last executing test programs: 1m54.025548193s ago: executing program 1 (id=540): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0xfff, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000440)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0xe, 0x1, {0x12, @ether_spec={@link_local, @remote}, {}, @ah_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x3}, {0x0, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000580)=0x100be5, 0x4) 1m44.859156961s ago: executing program 1 (id=540): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0xfff, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000440)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0xe, 0x1, {0x12, @ether_spec={@link_local, @remote}, {}, @ah_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x3}, {0x0, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000580)=0x100be5, 0x4) 1m36.35809719s ago: executing program 1 (id=540): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0xfff, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000440)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0xe, 0x1, {0x12, @ether_spec={@link_local, @remote}, {}, @ah_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x3}, {0x0, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000580)=0x100be5, 0x4) 1m25.934184827s ago: executing program 1 (id=540): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0xfff, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000440)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0xe, 0x1, {0x12, @ether_spec={@link_local, @remote}, {}, @ah_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x3}, {0x0, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000580)=0x100be5, 0x4) 1m14.88597545s ago: executing program 1 (id=540): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0xfff, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000440)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0xe, 0x1, {0x12, @ether_spec={@link_local, @remote}, {}, @ah_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x3}, {0x0, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000580)=0x100be5, 0x4) 4.5512089s ago: executing program 3 (id=1065): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 4.453920048s ago: executing program 3 (id=1066): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001d00)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'xts-aes-neon\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000007080011000000000008000e008000000008000d"], 0x5c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x40}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xc}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x60, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)={0x84, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x800, 0xfff7, 0x5, 0xf, 0x7, 0xc, 0x8]}}]}]}]}, 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.899762315s ago: executing program 2 (id=1075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x800, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x92f3}]}, 0x44}}, 0x0) 3.813221363s ago: executing program 3 (id=1077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000002080)=0x6, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000002340)=0x46fefc1b, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x40, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000240)=""/113, &(0x7f0000000100)=0x71) socket(0x1d, 0x2, 0x6) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0b000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 3.743181468s ago: executing program 2 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000007", @ANYRES8], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000800000000000000360003000000000018400000030000000000000000000000040000000000000095000000000000008702000000000000fcf781122455e4a485fb3f695a434660911fa50bc6557de9dab12b0231a088aae418246942a9ebad2da07754973bec04431b959769ce9d2a604fd5f81d44453ad2a2d2aa58e36f8ea493f0c8300f178312d0b9cd18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.540372693s ago: executing program 4 (id=1082): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r0 = socket$packet(0x11, 0xa, 0x300) (rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 3.176613218s ago: executing program 4 (id=1085): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, 0xd1}, [@XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x2, 0x6, 0x7}}]}, 0x128}}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[], 0x6c}}, 0x0) 2.999150736s ago: executing program 4 (id=1086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f0000000000)="9903ee7ed4b19263f875702924d066bb5b05dd6bdec174a278f100ccb0266db7a5d80be7e44b573760ddb6fdd6bdf46f8d7cd82e54be2e4704f6d4a43f2b5cbb548cf71c999be3685513d22162a8daf4d6be05ab08dcb28c6df8ce0856e564dddaa6ca3286ad7c9da99d1ea3fc13876c282a832567fb17ed8fecaaebe9a0e95ff222f99236987330f20d2f41fe816b95eaea81b0b73b81bf2c8c2b6cb86f9e71d19b2d1435a1bb53173e5f4874b92fc9660af75e30b016af24150fe495982c737034b9b234", 0xc5) socketpair(0x1a, 0x802, 0x7, &(0x7f0000000140)) (async) socketpair(0x1a, 0x802, 0x7, &(0x7f0000000140)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x2, 0x2}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x2, 0x2}]}}}}}}}}, 0x0) 2.906255426s ago: executing program 4 (id=1088): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa8, &(0x7f00000002c0), &(0x7f0000000080)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_dccp(0x2, 0x6, 0x0) (async) getsockopt$inet_int(r0, 0x10d, 0xa8, &(0x7f00000002c0), &(0x7f0000000080)=0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {}, 0xff}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 2.837794048s ago: executing program 3 (id=1089): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@getlink={0x2c, 0x12, 0x2fa9ccd93d5c0297, 0x0, 0x0, {0x7}, [@IFLA_ADDRESS={0xa, 0x1, @random="4324a15b37da"}]}, 0x2c}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@broadcast}, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@multicast2, 0x3}, {{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESOCT=r8, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000010095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @local, 0x0}, &(0x7f0000000380)=0xc) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=r8, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESHEX=r5], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x4f) 2.667217415s ago: executing program 2 (id=1090): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feee", 0x3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 2.66659676s ago: executing program 1 (id=540): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000100)=0xfff, 0x64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88a0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c002b8008000880", @ANYRES32=r4], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000440)=0x2, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0xe, 0x1, {0x12, @ether_spec={@link_local, @remote}, {}, @ah_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x3}, {0x0, @remote}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x41000, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000580)=0x100be5, 0x4) 1.571547974s ago: executing program 0 (id=1091): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @link_local}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x7f, 0x0, 0x3f8, 0x0, 0x32, 0xfffffffd}, 0x9c) (async) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, 0x0, 0x0, 0x880) (async) close(r2) write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x1, 0x3, 0x3, 0x1, "c21e8782c109cfa7c9b8403f1a00c9d911b461ea7890469aabcd166f4a97a3188ddb9af08d37256950ff5079e11516ce31a3629c7194a7d26d156e33957854ca345913566c59661ae187255fad67ba83975dda012c193003cf77052d36f429e1315f811bfed51bdc2162d6232b1bdd36ff34875819a680b36f51c970257733c1e47eec257c393138f8132b0c5a213e854ef6e92a750f43f40d8afef09ff8d9b3"}, 0xb0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.570813684s ago: executing program 2 (id=1092): r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x26, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000007929", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="5406cce5", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="5c0000007a006bcd9e3fe3dc6e080000070000046000001ca4e089007ea608645c5fd1f0e9bc30ca160af365040054255fd886868bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3b5e27bbfa83b5cae0300c9fc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.569940639s ago: executing program 3 (id=1093): syz_emit_ethernet(0x0, 0x0, 0x0) 1.56929024s ago: executing program 4 (id=1094): socket$kcm(0x29, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@setneightbl={0x24, 0x43, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2}, [@NDTA_NAME={0xe, 0x1, 'sy\xc6\baller\x00'}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) close(0x4) (async) close(0x4) 1.467300551s ago: executing program 3 (id=1095): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000faffffff0000000000f6e20085000000bc000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000080), &(0x7f00000000c0)=0x3) r1 = socket(0x40000000015, 0x5, 0x0) bind$pptp(r1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001780), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x80, 0x7800, 0xffffffc0, 0x1, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x68, 0x0, 0xca, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, {[@generic={0x86, 0x9, "c6e56a1967c701"}, @timestamp={0x44, 0x1c, 0xa8, 0x0, 0x2, [0x7f, 0x2, 0x8, 0x5, 0x2, 0xd]}, @timestamp_addr={0x44, 0x34, 0x9e, 0x1, 0x8, [{@multicast1, 0x5}, {@local, 0x1}, {@empty, 0x83}, {@local, 0x9}, {@local, 0x6}, {@rand_addr=0x64010101, 0x9}]}, @end, @timestamp_addr={0x44, 0x4, 0x43}, @lsrr={0x83, 0x13, 0xb5, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x4, 0x1, 0x0, 0x0, {[@generic={0x8, 0x12, "7a0efc3a2500000000000000bf000000"}]}}}}}}}, 0x0) 1.184306346s ago: executing program 0 (id=1096): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@private=0xa010100, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth={0x48, 0x1, {{'ghash-ce-sync\x00'}}}]}, 0x180}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) connect$packet(r1, &(0x7f0000000040)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @broadcast}, 0x14) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r11}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r11}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x29fa, 0x4, 0x34, 0x4, r4, 0x101, '\x00', r11, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0xd, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2c}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 951.290265ms ago: executing program 4 (id=1097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x8001, @mcast2={0xff, 0x5}, 0x81}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmsg(r2, &(0x7f0000004740)={0x0, 0x0, 0x0}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e2ff000000000000000000000000000f0f00"], 0x14) 591.715408ms ago: executing program 0 (id=1098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x18, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x18}}, 0x0) unshare(0x20040600) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) ppoll(&(0x7f0000000080)=[{r1, 0x6400}, {r2, 0x4}, {r1, 0x2}, {}, {r0, 0x1291}, {r1, 0x420}], 0x6, &(0x7f00000000c0), &(0x7f0000000240), 0x8) 385.651051ms ago: executing program 2 (id=1099): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000003850000002c000000850000230000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x200000, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4) (async) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 384.9368ms ago: executing program 0 (id=1100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9a78ff000000002d9a00000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030200000000008500000000000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000001780)={0x10, 0x3f7}, 0x10}], 0x2}, 0x0) 261.860147ms ago: executing program 2 (id=1101): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c4000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) sendmmsg$inet(r2, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="6464aa4712f30d62562fb844e3e5afdc3fc4bed00df46db22c92377032d4ce282f0e96eac5f0d43d784d8033cc09e3f5a6eec686581e8302aa830d4d068b6c3e54a7f32cfe4a3cc0d1652a7599a456a88d402e416bd481fcbd6afa0298e393755c1c280f48ce366aa6a402cdfce819db38fcdf6b5be9df0d417b50c1d8c5794e", 0x80}, {&(0x7f0000000300)="df", 0xfffffe61}], 0x2}}], 0x1, 0x40400c0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff041, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = epoll_create(0x3) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [], 0xff}}}}]}, 0x88}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007"], 0x64}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x30000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0xc, 0x40000000}, {0x43}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x9, 0x0, 0x0, @void, @value}, 0x20) 202.955573ms ago: executing program 0 (id=1102): unshare(0x24020400) unshare(0x68060200) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000580)=""/166, &(0x7f0000000640)=0xa6) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd98, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xc8, &(0x7f0000000300)=""/200, 0x40f00, 0x1, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xd, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[r0, r0, r0, r0, r0, 0x1, r0], &(0x7f0000000440)=[{0x1, 0x5, 0x2, 0x3}, {0x3, 0x4, 0xc, 0xa}, {0x4, 0x2, 0xc, 0xe}, {0x2, 0x4, 0x8, 0xb}, {0x3, 0x1, 0x7, 0x3}, {0x2, 0x4, 0xf, 0x4}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x3, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 0 (id=1103): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040), 0x8) (async) close(r2) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r5}, 0x20) unshare(0x2040400) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008000000000b06ac9"], 0x1c}}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="3900000013000904687e0700000000000000ff3f08000000480100100000000019002b000a0001050500000000000072080003000500000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): ater): interface not active [ 236.425709][ T8052] hsr_slave_0: entered promiscuous mode [ 236.457610][ T8052] hsr_slave_1: entered promiscuous mode [ 236.533129][ T7968] veth0_macvtap: entered promiscuous mode [ 236.606383][ T7968] veth1_macvtap: entered promiscuous mode [ 236.657600][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 236.690063][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.708130][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.729476][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.741779][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.751803][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.762904][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.774717][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.789803][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 237.084124][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.095356][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.105948][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.117470][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.128355][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.139265][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.151154][ T7968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.245782][ T4627] Bluetooth: hci1: command tx timeout [ 238.847701][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 238.856993][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.624'. [ 238.875744][ T7968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.894077][ T7968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.929489][ T7968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.949459][ T7968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.356303][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.365191][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 239.396707][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.492772][ T946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.506288][ T946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.537622][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 239.801830][ T8052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.818163][ T8052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.840277][ T8052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.870783][ T8052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.063078][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.639'. [ 240.078687][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.198574][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.233472][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.240669][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.326922][ T1826] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.334221][ T1826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.362333][ T4627] Bluetooth: hci1: command tx timeout [ 240.473275][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.643'. [ 240.487260][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 240.500426][ T8216] geneve2: entered promiscuous mode [ 240.506133][ T8216] geneve2: entered allmulticast mode [ 240.535936][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 240.746204][ T8226] Cannot find set identified by id 0 to match [ 241.052664][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.164430][ T8052] veth0_vlan: entered promiscuous mode [ 241.191579][ T8052] veth1_vlan: entered promiscuous mode [ 241.265895][ T8052] veth0_macvtap: entered promiscuous mode [ 241.288073][ T8052] veth1_macvtap: entered promiscuous mode [ 241.331191][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.375632][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.401073][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.418656][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.429725][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.440985][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.472646][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.487751][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.500885][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.650397][ T8262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.670287][ T8262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.702045][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.723766][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.738932][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.757798][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.774274][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.786854][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.797314][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.810592][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.823360][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.856550][ T8052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.877728][ T8052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.899089][ T8052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.916869][ T8052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.060445][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.071328][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.232323][ T946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.250982][ T946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.510981][ T8290] __nla_validate_parse: 2 callbacks suppressed [ 242.511000][ T8290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.667'. [ 242.551396][ T8290] netlink: 'syz.2.667': attribute type 11 has an invalid length. [ 242.662083][ T8293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 242.704434][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 242.812021][ T8298] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 243.260424][ T3005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.383499][ T3005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.513500][ T8315] macvlan0: entered allmulticast mode [ 243.525641][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 243.529515][ T8315] veth1_vlan: entered allmulticast mode [ 243.615677][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 243.808840][ T3005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.841981][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 243.867231][ T8323] veth1_vlan: left allmulticast mode [ 243.947024][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.968510][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.982466][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.992474][ T8323] macvlan0 (unregistering): left allmulticast mode [ 243.999783][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.000681][ T8339] Bluetooth: MGMT ver 1.23 [ 244.018864][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.027322][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.038382][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.043489][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.681'. [ 244.058052][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.110349][ T3005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.183432][ T8329] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.330571][ T8350] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 244.347238][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.682'. [ 244.504531][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 244.577271][ T3005] bridge_slave_1: left allmulticast mode [ 244.584577][ T3005] bridge_slave_1: left promiscuous mode [ 244.592280][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.605614][ T3005] bridge_slave_0: left allmulticast mode [ 244.613387][ T3005] bridge_slave_0: left promiscuous mode [ 244.619814][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.781105][ T8366] netlink: 104 bytes leftover after parsing attributes in process `syz.4.687'. [ 244.802199][ T8368] netlink: 52 bytes leftover after parsing attributes in process `syz.4.687'. [ 245.178370][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.197755][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.213901][ T3005] bond0 (unregistering): Released all slaves [ 245.253344][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.597107][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.615404][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.640554][ T8340] bridge_slave_0: entered allmulticast mode [ 245.647607][ T8340] bridge_slave_0: entered promiscuous mode [ 245.687667][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.709716][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.730643][ T8340] bridge_slave_1: entered allmulticast mode [ 245.737660][ T8340] bridge_slave_1: entered promiscuous mode [ 245.828298][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.846442][ T8396] netlink: 'syz.2.695': attribute type 5 has an invalid length. [ 245.862258][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.873045][ T8395] netlink: 'syz.2.695': attribute type 5 has an invalid length. [ 245.913723][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.941106][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.036266][ T3005] hsr_slave_0: left promiscuous mode [ 246.056750][ T3005] hsr_slave_1: left promiscuous mode [ 246.090902][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.098499][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.125079][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.139684][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.165892][ T55] Bluetooth: hci1: command tx timeout [ 246.192326][ T3005] veth1_macvtap: left promiscuous mode [ 246.197899][ T3005] veth0_macvtap: left promiscuous mode [ 246.203872][ T3005] veth1_vlan: left promiscuous mode [ 246.209247][ T3005] veth0_vlan: left promiscuous mode [ 246.993243][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 247.048406][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 247.516632][ T8340] team0: Port device team_slave_0 added [ 247.525533][ T8403] __nla_validate_parse: 2 callbacks suppressed [ 247.525546][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.698'. [ 247.581374][ T8340] team0: Port device team_slave_1 added [ 247.693747][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.701446][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.751561][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.777016][ T8438] tipc: Trying to set illegal importance in message [ 247.951819][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.975311][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.025206][ T8450] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.710'. [ 248.045302][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.199062][ T8340] hsr_slave_0: entered promiscuous mode [ 248.206891][ T8340] hsr_slave_1: entered promiscuous mode [ 248.240867][ T55] Bluetooth: hci1: command tx timeout [ 248.368096][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 248.396397][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.409686][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.781536][ T8340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.812329][ T8340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.843043][ T8340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.871882][ T8340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.077414][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.134212][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.150445][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.158258][ T1826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.195132][ T1826] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.202351][ T1826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.233200][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.720'. [ 249.289593][ T8498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.297349][ T8498] IPv6: NLM_F_CREATE should be set when creating new route [ 249.304711][ T8498] IPv6: NLM_F_CREATE should be set when creating new route [ 249.547561][ T8516] sctp: [Deprecated]: syz.3.724 (pid 8516) Use of int in maxseg socket option. [ 249.547561][ T8516] Use struct sctp_assoc_value instead [ 249.642443][ T8520] netlink: 3 bytes leftover after parsing attributes in process `syz.0.725'. [ 249.792821][ T8526] bridge0: port 3(team0) entered blocking state [ 249.799284][ T8526] bridge0: port 3(team0) entered disabled state [ 249.837936][ T8526] team0: entered allmulticast mode [ 249.849222][ T8526] team_slave_0: entered allmulticast mode [ 249.858314][ T8526] team_slave_1: entered allmulticast mode [ 249.869080][ T8526] team0: entered promiscuous mode [ 249.874823][ T8526] team_slave_0: entered promiscuous mode [ 249.883663][ T8526] team_slave_1: entered promiscuous mode [ 249.892939][ T8526] bridge0: port 3(team0) entered blocking state [ 249.899415][ T8526] bridge0: port 3(team0) entered forwarding state [ 249.911203][ T8536] netlink: 'syz.0.729': attribute type 11 has an invalid length. [ 249.935146][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.968831][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.009069][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 250.025841][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.728'. [ 250.062694][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 250.071899][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 250.081474][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 250.226048][ T8340] veth0_vlan: entered promiscuous mode [ 250.254559][ T8548] tipc: Can't bind to reserved service type 2 [ 250.272363][ T8340] veth1_vlan: entered promiscuous mode [ 250.319959][ T55] Bluetooth: hci1: command tx timeout [ 250.364206][ T8340] veth0_macvtap: entered promiscuous mode [ 250.384021][ T8340] veth1_macvtap: entered promiscuous mode [ 250.435038][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.459408][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.472388][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.484231][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.494557][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.505215][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.515748][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.527929][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.542654][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.570334][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.588486][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.598689][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.609749][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.620956][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.632756][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.642940][ T8340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.653679][ T8340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.665221][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.706287][ T8340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.721350][ T8340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.731717][ T8340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.741486][ T8340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.857614][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.876164][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.910992][ T1826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.928883][ T1826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.145482][ T8571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.177536][ T8571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.519456][ T8582] vlan2: entered promiscuous mode [ 251.525425][ T8582] bond0: entered promiscuous mode [ 251.531188][ T8582] bond_slave_0: entered promiscuous mode [ 251.537296][ T8582] bond_slave_1: entered promiscuous mode [ 251.547859][ T8582] bond0: left promiscuous mode [ 251.553964][ T8582] bond_slave_0: left promiscuous mode [ 251.559911][ T8582] bond_slave_1: left promiscuous mode [ 251.783877][ T8600] netlink: 'syz.4.748': attribute type 4 has an invalid length. [ 251.812925][ T8600] netlink: 'syz.4.748': attribute type 2 has an invalid length. [ 252.174000][ T8621] netlink: 'syz.4.754': attribute type 10 has an invalid length. [ 252.200705][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.208124][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.229349][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.236522][ T8621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.244069][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.251279][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.265863][ T8621] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 252.371607][ T6873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.806004][ T8638] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 252.828379][ T8639] __nla_validate_parse: 5 callbacks suppressed [ 252.828398][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 252.844910][ T4627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.861512][ T4627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.870569][ T4627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.886610][ T8639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.899784][ T4627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.911942][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.762'. [ 252.927784][ T8639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.941775][ T4627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.948422][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 252.958028][ T4627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.996949][ T6873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.034528][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 253.148641][ T8653] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.247516][ T6873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.273293][ T8640] chnl_net:caif_netlink_parms(): no params data found [ 253.319694][ T6873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.365191][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.373038][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.380650][ T8640] bridge_slave_0: entered allmulticast mode [ 253.387764][ T8640] bridge_slave_0: entered promiscuous mode [ 253.398834][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.406764][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.415523][ T8640] bridge_slave_1: entered allmulticast mode [ 253.422742][ T8640] bridge_slave_1: entered promiscuous mode [ 253.790698][ T8640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.832337][ T8640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.848943][ T6873] bridge_slave_1: left allmulticast mode [ 253.858624][ T8671] syz.3.770[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.858721][ T8671] syz.3.770[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.866174][ T6873] bridge_slave_1: left promiscuous mode [ 253.878899][ T8671] syz.3.770[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.899579][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.935103][ T6873] bridge_slave_0: left allmulticast mode [ 253.941470][ T6873] bridge_slave_0: left promiscuous mode [ 253.947310][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.447856][ T6873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.459674][ T6873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.471765][ T6873] bond0 (unregistering): Released all slaves [ 254.512225][ T8678] netlink: 'syz.2.771': attribute type 4 has an invalid length. [ 254.582851][ T8640] team0: Port device team_slave_0 added [ 254.605891][ T8640] team0: Port device team_slave_1 added [ 254.748254][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 254.748452][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.765148][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.793513][ T8640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.807850][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.815060][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.852135][ T8704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.866294][ T8640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.871062][ T8704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.026707][ T8712] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.039678][ T55] Bluetooth: hci1: command tx timeout [ 255.086376][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 255.127718][ T8640] hsr_slave_0: entered promiscuous mode [ 255.145152][ T8640] hsr_slave_1: entered promiscuous mode [ 255.166269][ T8640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.191961][ T8640] Cannot create hsr debugfs directory [ 255.257138][ T6873] hsr_slave_0: left promiscuous mode [ 255.267345][ T6873] hsr_slave_1: left promiscuous mode [ 255.287948][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.300914][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.320135][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.327613][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.364663][ T6873] veth1_macvtap: left promiscuous mode [ 255.370406][ T6873] veth0_macvtap: left promiscuous mode [ 255.377301][ T6873] veth1_vlan: left promiscuous mode [ 255.383181][ T6873] veth0_vlan: left promiscuous mode [ 256.082066][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.088593][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.288730][ T6873] team0 (unregistering): Port device team_slave_1 removed [ 256.382105][ T6873] team0 (unregistering): Port device team_slave_0 removed [ 257.024477][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'. [ 257.050054][ T8737] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 257.121430][ T55] Bluetooth: hci1: command tx timeout [ 257.131177][ T8741] bridge_slave_0: left allmulticast mode [ 257.136989][ T8741] bridge_slave_0: left promiscuous mode [ 257.143245][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.236763][ T8741] bridge_slave_1: left allmulticast mode [ 257.247564][ T8741] bridge_slave_1: left promiscuous mode [ 257.257309][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.275443][ T8741] bond0: (slave bond_slave_0): Releasing backup interface [ 257.296684][ T8741] bond0: (slave bond_slave_1): Releasing backup interface [ 257.386633][ T8741] team0: Port device team_slave_0 removed [ 257.407632][ T8741] team0: Port device team_slave_1 removed [ 257.417828][ T8741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.440352][ T8741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.463187][ T8741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.475616][ T8741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.569565][ T8742] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 257.589858][ T8742] netlink: 2 bytes leftover after parsing attributes in process `syz.0.791'. [ 257.614924][ T8742] team0: entered promiscuous mode [ 257.629848][ T8742] bridge0: port 1(team0) entered blocking state [ 257.653871][ T8742] bridge0: port 1(team0) entered disabled state [ 257.667325][ T8742] team0: entered allmulticast mode [ 257.696071][ T8742] bridge0: port 1(team0) entered blocking state [ 257.702531][ T8742] bridge0: port 1(team0) entered forwarding state [ 257.761016][ T1826] bridge0: port 1(team0) entered disabled state [ 258.076373][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 258.118958][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.138604][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.437409][ T8640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.455083][ T8640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.476243][ T8640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.502559][ T8640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.681308][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.700254][ T8640] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.738501][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.745709][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.816326][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.823587][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.927046][ T8640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.166327][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 259.199914][ T55] Bluetooth: hci1: command tx timeout [ 259.233878][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.281344][ T8640] veth0_vlan: entered promiscuous mode [ 259.293247][ T8640] veth1_vlan: entered promiscuous mode [ 259.352891][ T8640] veth0_macvtap: entered promiscuous mode [ 259.367950][ T8640] veth1_macvtap: entered promiscuous mode [ 259.438157][ T8808] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 259.459082][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.470141][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.485176][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.502625][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.523273][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.550422][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.580742][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.605294][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.619661][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.633191][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.644133][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.655759][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.681853][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.704731][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.743506][ T8640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.772606][ T8640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.805183][ T8640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.832541][ T8640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.984748][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.051415][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.087976][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.096717][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.904148][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 261.020098][ T8830] wireguard0: entered promiscuous mode [ 261.044617][ T8830] wireguard0: entered allmulticast mode [ 261.971773][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 262.007214][ T3005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.214457][ T3005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.266412][ T4627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.272502][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'. [ 262.284983][ T4627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.303858][ T4627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.313357][ T4627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.329732][ T4627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 262.337123][ T4627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.368875][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.401027][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.474595][ T3005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.700837][ T8874] syzkaller1: entered promiscuous mode [ 262.712986][ T8874] syzkaller1: entered allmulticast mode [ 262.774584][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 262.836522][ T3005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.058061][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 263.089215][ T3005] bridge_slave_1: left allmulticast mode [ 263.111131][ T3005] bridge_slave_1: left promiscuous mode [ 263.131340][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.158213][ T3005] bridge_slave_0: left allmulticast mode [ 263.165524][ T3005] bridge_slave_0: left promiscuous mode [ 263.171415][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.239219][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.838'. [ 263.667641][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.679483][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.691772][ T3005] bond0 (unregistering): Released all slaves [ 263.728226][ T8903] netlink: 'syz.3.837': attribute type 2 has an invalid length. [ 263.749680][ T8903] netlink: 'syz.3.837': attribute type 8 has an invalid length. [ 263.757465][ T8903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.837'. [ 263.794093][ T8916] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 263.812109][ T8923] netlink: 'syz.2.843': attribute type 13 has an invalid length. [ 263.829419][ T8916] netlink: 55 bytes leftover after parsing attributes in process `syz.4.841'. [ 263.865524][ T8919] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 263.882229][ T8919] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 263.884999][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 263.890793][ T8918] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 263.912431][ T8918] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 263.984113][ T8934] x_tables: duplicate underflow at hook 1 [ 264.007210][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.021205][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.074975][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.082935][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.093245][ T8857] bridge_slave_0: entered allmulticast mode [ 264.100703][ T8857] bridge_slave_0: entered promiscuous mode [ 264.129072][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.142916][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.155419][ T8857] bridge_slave_1: entered allmulticast mode [ 264.164317][ T8857] bridge_slave_1: entered promiscuous mode [ 264.242402][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.258282][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.282521][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 264.331020][ T3005] hsr_slave_0: left promiscuous mode [ 264.339167][ T3005] hsr_slave_1: left promiscuous mode [ 264.357361][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.366569][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.382742][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.394855][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.400333][ T55] Bluetooth: hci1: command tx timeout [ 264.441699][ T3005] veth1_macvtap: left promiscuous mode [ 264.447775][ T3005] veth0_macvtap: left promiscuous mode [ 264.457315][ T3005] veth1_vlan: left promiscuous mode [ 264.462937][ T3005] veth0_vlan: left promiscuous mode [ 264.464630][ T8954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.851'. [ 264.932798][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 264.977340][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 265.516125][ T8857] team0: Port device team_slave_0 added [ 265.538049][ T8954] wg2: entered promiscuous mode [ 265.554084][ T8954] team0: Device wg2 is of different type [ 265.576148][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 265.671037][ T8857] team0: Port device team_slave_1 added [ 265.802054][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.823816][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.870116][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.917404][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.925460][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.971752][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.032930][ T8990] vlan2: entered promiscuous mode [ 266.042645][ T8990] macvtap0: entered promiscuous mode [ 266.079985][ T8990] macvtap0: left promiscuous mode [ 266.170128][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 266.214901][ T8857] hsr_slave_0: entered promiscuous mode [ 266.229230][ T8857] hsr_slave_1: entered promiscuous mode [ 266.271136][ T8999] netlink: 164 bytes leftover after parsing attributes in process `syz.2.865'. [ 266.290145][ T8999] netlink: 'syz.2.865': attribute type 2 has an invalid length. [ 266.304085][ T9000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.335931][ T8995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.480384][ T55] Bluetooth: hci1: command tx timeout [ 266.742517][ T9014] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 266.827689][ T9014] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 266.842405][ T9014] macsec1: entered promiscuous mode [ 266.848700][ T9014] macsec1: entered allmulticast mode [ 266.854454][ T9014] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 266.867727][ T9014] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 266.875410][ T9014] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 267.278996][ T9038] netlink: 'syz.0.878': attribute type 3 has an invalid length. [ 267.288103][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 267.869273][ T8857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 267.913462][ T8857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.952567][ T8857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.003665][ T8857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.024408][ T55] Bluetooth: hci0: command tx timeout [ 268.031830][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.049743][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.165796][ T9069] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 268.174119][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.191488][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.205446][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.212660][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.292008][ T8857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.302764][ T8857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.331415][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.338589][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.450127][ T9082] __nla_validate_parse: 1 callbacks suppressed [ 268.450147][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 268.513216][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.892'. [ 268.560150][ T55] Bluetooth: hci1: command tx timeout [ 268.803984][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.992253][ T8857] veth0_vlan: entered promiscuous mode [ 269.005200][ T8857] veth1_vlan: entered promiscuous mode [ 269.028158][ T9099] IPv6: sit1: Disabled Multicast RS [ 269.034347][ T9099] sit1: entered allmulticast mode [ 269.194748][ T8857] veth0_macvtap: entered promiscuous mode [ 269.240741][ T8857] veth1_macvtap: entered promiscuous mode [ 269.263811][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.276809][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.287276][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.304785][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.314743][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.326198][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.339244][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.371831][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.393506][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.411168][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.421844][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.432552][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.445161][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.471745][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.512931][ T8857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.535388][ T8857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.550179][ T8857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.564316][ T8857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.781613][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.790126][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.824899][ T9133] netlink: 56 bytes leftover after parsing attributes in process `syz.4.906'. [ 269.844894][ T9137] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 269.859631][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.906'. [ 269.883480][ T946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.891894][ T9137] netlink: 'syz.3.907': attribute type 4 has an invalid length. [ 269.895633][ T946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.115770][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 270.125851][ T9148] netlink: 'syz.2.911': attribute type 17 has an invalid length. [ 270.134499][ T9148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.911'. [ 270.144594][ T9148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.177010][ T9147] sctp: [Deprecated]: syz.3.910 (pid 9147) Use of int in max_burst socket option deprecated. [ 270.177010][ T9147] Use struct sctp_assoc_value instead [ 270.194559][ T9149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.215899][ T9149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.489962][ T9165] ip6t_srh: unknown srh invflags 4000 [ 270.547139][ T9168] netlink: 64 bytes leftover after parsing attributes in process `syz.0.918'. [ 271.103307][ T9170] netlink: 'syz.0.919': attribute type 63 has an invalid length. [ 271.165975][ T9177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.920'. [ 271.292250][ T946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.107010][ T9196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.926'. [ 272.153981][ T9196] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 272.295222][ T9204] tipc: Started in network mode [ 272.337188][ T9204] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 272.374029][ T9204] tipc: Enabling of bearer rejected, failed to enable media [ 272.457012][ T946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.480092][ T4627] Bluetooth: hci5: command 0x0405 tx timeout [ 272.490084][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.499589][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.509160][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.520265][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.527276][ T4627] Bluetooth: hci5: link tx timeout [ 272.528063][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.534614][ T4627] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 272.548247][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.668108][ T946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.685611][ T9221] tipc: Started in network mode [ 272.692270][ T9221] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 272.703129][ T9221] tipc: Enabling of bearer rejected, failed to enable media [ 272.732532][ T946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.748048][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.930'. [ 272.759005][ T9224] lo speed is unknown, defaulting to 1000 [ 272.774270][ T9224] lo speed is unknown, defaulting to 1000 [ 272.797725][ T9224] lo speed is unknown, defaulting to 1000 [ 272.837632][ T9224] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 272.929075][ T9224] lo speed is unknown, defaulting to 1000 [ 272.974543][ T9224] lo speed is unknown, defaulting to 1000 [ 272.984658][ T946] bridge_slave_1: left allmulticast mode [ 272.994712][ T946] bridge_slave_1: left promiscuous mode [ 273.004587][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.025966][ T946] bridge_slave_0: left allmulticast mode [ 273.036970][ T946] bridge_slave_0: left promiscuous mode [ 273.048179][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.706791][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.721338][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.734139][ T946] bond0 (unregistering): Released all slaves [ 273.769501][ T9224] lo speed is unknown, defaulting to 1000 [ 273.793000][ T9224] lo speed is unknown, defaulting to 1000 [ 273.848798][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 273.868460][ T9224] lo speed is unknown, defaulting to 1000 [ 273.893271][ T9224] lo speed is unknown, defaulting to 1000 [ 273.901174][ T9246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.946802][ T9246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.006580][ T9224] lo speed is unknown, defaulting to 1000 [ 274.011264][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 274.032310][ T9250] bond0: (slave bridge0): Releasing backup interface [ 274.041841][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.049196][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.078227][ T9250] bridge_slave_0: left allmulticast mode [ 274.085019][ T9250] bridge_slave_0: left promiscuous mode [ 274.094771][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.113734][ T9250] bridge_slave_1: left allmulticast mode [ 274.120225][ T9250] bridge_slave_1: left promiscuous mode [ 274.126502][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.160930][ T9250] bond0: (slave bond_slave_0): Releasing backup interface [ 274.195926][ T9250] bond0: (slave bond_slave_1): Releasing backup interface [ 274.283004][ T9250] team0: Port device team_slave_0 removed [ 274.307278][ T9250] team0: Port device team_slave_1 removed [ 274.317577][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.325685][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.338755][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.360312][ T9250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.378467][ T9224] lo speed is unknown, defaulting to 1000 [ 274.448464][ T9247] lo speed is unknown, defaulting to 1000 [ 274.500596][ T9224] lo speed is unknown, defaulting to 1000 [ 274.561816][ T5247] Bluetooth: hci5: command 0x0405 tx timeout [ 274.595338][ T946] hsr_slave_0: left promiscuous mode [ 274.606244][ T946] hsr_slave_1: left promiscuous mode [ 274.620532][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.628136][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.639677][ T4627] Bluetooth: hci1: command tx timeout [ 274.650544][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.657993][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.685797][ T946] veth1_macvtap: left promiscuous mode [ 274.691825][ T946] veth0_macvtap: left promiscuous mode [ 274.697631][ T946] veth1_vlan: left promiscuous mode [ 274.704168][ T946] veth0_vlan: left promiscuous mode [ 275.216766][ T946] team0 (unregistering): Port device team_slave_1 removed [ 275.271125][ T946] team0 (unregistering): Port device team_slave_0 removed [ 275.727665][ T9266] syzkaller0: entered promiscuous mode [ 275.742215][ T9266] syzkaller0: entered allmulticast mode [ 275.753096][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 275.764882][ T9271] ipvlan2: entered allmulticast mode [ 275.770325][ T9271] veth0_vlan: entered allmulticast mode [ 276.722330][ T4627] Bluetooth: hci1: command tx timeout [ 277.450171][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.459533][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.466906][ T9218] bridge_slave_0: entered allmulticast mode [ 277.476497][ T9218] bridge_slave_0: entered promiscuous mode [ 277.581079][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.596283][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.604042][ T9218] bridge_slave_1: entered allmulticast mode [ 277.611883][ T9218] bridge_slave_1: entered promiscuous mode [ 277.627947][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 277.687987][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.707084][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.785258][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.948'. [ 277.821079][ T9218] team0: Port device team_slave_0 added [ 277.834552][ T9218] team0: Port device team_slave_1 added [ 277.890268][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.906130][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.933575][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.960362][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.972899][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.035114][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.134359][ T9218] hsr_slave_0: entered promiscuous mode [ 278.175366][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 278.189685][ T9218] hsr_slave_1: entered promiscuous mode [ 278.226156][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.241804][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.799728][ T4627] Bluetooth: hci1: command tx timeout [ 278.866516][ T9218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.884140][ T9218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.898598][ T9218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.918689][ T9218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.068343][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.071754][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 279.090732][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.106710][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.113879][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.147454][ T946] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.154681][ T946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.438385][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.561757][ T9218] veth0_vlan: entered promiscuous mode [ 279.574367][ T9218] veth1_vlan: entered promiscuous mode [ 279.623555][ T9218] veth0_macvtap: entered promiscuous mode [ 279.632728][ T9218] veth1_macvtap: entered promiscuous mode [ 279.648243][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.658841][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.669075][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.679901][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.691942][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.703273][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.713911][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.723831][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.734358][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.745505][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.755786][ T9218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.765339][ T9218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.774511][ T9218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.783574][ T9218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.812232][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 279.837031][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 280.078459][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 280.091876][ T9376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.974'. [ 280.128393][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 280.138256][ T9378] netlink: 108 bytes leftover after parsing attributes in process `syz.4.974'. [ 280.151521][ T9381] netlink: 14 bytes leftover after parsing attributes in process `syz.0.976'. [ 280.167987][ T9381] bridge0: port 1(team0) entered disabled state [ 280.185125][ T9381] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 280.223448][ T946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.244942][ T946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.296785][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.309261][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.456086][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 280.483236][ T9396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.497860][ T9396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.644984][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.981'. [ 281.330609][ T9440] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 281.338115][ T9440] macsec1: entered promiscuous mode [ 281.344400][ T9440] macsec1: entered allmulticast mode [ 281.349860][ T9440] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 281.358967][ T9440] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 281.366476][ T9440] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 281.550778][ T9447] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 281.882294][ T9469] netlink: 'syz.0.1000': attribute type 7 has an invalid length. [ 282.104031][ T9487] netlink: 'syz.3.1003': attribute type 8 has an invalid length. [ 282.343021][ T8165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.171850][ T9512] netlink: 'syz.0.1010': attribute type 16 has an invalid length. [ 283.383391][ T9526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.395902][ T8165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.413821][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.423447][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.435132][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.443515][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.451425][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.458695][ T9526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.469053][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.563501][ T8165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.604310][ T9524] lo speed is unknown, defaulting to 1000 [ 283.679181][ T8165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.744465][ T9530] macsec1: entered promiscuous mode [ 283.759029][ T9530] macvlan0: entered promiscuous mode [ 283.764866][ T9530] macsec1: entered allmulticast mode [ 283.770514][ T9530] macvlan0: entered allmulticast mode [ 283.776044][ T9530] veth1_vlan: entered allmulticast mode [ 283.784909][ T9530] macvlan0: left allmulticast mode [ 283.790989][ T9530] veth1_vlan: left allmulticast mode [ 283.796545][ T9530] macvlan0: left promiscuous mode [ 283.963685][ T8165] bridge_slave_1: left allmulticast mode [ 283.979649][ T8165] bridge_slave_1: left promiscuous mode [ 284.001296][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.022803][ T8165] bridge_slave_0: left allmulticast mode [ 284.028513][ T8165] bridge_slave_0: left promiscuous mode [ 284.035173][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.492075][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.503717][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.517626][ T8165] bond0 (unregistering): Released all slaves [ 284.544236][ T9556] tc_dump_action: action bad kind [ 284.578013][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 284.781909][ T9573] Unsupported ieee802154 address type: 0 [ 284.952962][ T9579] ipt_rpfilter: unknown options [ 284.981877][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.996062][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.006978][ T9524] bridge_slave_0: entered allmulticast mode [ 285.014818][ T9524] bridge_slave_0: entered promiscuous mode [ 285.031873][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.039606][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.046925][ T9524] bridge_slave_1: entered allmulticast mode [ 285.055050][ T9524] bridge_slave_1: entered promiscuous mode [ 285.065887][ T9592] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 285.121774][ T9584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.209116][ T8165] hsr_slave_0: left promiscuous mode [ 285.224961][ T8165] hsr_slave_1: left promiscuous mode [ 285.232688][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.240593][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.248596][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.256253][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.276037][ T8165] veth1_macvtap: left promiscuous mode [ 285.283321][ T8165] veth0_macvtap: left promiscuous mode [ 285.289013][ T8165] veth1_vlan: left promiscuous mode [ 285.294563][ T8165] veth0_vlan: left promiscuous mode [ 285.530002][ T5247] Bluetooth: hci1: command tx timeout [ 285.756882][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 285.803278][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 286.250157][ T9596] IPv6: sit1: Disabled Multicast RS [ 286.279431][ T9584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.374542][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.397149][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.447432][ T9584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.448892][ T9606] __nla_validate_parse: 9 callbacks suppressed [ 286.448996][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 286.569029][ T9610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.587322][ T9610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.694633][ T9584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.784674][ T9524] team0: Port device team_slave_0 added [ 286.823907][ T9524] team0: Port device team_slave_1 added [ 286.895531][ T9617] netlink: 'syz.2.1043': attribute type 21 has an invalid length. [ 286.920574][ T9617] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1043'. [ 286.936465][ T9618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1043'. [ 286.948027][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.963337][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.997126][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.025051][ T9584] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.045509][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.060506][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.109470][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.137086][ T9584] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.210225][ T4627] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 287.218815][ T4627] Bluetooth: hci0: command 0x0401 tx timeout [ 287.255301][ T9584] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.271145][ T9584] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.599502][ T5247] Bluetooth: hci1: command tx timeout [ 289.680095][ T5247] Bluetooth: hci1: command tx timeout [ 291.759389][ T5247] Bluetooth: hci1: command tx timeout [ 305.525468][ T9629] lo speed is unknown, defaulting to 1000 [ 309.525777][ T4627] Bluetooth: hci0: command 0x0401 tx timeout [ 317.545385][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.559390][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.599504][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 317.605571][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 334.927046][ T4627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.937966][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.945178][ T4627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.953414][ T4627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.982655][ T4627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.989527][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.000575][ T4627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.011435][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.020747][ T4627] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.027856][ T4627] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.035215][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.054179][ T4627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.247927][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.295181][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.305105][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.313846][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.351645][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.364847][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.376025][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.393204][ T9524] hsr_slave_0: entered promiscuous mode [ 335.406930][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.432111][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.442681][ T9524] hsr_slave_1: entered promiscuous mode [ 335.442992][ T4627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.476344][ T4627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.478943][ T9638] lo speed is unknown, defaulting to 1000 [ 335.490931][ T4627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.579901][ T9636] lo speed is unknown, defaulting to 1000 [ 335.660301][ T9640] lo speed is unknown, defaulting to 1000 [ 335.669133][ T9642] lo speed is unknown, defaulting to 1000 [ 335.891538][ T3005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.983464][ T3005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.100575][ T9636] chnl_net:caif_netlink_parms(): no params data found [ 336.150243][ T3005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.275579][ T3005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.289269][ T9640] chnl_net:caif_netlink_parms(): no params data found [ 336.369623][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.376850][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.384335][ T9636] bridge_slave_0: entered allmulticast mode [ 336.394838][ T9636] bridge_slave_0: entered promiscuous mode [ 336.406251][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.413752][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.421154][ T9636] bridge_slave_1: entered allmulticast mode [ 336.427776][ T9636] bridge_slave_1: entered promiscuous mode [ 336.472733][ T9638] chnl_net:caif_netlink_parms(): no params data found [ 336.537892][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.547706][ T9642] chnl_net:caif_netlink_parms(): no params data found [ 336.566870][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.656116][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.663381][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.670675][ T9640] bridge_slave_0: entered allmulticast mode [ 336.677255][ T9640] bridge_slave_0: entered promiscuous mode [ 336.685130][ T9524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.730583][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.738320][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.746001][ T9640] bridge_slave_1: entered allmulticast mode [ 336.752746][ T9640] bridge_slave_1: entered promiscuous mode [ 336.769674][ T9524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.781555][ T9524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.828639][ T9636] team0: Port device team_slave_0 added [ 336.856345][ T9524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.884513][ T9638] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.891747][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.898943][ T9638] bridge_slave_0: entered allmulticast mode [ 336.905870][ T9638] bridge_slave_0: entered promiscuous mode [ 336.916351][ T9636] team0: Port device team_slave_1 added [ 336.927539][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.939068][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.982302][ T3005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.007749][ T9638] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.015102][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.022447][ T9638] bridge_slave_1: entered allmulticast mode [ 337.029066][ T9638] bridge_slave_1: entered promiscuous mode [ 337.099232][ T3005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.119998][ T5247] Bluetooth: hci6: command tx timeout [ 337.127378][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.134949][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.142346][ T9642] bridge_slave_0: entered allmulticast mode [ 337.149424][ T9642] bridge_slave_0: entered promiscuous mode [ 337.157146][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.164663][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.191776][ T9636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.202422][ T5247] Bluetooth: hci2: command tx timeout [ 337.224423][ T9638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.237909][ T9640] team0: Port device team_slave_0 added [ 337.257550][ T3005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.271531][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.278675][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.286315][ T9642] bridge_slave_1: entered allmulticast mode [ 337.293542][ T9642] bridge_slave_1: entered promiscuous mode [ 337.315179][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.322741][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.348979][ T9636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.371062][ T9638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.388189][ T9640] team0: Port device team_slave_1 added [ 337.434151][ T3005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.449892][ T5247] Bluetooth: hci7: command tx timeout [ 337.494176][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.507163][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.535150][ T9636] hsr_slave_0: entered promiscuous mode [ 337.541645][ T9636] hsr_slave_1: entered promiscuous mode [ 337.547863][ T9636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.555552][ T9636] Cannot create hsr debugfs directory [ 337.568438][ T9638] team0: Port device team_slave_0 added [ 337.582025][ T9638] team0: Port device team_slave_1 added [ 337.588336][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.596106][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.599535][ T5247] Bluetooth: hci0: command tx timeout [ 337.630054][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.681735][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.688732][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.715361][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.784038][ T9642] team0: Port device team_slave_0 added [ 337.791636][ T9642] team0: Port device team_slave_1 added [ 337.824473][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.831828][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.865864][ T9638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.889251][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.896488][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.922758][ T9642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.945551][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.952746][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.979610][ T9638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.018545][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.026147][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.052256][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.096989][ T9640] hsr_slave_0: entered promiscuous mode [ 338.103685][ T9640] hsr_slave_1: entered promiscuous mode [ 338.110283][ T9640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.118129][ T9640] Cannot create hsr debugfs directory [ 338.209033][ T9638] hsr_slave_0: entered promiscuous mode [ 338.215672][ T9638] hsr_slave_1: entered promiscuous mode [ 338.226788][ T9638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.234544][ T9638] Cannot create hsr debugfs directory [ 338.257583][ T3005] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.347250][ T3005] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.368678][ T9642] hsr_slave_0: entered promiscuous mode [ 338.376243][ T9642] hsr_slave_1: entered promiscuous mode [ 338.385652][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.393393][ T9642] Cannot create hsr debugfs directory [ 338.423269][ T9636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.461228][ T3005] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.527947][ T9636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.556060][ T3005] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.614341][ T9636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.677549][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.734639][ T9636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.814186][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.865392][ T3005] bridge_slave_1: left allmulticast mode [ 338.871303][ T3005] bridge_slave_1: left promiscuous mode [ 338.877042][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.886882][ T3005] bridge_slave_0: left allmulticast mode [ 338.893989][ T3005] bridge_slave_0: left promiscuous mode [ 338.900986][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.915761][ T3005] team0: left allmulticast mode [ 338.921431][ T3005] team_slave_0: left allmulticast mode [ 338.927164][ T3005] team_slave_1: left allmulticast mode [ 338.932884][ T3005] team0: left promiscuous mode [ 338.937766][ T3005] team_slave_0: left promiscuous mode [ 338.943724][ T3005] team_slave_1: left promiscuous mode [ 338.949248][ T3005] bridge0: port 3(team0) entered disabled state [ 338.957133][ T3005] bridge_slave_1: left allmulticast mode [ 338.964349][ T3005] bridge_slave_1: left promiscuous mode [ 338.970306][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.978511][ T3005] bridge_slave_0: left allmulticast mode [ 338.984442][ T3005] bridge_slave_0: left promiscuous mode [ 338.991424][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.004748][ T3005] team0: left allmulticast mode [ 339.009802][ T3005] team0: left promiscuous mode [ 339.014715][ T3005] bridge0: port 1(team0) entered disabled state [ 339.205934][ T5247] Bluetooth: hci6: command tx timeout [ 339.285729][ T5247] Bluetooth: hci2: command tx timeout [ 339.523987][ T5247] Bluetooth: hci7: command tx timeout [ 339.683991][ T5247] Bluetooth: hci0: command tx timeout [ 340.334142][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.346876][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.356993][ T3005] bond0 (unregistering): Released all slaves [ 340.496706][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.507429][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.521921][ T3005] bond0 (unregistering): Released all slaves [ 340.634272][ T3005] bond0 (unregistering): Released all slaves [ 340.746191][ T3005] bond0 (unregistering): Released all slaves [ 340.756948][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.764069][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.798423][ T946] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.805525][ T946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.907070][ T3005] tipc: Left network mode [ 340.996081][ T3005] tipc: Left network mode [ 341.171704][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.279610][ T5247] Bluetooth: hci6: command tx timeout [ 341.296953][ T9524] veth0_vlan: entered promiscuous mode [ 341.306691][ T9524] veth1_vlan: entered promiscuous mode [ 341.369732][ T5247] Bluetooth: hci2: command tx timeout [ 341.424184][ T9524] veth0_macvtap: entered promiscuous mode [ 341.438878][ T9524] veth1_macvtap: entered promiscuous mode [ 341.478931][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.489691][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.500064][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.510707][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.522790][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.535367][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.546001][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.556031][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.566577][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.577528][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.599755][ T5247] Bluetooth: hci7: command tx timeout [ 341.624096][ T9524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.635937][ T9524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.644818][ T9524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.654309][ T9524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.744499][ T9640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.754186][ T9640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.759709][ T5247] Bluetooth: hci0: command tx timeout [ 341.806092][ T9640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.848112][ T9640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.934832][ T3005] hsr_slave_0: left promiscuous mode [ 341.943626][ T3005] hsr_slave_1: left promiscuous mode [ 341.957509][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.965438][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.973683][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.981620][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.995621][ T3005] hsr_slave_0: left promiscuous mode [ 342.004155][ T3005] hsr_slave_1: left promiscuous mode [ 342.010433][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.017865][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.025651][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.033239][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.048480][ T3005] hsr_slave_0: left promiscuous mode [ 342.054674][ T3005] hsr_slave_1: left promiscuous mode [ 342.067068][ T3005] hsr_slave_0: left promiscuous mode [ 342.075474][ T3005] hsr_slave_1: left promiscuous mode [ 342.122275][ T3005] veth1_macvtap: left promiscuous mode [ 342.127818][ T3005] veth0_macvtap: left promiscuous mode [ 342.133382][ T3005] veth1_vlan: left promiscuous mode [ 342.138612][ T3005] veth0_vlan: left promiscuous mode [ 342.145274][ T3005] veth1_macvtap: left promiscuous mode [ 342.150876][ T3005] veth0_macvtap: left promiscuous mode [ 342.156469][ T3005] veth1_vlan: left promiscuous mode [ 342.163847][ T3005] veth1_macvtap: left promiscuous mode [ 342.170199][ T3005] veth0_macvtap: left promiscuous mode [ 342.175759][ T3005] veth1_vlan: left promiscuous mode [ 342.181403][ T3005] veth0_vlan: left promiscuous mode [ 342.187709][ T3005] veth1_macvtap: left promiscuous mode [ 342.193285][ T3005] veth0_macvtap: left promiscuous mode [ 342.198797][ T3005] veth1_vlan: left promiscuous mode [ 342.204552][ T3005] veth0_vlan: left promiscuous mode [ 342.832469][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 342.874904][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 343.359604][ T5247] Bluetooth: hci6: command tx timeout [ 343.439512][ T5247] Bluetooth: hci2: command tx timeout [ 343.539766][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 343.581066][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 343.680079][ T5247] Bluetooth: hci7: command tx timeout [ 343.850407][ T5247] Bluetooth: hci0: command tx timeout [ 344.760364][ T4627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.783175][ T4627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.802293][ T4627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.821998][ T4627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.832764][ T4627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.847016][ T4627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.906042][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.961209][ T9638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.979089][ T9638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.988699][ T9638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.052687][ T9638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.076378][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.106186][ T9673] chnl_net:caif_netlink_parms(): no params data found [ 346.135630][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.142801][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.184904][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.192083][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.208426][ T9636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.249818][ T9636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.258624][ T9636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.322310][ T9636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.416886][ T9673] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.424403][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.438333][ T9673] bridge_slave_0: entered allmulticast mode [ 346.450681][ T9673] bridge_slave_0: entered promiscuous mode [ 346.458765][ T9673] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.466126][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.474551][ T9673] bridge_slave_1: entered allmulticast mode [ 346.482336][ T9673] bridge_slave_1: entered promiscuous mode [ 346.496961][ T9642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.542439][ T9642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.582130][ T9673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.599675][ T9673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.608795][ T9642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.629188][ T9642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.723948][ T9673] team0: Port device team_slave_0 added [ 346.783629][ T9673] team0: Port device team_slave_1 added [ 346.887208][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.890159][ T5247] Bluetooth: hci3: command tx timeout [ 346.907135][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.944092][ T9673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.961463][ T9673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.968451][ T9673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.994871][ T9673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.077411][ T9673] hsr_slave_0: entered promiscuous mode [ 347.084214][ T9673] hsr_slave_1: entered promiscuous mode [ 347.093268][ T9673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.101205][ T9673] Cannot create hsr debugfs directory [ 347.145407][ T9638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.214103][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.236072][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.261688][ T946] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.268764][ T946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.322932][ T9673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.342414][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.362609][ T946] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.369766][ T946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.395907][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.444811][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.451945][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.493682][ T9673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.511886][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.518996][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.574682][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.613979][ T9673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.650929][ T9640] veth0_vlan: entered promiscuous mode [ 347.674025][ T9673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.706841][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.734176][ T9640] veth1_vlan: entered promiscuous mode [ 347.760527][ T946] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.767649][ T946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.821496][ T946] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.828639][ T946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.848313][ T6873] bridge_slave_1: left allmulticast mode [ 347.860394][ T6873] bridge_slave_1: left promiscuous mode [ 347.866137][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.875775][ T6873] bridge_slave_0: left allmulticast mode [ 347.889105][ T6873] bridge_slave_0: left promiscuous mode [ 347.896011][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.196697][ T6873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.208992][ T6873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.219523][ T6873] bond0 (unregistering): Released all slaves [ 348.331332][ T9640] veth0_macvtap: entered promiscuous mode [ 348.413760][ T9640] veth1_macvtap: entered promiscuous mode [ 348.434031][ T9638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.442076][ T9673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 348.465704][ T6873] hsr_slave_0: left promiscuous mode [ 348.473037][ T6873] hsr_slave_1: left promiscuous mode [ 348.479093][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.496804][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.504916][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.513830][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.529547][ T6873] veth1_macvtap: left promiscuous mode [ 348.535114][ T6873] veth0_macvtap: left promiscuous mode [ 348.540744][ T6873] veth1_vlan: left promiscuous mode [ 348.545984][ T6873] veth0_vlan: left promiscuous mode [ 348.956325][ T6873] team0 (unregistering): Port device team_slave_1 removed [ 348.969652][ T5247] Bluetooth: hci3: command tx timeout [ 348.999642][ T6873] team0 (unregistering): Port device team_slave_0 removed [ 349.371899][ T9673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.381848][ T9673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.400458][ T9673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.431827][ T9642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.470792][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.493018][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.514495][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.555762][ T9640] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.579176][ T9640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.588382][ T9640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.598266][ T9640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.795609][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.807601][ T9636] veth0_vlan: entered promiscuous mode [ 349.822725][ T9638] veth0_vlan: entered promiscuous mode [ 349.850240][ T9638] veth1_vlan: entered promiscuous mode [ 349.857227][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.866916][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.888755][ T9642] veth0_vlan: entered promiscuous mode [ 349.910090][ T9636] veth1_vlan: entered promiscuous mode [ 349.943455][ T6874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.953110][ T6874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.962829][ T9642] veth1_vlan: entered promiscuous mode [ 349.982429][ T9638] veth0_macvtap: entered promiscuous mode [ 350.002380][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.027531][ T9638] veth1_macvtap: entered promiscuous mode [ 350.052857][ T9636] veth0_macvtap: entered promiscuous mode [ 350.078562][ T9642] veth0_macvtap: entered promiscuous mode [ 350.103539][ T9636] veth1_macvtap: entered promiscuous mode [ 350.115990][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.127040][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.137968][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.162089][ T9673] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.175776][ T9642] veth1_macvtap: entered promiscuous mode [ 350.188914][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.200295][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.217708][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.219862][ T9706] x_tables: duplicate underflow at hook 1 [ 350.244803][ T9638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.254430][ T9638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.267966][ T9638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.276758][ T9638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.302549][ T946] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.309732][ T946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.356157][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.367467][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.383764][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.394917][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.407156][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.423405][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.430585][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.448291][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.464662][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.476559][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.493654][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.504053][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.514970][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.526364][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.547108][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.566751][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.579064][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.590979][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.602000][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.612700][ T9642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.622105][ T9642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.631091][ T9642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.640895][ T9642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.661727][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.677686][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.688241][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.699071][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.709010][ T9636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.721562][ T9636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.732692][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.757359][ T9636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.769739][ T9636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.778472][ T9636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.787366][ T9636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.820368][ T6874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.858927][ T6874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.921020][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.945913][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.997821][ T6873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.016746][ T6873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.040049][ T5247] Bluetooth: hci3: command tx timeout [ 351.066021][ T6874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.095496][ T6874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.148373][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.165887][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.179992][ T8165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.189059][ T8165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.383026][ T9673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.484772][ T9730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1047'. [ 351.514540][ T9733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1047'. [ 351.550288][ T9731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.585123][ T9673] veth0_vlan: entered promiscuous mode [ 351.639130][ T9673] veth1_vlan: entered promiscuous mode [ 351.711025][ T9673] veth0_macvtap: entered promiscuous mode [ 351.731708][ T9743] bridge0: port 3(bond0) entered blocking state [ 351.738095][ T9743] bridge0: port 3(bond0) entered disabled state [ 351.746378][ T9743] bond0: entered allmulticast mode [ 351.756022][ T9743] bond_slave_0: entered allmulticast mode [ 351.776826][ T9743] bond_slave_1: entered allmulticast mode [ 351.789102][ T9743] bond0: entered promiscuous mode [ 351.802846][ T9743] bond_slave_0: entered promiscuous mode [ 351.808671][ T9743] bond_slave_1: entered promiscuous mode [ 351.816595][ T9743] bridge0: port 3(bond0) entered blocking state [ 351.823973][ T9743] bridge0: port 3(bond0) entered forwarding state [ 351.849457][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 351.950235][ T9673] veth1_macvtap: entered promiscuous mode [ 352.033419][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.069607][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.091745][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.123074][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.149002][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.175273][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.193852][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.219155][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.260888][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.293349][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.315332][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.335753][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.352410][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.365188][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.375898][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.401593][ T9673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.429386][ T9673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.454225][ T9673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.624991][ T9673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.649010][ T9673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.658534][ T9673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.684991][ T9673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.889603][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.996277][ T9778] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 353.130808][ T5247] Bluetooth: hci3: command tx timeout [ 353.339370][ T6874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.347214][ T6874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.581867][ T8165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.605403][ T8165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.616179][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.778331][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.084272][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.138743][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.201870][ T11] bridge_slave_1: left allmulticast mode [ 355.207769][ T11] bridge_slave_1: left promiscuous mode [ 355.213581][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.224271][ T11] bridge_slave_0: left allmulticast mode [ 355.230315][ T11] bridge_slave_0: left promiscuous mode [ 355.235967][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.658305][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.677370][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.691639][ T11] bond0 (unregistering): Released all slaves [ 355.828561][ T4627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.881721][ T4627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.892648][ T4627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.905406][ T4627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.914092][ T4627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.921883][ T4627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.121753][ T9877] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 356.170940][ T9877] bridge0: port 3(bond0) entered disabled state [ 356.177482][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.292954][ T9877] bridge0: port 3(bond0) entered blocking state [ 356.299426][ T9877] bridge0: port 3(bond0) entered forwarding state [ 356.306147][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.313337][ T9877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.472689][ T9877] bridge0: port 3(bond0) entered disabled state [ 356.479261][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.079733][ T4627] Bluetooth: hci1: command tx timeout [ 360.159663][ T4627] Bluetooth: hci1: command tx timeout [ 362.239682][ T4627] Bluetooth: hci1: command tx timeout [ 364.319569][ T4627] Bluetooth: hci1: command tx timeout [ 368.386802][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.395981][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.409568][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.426036][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.433796][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 368.447068][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.515799][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.528995][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.537175][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.545324][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.555165][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 368.575919][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.668151][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.680356][ T5247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.698220][ T4627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 368.707742][ T4627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 368.716033][ T4627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 368.727914][ T4627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.736060][ T4627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 368.744795][ T4627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.752533][ T4627] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 368.761050][ T4627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.780321][ T4627] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 368.792985][ T4627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 370.559542][ T4627] Bluetooth: hci3: command tx timeout [ 370.639820][ T4627] Bluetooth: hci4: command tx timeout [ 370.799557][ T4627] Bluetooth: hci5: command tx timeout [ 370.879529][ T4627] Bluetooth: hci8: command tx timeout [ 372.639534][ T4627] Bluetooth: hci3: command tx timeout [ 372.719754][ T4627] Bluetooth: hci4: command tx timeout [ 372.879537][ T4627] Bluetooth: hci5: command tx timeout [ 372.959525][ T4627] Bluetooth: hci8: command tx timeout [ 374.719588][ T4627] Bluetooth: hci3: command tx timeout [ 374.799771][ T4627] Bluetooth: hci4: command tx timeout [ 374.959471][ T4627] Bluetooth: hci5: command tx timeout [ 375.039536][ T4627] Bluetooth: hci8: command tx timeout [ 376.799674][ T4627] Bluetooth: hci3: command tx timeout [ 376.879965][ T4627] Bluetooth: hci4: command tx timeout [ 377.041681][ T4627] Bluetooth: hci5: command tx timeout [ 377.119477][ T4627] Bluetooth: hci8: command tx timeout [ 378.962337][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.968792][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.637303][ T9883] syzkaller1: entered promiscuous mode [ 401.649000][ T9883] syzkaller1: entered allmulticast mode [ 402.282446][ T9905] netlink: 'syz.0.1103': attribute type 10 has an invalid length. [ 402.301304][ T9905] hsr0: entered promiscuous mode [ 402.355453][ T9905] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.370820][ T9905] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 402.392099][ T9905] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 402.409358][ T9905] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 402.432385][ T9903] sit0: entered promiscuous mode [ 402.457213][ T9903] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1103'. [ 420.056419][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.085128][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.112814][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.160062][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.194447][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 420.212358][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.319563][ T5247] Bluetooth: hci0: command tx timeout [ 424.399659][ T5247] Bluetooth: hci0: command tx timeout [ 426.479497][ T5247] Bluetooth: hci0: command tx timeout [ 428.559526][ T5247] Bluetooth: hci0: command tx timeout [ 429.415558][ T4627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.427470][ T4627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.435716][ T4627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.461519][ T4627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.469199][ T4627] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 429.476610][ T4627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.570131][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.579751][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.590064][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.599541][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.609694][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 429.617907][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.650222][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 429.661514][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 429.669639][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 429.677522][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 429.685315][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 429.699719][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 429.728104][ T4627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 429.738433][ T4627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 429.746850][ T4627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 429.760826][ T4627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 429.768506][ T4627] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 429.776032][ T4627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 431.519496][ T4627] Bluetooth: hci2: command tx timeout [ 431.679510][ T4627] Bluetooth: hci6: command tx timeout [ 431.759502][ T4627] Bluetooth: hci7: command tx timeout [ 431.839595][ T4627] Bluetooth: hci9: command tx timeout [ 433.605051][ T4627] Bluetooth: hci2: command tx timeout [ 433.760442][ T4627] Bluetooth: hci6: command tx timeout [ 433.842036][ T4627] Bluetooth: hci7: command tx timeout [ 433.919565][ T4627] Bluetooth: hci9: command tx timeout [ 435.679609][ T4627] Bluetooth: hci2: command tx timeout [ 435.839503][ T4627] Bluetooth: hci6: command tx timeout [ 435.919520][ T4627] Bluetooth: hci7: command tx timeout [ 435.999634][ T4627] Bluetooth: hci9: command tx timeout [ 437.759514][ T4627] Bluetooth: hci2: command tx timeout [ 437.919737][ T4627] Bluetooth: hci6: command tx timeout [ 437.999490][ T4627] Bluetooth: hci7: command tx timeout [ 438.079518][ T4627] Bluetooth: hci9: command tx timeout [ 440.401636][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.407994][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 478.325301][ T4627] Bluetooth: hci1: command 0x0406 tx timeout [ 480.682756][ T4627] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 480.710675][ T4627] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 480.730660][ T4627] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 480.777913][ T4627] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 480.808335][ T4627] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 480.831820][ T4627] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 482.959689][ T5247] Bluetooth: hci10: command tx timeout [ 485.039727][ T5247] Bluetooth: hci10: command tx timeout [ 487.119851][ T5247] Bluetooth: hci10: command tx timeout [ 489.199855][ T5247] Bluetooth: hci10: command tx timeout [ 490.201219][ T4627] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 490.225268][ T4627] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 490.233948][ T4627] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 490.244206][ T4627] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 490.252058][ T4627] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 490.259591][ T4627] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 490.326743][ T5247] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 490.338360][ T5247] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 490.350512][ T5247] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 490.369388][ T5247] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 490.380312][ T5247] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 490.387781][ T5247] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 490.411356][ T5247] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 490.433453][ T5239] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 490.442682][ T5239] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 490.452011][ T5239] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 490.460259][ T5239] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 490.467729][ T5239] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 490.570671][ T4627] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 490.589517][ T4627] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 490.597954][ T4627] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 490.606220][ T4627] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 490.620855][ T4627] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 490.628312][ T4627] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 492.319589][ T9948] Bluetooth: hci11: command tx timeout [ 492.479627][ T9948] Bluetooth: hci12: command tx timeout [ 492.559703][ T9948] Bluetooth: hci13: command tx timeout [ 492.719665][ T9948] Bluetooth: hci14: command tx timeout [ 493.704558][ T9948] Bluetooth: hci3: command 0x0406 tx timeout [ 493.714250][ T9948] Bluetooth: hci4: command 0x0406 tx timeout [ 493.724974][ T9948] Bluetooth: hci5: command 0x0406 tx timeout [ 493.731352][ T9948] Bluetooth: hci8: command 0x0406 tx timeout [ 494.399535][ T4627] Bluetooth: hci11: command tx timeout [ 494.567515][ T4627] Bluetooth: hci12: command tx timeout [ 494.639502][ T4627] Bluetooth: hci13: command tx timeout [ 494.799639][ T4627] Bluetooth: hci14: command tx timeout [ 496.479482][ T4627] Bluetooth: hci11: command tx timeout [ 496.647369][ T4627] Bluetooth: hci12: command tx timeout [ 496.721749][ T4627] Bluetooth: hci13: command tx timeout [ 496.879910][ T4627] Bluetooth: hci14: command tx timeout [ 498.559481][ T4627] Bluetooth: hci11: command tx timeout [ 498.719480][ T4627] Bluetooth: hci12: command tx timeout [ 498.799534][ T4627] Bluetooth: hci13: command tx timeout [ 498.959590][ T4627] Bluetooth: hci14: command tx timeout [ 501.847118][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.853632][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.350345][ T5239] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 542.369169][ T5239] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 542.387211][ T5239] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 542.442759][ T5239] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 542.473508][ T5239] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 542.495044][ T5239] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 544.639603][ T4627] Bluetooth: hci15: command tx timeout [ 544.891557][ T5247] Bluetooth: hci0: command 0x0406 tx timeout [ 546.959571][ T5239] Bluetooth: hci15: command tx timeout [ 549.039549][ T5239] Bluetooth: hci15: command tx timeout [ 551.001587][ T4627] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 551.011383][ T4627] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 551.029782][ T4627] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 551.041091][ T4627] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 551.059864][ T4627] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 551.069185][ T4627] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 551.098341][ T5239] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 551.109991][ T5239] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 551.119608][ T5239] Bluetooth: hci15: command tx timeout [ 551.125345][ T5239] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 551.134692][ T5239] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 551.142602][ T5239] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 551.150703][ T5239] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 551.217037][ T5239] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 551.227405][ T5239] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 551.237798][ T5239] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 551.245989][ T5239] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 551.255110][ T5239] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 551.262685][ T5239] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 551.322956][ T4627] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 551.332783][ T4627] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 551.343348][ T4627] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 551.351490][ T4627] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 551.360754][ T4627] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 551.368794][ T4627] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 553.119753][ T5239] Bluetooth: hci16: command tx timeout [ 553.199560][ T5239] Bluetooth: hci17: command tx timeout [ 553.279701][ T5239] Bluetooth: hci18: command tx timeout [ 553.439616][ T5239] Bluetooth: hci19: command tx timeout [ 555.138172][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 555.146289][ T9949] Bluetooth: hci9: command 0x0406 tx timeout [ 555.166667][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 555.175750][ T5239] Bluetooth: hci7: command 0x0406 tx timeout [ 555.199786][ T55] Bluetooth: hci16: command tx timeout [ 555.279580][ T9948] Bluetooth: hci17: command tx timeout [ 555.359560][ T9948] Bluetooth: hci18: command tx timeout [ 555.519531][ T9948] Bluetooth: hci19: command tx timeout [ 557.279902][ T9948] Bluetooth: hci16: command tx timeout [ 557.359501][ T9948] Bluetooth: hci17: command tx timeout [ 557.439477][ T9948] Bluetooth: hci18: command tx timeout [ 557.599510][ T9948] Bluetooth: hci19: command tx timeout [ 559.359716][ T9948] Bluetooth: hci16: command tx timeout [ 559.439586][ T9948] Bluetooth: hci17: command tx timeout [ 559.519481][ T9948] Bluetooth: hci18: command tx timeout [ 559.679600][ T9948] Bluetooth: hci19: command tx timeout [ 563.282438][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.288777][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.921715][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 563.932850][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 563.943035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.955182][ T30] task:kworker/u8:0 state:D stack:19736 pid:11 tgid:11 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 563.968494][ T30] Workqueue: netns cleanup_net [ 563.977105][ T30] Call Trace: [ 563.995902][ T30] [ 563.998899][ T30] __schedule+0x1895/0x4b30 [ 564.019419][ T30] ? __pfx___schedule+0x10/0x10 [ 564.024345][ T30] ? __pfx_lock_release+0x10/0x10 [ 564.045320][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 564.058193][ T30] ? kthread_data+0x52/0xd0 [ 564.134885][ T30] ? schedule+0x90/0x320 [ 564.154173][ T30] ? wq_worker_sleeping+0x66/0x240 [ 564.184603][ T30] ? schedule+0x90/0x320 [ 564.188918][ T30] schedule+0x14b/0x320 [ 564.253067][ T30] schedule_preempt_disabled+0x13/0x30 [ 564.258604][ T30] __mutex_lock+0x6a7/0xd70 [ 564.290552][ T30] ? __mutex_lock+0x52a/0xd70 [ 564.295301][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 564.334897][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 564.349543][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 564.355522][ T30] ? rcu_is_watching+0x15/0xb0 [ 564.395640][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 564.419458][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 564.429629][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 564.435774][ T30] hwsim_exit_net+0x5c1/0x670 [ 564.465695][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 564.475655][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 564.499566][ T30] cleanup_net+0x802/0xcc0 [ 564.504066][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 564.509048][ T30] ? process_scheduled_works+0x976/0x1850 [ 564.532832][ T30] process_scheduled_works+0xa63/0x1850 [ 564.538490][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.572829][ T30] ? assign_work+0x364/0x3d0 [ 564.581639][ T30] worker_thread+0x870/0xd30 [ 564.586311][ T30] ? __kthread_parkme+0x169/0x1d0 [ 564.609444][ T30] ? __pfx_worker_thread+0x10/0x10 [ 564.614629][ T30] kthread+0x2f0/0x390 [ 564.618726][ T30] ? __pfx_worker_thread+0x10/0x10 [ 564.655060][ T30] ? __pfx_kthread+0x10/0x10 [ 564.659797][ T30] ret_from_fork+0x4b/0x80 [ 564.664254][ T30] ? __pfx_kthread+0x10/0x10 [ 564.668870][ T30] ret_from_fork_asm+0x1a/0x30 [ 564.692536][ T30] [ 564.695730][ T30] INFO: task kworker/0:2:937 blocked for more than 144 seconds. [ 564.709065][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 564.716845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.725722][ T30] task:kworker/0:2 state:D stack:22968 pid:937 tgid:937 ppid:2 flags:0x00004000 [ 564.741608][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 564.748704][ T30] Call Trace: [ 564.755098][ T30] [ 564.758077][ T30] __schedule+0x1895/0x4b30 [ 564.766040][ T30] ? schedule+0x90/0x320 [ 564.772692][ T30] ? __pfx___schedule+0x10/0x10 [ 564.777581][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 564.787794][ T30] ? __pfx_lock_release+0x10/0x10 [ 564.795529][ T30] ? kick_pool+0x1bd/0x620 [ 564.807325][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 564.812837][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 564.818083][ T30] ? schedule+0x90/0x320 [ 564.828019][ T30] schedule+0x14b/0x320 [ 564.832354][ T30] schedule_preempt_disabled+0x13/0x30 [ 564.837890][ T30] __mutex_lock+0x6a7/0xd70 [ 564.851328][ T30] ? __mutex_lock+0x52a/0xd70 [ 564.856072][ T30] ? reg_check_chans_work+0x99/0xfd0 [ 564.865257][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 564.872869][ T30] ? process_scheduled_works+0x976/0x1850 [ 564.878639][ T30] reg_check_chans_work+0x99/0xfd0 [ 564.889484][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 564.894575][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 564.906061][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 564.911947][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 564.918338][ T30] ? process_scheduled_works+0x976/0x1850 [ 564.929965][ T30] process_scheduled_works+0xa63/0x1850 [ 564.935607][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 564.946290][ T30] ? assign_work+0x364/0x3d0 [ 564.952191][ T30] worker_thread+0x870/0xd30 [ 564.956836][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 564.967368][ T30] ? __kthread_parkme+0x169/0x1d0 [ 564.974272][ T30] ? __pfx_worker_thread+0x10/0x10 [ 564.984015][ T30] kthread+0x2f0/0x390 [ 564.989056][ T30] ? __pfx_worker_thread+0x10/0x10 [ 564.995429][ T30] ? __pfx_kthread+0x10/0x10 [ 565.004574][ T30] ret_from_fork+0x4b/0x80 [ 565.009045][ T30] ? __pfx_kthread+0x10/0x10 [ 565.015256][ T30] ret_from_fork_asm+0x1a/0x30 [ 565.023558][ T30] [ 565.026685][ T30] INFO: task kworker/u8:6:1826 blocked for more than 144 seconds. [ 565.036884][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 565.049380][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.058089][ T30] task:kworker/u8:6 state:D stack:21264 pid:1826 tgid:1826 ppid:2 flags:0x00004000 [ 565.073674][ T30] Workqueue: events_unbound linkwatch_event [ 565.081263][ T30] Call Trace: [ 565.084571][ T30] [ 565.087528][ T30] __schedule+0x1895/0x4b30 [ 565.097356][ T30] ? __pfx___schedule+0x10/0x10 [ 565.103718][ T30] ? __pfx_lock_release+0x10/0x10 [ 565.108802][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 565.118865][ T30] ? kthread_data+0x52/0xd0 [ 565.124745][ T30] ? schedule+0x90/0x320 [ 565.129049][ T30] ? wq_worker_sleeping+0x66/0x240 [ 565.138736][ T30] ? schedule+0x90/0x320 [ 565.144232][ T30] schedule+0x14b/0x320 [ 565.148426][ T30] schedule_preempt_disabled+0x13/0x30 [ 565.158496][ T30] __mutex_lock+0x6a7/0xd70 [ 565.164294][ T30] ? __mutex_lock+0x52a/0xd70 [ 565.169013][ T30] ? linkwatch_event+0xe/0x60 [ 565.178330][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 565.184663][ T30] ? process_scheduled_works+0x976/0x1850 [ 565.192590][ T30] linkwatch_event+0xe/0x60 [ 565.197156][ T30] process_scheduled_works+0xa63/0x1850 [ 565.209277][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.215386][ T30] ? assign_work+0x364/0x3d0 [ 565.225802][ T30] worker_thread+0x870/0xd30 [ 565.230560][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 565.236497][ T30] ? __kthread_parkme+0x169/0x1d0 [ 565.241705][ T30] ? __pfx_worker_thread+0x10/0x10 [ 565.246859][ T30] kthread+0x2f0/0x390 [ 565.256763][ T30] ? __pfx_worker_thread+0x10/0x10 [ 565.261973][ T30] ? __pfx_kthread+0x10/0x10 [ 565.266605][ T30] ret_from_fork+0x4b/0x80 [ 565.276776][ T30] ? __pfx_kthread+0x10/0x10 [ 565.295006][ T30] ret_from_fork_asm+0x1a/0x30 [ 565.300644][ T30] [ 565.303777][ T30] INFO: task syz-executor:9868 blocked for more than 144 seconds. [ 565.317455][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 565.325174][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.339630][ T30] task:syz-executor state:D stack:21728 pid:9868 tgid:9868 ppid:1 flags:0x00004004 [ 565.354506][ T30] Call Trace: [ 565.357828][ T30] [ 565.361975][ T30] __schedule+0x1895/0x4b30 [ 565.366538][ T30] ? __pfx___schedule+0x10/0x10 [ 565.375929][ T30] ? __pfx_lock_release+0x10/0x10 [ 565.382199][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 565.387716][ T30] ? schedule+0x90/0x320 [ 565.396542][ T30] schedule+0x14b/0x320 [ 565.401466][ T30] schedule_preempt_disabled+0x13/0x30 [ 565.406963][ T30] __mutex_lock+0x6a7/0xd70 [ 565.417980][ T30] ? __mutex_lock+0x52a/0xd70 [ 565.423021][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 565.428171][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 565.438897][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 565.443927][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 565.449073][ T30] ? __lock_acquire+0x1384/0x2050 [ 565.459890][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 565.469140][ T30] netlink_rcv_skb+0x1e3/0x430 [ 565.478644][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 565.485591][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.495502][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.502874][ T30] netlink_unicast+0x7f6/0x990 [ 565.507714][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 565.517991][ T30] ? __virt_addr_valid+0x183/0x530 [ 565.524852][ T30] ? __check_object_size+0x48e/0x900 [ 565.534714][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 565.540777][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.546120][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 565.555743][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.562279][ T30] __sock_sendmsg+0x221/0x270 [ 565.567006][ T30] __sys_sendto+0x39b/0x4f0 [ 565.576059][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 565.582355][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.587598][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 565.598267][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 565.607385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 565.617234][ T30] __x64_sys_sendto+0xde/0x100 [ 565.624526][ T30] do_syscall_64+0xf3/0x230 [ 565.629083][ T30] ? clear_bhb_loop+0x35/0x90 [ 565.636523][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.645894][ T30] RIP: 0033:0x7f32b8b7fe8c [ 565.652715][ T30] RSP: 002b:00007ffd31b51d20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 565.664605][ T30] RAX: ffffffffffffffda RBX: 00007f32b9864620 RCX: 00007f32b8b7fe8c [ 565.674942][ T30] RDX: 0000000000000038 RSI: 00007f32b9864670 RDI: 0000000000000003 [ 565.686446][ T30] RBP: 0000000000000000 R08: 00007ffd31b51d74 R09: 000000000000000c [ 565.696882][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 565.709078][ T30] R13: 0000000000000000 R14: 00007f32b9864670 R15: 0000000000000000 [ 565.719264][ T30] [ 565.726613][ T30] INFO: task syz.2.1101:9896 blocked for more than 145 seconds. [ 565.744301][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 565.753225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.766558][ T30] task:syz.2.1101 state:D stack:23808 pid:9896 tgid:9896 ppid:9640 flags:0x00004006 [ 565.778029][ T30] Call Trace: [ 565.785883][ T30] [ 565.788853][ T30] __schedule+0x1895/0x4b30 [ 565.794604][ T30] ? __pfx___schedule+0x10/0x10 [ 565.804057][ T30] ? __pfx_lock_release+0x10/0x10 [ 565.811083][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 565.816603][ T30] ? schedule+0x90/0x320 [ 565.825687][ T30] schedule+0x14b/0x320 [ 565.831136][ T30] schedule_preempt_disabled+0x13/0x30 [ 565.836638][ T30] __mutex_lock+0x6a7/0xd70 [ 565.849836][ T30] ? __mutex_lock+0x52a/0xd70 [ 565.854580][ T30] ? tun_chr_close+0x3b/0x1b0 [ 565.859293][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 565.869042][ T30] ? __pfx_call_rcu+0x10/0x10 [ 565.873810][ T30] tun_chr_close+0x3b/0x1b0 [ 565.878348][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 565.889194][ T30] __fput+0x23f/0x880 [ 565.893290][ T30] task_work_run+0x24f/0x310 [ 565.897912][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 565.909501][ T30] ? __pfx_task_work_run+0x10/0x10 [ 565.914676][ T30] ? do_exit+0xa2a/0x28e0 [ 565.919035][ T30] ? kmem_cache_free+0x1a2/0x420 [ 565.931293][ T30] ? do_exit+0xa2a/0x28e0 [ 565.935692][ T30] do_exit+0xa2f/0x28e0 [ 565.943557][ T30] ? __pfx_do_exit+0x10/0x10 [ 565.948208][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 565.955988][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 565.965889][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 565.974589][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 565.983296][ T30] do_group_exit+0x207/0x2c0 [ 565.987937][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.995702][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 566.004602][ T30] get_signal+0x16a3/0x1740 [ 566.009170][ T30] ? __pfx_get_signal+0x10/0x10 [ 566.017202][ T30] arch_do_signal_or_restart+0x96/0x860 [ 566.026583][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 566.035135][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 566.044643][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 566.052772][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 566.058365][ T30] do_syscall_64+0x100/0x230 [ 566.066693][ T30] ? clear_bhb_loop+0x35/0x90 [ 566.071997][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.077942][ T30] RIP: 0033:0x7f052237dff9 [ 566.089969][ T30] RSP: 002b:00007ffe1ea46198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 566.098452][ T30] RAX: 0000000000000000 RBX: 00007f0522537a80 RCX: 00007f052237dff9 [ 566.111232][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 566.123588][ T30] RBP: 00007f0522537a80 R08: 0000000000000006 R09: 00007ffe1ea4648f [ 566.134205][ T30] R10: 00000000005efc30 R11: 0000000000000246 R12: 000000000005755d [ 566.145717][ T30] R13: 00007ffe1ea462a0 R14: 0000000000000032 R15: ffffffffffffffff [ 566.156193][ T30] [ 566.159369][ T30] INFO: task syz.0.1103:9903 blocked for more than 145 seconds. [ 566.167035][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 566.181370][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.193614][ T30] task:syz.0.1103 state:D stack:21856 pid:9903 tgid:9902 ppid:9636 flags:0x00004002 [ 566.206200][ T30] Call Trace: [ 566.212950][ T30] [ 566.216752][ T30] __schedule+0x1895/0x4b30 [ 566.223634][ T30] ? __pfx___schedule+0x10/0x10 [ 566.228535][ T30] ? __pfx_lock_release+0x10/0x10 [ 566.237527][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 566.246648][ T30] ? schedule+0x90/0x320 [ 566.254424][ T30] schedule+0x14b/0x320 [ 566.258632][ T30] schedule_preempt_disabled+0x13/0x30 [ 566.266454][ T30] __mutex_lock+0x6a7/0xd70 [ 566.274418][ T30] ? __mutex_lock+0x52a/0xd70 [ 566.279141][ T30] ? tun_chr_close+0x3b/0x1b0 [ 566.286087][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 566.291739][ T30] ? __pfx_call_rcu+0x10/0x10 [ 566.302067][ T30] tun_chr_close+0x3b/0x1b0 [ 566.306628][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 566.314181][ T30] __fput+0x23f/0x880 [ 566.319059][ T30] task_work_run+0x24f/0x310 [ 566.335309][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 566.343072][ T30] ? __pfx_task_work_run+0x10/0x10 [ 566.348229][ T30] ? do_exit+0xa2a/0x28e0 [ 566.356135][ T30] ? kmem_cache_free+0x1a2/0x420 [ 566.363554][ T30] ? do_exit+0xa2a/0x28e0 [ 566.367942][ T30] do_exit+0xa2f/0x28e0 [ 566.375689][ T30] ? __pfx_do_exit+0x10/0x10 [ 566.382775][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 566.388202][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 566.397758][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 566.406998][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 566.415634][ T30] do_group_exit+0x207/0x2c0 [ 566.423641][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.428899][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 566.437834][ T30] get_signal+0x16a3/0x1740 [ 566.444833][ T30] ? __pfx_get_signal+0x10/0x10 [ 566.453172][ T30] arch_do_signal_or_restart+0x96/0x860 [ 566.458774][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 566.467350][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 566.476818][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 566.485066][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 566.494125][ T30] do_syscall_64+0x100/0x230 [ 566.498767][ T30] ? clear_bhb_loop+0x35/0x90 [ 566.506052][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.515803][ T30] RIP: 0033:0x7f5df457dff9 [ 566.522631][ T30] RSP: 002b:00007f5df5380038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 566.534436][ T30] RAX: 0000000000000039 RBX: 00007f5df4735f80 RCX: 00007f5df457dff9 [ 566.546009][ T30] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000009 [ 566.555283][ T30] RBP: 00007f5df45f0296 R08: 0000000000000000 R09: 0000000000000000 [ 566.567881][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.577128][ T30] R13: 0000000000000000 R14: 00007f5df4735f80 R15: 00007fff3c03d358 [ 566.589375][ T30] [ 566.592500][ T30] INFO: task syz-executor:9910 blocked for more than 146 seconds. [ 566.605533][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 566.613290][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.628851][ T30] task:syz-executor state:D stack:24128 pid:9910 tgid:9910 ppid:1 flags:0x00000004 [ 566.639150][ T30] Call Trace: [ 566.649249][ T30] [ 566.652295][ T30] __schedule+0x1895/0x4b30 [ 566.656856][ T30] ? __pfx___schedule+0x10/0x10 [ 566.667385][ T30] ? __pfx_lock_release+0x10/0x10 [ 566.672511][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 566.678015][ T30] ? schedule+0x90/0x320 [ 566.682452][ T30] schedule+0x14b/0x320 [ 566.686650][ T30] schedule_preempt_disabled+0x13/0x30 [ 566.697815][ T30] __mutex_lock+0x6a7/0xd70 [ 566.702438][ T30] ? __mutex_lock+0x52a/0xd70 [ 566.707155][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 566.717963][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 566.723122][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 566.728990][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 566.739450][ T30] ? __lock_acquire+0x1384/0x2050 [ 566.744538][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.755953][ T30] netlink_rcv_skb+0x1e3/0x430 [ 566.760815][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 566.766314][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.777389][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.782736][ T30] netlink_unicast+0x7f6/0x990 [ 566.787550][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 566.793035][ T30] ? __virt_addr_valid+0x183/0x530 [ 566.798181][ T30] ? __check_object_size+0x48e/0x900 [ 566.809030][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 566.814004][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.825237][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 566.831102][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.836445][ T30] __sock_sendmsg+0x221/0x270 [ 566.847049][ T30] __sys_sendto+0x39b/0x4f0 [ 566.852271][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 566.857372][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 566.868010][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 566.875621][ T30] __x64_sys_sendto+0xde/0x100 [ 566.888899][ T30] do_syscall_64+0xf3/0x230 [ 566.893595][ T30] ? clear_bhb_loop+0x35/0x90 [ 566.898313][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.910010][ T30] RIP: 0033:0x7ff81657fe8c [ 566.914491][ T30] RSP: 002b:00007fff58660a20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.927502][ T30] RAX: ffffffffffffffda RBX: 00007ff817264620 RCX: 00007ff81657fe8c [ 566.937669][ T30] RDX: 000000000000002c RSI: 00007ff817264670 RDI: 0000000000000003 [ 566.952159][ T30] RBP: 0000000000000000 R08: 00007fff58660a74 R09: 000000000000000c [ 566.964536][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 566.976096][ T30] R13: 0000000000000000 R14: 00007ff817264670 R15: 0000000000000000 [ 566.986465][ T30] [ 566.992927][ T30] INFO: task syz-executor:9912 blocked for more than 146 seconds. [ 567.003083][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 567.014367][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.025398][ T30] task:syz-executor state:D stack:24128 pid:9912 tgid:9912 ppid:1 flags:0x00000004 [ 567.039451][ T30] Call Trace: [ 567.042871][ T30] [ 567.045831][ T30] __schedule+0x1895/0x4b30 [ 567.055988][ T30] ? __pfx___schedule+0x10/0x10 [ 567.061401][ T30] ? __pfx_lock_release+0x10/0x10 [ 567.066476][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 567.077722][ T30] ? schedule+0x90/0x320 [ 567.082094][ T30] schedule+0x14b/0x320 [ 567.086282][ T30] schedule_preempt_disabled+0x13/0x30 [ 567.097437][ T30] __mutex_lock+0x6a7/0xd70 [ 567.102067][ T30] ? __mutex_lock+0x52a/0xd70 [ 567.106950][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 567.112250][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 567.117322][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 567.130794][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 567.135976][ T30] ? __lock_acquire+0x1384/0x2050 [ 567.147554][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.153454][ T30] netlink_rcv_skb+0x1e3/0x430 [ 567.158264][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.169805][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.175167][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.185072][ T30] netlink_unicast+0x7f6/0x990 [ 567.189930][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 567.195770][ T30] ? __virt_addr_valid+0x183/0x530 [ 567.206568][ T30] ? __check_object_size+0x48e/0x900 [ 567.211977][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 567.216794][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.222285][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 567.227260][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.238381][ T30] __sock_sendmsg+0x221/0x270 [ 567.243961][ T30] __sys_sendto+0x39b/0x4f0 [ 567.248512][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 567.260063][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.266110][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.277104][ T30] __x64_sys_sendto+0xde/0x100 [ 567.284753][ T30] do_syscall_64+0xf3/0x230 [ 567.294114][ T30] ? clear_bhb_loop+0x35/0x90 [ 567.298852][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.306032][ T30] RIP: 0033:0x7efdadb7fe8c [ 567.315056][ T30] RSP: 002b:00007ffe8a5bde10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 567.324773][ T30] RAX: ffffffffffffffda RBX: 00007efdae864620 RCX: 00007efdadb7fe8c [ 567.337444][ T30] RDX: 000000000000002c RSI: 00007efdae864670 RDI: 0000000000000003 [ 567.347449][ T30] RBP: 0000000000000000 R08: 00007ffe8a5bde64 R09: 000000000000000c [ 567.372872][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 567.382114][ T30] R13: 0000000000000000 R14: 00007efdae864670 R15: 0000000000000000 [ 567.395198][ T30] [ 567.398269][ T30] INFO: task syz-executor:9914 blocked for more than 146 seconds. [ 567.407333][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 567.419355][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.428559][ T30] task:syz-executor state:D stack:24128 pid:9914 tgid:9914 ppid:1 flags:0x00004004 [ 567.443384][ T30] Call Trace: [ 567.447556][ T30] [ 567.451838][ T30] __schedule+0x1895/0x4b30 [ 567.456409][ T30] ? __pfx___schedule+0x10/0x10 [ 567.467314][ T30] ? __pfx_lock_release+0x10/0x10 [ 567.473643][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 567.479160][ T30] ? schedule+0x90/0x320 [ 567.487995][ T30] schedule+0x14b/0x320 [ 567.493534][ T30] schedule_preempt_disabled+0x13/0x30 [ 567.499037][ T30] __mutex_lock+0x6a7/0xd70 [ 567.508611][ T30] ? __mutex_lock+0x52a/0xd70 [ 567.514568][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 567.524475][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 567.530791][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 567.535775][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 567.545441][ T30] ? __lock_acquire+0x1384/0x2050 [ 567.552576][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.558108][ T30] netlink_rcv_skb+0x1e3/0x430 [ 567.567732][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.574469][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.584359][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.590840][ T30] netlink_unicast+0x7f6/0x990 [ 567.595658][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 567.605663][ T30] ? __virt_addr_valid+0x183/0x530 [ 567.612474][ T30] ? __check_object_size+0x48e/0x900 [ 567.617817][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 567.627173][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.633715][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 567.638699][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.648533][ T30] __sock_sendmsg+0x221/0x270 [ 567.655274][ T30] __sys_sendto+0x39b/0x4f0 [ 567.661749][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 567.666845][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 567.677035][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.685762][ T30] __x64_sys_sendto+0xde/0x100 [ 567.695103][ T30] do_syscall_64+0xf3/0x230 [ 567.700858][ T30] ? clear_bhb_loop+0x35/0x90 [ 567.705590][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.716216][ T30] RIP: 0033:0x7fbb3a97fe8c [ 567.720770][ T30] RSP: 002b:00007ffd184da610 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 567.729221][ T30] RAX: ffffffffffffffda RBX: 00007fbb3b664620 RCX: 00007fbb3a97fe8c [ 567.743298][ T30] RDX: 000000000000002c RSI: 00007fbb3b664670 RDI: 0000000000000003 [ 567.753308][ T30] RBP: 0000000000000000 R08: 00007ffd184da664 R09: 000000000000000c [ 567.767189][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 567.776730][ T30] R13: 0000000000000000 R14: 00007fbb3b664670 R15: 0000000000000000 [ 567.789348][ T30] [ 567.792418][ T30] INFO: task syz-executor:9915 blocked for more than 147 seconds. [ 567.805915][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 567.813660][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.822521][ T30] task:syz-executor state:D stack:24128 pid:9915 tgid:9915 ppid:1 flags:0x00004004 [ 567.838403][ T30] Call Trace: [ 567.842418][ T30] [ 567.845422][ T30] __schedule+0x1895/0x4b30 [ 567.854744][ T30] ? __pfx___schedule+0x10/0x10 [ 567.861416][ T30] ? __pfx_lock_release+0x10/0x10 [ 567.866801][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 567.875743][ T30] ? schedule+0x90/0x320 [ 567.882435][ T30] schedule+0x14b/0x320 [ 567.886643][ T30] schedule_preempt_disabled+0x13/0x30 [ 567.895671][ T30] __mutex_lock+0x6a7/0xd70 [ 567.902531][ T30] ? __mutex_lock+0x52a/0xd70 [ 567.907256][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 567.915827][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 567.929498][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 567.934523][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 567.945359][ T30] ? __lock_acquire+0x1384/0x2050 [ 567.950976][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.957406][ T30] netlink_rcv_skb+0x1e3/0x430 [ 567.967912][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.973841][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.979197][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.990169][ T30] netlink_unicast+0x7f6/0x990 [ 567.995003][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 568.009419][ T30] ? __virt_addr_valid+0x183/0x530 [ 568.014610][ T30] ? __check_object_size+0x48e/0x900 [ 568.024716][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 568.029884][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.035221][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 568.046034][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.051481][ T30] __sock_sendmsg+0x221/0x270 [ 568.056236][ T30] __sys_sendto+0x39b/0x4f0 [ 568.067601][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 568.073035][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.079075][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.091474][ T30] __x64_sys_sendto+0xde/0x100 [ 568.096299][ T30] do_syscall_64+0xf3/0x230 [ 568.104403][ T30] ? clear_bhb_loop+0x35/0x90 [ 568.109139][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.117479][ T30] RIP: 0033:0x7fed57b7fe8c [ 568.125418][ T30] RSP: 002b:00007ffcda35fde0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 568.136359][ T30] RAX: ffffffffffffffda RBX: 00007fed58864620 RCX: 00007fed57b7fe8c [ 568.147857][ T30] RDX: 000000000000002c RSI: 00007fed58864670 RDI: 0000000000000003 [ 568.158339][ T30] RBP: 0000000000000000 R08: 00007ffcda35fe34 R09: 000000000000000c [ 568.169359][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 568.186352][ T30] R13: 0000000000000000 R14: 00007fed58864670 R15: 0000000000000000 [ 568.194487][ T30] [ 568.197532][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 568.209374][ T30] INFO: task syz-executor:9919 blocked for more than 147 seconds. [ 568.217234][ T30] Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 568.230465][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.239236][ T30] task:syz-executor state:D stack:24128 pid:9919 tgid:9919 ppid:1 flags:0x00000004 [ 568.258395][ T30] Call Trace: [ 568.261792][ T30] [ 568.265586][ T30] __schedule+0x1895/0x4b30 [ 568.275780][ T30] ? __pfx___schedule+0x10/0x10 [ 568.281375][ T30] ? __pfx_lock_release+0x10/0x10 [ 568.286458][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 568.298077][ T30] ? schedule+0x90/0x320 [ 568.302570][ T30] schedule+0x14b/0x320 [ 568.306784][ T30] schedule_preempt_disabled+0x13/0x30 [ 568.312475][ T30] __mutex_lock+0x6a7/0xd70 [ 568.317022][ T30] ? __mutex_lock+0x52a/0xd70 [ 568.328983][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.334232][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 568.339359][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.344339][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 568.349657][ T30] ? __lock_acquire+0x1384/0x2050 [ 568.354723][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.365894][ T30] netlink_rcv_skb+0x1e3/0x430 [ 568.371665][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.377187][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.388556][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.393865][ T30] netlink_unicast+0x7f6/0x990 [ 568.398680][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 568.419441][ T30] ? __virt_addr_valid+0x183/0x530 [ 568.427810][ T30] ? __check_object_size+0x48e/0x900 [ 568.435536][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 568.443821][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.449171][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 568.456619][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.465501][ T30] __sock_sendmsg+0x221/0x270 [ 568.473411][ T30] __sys_sendto+0x39b/0x4f0 [ 568.477973][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 568.483926][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 568.497840][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.504283][ T30] ? exc_page_fault+0x590/0x8c0 [ 568.509173][ T30] __x64_sys_sendto+0xde/0x100 [ 568.519372][ T30] do_syscall_64+0xf3/0x230 [ 568.523935][ T30] ? clear_bhb_loop+0x35/0x90 [ 568.528778][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.540643][ T30] RIP: 0033:0x7f7c98b7fe8c [ 568.545134][ T30] RSP: 002b:00007ffe4e9fb530 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 568.558287][ T30] RAX: ffffffffffffffda RBX: 00007f7c99864620 RCX: 00007f7c98b7fe8c [ 568.567542][ T30] RDX: 0000000000000028 RSI: 00007f7c99864670 RDI: 0000000000000003 [ 568.579364][ T30] RBP: 0000000000000000 R08: 00007ffe4e9fb584 R09: 000000000000000c [ 568.593077][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 568.602339][ T30] R13: 0000000000000000 R14: 00007f7c99864670 R15: 0000000000000000 [ 568.614970][ T30] [ 568.618034][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 568.628376][ T30] [ 568.628376][ T30] Showing all locks held in the system: [ 568.639372][ T30] 4 locks held by kworker/u8:0/11: [ 568.644528][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 568.661100][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 568.676192][ T30] #2: ffffffff8fcc6210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 568.688395][ T30] #3: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 568.701891][ T30] 1 lock held by khungtaskd/30: [ 568.706787][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 568.719090][ T30] 3 locks held by kworker/0:2/937: [ 568.728639][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 568.747054][ T30] #1: ffffc90003b2fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 568.758350][ T30] #2: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 568.768175][ T30] 3 locks held by kworker/u8:6/1826: [ 568.780322][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 568.797254][ T30] #1: ffffc90004b9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 568.809674][ T30] #2: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 568.818752][ T30] 2 locks held by getty/4988: [ 568.828039][ T30] #0: ffff8880324d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 568.839129][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 568.855087][ T30] 3 locks held by kworker/1:3/5285: [ 568.860431][ T30] 1 lock held by syz-executor/9868: [ 568.865653][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.875296][ T30] 2 locks held by syz.4.1097/9883: [ 568.887391][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 568.896842][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 568.913867][ T30] 1 lock held by syz.2.1101/9896: [ 568.918949][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 568.928064][ T30] 1 lock held by syz.0.1103/9903: [ 568.933326][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 568.947920][ T30] 1 lock held by syz-executor/9910: [ 568.953214][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.969429][ T30] 1 lock held by syz-executor/9912: [ 568.974681][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 568.991002][ T30] 1 lock held by syz-executor/9914: [ 568.996295][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.011775][ T30] 1 lock held by syz-executor/9915: [ 569.017037][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.028920][ T30] 1 lock held by syz-executor/9919: [ 569.037547][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.055312][ T30] 1 lock held by syz-executor/9925: [ 569.060655][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.070277][ T30] 1 lock held by syz-executor/9927: [ 569.075583][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.091629][ T30] 1 lock held by syz-executor/9928: [ 569.097173][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.112897][ T30] 1 lock held by syz-executor/9930: [ 569.118148][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.128904][ T30] 1 lock held by syz-executor/9934: [ 569.138739][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.149484][ T30] 1 lock held by syz-executor/9940: [ 569.154715][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.168814][ T30] 1 lock held by syz-executor/9942: [ 569.175272][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.186211][ T30] 1 lock held by syz-executor/9943: [ 569.196782][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.208433][ T30] 1 lock held by syz-executor/9946: [ 569.219807][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.233956][ T30] 1 lock held by syz-executor/9951: [ 569.239202][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.249440][ T30] 1 lock held by syz-executor/9957: [ 569.254669][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.269206][ T30] 1 lock held by syz-executor/9958: [ 569.274544][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.288632][ T30] 1 lock held by syz-executor/9961: [ 569.296398][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.310026][ T30] 1 lock held by syz-executor/9963: [ 569.315360][ T30] #0: ffffffff8fcd2d88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 569.329373][ T30] [ 569.331747][ T30] ============================================= [ 569.331747][ T30] [ 569.345374][ T30] NMI backtrace for cpu 0 [ 569.349747][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 569.360277][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 569.370360][ T30] Call Trace: [ 569.373661][ T30] [ 569.376617][ T30] dump_stack_lvl+0x241/0x360 [ 569.381332][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.386561][ T30] ? __pfx__printk+0x10/0x10 [ 569.391198][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 569.396174][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 569.401667][ T30] ? _printk+0xd5/0x120 [ 569.405853][ T30] ? __pfx__printk+0x10/0x10 [ 569.410468][ T30] ? __wake_up_klogd+0xcc/0x110 [ 569.415348][ T30] ? __pfx__printk+0x10/0x10 [ 569.420011][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 569.425076][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 569.431128][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 569.437146][ T30] watchdog+0xff4/0x1040 [ 569.441424][ T30] ? watchdog+0x1ea/0x1040 [ 569.445880][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.450588][ T30] kthread+0x2f0/0x390 [ 569.454697][ T30] ? __pfx_watchdog+0x10/0x10 [ 569.459409][ T30] ? __pfx_kthread+0x10/0x10 [ 569.464033][ T30] ret_from_fork+0x4b/0x80 [ 569.468477][ T30] ? __pfx_kthread+0x10/0x10 [ 569.473096][ T30] ret_from_fork_asm+0x1a/0x30 [ 569.477908][ T30] [ 569.481663][ T30] Sending NMI from CPU 0 to CPUs 1: [ 569.486921][ C1] NMI backtrace for cpu 1 [ 569.486936][ C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:3 Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 569.486956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 569.486967][ C1] Workqueue: events nsim_dev_trap_report_work [ 569.486991][ C1] RIP: 0010:filter_irq_stacks+0x5d/0xa0 [ 569.487012][ C1] Code: c3 08 4d 39 fc 74 4f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 87 e5 7d 00 4b 8b 04 fe <48> 39 e8 72 0c 48 c7 c1 70 16 e0 8b 48 39 c8 72 11 4c 39 e8 72 bb [ 569.487025][ C1] RSP: 0018:ffffc90000a17c38 EFLAGS: 00000246 [ 569.487038][ C1] RAX: ffffffff872118fd RBX: ffffc90000a17d68 RCX: dffffc0000000000 [ 569.487051][ C1] RDX: 0000000000000820 RSI: 0000000000000019 RDI: ffffc90000a17cd0 [ 569.487062][ C1] RBP: ffffffff8be00230 R08: 000000000000001b R09: ffffc90000a17c30 [ 569.487073][ C1] R10: ffffc90000a17b90 R11: ffffffff8180a0e0 R12: 0000000000000019 [ 569.487085][ C1] R13: ffffffff8bd099c0 R14: ffffc90000a17cd0 R15: 0000000000000013 [ 569.487096][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 569.487110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.487121][ C1] CR2: 00007f05231ccf98 CR3: 000000000e734000 CR4: 00000000003526f0 [ 569.487136][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 569.487146][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 569.487156][ C1] Call Trace: [ 569.487161][ C1] [ 569.487168][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 569.487189][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 569.487211][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 569.487229][ C1] ? nmi_handle+0x2a/0x5a0 [ 569.487253][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 569.487271][ C1] ? nmi_handle+0x14f/0x5a0 [ 569.487286][ C1] ? nmi_handle+0x2a/0x5a0 [ 569.487302][ C1] ? filter_irq_stacks+0x5d/0xa0 [ 569.487318][ C1] ? default_do_nmi+0x63/0x160 [ 569.487339][ C1] ? exc_nmi+0x123/0x1f0 [ 569.487363][ C1] ? end_repeat_nmi+0xf/0x53 [ 569.487380][ C1] ? __lock_text_end+0x6/0x6 [ 569.487398][ C1] ? xen_error_entry+0x60/0x60 [ 569.487412][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 569.487430][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 569.487448][ C1] ? filter_irq_stacks+0x5d/0xa0 [ 569.487465][ C1] ? filter_irq_stacks+0x5d/0xa0 [ 569.487483][ C1] ? filter_irq_stacks+0x5d/0xa0 [ 569.487500][ C1] [ 569.487506][ C1] [ 569.487513][ C1] stack_depot_save_flags+0x29/0x830 [ 569.487537][ C1] kasan_save_track+0x51/0x80 [ 569.487552][ C1] ? kasan_save_track+0x3f/0x80 [ 569.487566][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 569.487581][ C1] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 569.487599][ C1] ? __alloc_skb+0x1c3/0x440 [ 569.487615][ C1] ? synproxy_send_client_synack+0x1ba/0xf30 [ 569.487635][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 569.487650][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 569.487663][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 569.487677][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 569.487691][ C1] ? nf_hook_slow+0xc3/0x220 [ 569.487709][ C1] ? NF_HOOK+0x29e/0x450 [ 569.487724][ C1] ? NF_HOOK+0x3a4/0x450 [ 569.487740][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 569.487757][ C1] ? process_backlog+0x662/0x15b0 [ 569.487775][ C1] ? __napi_poll+0xcb/0x490 [ 569.487791][ C1] ? net_rx_action+0x89b/0x1240 [ 569.487808][ C1] ? handle_softirqs+0x2c5/0x980 [ 569.487825][ C1] ? do_softirq+0x11b/0x1e0 [ 569.487842][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 569.487859][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 569.487875][ C1] ? process_scheduled_works+0xa63/0x1850 [ 569.487894][ C1] ? worker_thread+0x870/0xd30 [ 569.487911][ C1] ? kthread+0x2f0/0x390 [ 569.487924][ C1] ? ret_from_fork+0x4b/0x80 [ 569.487942][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 569.487977][ C1] __kasan_slab_alloc+0x66/0x80 [ 569.487992][ C1] ? __alloc_skb+0x1c3/0x440 [ 569.488007][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 569.488028][ C1] __alloc_skb+0x1c3/0x440 [ 569.488046][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 569.488066][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 569.488088][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 569.488103][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 569.488121][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 569.488142][ C1] ? synproxy_pernet+0x45/0x270 [ 569.488159][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 569.488177][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 569.488194][ C1] ? nf_ip_checksum+0x13a/0x500 [ 569.488211][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 569.488228][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 569.488243][ C1] ? validate_chain+0x11e/0x5920 [ 569.488262][ C1] ? __pfx_validate_chain+0x10/0x10 [ 569.488283][ C1] nft_do_chain+0x4ad/0x1da0 [ 569.488305][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 569.488319][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 569.488355][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 569.488374][ C1] nft_do_chain_inet+0x418/0x6b0 [ 569.488391][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 569.488405][ C1] ? ipt_do_table+0x312/0x1860 [ 569.488428][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 569.488442][ C1] nf_hook_slow+0xc3/0x220 [ 569.488461][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 569.488478][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 569.488495][ C1] NF_HOOK+0x29e/0x450 [ 569.488512][ C1] ? NF_HOOK+0x9a/0x450 [ 569.488528][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 569.488546][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 569.488566][ C1] ? ip_rcv_finish+0x406/0x560 [ 569.488583][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 569.488601][ C1] NF_HOOK+0x3a4/0x450 [ 569.488616][ C1] ? __lock_acquire+0x1384/0x2050 [ 569.488636][ C1] ? NF_HOOK+0x9a/0x450 [ 569.488653][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 569.488668][ C1] ? ip_rcv_core+0x801/0xd10 [ 569.488686][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 569.488706][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 569.488723][ C1] __netif_receive_skb+0x2bf/0x650 [ 569.488742][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 569.488761][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 569.488778][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.488798][ C1] ? __pfx_lock_release+0x10/0x10 [ 569.488817][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 569.488838][ C1] process_backlog+0x662/0x15b0 [ 569.488859][ C1] ? process_backlog+0x33b/0x15b0 [ 569.488881][ C1] ? __pfx_process_backlog+0x10/0x10 [ 569.488898][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.488919][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.488941][ C1] __napi_poll+0xcb/0x490 [ 569.488960][ C1] net_rx_action+0x89b/0x1240 [ 569.488990][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 569.489019][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.489043][ C1] handle_softirqs+0x2c5/0x980 [ 569.489064][ C1] ? do_softirq+0x11b/0x1e0 [ 569.489082][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 569.489104][ C1] do_softirq+0x11b/0x1e0 [ 569.489121][ C1] [ 569.489126][ C1] [ 569.489132][ C1] ? __pfx_do_softirq+0x10/0x10 [ 569.489149][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 569.489171][ C1] ? rcu_is_watching+0x15/0xb0 [ 569.489189][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 569.489207][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 569.489223][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 569.489241][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 569.489260][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 569.489279][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 569.489303][ C1] ? process_scheduled_works+0x976/0x1850 [ 569.489324][ C1] process_scheduled_works+0xa63/0x1850 [ 569.489357][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 569.489377][ C1] ? assign_work+0x364/0x3d0 [ 569.489397][ C1] worker_thread+0x870/0xd30 [ 569.489420][ C1] ? __kthread_parkme+0x169/0x1d0 [ 569.489440][ C1] ? __pfx_worker_thread+0x10/0x10 [ 569.489459][ C1] kthread+0x2f0/0x390 [ 569.489472][ C1] ? __pfx_worker_thread+0x10/0x10 [ 569.489488][ C1] ? __pfx_kthread+0x10/0x10 [ 569.489501][ C1] ret_from_fork+0x4b/0x80 [ 569.489520][ C1] ? __pfx_kthread+0x10/0x10 [ 569.489536][ C1] ret_from_fork_asm+0x1a/0x30 [ 569.489563][ C1] [ 570.323634][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 570.330543][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00527-gc531f2269a53 #0 [ 570.341070][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 570.351149][ T30] Call Trace: [ 570.354442][ T30] [ 570.357389][ T30] dump_stack_lvl+0x241/0x360 [ 570.362095][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.367328][ T30] ? __pfx__printk+0x10/0x10 [ 570.371950][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 570.377968][ T30] ? vscnprintf+0x5d/0x90 [ 570.382335][ T30] panic+0x349/0x880 [ 570.386253][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 570.392443][ T30] ? __pfx_panic+0x10/0x10 [ 570.396881][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 570.402283][ T30] ? __irq_work_queue_local+0x137/0x410 [ 570.407870][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 570.413277][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 570.419466][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 570.425657][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 570.431850][ T30] watchdog+0x1033/0x1040 [ 570.436218][ T30] ? watchdog+0x1ea/0x1040 [ 570.440673][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.445384][ T30] kthread+0x2f0/0x390 [ 570.449477][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.454188][ T30] ? __pfx_kthread+0x10/0x10 [ 570.458803][ T30] ret_from_fork+0x4b/0x80 [ 570.463253][ T30] ? __pfx_kthread+0x10/0x10 [ 570.467891][ T30] ret_from_fork_asm+0x1a/0x30 [ 570.472701][ T30] [ 570.476037][ T30] Kernel Offset: disabled [ 570.480359][ T30] Rebooting in 86400 seconds..