendto+0x363/0x4c0 [ 299.537112][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.541869][ T30] ? lock_acquire+0xe3/0x550 [ 299.546758][ T30] ? __pfx___dev_queue_xmit+0x10/0x10 [ 299.552165][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 299.557218][ T30] ? __pfx___might_resched+0x10/0x10 [ 299.562558][ T30] netlink_rcv_skb+0x1e3/0x430 [ 299.567458][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.572506][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.577943][ T30] ? lock_release+0xbf/0xa30 [ 299.582554][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 299.588088][ T30] genl_rcv+0x28/0x40 [ 299.592353][ T30] netlink_unicast+0x7f6/0x990 [ 299.597174][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 299.602548][ T30] ? __virt_addr_valid+0x45f/0x530 [ 299.607897][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 299.612963][ T30] ? __check_object_size+0x47a/0x730 [ 299.618383][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 299.623182][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.628511][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 299.633465][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.639117][ T30] __sock_sendmsg+0x221/0x270 [ 299.643810][ T30] __sys_sendto+0x363/0x4c0 [ 299.648402][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 299.653456][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.659828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.666464][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.671237][ T30] __x64_sys_sendto+0xde/0x100 [ 299.676098][ T30] do_syscall_64+0xf3/0x230 [ 299.680608][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.685318][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.691221][ T30] RIP: 0033:0x7f63d118ebbc [ 299.695930][ T30] RSP: 002b:00007f63d1f79ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 299.704377][ T30] RAX: ffffffffffffffda RBX: 00007f63d1f79fc0 RCX: 00007f63d118ebbc [ 299.712586][ T30] RDX: 0000000000000020 RSI: 00007f63d1f7a010 RDI: 000000000000000a [ 299.720647][ T30] RBP: 0000000000000000 R08: 00007f63d1f79f14 R09: 000000000000000c [ 299.728871][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 299.736871][ T30] R13: 00007f63d1f79f68 R14: 00007f63d1f7a010 R15: 0000000000000000 [ 299.744935][ T30] [ 299.747966][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 299.757385][ T30] INFO: task syz.0.1837:12160 blocked for more than 148 seconds. [ 299.765160][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 299.772552][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.781301][ T30] task:syz.0.1837 state:D stack:27088 pid:12160 tgid:12158 ppid:5841 flags:0x00000004 [ 299.791821][ T30] Call Trace: [ 299.795169][ T30] [ 299.798119][ T30] __schedule+0x186c/0x4be0 [ 299.802802][ T30] ? schedule+0x90/0x320 [ 299.807107][ T30] ? schedule+0x90/0x320 [ 299.811519][ T30] ? __pfx___schedule+0x10/0x10 [ 299.816673][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.821691][ T30] ? rcu_is_watching+0x15/0xb0 [ 299.826523][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 299.832651][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.839048][ T30] ? schedule+0x90/0x320 [ 299.843557][ T30] schedule+0x14b/0x320 [ 299.848015][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.853473][ T30] __mutex_lock+0x817/0x1010 [ 299.858155][ T30] ? __mutex_lock+0x602/0x1010 [ 299.862929][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 299.867993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.873013][ T30] ? __might_fault+0xaa/0x120 [ 299.877988][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 299.882952][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 299.888508][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 299.893840][ T30] __se_sys_ioctl+0xf5/0x170 [ 299.899368][ T30] do_syscall_64+0xf3/0x230 [ 299.904643][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.909344][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.915874][ T30] RIP: 0033:0x7f6daaf8cd29 [ 299.920569][ T30] RSP: 002b:00007f6dabe95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.929202][ T30] RAX: ffffffffffffffda RBX: 00007f6dab1a6080 RCX: 00007f6daaf8cd29 [ 299.937220][ T30] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 299.945692][ T30] RBP: 00007f6dab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 299.953685][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.961687][ T30] R13: 0000000000000000 R14: 00007f6dab1a6080 R15: 00007fffae2c4cf8 [ 299.969843][ T30] [ 299.972893][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 299.982297][ T30] INFO: task syz.0.1837:12161 blocked for more than 148 seconds. [ 299.990322][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 299.997689][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.006501][ T30] task:syz.0.1837 state:D stack:25616 pid:12161 tgid:12158 ppid:5841 flags:0x00004004 [ 300.017604][ T30] Call Trace: [ 300.021365][ T30] [ 300.024339][ T30] __schedule+0x186c/0x4be0 [ 300.029255][ T30] ? schedule+0x90/0x320 [ 300.033539][ T30] ? schedule+0x90/0x320 [ 300.037835][ T30] ? __pfx___schedule+0x10/0x10 [ 300.042782][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.048059][ T30] ? rcu_is_watching+0x15/0xb0 [ 300.052853][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.058855][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.065346][ T30] ? schedule+0x90/0x320 [ 300.069689][ T30] schedule+0x14b/0x320 [ 300.073886][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.079527][ T30] __mutex_lock+0x817/0x1010 [ 300.084134][ T30] ? __mutex_lock+0x602/0x1010 [ 300.089400][ T30] ? devinet_ioctl+0x31a/0x1ac0 [ 300.094279][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.099445][ T30] ? apparmor_capable+0x13b/0x1b0 [ 300.104491][ T30] ? bpf_lsm_capable+0x9/0x10 [ 300.109232][ T30] devinet_ioctl+0x31a/0x1ac0 [ 300.113950][ T30] ? get_user_ifreq+0x1bb/0x200 [ 300.119144][ T30] inet_ioctl+0x3d7/0x4f0 [ 300.123523][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 300.128633][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 300.134626][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 300.140414][ T30] ? packet_ioctl+0x26b/0x350 [ 300.145406][ T30] sock_do_ioctl+0x158/0x460 [ 300.150019][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 300.155238][ T30] sock_ioctl+0x626/0x8e0 [ 300.159586][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 300.164460][ T30] ? __fget_files+0x2a/0x410 [ 300.169145][ T30] ? __fget_files+0x2a/0x410 [ 300.173755][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 300.178782][ T30] __se_sys_ioctl+0xf5/0x170 [ 300.183363][ T30] do_syscall_64+0xf3/0x230 [ 300.188010][ T30] ? clear_bhb_loop+0x35/0x90 [ 300.192800][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.199069][ T30] RIP: 0033:0x7f6daaf8cd29 [ 300.203480][ T30] RSP: 002b:00007f6dabe74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.212120][ T30] RAX: ffffffffffffffda RBX: 00007f6dab1a6160 RCX: 00007f6daaf8cd29 [ 300.220188][ T30] RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 300.228187][ T30] RBP: 00007f6dab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 300.236352][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.244327][ T30] R13: 0000000000000000 R14: 00007f6dab1a6160 R15: 00007fffae2c4cf8 [ 300.252345][ T30] [ 300.255394][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 300.264438][ T30] INFO: task syz.0.1837:12164 blocked for more than 149 seconds. [ 300.272474][ T30] Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 300.280335][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.289244][ T30] task:syz.0.1837 state:D stack:26832 pid:12164 tgid:12158 ppid:5841 flags:0x00000004 [ 300.299765][ T30] Call Trace: [ 300.303043][ T30] [ 300.306104][ T30] __schedule+0x186c/0x4be0 [ 300.310651][ T30] ? schedule+0x90/0x320 [ 300.314941][ T30] ? schedule+0x90/0x320 [ 300.319202][ T30] ? __pfx___schedule+0x10/0x10 [ 300.324128][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.329358][ T30] ? rcu_is_watching+0x15/0xb0 [ 300.334229][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.340215][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.346659][ T30] ? schedule+0x90/0x320 [ 300.350923][ T30] schedule+0x14b/0x320 [ 300.355384][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.360854][ T30] __mutex_lock+0x817/0x1010 [ 300.365503][ T30] ? __mutex_lock+0x602/0x1010 [ 300.370270][ T30] ? internal_dev_create+0x263/0x450 [ 300.375588][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.380803][ T30] ? sized_strscpy+0x9a/0x2b0 [ 300.385777][ T30] ? alloc_netdev_mqs+0xd54/0x1110 [ 300.390938][ T30] internal_dev_create+0x263/0x450 [ 300.396078][ T30] ovs_vport_add+0x13f/0x420 [ 300.400678][ T30] new_vport+0x1a/0x190 [ 300.404847][ T30] ovs_dp_cmd_new+0x79c/0xc10 [ 300.409579][ T30] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 300.415165][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 300.421522][ T30] genl_rcv_msg+0xb14/0xec0 [ 300.426194][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.431249][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 300.436489][ T30] ? kasan_save_track+0x51/0x80 [ 300.441395][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 300.446838][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 300.451887][ T30] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 300.457161][ T30] ? __pfx___might_resched+0x10/0x10 [ 300.462616][ T30] netlink_rcv_skb+0x1e3/0x430 [ 300.467439][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.472558][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.477996][ T30] ? lock_release+0xbf/0xa30 [ 300.482659][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 300.488252][ T30] genl_rcv+0x28/0x40 [ 300.492232][ T30] netlink_unicast+0x7f6/0x990 [ 300.497180][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 300.502497][ T30] ? __virt_addr_valid+0x45f/0x530 [ 300.507987][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 300.513134][ T30] ? __check_object_size+0x47a/0x730 [ 300.518483][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 300.523248][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.528764][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 300.533727][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.539205][ T30] __sock_sendmsg+0x221/0x270 [ 300.544097][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 300.549016][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.554305][ T30] ? __fget_files+0x2a/0x410 [ 300.558930][ T30] ? __fget_files+0x2a/0x410 [ 300.563517][ T30] __sys_sendmsg+0x269/0x350 [ 300.568491][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.573609][ T30] ? lock_release+0xbf/0xa30 [ 300.578308][ T30] ? __se_sys_futex+0x3f9/0x480 [ 300.583191][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.589659][ T30] ? rcu_is_watching+0x15/0xb0 [ 300.594449][ T30] ? rcu_is_watching+0x15/0xb0 [ 300.599717][ T30] do_syscall_64+0xf3/0x230 [ 300.604217][ T30] ? clear_bhb_loop+0x35/0x90 [ 300.609096][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.615152][ T30] RIP: 0033:0x7f6daaf8cd29 [ 300.619670][ T30] RSP: 002b:00007f6dabe53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.628348][ T30] RAX: ffffffffffffffda RBX: 00007f6dab1a6240 RCX: 00007f6daaf8cd29 [ 300.636650][ T30] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000006 [ 300.644735][ T30] RBP: 00007f6dab00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 300.652722][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.660862][ T30] R13: 0000000000000000 R14: 00007f6dab1a6240 R15: 00007fffae2c4cf8 [ 300.668895][ T30] [ 300.671913][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 300.681031][ T30] INFO: lockdep is turned off. [ 300.686176][ T30] NMI backtrace for cpu 1 [ 300.686190][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 300.686208][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 300.686217][ T30] Call Trace: [ 300.686223][ T30] [ 300.686230][ T30] dump_stack_lvl+0x241/0x360 [ 300.686257][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.686277][ T30] ? __pfx__printk+0x10/0x10 [ 300.686298][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 300.686322][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 300.686345][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.686362][ T30] ? _printk+0xd5/0x120 [ 300.686380][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 300.686401][ T30] ? __pfx__printk+0x10/0x10 [ 300.686422][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.686438][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 300.686460][ T30] watchdog+0xff6/0x1040 [ 300.686479][ T30] ? watchdog+0x1ea/0x1040 [ 300.686499][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.686517][ T30] kthread+0x7a9/0x920 [ 300.686534][ T30] ? __pfx_kthread+0x10/0x10 [ 300.686554][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.686571][ T30] ? __pfx_kthread+0x10/0x10 [ 300.686589][ T30] ? __pfx_kthread+0x10/0x10 [ 300.686609][ T30] ? __pfx_kthread+0x10/0x10 [ 300.686627][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.686646][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 300.686666][ T30] ? __pfx_kthread+0x10/0x10 [ 300.686685][ T30] ret_from_fork+0x4b/0x80 [ 300.686701][ T30] ? __pfx_kthread+0x10/0x10 [ 300.686720][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.686741][ T30] [ 300.686747][ T30] Sending NMI from CPU 1 to CPUs 0: [ 300.856346][ C0] NMI backtrace for cpu 0 [ 300.856361][ C0] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 300.856378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 300.856389][ C0] Workqueue: events_unbound toggle_allocation_gate [ 300.856416][ C0] RIP: 0010:sched_balance_newidle+0xabc/0xf80 [ 300.856436][ C0] Code: 20 49 89 06 4c 8b 34 24 49 8d be d4 00 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 f7 03 00 00 45 8b be d4 00 00 00 <48> 8b 44 24 58 85 c0 bb 01 00 00 00 0f 45 d8 45 85 ff 0f 44 d8 49 [ 300.856449][ C0] RSP: 0018:ffffc9000217f5e0 EFLAGS: 00000046 [ 300.856462][ C0] RAX: 0000000000000000 RBX: 1ffff110170c7eb2 RCX: 0000000000000003 [ 300.856473][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff8880b863e994 [ 300.856484][ C0] RBP: ffffc9000217f740 R08: 0000000000000003 R09: fffff5200042fea4 [ 300.856494][ C0] R10: dffffc0000000000 R11: fffff5200042fea4 R12: dffffc0000000000 [ 300.856506][ C0] R13: 00000000ffffff8a R14: ffff8880b863e8c0 R15: 0000000000000000 [ 300.856516][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 300.856529][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.856539][ C0] CR2: 0000558f17a6e088 CR3: 000000000e738000 CR4: 00000000003526f0 [ 300.856553][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.856562][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.856572][ C0] Call Trace: [ 300.856579][ C0] [ 300.856586][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 300.856606][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 300.856627][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.856653][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 300.856668][ C0] ? nmi_handle+0x14f/0x5a0 [ 300.856688][ C0] ? nmi_handle+0x2a/0x5a0 [ 300.856707][ C0] ? sched_balance_newidle+0xabc/0xf80 [ 300.856724][ C0] ? default_do_nmi+0x63/0x160 [ 300.856742][ C0] ? exc_nmi+0x123/0x1f0 [ 300.856759][ C0] ? end_repeat_nmi+0xf/0x53 [ 300.856781][ C0] ? sched_balance_newidle+0xabc/0xf80 [ 300.856799][ C0] ? sched_balance_newidle+0xabc/0xf80 [ 300.856818][ C0] ? sched_balance_newidle+0xabc/0xf80 [ 300.856836][ C0] [ 300.856840][ C0] [ 300.856848][ C0] ? sched_balance_newidle+0x2d0/0xf80 [ 300.856870][ C0] ? __pfx_sched_balance_newidle+0x10/0x10 [ 300.856888][ C0] ? dl_server_stop+0x4c/0x90 [ 300.856910][ C0] ? dequeue_entities+0xab6/0xdd0 [ 300.856931][ C0] pick_next_task_fair+0x40/0xc90 [ 300.856950][ C0] __pick_next_task+0xdd/0x400 [ 300.856974][ C0] __schedule+0x75b/0x4be0 [ 300.857005][ C0] ? schedule+0x90/0x320 [ 300.857023][ C0] ? schedule+0x90/0x320 [ 300.857048][ C0] ? __pfx___schedule+0x10/0x10 [ 300.857067][ C0] ? rcu_is_watching+0x15/0xb0 [ 300.857090][ C0] ? __pfx_lock_release+0x10/0x10 [ 300.857107][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.857130][ C0] ? kthread_data+0x52/0xd0 [ 300.857148][ C0] ? wq_worker_sleeping+0x66/0x240 [ 300.857165][ C0] ? process_scheduled_works+0x976/0x1840 [ 300.857182][ C0] ? schedule+0x90/0x320 [ 300.857200][ C0] schedule+0x14b/0x320 [ 300.857219][ C0] ? process_scheduled_works+0x976/0x1840 [ 300.857236][ C0] toggle_allocation_gate+0x171/0x260 [ 300.857256][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 300.857276][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 300.857300][ C0] process_scheduled_works+0xa66/0x1840 [ 300.857327][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.857344][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 300.857365][ C0] ? assign_work+0x364/0x3d0 [ 300.857382][ C0] worker_thread+0x870/0xd30 [ 300.857405][ C0] ? __kthread_parkme+0x169/0x1d0 [ 300.857424][ C0] ? __pfx_worker_thread+0x10/0x10 [ 300.857440][ C0] kthread+0x7a9/0x920 [ 300.857458][ C0] ? __pfx_kthread+0x10/0x10 [ 300.857478][ C0] ? __pfx_worker_thread+0x10/0x10 [ 300.857494][ C0] ? __pfx_kthread+0x10/0x10 [ 300.857512][ C0] ? __pfx_kthread+0x10/0x10 [ 300.857532][ C0] ? __pfx_kthread+0x10/0x10 [ 300.857550][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.857569][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 300.857590][ C0] ? __pfx_kthread+0x10/0x10 [ 300.857609][ C0] ret_from_fork+0x4b/0x80 [ 300.857625][ C0] ? __pfx_kthread+0x10/0x10 [ 300.857644][ C0] ret_from_fork_asm+0x1a/0x30 [ 300.857665][ C0] [ 300.858441][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 301.293250][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 301.303484][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 301.313623][ T30] Call Trace: [ 301.316894][ T30] [ 301.319815][ T30] dump_stack_lvl+0x241/0x360 [ 301.324489][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.329699][ T30] ? __pfx__printk+0x10/0x10 [ 301.334320][ T30] ? vscnprintf+0x5d/0x90 [ 301.338649][ T30] panic+0x349/0x880 [ 301.342537][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 301.348706][ T30] ? __pfx_panic+0x10/0x10 [ 301.353146][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 301.358522][ T30] ? __irq_work_queue_local+0x137/0x410 [ 301.364146][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 301.369506][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 301.375655][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 301.381889][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 301.388031][ T30] watchdog+0x1035/0x1040 [ 301.392350][ T30] ? watchdog+0x1ea/0x1040 [ 301.396754][ T30] ? __pfx_watchdog+0x10/0x10 [ 301.401421][ T30] kthread+0x7a9/0x920 [ 301.405480][ T30] ? __pfx_kthread+0x10/0x10 [ 301.410065][ T30] ? __pfx_watchdog+0x10/0x10 [ 301.414822][ T30] ? __pfx_kthread+0x10/0x10 [ 301.419572][ T30] ? __pfx_kthread+0x10/0x10 [ 301.424152][ T30] ? __pfx_kthread+0x10/0x10 [ 301.428821][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.434010][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 301.439202][ T30] ? __pfx_kthread+0x10/0x10 [ 301.443872][ T30] ret_from_fork+0x4b/0x80 [ 301.448363][ T30] ? __pfx_kthread+0x10/0x10 [ 301.452945][ T30] ret_from_fork_asm+0x1a/0x30 [ 301.457714][ T30] [ 301.460861][ T30] Kernel Offset: disabled [ 301.465355][ T30] Rebooting in 86400 seconds..