last executing test programs: 2m9.71472105s ago: executing program 3 (id=237): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 2m8.524561151s ago: executing program 2 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000feff07001e"], 0x2c}}, 0x0) 2m6.464906281s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000040)=0xdce9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$l2tp(r3, &(0x7f0000000040)=';', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c80378", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5000802110000010000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r8], 0x54}}, 0x0) 2m3.674296177s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000400000000005000000000800040001000000", 0x24) 1m47.844626166s ago: executing program 2 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000feff07001e"], 0x2c}}, 0x0) 1m46.697149452s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000040)=0xdce9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$l2tp(r3, &(0x7f0000000040)=';', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c80378", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5000802110000010000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r8], 0x54}}, 0x0) 1m46.349348389s ago: executing program 3 (id=237): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m45.101735352s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000400000000005000000000800040001000000", 0x24) 1m27.305226119s ago: executing program 2 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000feff07001e"], 0x2c}}, 0x0) 1m25.938437473s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000040)=0xdce9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$l2tp(r3, &(0x7f0000000040)=';', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c80378", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5000802110000010000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r8], 0x54}}, 0x0) 1m24.708771953s ago: executing program 3 (id=237): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m22.300150376s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000400000000005000000000800040001000000", 0x24) 1m7.641110978s ago: executing program 2 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000feff07001e"], 0x2c}}, 0x0) 1m5.991165477s ago: executing program 3 (id=237): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m3.28895366s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000040)=0xdce9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$l2tp(r3, &(0x7f0000000040)=';', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c80378", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5000802110000010000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r8], 0x54}}, 0x0) 1m1.395280035s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000400000000005000000000800040001000000", 0x24) 47.608561017s ago: executing program 2 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000feff07001e"], 0x2c}}, 0x0) 46.908598561s ago: executing program 3 (id=237): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 46.008473576s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000040)=0xdce9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$l2tp(r3, &(0x7f0000000040)=';', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c80378", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5000802110000010000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r8], 0x54}}, 0x0) 41.071286123s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000400000000005000000000800040001000000", 0x24) 27.798786514s ago: executing program 0 (id=771): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000073113000000000001800"/30], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000fbffffff00000700000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f200012801c000180090001006c617374000000000c00028008000140000000000800034000000110140000001000010000000000000000000384000ac904afad81544c3725ad826718ce192b63cb56"], 0xac}}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) listen(r0, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, r4, 0x37, 0x10, 0x4, @void, @value}, 0x20) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20088804, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x22020400) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x1ff, @empty, 0x9}}}, 0x3a) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 27.5567343s ago: executing program 0 (id=772): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000001800)=""/1, &(0x7f0000001840)=0x1) connect$bt_sco(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000150a030900b3affc5ddcc44600000000000000000000082000020a1586a950a7d039884c3050a4ee71fbea704f16e242773644bcfb803887deb8301e584d974a53600f96d4fc1d6cd4fec08efaa83e76243e56d71870d999978a067e93ee0f3d278ca89fb48f0b25fde86a438abecb06442e7ad52f72e3dffb222c1bb7192030d54dabbc"], 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004", @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000002140)=""/1, &(0x7f0000002180)=0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020646500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000920000008500000006000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000fedb64a91f5ab632816bad00b8a102840000002000128092cc08000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0) 27.530512329s ago: executing program 3 (id=237): syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x4000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 25.511158754s ago: executing program 0 (id=773): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e24, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r2, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000940)={0x0, 0x9}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000880)={r4, 0x4684, 0xc}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8004) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000900)) 25.504657616s ago: executing program 2 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000feff07001e"], 0x2c}}, 0x0) 24.709892747s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000040)=0xdce9, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$l2tp(r3, &(0x7f0000000040)=';', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c80378", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5000802110000010000"], 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r8], 0x54}}, 0x0) 22.778622813s ago: executing program 0 (id=774): socket$kcm(0x10, 0x7, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='alarmtimer_suspend\x00', r9, 0x0, 0xd}, 0x18) splice(r7, 0x0, r8, 0x0, 0x1, 0x5) r10 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 21.051046527s ago: executing program 4 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000400000000005000000000800040001000000", 0x24) 19.269327718s ago: executing program 0 (id=775): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}, {&(0x7f0000000600)=ANY=[], 0x4d8}, {&(0x7f0000004940)=ANY=[@ANYBLOB="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"], 0x1e38}], 0x3, 0x0, 0x0, 0x4008084}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000001800), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x400261f2, &(0x7f0000000340)) 15.255241572s ago: executing program 0 (id=776): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000004f80)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffc, @mcast1, 0x1}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x9c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @broadcast, @broadcast, @initial, {0x7, 0x4}}, 0xfffffffffffffff7, @default, 0x414, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0x3, {0x4, 0x3f, 0x1}}, @val={0x25, 0x3, {0x1, 0xb8, 0xff}}, @void, @val={0x3c, 0x4, {0x1, 0xd, 0x84}}, @val={0x2d, 0x1a, {0x1088, 0x3, 0x5, 0x0, {0x2, 0x6, 0x0, 0xa, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x600, 0x6}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 0s ago: executing program 32 (id=776): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000004f80)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffc, @mcast1, 0x1}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x9c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @broadcast, @broadcast, @initial, {0x7, 0x4}}, 0xfffffffffffffff7, @default, 0x414, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x6}, @val={0x5, 0x3, {0x4, 0x3f, 0x1}}, @val={0x25, 0x3, {0x1, 0xb8, 0xff}}, @void, @val={0x3c, 0x4, {0x1, 0xd, 0x84}}, @val={0x2d, 0x1a, {0x1088, 0x3, 0x5, 0x0, {0x2, 0x6, 0x0, 0xa, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x600, 0x6}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): active interface with an up link [ 390.111859][ T9708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.222499][ T9714] hsr_slave_0: entered promiscuous mode [ 390.229654][ T9714] hsr_slave_1: entered promiscuous mode [ 390.236207][ T9714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.243864][ T9714] Cannot create hsr debugfs directory [ 390.258864][ T9708] team0: Port device team_slave_0 added [ 390.272023][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 390.300982][ T9708] team0: Port device team_slave_1 added [ 390.449731][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.463484][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.499073][ T9708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.513723][ T9708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.528158][ T9708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.537216][ T9753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.699'. [ 390.561943][ T9708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.564884][ T55] Bluetooth: hci0: command tx timeout [ 390.625010][ T55] Bluetooth: hci2: command tx timeout [ 390.763157][ T9760] netlink: 88 bytes leftover after parsing attributes in process `syz.0.700'. [ 390.814110][ T6134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.962003][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'. [ 390.966732][ T6134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.993808][ T9708] hsr_slave_0: entered promiscuous mode [ 391.001475][ T9708] hsr_slave_1: entered promiscuous mode [ 391.008709][ T9708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.017089][ T9708] Cannot create hsr debugfs directory [ 391.120321][ T6134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.139823][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.150626][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.159654][ T9732] bridge_slave_0: entered allmulticast mode [ 391.171423][ T9732] bridge_slave_0: entered promiscuous mode [ 391.228258][ T6134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.242645][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.250289][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.258249][ T9732] bridge_slave_1: entered allmulticast mode [ 391.267287][ T9732] bridge_slave_1: entered promiscuous mode [ 391.317451][ T9698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.357405][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.392075][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 391.402936][ T9698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.424798][ T55] Bluetooth: hci3: command tx timeout [ 391.458730][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.501899][ T9698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.611517][ T9698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.636945][ T9732] team0: Port device team_slave_0 added [ 391.654085][ T9732] team0: Port device team_slave_1 added [ 391.664736][ T55] Bluetooth: hci1: command tx timeout [ 391.723497][ T9714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.834255][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.841394][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.871928][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.898005][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.907284][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.944993][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.960222][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 391.996760][ T9714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.052042][ T9777] netlink: 'syz.0.705': attribute type 15 has an invalid length. [ 392.072052][ T9777] netlink: 'syz.0.705': attribute type 3 has an invalid length. [ 392.081560][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.705'. [ 392.135741][ T9714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.212656][ T9732] hsr_slave_0: entered promiscuous mode [ 392.219931][ T9732] hsr_slave_1: entered promiscuous mode [ 392.229047][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.236752][ T9732] Cannot create hsr debugfs directory [ 392.257638][ T9714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.284255][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 392.425112][ T6134] bridge_slave_1: left allmulticast mode [ 392.430932][ T6134] bridge_slave_1: left promiscuous mode [ 392.441797][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.453124][ T6134] bridge_slave_0: left allmulticast mode [ 392.459276][ T6134] bridge_slave_0: left promiscuous mode [ 392.470269][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.485728][ T6134] bridge_slave_1: left allmulticast mode [ 392.491657][ T6134] bridge_slave_1: left promiscuous mode [ 392.498566][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.508051][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 392.526030][ T6134] bridge_slave_0: left allmulticast mode [ 392.527771][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 392.531914][ T6134] bridge_slave_0: left promiscuous mode [ 392.546895][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.710278][ T55] Bluetooth: hci2: command tx timeout [ 392.979160][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.990218][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.000919][ T6134] bond0 (unregistering): Released all slaves [ 393.340108][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.352035][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.362361][ T6134] bond0 (unregistering): Released all slaves [ 393.505785][ T55] Bluetooth: hci3: command tx timeout [ 393.812746][ T9714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.823756][ T9714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.866823][ T9714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.901209][ T9714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.971314][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.017553][ T6134] hsr_slave_0: left promiscuous mode [ 394.023480][ T6134] hsr_slave_1: left promiscuous mode [ 394.034176][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.041923][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.052742][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.074567][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.088222][ T6134] hsr_slave_0: left promiscuous mode [ 394.102523][ T6134] hsr_slave_1: left promiscuous mode [ 394.109418][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.117106][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.125732][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.133229][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.163234][ T6134] veth1_macvtap: left promiscuous mode [ 394.169175][ T6134] veth0_macvtap: left promiscuous mode [ 394.175879][ T6134] veth1_vlan: left promiscuous mode [ 394.181420][ T6134] veth0_vlan: left promiscuous mode [ 394.188274][ T6134] veth1_macvtap: left promiscuous mode [ 394.193907][ T6134] veth0_macvtap: left promiscuous mode [ 394.199698][ T6134] veth1_vlan: left promiscuous mode [ 394.205365][ T6134] veth0_vlan: left promiscuous mode [ 394.982603][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 395.029357][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 395.593672][ T5140] Bluetooth: hci3: command tx timeout [ 395.901861][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 395.946198][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 396.440581][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.540652][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.547873][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.632058][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.639357][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.020025][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.042078][ T9708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.138551][ T9708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.214574][ T9708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.243860][ T9708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.333057][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.352640][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 397.403869][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 397.486291][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 397.496045][ T9804] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 397.527846][ T9801] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 397.540922][ T9801] bond0 (unregistering): Released all slaves [ 397.577380][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.584627][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.598566][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.605898][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.752040][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.937540][ T9732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 398.033710][ T9732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 398.053907][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 398.074980][ T9732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 398.107089][ T9732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.163729][ T9708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.195921][ T9698] veth0_vlan: entered promiscuous mode [ 398.230515][ T9708] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.297105][ T9698] veth1_vlan: entered promiscuous mode [ 398.307171][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.314435][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.357010][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.364191][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.433166][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.500172][ T9708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.516331][ T9698] veth0_macvtap: entered promiscuous mode [ 398.537544][ T9698] veth1_macvtap: entered promiscuous mode [ 398.618933][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.677365][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.714694][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.728356][ T9698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.742645][ T9698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.752614][ T9698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.769718][ T9698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.803755][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.833513][ T9714] veth0_vlan: entered promiscuous mode [ 398.892171][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.899353][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.917957][ T9714] veth1_vlan: entered promiscuous mode [ 398.959342][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.966550][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.068281][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.081032][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.094285][ T9708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.173676][ T9714] veth0_macvtap: entered promiscuous mode [ 399.195913][ T9714] veth1_macvtap: entered promiscuous mode [ 399.207049][ T9732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.243223][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.266251][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.275135][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.310457][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.367548][ T9714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.404988][ T9714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.413849][ T9714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.454614][ T9714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.792363][ T9708] veth0_vlan: entered promiscuous mode [ 399.919615][ T6134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.248057][ T6134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.311628][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.470458][ T9708] veth1_vlan: entered promiscuous mode [ 400.529309][ T6134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.550975][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.572483][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.614038][ T6134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.690755][ T9708] veth0_macvtap: entered promiscuous mode [ 400.712448][ T9708] veth1_macvtap: entered promiscuous mode [ 400.742242][ T6126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.755883][ T6126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.803905][ T9708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.841090][ T9708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.937835][ T9708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.959988][ T9708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.970359][ T9708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.979301][ T9708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.056261][ T6134] bridge_slave_1: left allmulticast mode [ 401.062013][ T6134] bridge_slave_1: left promiscuous mode [ 401.068301][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.080234][ T6134] bridge_slave_0: left allmulticast mode [ 401.086571][ T6134] bridge_slave_0: left promiscuous mode [ 401.092353][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.512026][ T9847] netlink: 'syz.0.717': attribute type 4 has an invalid length. [ 401.534737][ T9847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.717'. [ 401.687205][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.700374][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.711415][ T6134] bond0 (unregistering): Released all slaves [ 401.977605][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.008801][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.020258][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.023517][ T9732] veth0_vlan: entered promiscuous mode [ 402.046850][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.055686][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.101163][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.122747][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.132319][ T9732] veth1_vlan: entered promiscuous mode [ 402.186343][ T6134] hsr_slave_0: left promiscuous mode [ 402.192414][ T6134] hsr_slave_1: left promiscuous mode [ 402.199623][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.210204][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.218429][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.226439][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.246955][ T6134] veth1_macvtap: left promiscuous mode [ 402.252566][ T6134] veth0_macvtap: left promiscuous mode [ 402.258297][ T6134] veth1_vlan: left promiscuous mode [ 402.263571][ T6134] veth0_vlan: left promiscuous mode [ 402.776058][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 402.863954][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 402.995453][ T9853] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 403.173045][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.183729][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.196032][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.211507][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 403.219910][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.600821][ T9853] bond0: entered promiscuous mode [ 403.607195][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.629119][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.637503][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.757433][ T9732] veth0_macvtap: entered promiscuous mode [ 403.827048][ T9732] veth1_macvtap: entered promiscuous mode [ 404.026212][ T9861] veth0_vlan: left allmulticast mode [ 404.034202][ T9861] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.043875][ T9861] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.052666][ T9861] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.061471][ T9861] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.153735][ T5140] Bluetooth: hci0: command tx timeout [ 404.230140][ T9861] bond0: left promiscuous mode [ 404.274024][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.419191][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.456629][ T9732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.482247][ T9732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.491287][ T9732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.501390][ T9732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.746888][ T6134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.817652][ T9849] chnl_net:caif_netlink_parms(): no params data found [ 404.878427][ T6134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.993994][ T6134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.012310][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.033846][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.124162][ T6134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.173409][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 405.191941][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.201800][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.242857][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.250369][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.257872][ T9849] bridge_slave_0: entered allmulticast mode [ 405.267083][ T9849] bridge_slave_0: entered promiscuous mode [ 405.278218][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.286271][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.293585][ T9849] bridge_slave_1: entered allmulticast mode [ 405.301732][ T9849] bridge_slave_1: entered promiscuous mode [ 405.344764][ T5140] Bluetooth: hci2: command tx timeout [ 405.368045][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.433742][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.580156][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.589198][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.598539][ T9857] bridge_slave_0: entered allmulticast mode [ 405.608030][ T9857] bridge_slave_0: entered promiscuous mode [ 405.617046][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.626116][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.633372][ T9857] bridge_slave_1: entered allmulticast mode [ 405.641125][ T9857] bridge_slave_1: entered promiscuous mode [ 405.679550][ T9849] team0: Port device team_slave_0 added [ 405.747900][ T9849] team0: Port device team_slave_1 added [ 405.788970][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.851772][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.975085][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.982109][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.015064][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.062886][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.084617][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.117160][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.197003][ T6134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.228018][ T5140] Bluetooth: hci0: command tx timeout [ 406.239147][ T9857] team0: Port device team_slave_0 added [ 406.297681][ T6134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.348377][ T9857] team0: Port device team_slave_1 added [ 406.452293][ T6134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.500533][ T9849] hsr_slave_0: entered promiscuous mode [ 406.512992][ T9849] hsr_slave_1: entered promiscuous mode [ 406.519699][ T9849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.534949][ T9849] Cannot create hsr debugfs directory [ 406.554308][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.557869][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.569156][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.570548][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.597183][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.610810][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.622825][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.642834][ T6134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.648699][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.696084][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.703074][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.731926][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.829383][ T9857] hsr_slave_0: entered promiscuous mode [ 406.837860][ T9857] hsr_slave_1: entered promiscuous mode [ 406.845591][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.855341][ T9857] Cannot create hsr debugfs directory [ 407.153329][ T6134] bridge_slave_1: left allmulticast mode [ 407.161252][ T6134] bridge_slave_1: left promiscuous mode [ 407.169308][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.180371][ T6134] bridge_slave_0: left allmulticast mode [ 407.190426][ T6134] bridge_slave_0: left promiscuous mode [ 407.197055][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.209481][ T6134] bridge_slave_1: left allmulticast mode [ 407.215710][ T6134] bridge_slave_1: left promiscuous mode [ 407.221491][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.230959][ T6134] bridge_slave_0: left allmulticast mode [ 407.237235][ T6134] bridge_slave_0: left promiscuous mode [ 407.242962][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.425358][ T5140] Bluetooth: hci2: command tx timeout [ 407.459725][ T9886] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 407.474472][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.721'. [ 407.907037][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.923644][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.941204][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.950726][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.960076][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.024909][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.035953][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.050877][ T6134] bond0 (unregistering): Released all slaves [ 408.305100][ T55] Bluetooth: hci0: command tx timeout [ 408.416909][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.431037][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.441282][ T6134] bond0 (unregistering): Released all slaves [ 408.705573][ T55] Bluetooth: hci1: command tx timeout [ 408.931237][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 409.247671][ T6134] hsr_slave_0: left promiscuous mode [ 409.255322][ T6134] hsr_slave_1: left promiscuous mode [ 409.261409][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.276470][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.294973][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.302625][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.317653][ T6134] hsr_slave_0: left promiscuous mode [ 409.323729][ T6134] hsr_slave_1: left promiscuous mode [ 409.330537][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.338425][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.348713][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.358581][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.389359][ T6134] veth1_macvtap: left promiscuous mode [ 409.395262][ T6134] veth0_macvtap: left promiscuous mode [ 409.400937][ T6134] veth1_vlan: left promiscuous mode [ 409.407045][ T6134] veth0_vlan: left promiscuous mode [ 409.415240][ T6134] veth1_macvtap: left promiscuous mode [ 409.420773][ T6134] veth0_macvtap: left promiscuous mode [ 409.426670][ T6134] veth1_vlan: left promiscuous mode [ 409.432052][ T6134] veth0_vlan: left promiscuous mode [ 409.504766][ T55] Bluetooth: hci2: command tx timeout [ 410.064896][ T55] Bluetooth: hci3: command tx timeout [ 410.115422][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 410.161330][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 410.396091][ T55] Bluetooth: hci0: command tx timeout [ 410.789060][ T55] Bluetooth: hci1: command tx timeout [ 411.069909][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 411.115163][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 411.572585][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.580775][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.585700][ T55] Bluetooth: hci2: command tx timeout [ 411.591220][ T9879] bridge_slave_0: entered allmulticast mode [ 411.601849][ T9879] bridge_slave_0: entered promiscuous mode [ 411.611013][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.618730][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.628561][ T9879] bridge_slave_1: entered allmulticast mode [ 411.643760][ T9879] bridge_slave_1: entered promiscuous mode [ 411.791263][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.866115][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.992932][ T9879] team0: Port device team_slave_0 added [ 412.000015][ T9897] chnl_net:caif_netlink_parms(): no params data found [ 412.035872][ T9879] team0: Port device team_slave_1 added [ 412.146135][ T55] Bluetooth: hci3: command tx timeout [ 412.222219][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.230533][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.257827][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.284698][ T9897] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.292002][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.299639][ T9897] bridge_slave_0: entered allmulticast mode [ 412.307919][ T9897] bridge_slave_0: entered promiscuous mode [ 412.316838][ T9897] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.324092][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.331664][ T9897] bridge_slave_1: entered allmulticast mode [ 412.340012][ T9897] bridge_slave_1: entered promiscuous mode [ 412.348829][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.356034][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.382988][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.547785][ T9897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.563356][ T9879] hsr_slave_0: entered promiscuous mode [ 412.571062][ T9879] hsr_slave_1: entered promiscuous mode [ 412.577317][ T9879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.587639][ T9879] Cannot create hsr debugfs directory [ 412.628887][ T9897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.748849][ T9897] team0: Port device team_slave_0 added [ 412.779716][ T9857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.815749][ T9857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.865860][ T5140] Bluetooth: hci1: command tx timeout [ 412.900498][ T9897] team0: Port device team_slave_1 added [ 412.932038][ T9857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.953880][ T9857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.073747][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.101162][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.136943][ T9897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.171950][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.181586][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.211551][ T9897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.343635][ T9849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.407370][ T9849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.438460][ T9849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.499261][ T9897] hsr_slave_0: entered promiscuous mode [ 413.511464][ T9897] hsr_slave_1: entered promiscuous mode [ 413.518019][ T9897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.526329][ T9897] Cannot create hsr debugfs directory [ 413.536863][ T9849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.569790][ T6134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.720279][ T6134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.753002][ T9946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 413.825438][ T6134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.886537][ T9951] netlink: 'syz.0.732': attribute type 9 has an invalid length. [ 413.899573][ T9951] netlink: 'syz.0.732': attribute type 6 has an invalid length. [ 413.907975][ T9951] netlink: 'syz.0.732': attribute type 7 has an invalid length. [ 413.917398][ T9951] netlink: 'syz.0.732': attribute type 8 has an invalid length. [ 414.104603][ T6134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.212108][ T9955] netlink: 84 bytes leftover after parsing attributes in process `syz.0.732'. [ 414.225012][ T5140] Bluetooth: hci3: command tx timeout [ 414.247473][ T9955] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.265737][ T9955] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.281998][ T9955] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.290589][ T9955] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.306437][ T9955] netlink: 84 bytes leftover after parsing attributes in process `syz.0.732'. [ 414.490902][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.634022][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.699170][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.750415][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.757705][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.796370][ T6134] bridge_slave_1: left allmulticast mode [ 414.802078][ T6134] bridge_slave_1: left promiscuous mode [ 414.821183][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.833054][ T6134] bridge_slave_0: left allmulticast mode [ 414.841609][ T6134] bridge_slave_0: left promiscuous mode [ 414.847748][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.954693][ T5140] Bluetooth: hci1: command tx timeout [ 415.065550][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 415.075345][ T9959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 415.084262][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 415.093573][ T9959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 415.370705][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.381522][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.392596][ T6134] bond0 (unregistering): Released all slaves [ 415.419377][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.426616][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.491681][ T9879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.531789][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.563930][ T9879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.617934][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.625177][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.635614][ T9879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 415.646925][ T9879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 415.703252][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.710469][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.842009][ T9857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.882331][ T6134] hsr_slave_0: left promiscuous mode [ 415.892551][ T6134] hsr_slave_1: left promiscuous mode [ 415.899554][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.907512][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.916019][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.923572][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.946084][ T6134] veth1_macvtap: left promiscuous mode [ 415.951683][ T6134] veth0_macvtap: left promiscuous mode [ 415.957563][ T6134] veth1_vlan: left promiscuous mode [ 415.963353][ T6134] veth0_vlan: left promiscuous mode [ 416.310020][ T5140] Bluetooth: hci3: command tx timeout [ 416.493607][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 416.541061][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 417.478631][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.529042][ T9897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 417.556834][ T9897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 417.591744][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.616534][ T9897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.649729][ T9897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.682075][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.689290][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.719167][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.728862][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.736041][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.759609][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.942539][ T9857] veth0_vlan: entered promiscuous mode [ 417.968348][ T9849] veth0_vlan: entered promiscuous mode [ 417.997350][ T9897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.009350][ T9857] veth1_vlan: entered promiscuous mode [ 418.050099][ T9849] veth1_vlan: entered promiscuous mode [ 418.081502][ T9897] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.138075][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.145355][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.193009][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.200387][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.249710][ T9849] veth0_macvtap: entered promiscuous mode [ 418.288027][ T9857] veth0_macvtap: entered promiscuous mode [ 418.324005][ T9849] veth1_macvtap: entered promiscuous mode [ 418.356635][ T9981] netlink: 76 bytes leftover after parsing attributes in process `syz.0.735'. [ 418.367938][ T9981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.735'. [ 418.368615][ T9857] veth1_macvtap: entered promiscuous mode [ 418.397832][ T9981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.409545][ T9981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.421383][ T9981] hsr0: entered promiscuous mode [ 418.426675][ T9981] hsr0: entered allmulticast mode [ 418.431851][ T9981] hsr_slave_0: entered allmulticast mode [ 418.435902][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 418.446924][ T9981] hsr_slave_1: entered allmulticast mode [ 418.477070][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.523475][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.549870][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.576393][ T9984] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 418.578173][ T9849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.601160][ T9849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.611159][ T9849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.628138][ T9849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.671048][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.717136][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.758089][ T9857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.769194][ T9857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.778367][ T9857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.790308][ T9857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.852879][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 418.957687][ T9990] hsr_slave_1 (unregistering): left promiscuous mode [ 419.028017][ T9879] veth0_vlan: entered promiscuous mode [ 419.080504][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.118230][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.189802][ T9879] veth1_vlan: entered promiscuous mode [ 419.298678][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.320925][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.354202][ T9879] veth0_macvtap: entered promiscuous mode [ 419.372951][ T9879] veth1_macvtap: entered promiscuous mode [ 419.387841][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.399629][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.492173][ T9897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.512691][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.523426][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.531535][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.608205][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.657972][ T9879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.686456][ T9879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.699475][ T9879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.708437][ T9879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.883774][ T6136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.042392][ T6136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.253060][ T6136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.330177][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.354581][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.447653][ T6136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.530483][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.542323][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.611614][ T9897] veth0_vlan: entered promiscuous mode [ 420.811016][ T9897] veth1_vlan: entered promiscuous mode [ 420.988303][ T6136] bridge_slave_1: left allmulticast mode [ 420.996406][ T6136] bridge_slave_1: left promiscuous mode [ 421.002621][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.020146][ T6136] bridge_slave_0: left allmulticast mode [ 421.037865][ T6136] bridge_slave_0: left promiscuous mode [ 421.049601][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.226180][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.237257][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.248106][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.259864][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.270547][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.785643][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.796674][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.805185][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.809215][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.823702][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.831832][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.834775][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.849613][ T6136] bond0 (unregistering): Released all slaves [ 422.094741][ T9897] veth0_macvtap: entered promiscuous mode [ 422.186794][ T9897] veth1_macvtap: entered promiscuous mode [ 422.236289][ T6136] hsr_slave_0: left promiscuous mode [ 422.242262][ T6136] hsr_slave_1: left promiscuous mode [ 422.250775][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.258465][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.268599][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.276284][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.293686][ T6136] veth1_macvtap: left promiscuous mode [ 422.299482][ T6136] veth0_macvtap: left promiscuous mode [ 422.305691][ T6136] veth1_vlan: left promiscuous mode [ 422.310972][ T6136] veth0_vlan: left promiscuous mode [ 422.795999][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 422.844150][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 423.358219][ T5140] Bluetooth: hci0: command tx timeout [ 423.397467][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.422938][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.431765][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.445887][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.461823][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.601310][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.719585][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.904621][ T5140] Bluetooth: hci1: command tx timeout [ 423.989796][ T9897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.024720][ T9897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.033719][ T9897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.047806][ T9897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.255512][T10012] chnl_net:caif_netlink_parms(): no params data found [ 424.365480][T10015] chnl_net:caif_netlink_parms(): no params data found [ 424.502966][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.510614][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.518270][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 424.527670][T10012] bridge_slave_0: entered allmulticast mode [ 424.535689][T10012] bridge_slave_0: entered promiscuous mode [ 424.586540][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.593806][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.601449][T10012] bridge_slave_1: entered allmulticast mode [ 424.610553][T10012] bridge_slave_1: entered promiscuous mode [ 424.710762][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.719217][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.726645][T10015] bridge_slave_0: entered allmulticast mode [ 424.734016][T10015] bridge_slave_0: entered promiscuous mode [ 424.760733][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.802777][ T6134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.826279][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.833529][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.841465][T10015] bridge_slave_1: entered allmulticast mode [ 424.848895][T10015] bridge_slave_1: entered promiscuous mode [ 424.877348][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.944660][ T6134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.039377][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.056794][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.087225][ T6134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.130948][T10012] team0: Port device team_slave_0 added [ 425.154593][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.162523][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.196520][T10012] team0: Port device team_slave_1 added [ 425.307812][ T6134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.424746][ T5140] Bluetooth: hci0: command tx timeout [ 425.457550][T10015] team0: Port device team_slave_0 added [ 425.465746][T10019] chnl_net:caif_netlink_parms(): no params data found [ 425.505219][ T5140] Bluetooth: hci2: command tx timeout [ 425.529203][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.537388][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.567352][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.578426][T10047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.746'. [ 425.593817][T10015] team0: Port device team_slave_1 added [ 425.656495][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.664291][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.673785][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.682125][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.710942][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.739367][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.753214][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.789441][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.822218][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.833575][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.866404][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.985234][ T5140] Bluetooth: hci1: command tx timeout [ 426.241253][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.249530][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.257333][T10019] bridge_slave_0: entered allmulticast mode [ 426.266109][T10019] bridge_slave_0: entered promiscuous mode [ 426.280847][T10012] hsr_slave_0: entered promiscuous mode [ 426.287397][T10012] hsr_slave_1: entered promiscuous mode [ 426.293441][T10012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.302151][T10012] Cannot create hsr debugfs directory [ 426.342793][T10015] hsr_slave_0: entered promiscuous mode [ 426.357599][T10015] hsr_slave_1: entered promiscuous mode [ 426.364198][T10015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.395027][T10015] Cannot create hsr debugfs directory [ 426.450201][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.475731][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.483104][T10019] bridge_slave_1: entered allmulticast mode [ 426.491880][T10019] bridge_slave_1: entered promiscuous mode [ 426.717622][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.766402][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.830930][ T6134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.877001][T10019] team0: Port device team_slave_0 added [ 426.908590][T10019] team0: Port device team_slave_1 added [ 426.968589][ T6134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.011992][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.019506][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.047789][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.061482][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.069060][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.095869][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.162430][ T6134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.312482][ T6134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.343659][T10019] hsr_slave_0: entered promiscuous mode [ 427.351119][T10019] hsr_slave_1: entered promiscuous mode [ 427.358381][T10019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.366283][T10019] Cannot create hsr debugfs directory [ 427.504727][ T5140] Bluetooth: hci0: command tx timeout [ 427.585364][ T5140] Bluetooth: hci2: command tx timeout [ 427.718878][ T6134] bridge_slave_1: left allmulticast mode [ 427.725037][ T6134] bridge_slave_1: left promiscuous mode [ 427.730771][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.742980][ T6134] bridge_slave_0: left allmulticast mode [ 427.757964][ T6134] bridge_slave_0: left promiscuous mode [ 427.763689][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.776907][ T6134] bridge_slave_1: left allmulticast mode [ 427.782604][ T6134] bridge_slave_1: left promiscuous mode [ 427.790759][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.800384][ T6134] bridge_slave_0: left allmulticast mode [ 427.807447][ T6134] bridge_slave_0: left promiscuous mode [ 427.813892][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.075241][ T5140] Bluetooth: hci1: command tx timeout [ 428.276581][ T8483] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 428.324981][ T8483] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 428.560374][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.587832][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.627196][ T6134] bond0 (unregistering): Released all slaves [ 428.813155][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 428.822995][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 428.880142][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.890386][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.901765][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.912626][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.927862][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.182036][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.194460][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.204909][ T6134] bond0 (unregistering): Released all slaves [ 429.584694][ T55] Bluetooth: hci0: command tx timeout [ 429.664727][ T55] Bluetooth: hci2: command tx timeout [ 429.818953][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 429.829202][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 430.060998][T10103] openvswitch: netlink: Key type 5136 is out of range max 32 [ 430.136732][ T6134] hsr_slave_0: left promiscuous mode [ 430.142804][ T6134] hsr_slave_1: left promiscuous mode [ 430.151604][ T55] Bluetooth: hci1: command tx timeout [ 430.159942][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.167913][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.179183][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.186918][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.203205][ T6134] hsr_slave_0: left promiscuous mode [ 430.209444][ T6134] hsr_slave_1: left promiscuous mode [ 430.215759][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.223221][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.231390][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.239843][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.270823][ T6134] veth1_macvtap: left promiscuous mode [ 430.276720][ T6134] veth0_macvtap: left promiscuous mode [ 430.282335][ T6134] veth1_vlan: left promiscuous mode [ 430.288027][ T6134] veth0_vlan: left promiscuous mode [ 430.295146][ T6134] veth1_macvtap: left promiscuous mode [ 430.301570][ T6134] veth0_macvtap: left promiscuous mode [ 430.308242][ T6134] veth1_vlan: left promiscuous mode [ 430.313755][ T6134] veth0_vlan: left promiscuous mode [ 430.955407][ T55] Bluetooth: hci3: command tx timeout [ 430.962186][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 431.008513][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 431.757440][ T55] Bluetooth: hci2: command tx timeout [ 431.884168][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 431.930714][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 432.420029][T10085] chnl_net:caif_netlink_parms(): no params data found [ 432.475027][T10015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.538041][T10015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.573470][T10015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.652504][T10015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.856459][T10012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.877172][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.884723][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.891948][T10085] bridge_slave_0: entered allmulticast mode [ 432.902209][T10085] bridge_slave_0: entered promiscuous mode [ 432.911350][T10012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.944263][T10012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.985247][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.992551][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.000303][T10085] bridge_slave_1: entered allmulticast mode [ 433.008299][T10085] bridge_slave_1: entered promiscuous mode [ 433.026219][ T55] Bluetooth: hci3: command tx timeout [ 433.041352][T10012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.118860][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.172857][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.259195][T10085] team0: Port device team_slave_0 added [ 433.307437][T10085] team0: Port device team_slave_1 added [ 433.401898][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.412163][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.440510][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.453905][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.461807][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.490430][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.573726][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.710308][ T6134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.782526][T10019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.829681][ T6134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.873407][T10085] hsr_slave_0: entered promiscuous mode [ 433.880591][T10085] hsr_slave_1: entered promiscuous mode [ 433.888991][T10085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.898174][T10085] Cannot create hsr debugfs directory [ 433.903918][T10019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 433.925099][T10019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 433.980395][ T6134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.022026][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.036129][T10019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.159700][ T6134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.193891][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.201177][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.286875][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.294082][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.463804][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.682483][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.837004][ T6134] bridge_slave_1: left allmulticast mode [ 434.842810][ T6134] bridge_slave_1: left promiscuous mode [ 434.872130][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.912545][ T6134] bridge_slave_0: left allmulticast mode [ 434.918888][ T6134] bridge_slave_0: left promiscuous mode [ 434.925387][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.105740][ T55] Bluetooth: hci3: command tx timeout [ 435.363847][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.375959][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.387236][ T6134] bond0 (unregistering): Released all slaves [ 435.405192][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.412341][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.540357][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.547754][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.788361][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.842593][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.887707][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 436.012481][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.175861][ T6134] hsr_slave_0: left promiscuous mode [ 436.182969][ T6134] hsr_slave_1: left promiscuous mode [ 436.190199][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.199352][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.207981][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.228808][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.378593][ T6134] veth1_macvtap: left promiscuous mode [ 436.396365][ T6134] veth0_macvtap: left promiscuous mode [ 436.402648][ T6134] veth1_vlan: left promiscuous mode [ 436.418886][ T6134] veth0_vlan: left promiscuous mode [ 437.198405][ T55] Bluetooth: hci3: command tx timeout [ 437.341800][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 437.392694][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 437.892430][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.899629][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.990485][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.997906][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.071170][T10015] veth0_vlan: entered promiscuous mode [ 438.167914][T10015] veth1_vlan: entered promiscuous mode [ 438.206219][T10085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.280515][T10085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.372002][T10085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.432578][T10085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.571600][T10015] veth0_macvtap: entered promiscuous mode [ 438.610290][T10015] veth1_macvtap: entered promiscuous mode [ 438.733109][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.780496][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.822756][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.838057][T10015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.849246][T10015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.858352][T10015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.869031][T10015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.949093][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 439.167202][T10170] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 439.180005][T10012] veth0_vlan: entered promiscuous mode [ 439.206483][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.769'. [ 439.221677][T10085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.275838][T10170] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 439.314724][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.322619][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.330410][T10012] veth1_vlan: entered promiscuous mode [ 439.351564][T10019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.392487][T10085] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.451110][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.458346][ T6129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.481138][T10176] batman_adv: batadv0: Adding interface: macvlan3 [ 439.488063][T10176] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.518438][T10176] batman_adv: batadv0: Interface activated: macvlan3 [ 439.546278][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.553528][ T6129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.562515][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.571804][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.641640][T10012] veth0_macvtap: entered promiscuous mode [ 439.716857][T10019] veth0_vlan: entered promiscuous mode [ 439.748365][T10012] veth1_macvtap: entered promiscuous mode [ 439.824343][T10019] veth1_vlan: entered promiscuous mode [ 439.901727][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 439.923172][T10182] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 439.954957][T10182] netlink: 32 bytes leftover after parsing attributes in process `syz.0.772'. [ 440.023936][ T6136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.059447][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.106355][T10019] veth0_macvtap: entered promiscuous mode [ 440.116614][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.179493][T10019] veth1_macvtap: entered promiscuous mode [ 440.207874][T10012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.219717][T10012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.229023][T10012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.239843][T10012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.286280][ T6136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.390278][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.426724][ T6136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.453476][T10019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.470661][T10019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.512928][T10019] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.523452][T10019] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.532329][T10019] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.541833][T10019] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.603997][ T6136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.693410][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.710264][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.732005][T10085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.845288][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.854186][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.880318][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.897053][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.056397][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.092406][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.120350][ T6136] bridge_slave_1: left allmulticast mode [ 441.149893][ T6136] bridge_slave_1: left promiscuous mode [ 441.165116][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.196544][ T6136] bridge_slave_0: left allmulticast mode [ 441.202272][ T6136] bridge_slave_0: left promiscuous mode [ 441.208309][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.608495][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.619529][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.630774][ T6136] bond0 (unregistering): Released all slaves [ 441.882159][T10085] veth0_vlan: entered promiscuous mode [ 442.026031][T10085] veth1_vlan: entered promiscuous mode [ 442.217809][ T6136] hsr_slave_0: left promiscuous mode [ 442.236261][ T6136] hsr_slave_1: left promiscuous mode [ 442.242477][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.282165][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.322124][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.351170][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.421073][ T6136] veth1_macvtap: left promiscuous mode [ 442.440662][ T6136] veth0_macvtap: left promiscuous mode [ 442.465380][ T6136] veth1_vlan: left promiscuous mode [ 442.470816][ T6136] veth0_vlan: left promiscuous mode [ 442.702422][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.716620][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.727248][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.748010][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.760077][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.141228][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.172236][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.190884][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.200471][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.210838][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.403902][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 443.453660][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 443.954352][T10085] veth0_macvtap: entered promiscuous mode [ 444.080330][T10085] veth1_macvtap: entered promiscuous mode [ 444.272411][T10085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.340933][T10085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.471832][T10085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.481794][T10085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.493143][T10085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.502714][T10085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.785221][ T55] Bluetooth: hci0: command tx timeout [ 444.802524][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.813881][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.824235][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.836708][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.846793][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.919633][ T6136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.940916][T10197] chnl_net:caif_netlink_parms(): no params data found [ 445.021267][T10200] chnl_net:caif_netlink_parms(): no params data found [ 445.120516][ T6136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.213108][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.220540][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.227966][T10197] bridge_slave_0: entered allmulticast mode [ 445.240494][T10197] bridge_slave_0: entered promiscuous mode [ 445.279356][ T5140] Bluetooth: hci1: command tx timeout [ 445.293300][ T6136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.313094][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.321529][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.333108][T10197] bridge_slave_1: entered allmulticast mode [ 445.340460][T10197] bridge_slave_1: entered promiscuous mode [ 445.400301][ T6136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.476161][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.483493][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.491171][T10200] bridge_slave_0: entered allmulticast mode [ 445.498833][T10200] bridge_slave_0: entered promiscuous mode [ 445.512333][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.520017][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.527407][T10200] bridge_slave_1: entered allmulticast mode [ 445.535309][T10200] bridge_slave_1: entered promiscuous mode [ 445.553460][T10197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.568886][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.581889][T10197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.594755][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.686189][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.740312][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.791465][T10197] team0: Port device team_slave_0 added [ 445.841338][T10200] team0: Port device team_slave_0 added [ 445.856747][T10197] team0: Port device team_slave_1 added [ 445.887158][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.897286][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.913656][T10200] team0: Port device team_slave_1 added [ 446.058476][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.066400][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.113429][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.128994][T10197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.136753][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.163880][T10197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.218253][ T6136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.260142][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.267294][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.297499][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.339359][T10197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.349696][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.378565][T10197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.477347][ T6136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.588826][ T6136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.663429][T10200] hsr_slave_0: entered promiscuous mode [ 446.677510][T10200] hsr_slave_1: entered promiscuous mode [ 446.694121][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.703645][T10200] Cannot create hsr debugfs directory [ 446.753794][T10208] chnl_net:caif_netlink_parms(): no params data found [ 446.829794][ T6136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.851547][T10197] hsr_slave_0: entered promiscuous mode [ 446.859111][T10197] hsr_slave_1: entered promiscuous mode [ 446.865127][ T5140] Bluetooth: hci0: command tx timeout [ 446.871326][T10197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.883551][T10197] Cannot create hsr debugfs directory [ 446.945490][ T5140] Bluetooth: hci2: command tx timeout [ 447.062485][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.070290][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.082043][T10208] bridge_slave_0: entered allmulticast mode [ 447.089969][T10208] bridge_slave_0: entered promiscuous mode [ 447.144284][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.154144][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.164471][T10208] bridge_slave_1: entered allmulticast mode [ 447.171624][T10208] bridge_slave_1: entered promiscuous mode [ 447.315212][T10208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.330703][T10208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.344654][ T5140] Bluetooth: hci1: command tx timeout [ 447.469028][ T6136] bridge_slave_1: left allmulticast mode [ 447.475625][ T6136] bridge_slave_1: left promiscuous mode [ 447.481612][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.490738][ T6136] bridge_slave_0: left allmulticast mode [ 447.496895][ T6136] bridge_slave_0: left promiscuous mode [ 447.504732][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.517831][ T6136] bridge_slave_1: left allmulticast mode [ 447.523669][ T6136] bridge_slave_1: left promiscuous mode [ 447.530239][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.540869][ T6136] bridge_slave_0: left allmulticast mode [ 447.547469][ T6136] bridge_slave_0: left promiscuous mode [ 447.553198][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.048121][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.059416][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.072855][ T6136] bond0 (unregistering): Released all slaves [ 448.562017][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.579545][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.596277][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.613951][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.623117][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.673387][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.686242][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.697772][ T6136] bond0 (unregistering): Released all slaves [ 448.720783][T10208] team0: Port device team_slave_0 added [ 448.875008][T10208] team0: Port device team_slave_1 added [ 448.946101][ T5140] Bluetooth: hci0: command tx timeout [ 449.019102][T10208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.031775][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.038974][ T5140] Bluetooth: hci2: command tx timeout [ 449.070031][T10208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.143152][T10208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.150259][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.177227][T10208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.394942][T10208] hsr_slave_0: entered promiscuous mode [ 449.401855][T10208] hsr_slave_1: entered promiscuous mode [ 449.409238][T10208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.418090][T10208] Cannot create hsr debugfs directory [ 449.424717][ T5140] Bluetooth: hci1: command tx timeout [ 449.717696][T10200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.779059][T10200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.792535][ T6136] hsr_slave_0: left promiscuous mode [ 449.799306][ T6136] hsr_slave_1: left promiscuous mode [ 449.806796][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.814619][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.822474][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.837057][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.849815][ T6136] hsr_slave_0: left promiscuous mode [ 449.855907][ T6136] hsr_slave_1: left promiscuous mode [ 449.862610][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.870213][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.880130][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.888660][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.919963][ T6136] veth1_macvtap: left promiscuous mode [ 449.925717][ T6136] veth0_macvtap: left promiscuous mode [ 449.931312][ T6136] veth1_vlan: left promiscuous mode [ 449.937436][ T6136] veth0_vlan: left promiscuous mode [ 449.943851][ T6136] veth1_macvtap: left promiscuous mode [ 449.949516][ T6136] veth0_macvtap: left promiscuous mode [ 449.955372][ T6136] veth1_vlan: left promiscuous mode [ 449.961474][ T6136] veth0_vlan: left promiscuous mode [ 450.581731][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 450.626278][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 450.716076][ T5140] Bluetooth: hci3: command tx timeout [ 451.035090][ T5140] Bluetooth: hci0: command tx timeout [ 451.120993][ T5140] Bluetooth: hci2: command tx timeout [ 451.507721][ T5140] Bluetooth: hci1: command tx timeout [ 451.526661][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 451.571818][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 452.079135][T10200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.182845][T10200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.334279][T10232] chnl_net:caif_netlink_parms(): no params data found [ 452.427150][T10239] block nbd0: NBD_DISCONNECT [ 452.432280][T10239] block nbd0: Send disconnect failed -22 [ 452.465566][T10239] block nbd0: Disconnected due to user request. [ 452.471910][T10239] block nbd0: shutting down sockets [ 452.619625][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.628163][T10232] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.636029][T10232] bridge_slave_0: entered allmulticast mode [ 452.643923][T10232] bridge_slave_0: entered promiscuous mode [ 452.697393][T10232] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.706521][T10232] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.713961][T10232] bridge_slave_1: entered allmulticast mode [ 452.721802][T10232] bridge_slave_1: entered promiscuous mode [ 452.785500][ T55] Bluetooth: hci3: command tx timeout [ 452.793433][T10232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.822675][T10232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.897057][T10232] team0: Port device team_slave_0 added [ 452.931230][T10232] team0: Port device team_slave_1 added [ 452.988531][T10232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.998347][T10232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.027807][T10232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.042583][T10232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.049779][T10232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.077250][T10232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.117331][ T5140] block nbd1: Receive control failed (result -104) [ 453.185435][ T5140] Bluetooth: hci2: command tx timeout [ 453.223453][T10232] hsr_slave_0: entered promiscuous mode [ 453.230086][T10232] hsr_slave_1: entered promiscuous mode [ 453.239287][T10232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.247311][T10232] Cannot create hsr debugfs directory [ 453.295198][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.423818][ T6136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.470813][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.539159][ T6136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.583428][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.590677][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.618420][ T6136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.670575][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.678185][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.712089][ T6136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.000656][ T6136] bridge_slave_1: left allmulticast mode [ 454.009609][ T6136] bridge_slave_1: left promiscuous mode [ 454.020122][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.029993][ T6136] bridge_slave_0: left allmulticast mode [ 454.036926][ T6136] bridge_slave_0: left promiscuous mode [ 454.042740][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.420032][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.432423][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.443382][ T6136] bond0 (unregistering): Released all slaves [ 454.520946][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.631188][T10200] veth0_vlan: entered promiscuous mode [ 454.693517][T10200] veth1_vlan: entered promiscuous mode [ 454.749071][ T6136] hsr_slave_0: left promiscuous mode [ 454.760127][ T6136] hsr_slave_1: left promiscuous mode [ 454.767559][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.777342][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.786491][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.794037][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.815840][ T6136] veth1_macvtap: left promiscuous mode [ 454.821453][ T6136] veth0_macvtap: left promiscuous mode [ 454.827547][ T6136] veth1_vlan: left promiscuous mode [ 454.833027][ T6136] veth0_vlan: left promiscuous mode [ 454.869506][ T5140] Bluetooth: hci3: command tx timeout [ 455.342441][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 455.389627][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 455.976184][T10200] veth0_macvtap: entered promiscuous mode [ 456.037904][T10200] veth1_macvtap: entered promiscuous mode [ 456.165814][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.204229][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.237594][T10200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.254754][T10200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.263710][T10200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.274990][T10200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.944983][ T5140] Bluetooth: hci3: command tx timeout [ 467.665986][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.684933][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.693277][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.703749][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.712447][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.897945][T10250] chnl_net:caif_netlink_parms(): no params data found [ 467.988348][T10250] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.995997][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.003191][T10250] bridge_slave_0: entered allmulticast mode [ 468.011190][T10250] bridge_slave_0: entered promiscuous mode [ 468.019561][T10250] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.027450][T10250] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.034945][T10250] bridge_slave_1: entered allmulticast mode [ 468.042194][T10250] bridge_slave_1: entered promiscuous mode [ 468.080648][T10250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.096410][T10250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.137627][T10250] team0: Port device team_slave_0 added [ 468.147479][T10250] team0: Port device team_slave_1 added [ 468.178615][T10250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.187827][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.214042][T10250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.227409][T10250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.235147][T10250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.261402][T10250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.315858][T10250] hsr_slave_0: entered promiscuous mode [ 468.322308][T10250] hsr_slave_1: entered promiscuous mode [ 468.328918][T10250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.337029][T10250] Cannot create hsr debugfs directory [ 469.744760][ T5140] Bluetooth: hci5: command tx timeout [ 471.824528][ T5140] Bluetooth: hci5: command tx timeout [ 473.904523][ T5140] Bluetooth: hci5: command tx timeout [ 475.984560][ T5140] Bluetooth: hci5: command tx timeout [ 501.827471][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.807199][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 503.816897][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 503.828321][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 503.838023][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 503.847214][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 504.036304][T10261] chnl_net:caif_netlink_parms(): no params data found [ 504.123103][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.131714][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.139039][T10261] bridge_slave_0: entered allmulticast mode [ 504.146687][T10261] bridge_slave_0: entered promiscuous mode [ 504.155271][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.162624][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.170032][T10261] bridge_slave_1: entered allmulticast mode [ 504.178425][T10261] bridge_slave_1: entered promiscuous mode [ 504.214201][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.227817][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.266650][T10261] team0: Port device team_slave_0 added [ 504.274967][T10261] team0: Port device team_slave_1 added [ 504.309437][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.318132][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.345252][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.357416][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.364635][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.391141][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.443811][T10261] hsr_slave_0: entered promiscuous mode [ 504.450878][T10261] hsr_slave_1: entered promiscuous mode [ 504.457655][T10261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.465416][T10261] Cannot create hsr debugfs directory [ 505.238630][ T5140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 505.250060][ T5140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 505.259512][ T5140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 505.269189][ T5140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 505.277842][ T5140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 505.480042][T10271] chnl_net:caif_netlink_parms(): no params data found [ 505.582989][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.590447][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.598114][T10271] bridge_slave_0: entered allmulticast mode [ 505.606540][T10271] bridge_slave_0: entered promiscuous mode [ 505.615347][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.622560][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.630153][T10271] bridge_slave_1: entered allmulticast mode [ 505.637574][T10271] bridge_slave_1: entered promiscuous mode [ 505.680397][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.695577][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.739650][T10271] team0: Port device team_slave_0 added [ 505.749806][T10271] team0: Port device team_slave_1 added [ 505.790421][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.797856][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.824821][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.838834][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.846058][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.872652][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.914637][ T55] Bluetooth: hci6: command tx timeout [ 505.936586][T10271] hsr_slave_0: entered promiscuous mode [ 505.943250][T10271] hsr_slave_1: entered promiscuous mode [ 505.950337][T10271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.958468][T10271] Cannot create hsr debugfs directory [ 506.131658][T10271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.218964][T10271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.305394][T10271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.372553][T10271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.344609][ T55] Bluetooth: hci7: command tx timeout [ 507.984814][ T55] Bluetooth: hci6: command tx timeout [ 508.051556][ T5140] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 508.061486][ T5140] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 508.070230][ T5140] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 508.079272][ T5140] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 508.087270][ T5140] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 508.291342][T10281] chnl_net:caif_netlink_parms(): no params data found [ 508.404003][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.411532][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.419541][T10281] bridge_slave_0: entered allmulticast mode [ 508.428903][T10281] bridge_slave_0: entered promiscuous mode [ 508.439366][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.446770][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.454018][T10281] bridge_slave_1: entered allmulticast mode [ 508.461339][T10281] bridge_slave_1: entered promiscuous mode [ 508.514008][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.527809][T10281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.575211][T10281] team0: Port device team_slave_0 added [ 508.583326][T10281] team0: Port device team_slave_1 added [ 508.619865][T10281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.627113][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.654406][T10281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.668436][T10281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.676324][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.702698][T10281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.765512][T10281] hsr_slave_0: entered promiscuous mode [ 508.771986][T10281] hsr_slave_1: entered promiscuous mode [ 508.778702][T10281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.787102][T10281] Cannot create hsr debugfs directory [ 509.424566][ T5140] Bluetooth: hci7: command tx timeout [ 510.074832][ T5140] Bluetooth: hci6: command tx timeout [ 510.144592][ T5140] Bluetooth: hci8: command tx timeout [ 510.466770][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 510.478887][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 510.488775][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 510.498195][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 510.507017][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 510.728856][T10290] chnl_net:caif_netlink_parms(): no params data found [ 510.844892][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.852470][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.860138][T10290] bridge_slave_0: entered allmulticast mode [ 510.869247][T10290] bridge_slave_0: entered promiscuous mode [ 510.878606][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.886613][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.895130][T10290] bridge_slave_1: entered allmulticast mode [ 510.902355][T10290] bridge_slave_1: entered promiscuous mode [ 510.942037][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.955336][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.006883][T10290] team0: Port device team_slave_0 added [ 511.017116][T10290] team0: Port device team_slave_1 added [ 511.051549][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.058951][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.085794][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.100035][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.107213][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.134098][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.192436][T10290] hsr_slave_0: entered promiscuous mode [ 511.200160][T10290] hsr_slave_1: entered promiscuous mode [ 511.206854][T10290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.214578][T10290] Cannot create hsr debugfs directory [ 511.504692][ T55] Bluetooth: hci7: command tx timeout [ 512.144608][ T55] Bluetooth: hci6: command tx timeout [ 512.225452][ T55] Bluetooth: hci8: command tx timeout [ 512.544581][ T55] Bluetooth: hci9: command tx timeout [ 513.594656][ T55] Bluetooth: hci7: command tx timeout [ 514.304822][ T55] Bluetooth: hci8: command tx timeout [ 514.625244][ T55] Bluetooth: hci9: command tx timeout [ 516.384532][ T55] Bluetooth: hci8: command tx timeout [ 516.704794][ T55] Bluetooth: hci9: command tx timeout [ 518.794574][ T55] Bluetooth: hci9: command tx timeout [ 527.821598][ T5140] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 527.837136][ T5140] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 527.845875][ T5140] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 527.856689][ T5140] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 527.866207][ T5140] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 528.070236][T10299] chnl_net:caif_netlink_parms(): no params data found [ 528.186287][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.195154][T10299] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.202763][T10299] bridge_slave_0: entered allmulticast mode [ 528.210336][T10299] bridge_slave_0: entered promiscuous mode [ 528.218475][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.227571][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.235070][T10299] bridge_slave_1: entered allmulticast mode [ 528.242442][T10299] bridge_slave_1: entered promiscuous mode [ 528.283274][T10299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.296905][T10299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.344055][T10299] team0: Port device team_slave_0 added [ 528.355084][T10299] team0: Port device team_slave_1 added [ 528.397083][T10299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.404411][T10299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.431403][T10299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.444139][T10299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.451308][T10299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.477854][T10299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.539978][T10299] hsr_slave_0: entered promiscuous mode [ 528.547150][T10299] hsr_slave_1: entered promiscuous mode [ 528.553850][T10299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.561548][T10299] Cannot create hsr debugfs directory [ 529.904613][ T55] Bluetooth: hci10: command tx timeout [ 531.984601][ T55] Bluetooth: hci10: command tx timeout [ 534.064585][ T55] Bluetooth: hci10: command tx timeout [ 536.144514][ T55] Bluetooth: hci10: command tx timeout [ 563.270038][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.346967][T10309] Bluetooth: hci1: command 0x0406 tx timeout [ 565.348227][T10308] Bluetooth: hci0: command 0x0406 tx timeout [ 566.503070][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 566.512607][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 566.522301][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 566.531538][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 566.540042][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 566.754728][T10312] chnl_net:caif_netlink_parms(): no params data found [ 566.851715][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.859255][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.867136][T10312] bridge_slave_0: entered allmulticast mode [ 566.874839][T10312] bridge_slave_0: entered promiscuous mode [ 566.882918][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.890565][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.898231][T10312] bridge_slave_1: entered allmulticast mode [ 566.907999][T10312] bridge_slave_1: entered promiscuous mode [ 566.946015][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.959480][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.004970][T10312] team0: Port device team_slave_0 added [ 567.013578][T10312] team0: Port device team_slave_1 added [ 567.053236][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.060625][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.087758][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.100043][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.107893][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.134528][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.193852][T10312] hsr_slave_0: entered promiscuous mode [ 567.200579][T10312] hsr_slave_1: entered promiscuous mode [ 567.208514][T10312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.216266][T10312] Cannot create hsr debugfs directory [ 568.624892][ T5140] Bluetooth: hci11: command tx timeout [ 569.047602][T10308] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 569.058234][T10308] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 569.068808][T10308] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 569.078117][T10308] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 569.086714][T10308] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 569.302156][T10321] chnl_net:caif_netlink_parms(): no params data found [ 569.417861][T10321] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.425298][T10321] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.432732][T10321] bridge_slave_0: entered allmulticast mode [ 569.441668][T10321] bridge_slave_0: entered promiscuous mode [ 569.451054][T10321] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.459180][T10321] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.467236][T10321] bridge_slave_1: entered allmulticast mode [ 569.475703][T10321] bridge_slave_1: entered promiscuous mode [ 569.519476][T10321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.531702][T10321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.594832][T10321] team0: Port device team_slave_0 added [ 569.605227][T10321] team0: Port device team_slave_1 added [ 569.644093][T10321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.651411][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.679048][T10321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.691557][T10321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.698778][T10321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.726182][T10321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.786067][T10321] hsr_slave_0: entered promiscuous mode [ 569.792583][T10321] hsr_slave_1: entered promiscuous mode [ 569.800147][T10321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.808012][T10321] Cannot create hsr debugfs directory [ 570.464651][T10308] Bluetooth: hci2: command 0x0406 tx timeout [ 570.704781][ T55] Bluetooth: hci11: command tx timeout [ 571.104570][ T55] Bluetooth: hci12: command tx timeout [ 571.666612][T10308] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 571.676856][T10308] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 571.686178][T10308] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 571.696327][T10308] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 571.704215][T10308] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 571.936362][T10330] chnl_net:caif_netlink_parms(): no params data found [ 572.042809][T10330] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.050240][T10330] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.057975][T10330] bridge_slave_0: entered allmulticast mode [ 572.067064][T10330] bridge_slave_0: entered promiscuous mode [ 572.076801][T10330] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.083992][T10330] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.091972][T10330] bridge_slave_1: entered allmulticast mode [ 572.100544][T10330] bridge_slave_1: entered promiscuous mode [ 572.148897][T10330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.162900][T10330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.210857][T10330] team0: Port device team_slave_0 added [ 572.220564][T10330] team0: Port device team_slave_1 added [ 572.265798][T10330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.272803][T10330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.300448][T10330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.313543][T10330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.320698][T10330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.347448][T10330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.410744][T10330] hsr_slave_0: entered promiscuous mode [ 572.417867][T10330] hsr_slave_1: entered promiscuous mode [ 572.424152][T10330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.432367][T10330] Cannot create hsr debugfs directory [ 572.785312][ T55] Bluetooth: hci11: command tx timeout [ 573.184858][ T55] Bluetooth: hci12: command tx timeout [ 573.389206][T10308] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 573.400148][T10308] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 573.409691][T10308] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 573.418390][T10308] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 573.426490][T10308] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 573.655178][T10339] chnl_net:caif_netlink_parms(): no params data found [ 573.744550][ T55] Bluetooth: hci13: command tx timeout [ 573.774936][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.782306][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.790122][T10339] bridge_slave_0: entered allmulticast mode [ 573.799741][T10339] bridge_slave_0: entered promiscuous mode [ 573.808990][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.816654][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.825711][T10339] bridge_slave_1: entered allmulticast mode [ 573.834156][T10339] bridge_slave_1: entered promiscuous mode [ 573.882379][T10339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.895649][T10339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.944079][T10339] team0: Port device team_slave_0 added [ 573.952666][T10339] team0: Port device team_slave_1 added [ 574.001309][T10339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.008487][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.034917][T10339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.048684][T10339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.055913][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.083731][T10339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.143181][T10339] hsr_slave_0: entered promiscuous mode [ 574.150813][T10339] hsr_slave_1: entered promiscuous mode [ 574.158362][T10339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.166709][T10339] Cannot create hsr debugfs directory [ 574.864875][ T55] Bluetooth: hci11: command tx timeout [ 575.264579][ T55] Bluetooth: hci12: command tx timeout [ 575.504884][ T55] Bluetooth: hci14: command tx timeout [ 575.584541][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 575.824662][T10308] Bluetooth: hci13: command tx timeout [ 577.345075][T10308] Bluetooth: hci12: command tx timeout [ 577.584988][T10308] Bluetooth: hci14: command tx timeout [ 577.904542][T10308] Bluetooth: hci13: command tx timeout [ 579.664619][T10308] Bluetooth: hci14: command tx timeout [ 579.984650][T10308] Bluetooth: hci13: command tx timeout [ 581.755132][T10308] Bluetooth: hci14: command tx timeout [ 588.356734][ T55] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 588.373819][ T55] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 588.384769][ T55] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 588.395097][ T55] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 588.408289][ T55] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 588.659423][T10348] chnl_net:caif_netlink_parms(): no params data found [ 588.774051][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.781454][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.789440][T10348] bridge_slave_0: entered allmulticast mode [ 588.797872][T10348] bridge_slave_0: entered promiscuous mode [ 588.808622][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.816401][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.823738][T10348] bridge_slave_1: entered allmulticast mode [ 588.831416][T10348] bridge_slave_1: entered promiscuous mode [ 588.878106][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.892524][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.938068][T10348] team0: Port device team_slave_0 added [ 588.948362][T10348] team0: Port device team_slave_1 added [ 588.992087][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.999313][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.026145][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.040041][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.047857][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.074022][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.141143][T10348] hsr_slave_0: entered promiscuous mode [ 589.148841][T10348] hsr_slave_1: entered promiscuous mode [ 589.155544][T10348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.163129][T10348] Cannot create hsr debugfs directory [ 590.464701][ T55] Bluetooth: hci15: command tx timeout [ 590.944506][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 592.545201][T10308] Bluetooth: hci15: command tx timeout [ 594.624690][T10308] Bluetooth: hci15: command tx timeout [ 596.704699][T10308] Bluetooth: hci15: command tx timeout [ 613.186505][ T31] INFO: task syz-executor:10197 blocked for more than 143 seconds. [ 613.195122][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 613.202881][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.211807][ T31] task:syz-executor state:D stack:22872 pid:10197 tgid:10197 ppid:1 task_flags:0x400140 flags:0x00000004 [ 613.223980][ T31] Call Trace: [ 613.227359][ T31] [ 613.230331][ T31] __schedule+0x16e2/0x4cd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 613.234923][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.241831][ T31] ? schedule+0x165/0x360 [ 613.248270][ T31] ? __pfx___schedule+0x10/0x10 [ 613.253229][ T31] ? schedule+0x91/0x360 [ 613.264618][ T31] schedule+0x165/0x360 [ 613.268885][ T31] schedule_preempt_disabled+0x13/0x30 [ 613.294389][ T31] __mutex_lock+0x724/0xe80 [ 613.298987][ T31] ? unwind_get_return_address+0x4d/0x90 [ 613.325892][ T31] ? __mutex_lock+0x51b/0xe80 [ 613.330675][ T31] ? genl_rcv_msg+0x10d/0x790 [ 613.344639][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 613.349927][ T31] ? stack_trace_save+0x9c/0xe0 [ 613.362237][ T31] ? radix_tree_lookup+0x240/0x290 [ 613.367619][ T31] genl_rcv_msg+0x10d/0x790 [ 613.372179][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.377211][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.382306][ T31] netlink_rcv_skb+0x208/0x470 [ 613.387210][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.392879][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.404926][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.410330][ T31] ? down_read+0x1ad/0x2e0 [ 613.414854][ T31] genl_rcv+0x28/0x40 [ 613.418877][ T31] netlink_unicast+0x75b/0x8d0 [ 613.423709][ T31] netlink_sendmsg+0x805/0xb30 [ 613.428764][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.434089][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 613.439284][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.444989][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.450321][ T31] __sock_sendmsg+0x21c/0x270 [ 613.455093][ T31] __sys_sendto+0x3bd/0x520 [ 613.459629][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 613.464859][ T31] ? fd_install+0x97/0x540 [ 613.469321][ T31] ? fd_install+0x30d/0x540 [ 613.473861][ T31] __x64_sys_sendto+0xde/0x100 [ 613.478958][ T31] do_syscall_64+0xf6/0x210 [ 613.483499][ T31] ? clear_bhb_loop+0x60/0xb0 [ 613.488387][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.495379][ T31] RIP: 0033:0x7fa8397907fc [ 613.499852][ T31] RSP: 002b:00007fff1748eb60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 613.508932][ T31] RAX: ffffffffffffffda RBX: 00007fa83a4e4620 RCX: 00007fa8397907fc [ 613.517097][ T31] RDX: 0000000000000020 RSI: 00007fa83a4e4670 RDI: 0000000000000005 [ 613.525412][ T31] RBP: 0000000000000000 R08: 00007fff1748ebb4 R09: 000000000000000c [ 613.533413][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 613.541571][ T31] R13: 00007fff1748ec08 R14: 00007fa83a4e4670 R15: 0000000000000000 [ 613.549758][ T31] [ 613.552794][ T31] INFO: task syz-executor:10200 blocked for more than 143 seconds. [ 613.560998][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 613.568844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.577588][ T31] task:syz-executor state:D stack:22168 pid:10200 tgid:10200 ppid:1 task_flags:0x400140 flags:0x00000004 [ 613.589763][ T31] Call Trace: [ 613.593066][ T31] [ 613.597065][ T31] __schedule+0x16e2/0x4cd0 [ 613.601620][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.606720][ T31] ? schedule+0x165/0x360 [ 613.611092][ T31] ? __pfx___schedule+0x10/0x10 [ 613.616160][ T31] ? schedule+0x91/0x360 [ 613.620469][ T31] schedule+0x165/0x360 [ 613.624841][ T31] schedule_preempt_disabled+0x13/0x30 [ 613.630342][ T31] __mutex_lock+0x724/0xe80 [ 613.635140][ T31] ? __mutex_lock+0x51b/0xe80 [ 613.639968][ T31] ? genl_rcv_msg+0x10d/0x790 [ 613.644825][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 613.649889][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 613.655437][ T31] ? radix_tree_lookup+0x240/0x290 [ 613.660561][ T31] genl_rcv_msg+0x10d/0x790 [ 613.665544][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.670636][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 613.675817][ T31] ? __copy_skb_header+0xa7/0x550 [ 613.680893][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.686428][ T31] netlink_rcv_skb+0x208/0x470 [ 613.691200][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.696122][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.702150][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.707755][ T31] ? down_read+0x1ad/0x2e0 [ 613.712291][ T31] genl_rcv+0x28/0x40 [ 613.716467][ T31] netlink_unicast+0x75b/0x8d0 [ 613.721253][ T31] netlink_sendmsg+0x805/0xb30 [ 613.726161][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.731598][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 613.736789][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.742214][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.747791][ T31] __sock_sendmsg+0x21c/0x270 [ 613.752565][ T31] __sys_sendto+0x3bd/0x520 [ 613.757141][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 613.762243][ T31] ? fd_install+0x97/0x540 [ 613.767059][ T31] ? fd_install+0x30d/0x540 [ 613.771615][ T31] __x64_sys_sendto+0xde/0x100 [ 613.776577][ T31] do_syscall_64+0xf6/0x210 [ 613.781081][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 613.787377][ T31] ? clear_bhb_loop+0x60/0xb0 [ 613.792080][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.798130][ T31] RIP: 0033:0x7ff4537907fc [ 613.804022][ T31] RSP: 002b:00007fffdb0cdf20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 613.812808][ T31] RAX: ffffffffffffffda RBX: 00007ff4544e4620 RCX: 00007ff4537907fc [ 613.821044][ T31] RDX: 0000000000000028 RSI: 00007ff4544e4670 RDI: 0000000000000003 [ 613.829440][ T31] RBP: 0000000000000000 R08: 00007fffdb0cdf74 R09: 000000000000000c [ 613.837541][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 613.845744][ T31] R13: 00007fffdb0cdfc8 R14: 00007ff4544e4670 R15: 0000000000000000 [ 613.853858][ T31] [ 613.857159][ T31] INFO: task syz-executor:10208 blocked for more than 144 seconds. [ 613.865430][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 613.873111][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.881991][ T31] task:syz-executor state:D stack:22664 pid:10208 tgid:10208 ppid:1 task_flags:0x400140 flags:0x00000004 [ 613.894076][ T31] Call Trace: [ 613.897439][ T31] [ 613.900397][ T31] __schedule+0x16e2/0x4cd0 [ 613.906191][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.911103][ T31] ? schedule+0x165/0x360 [ 613.915803][ T31] ? __pfx___schedule+0x10/0x10 [ 613.920739][ T31] ? schedule+0x91/0x360 [ 613.925570][ T31] schedule+0x165/0x360 [ 613.929773][ T31] schedule_preempt_disabled+0x13/0x30 [ 613.935376][ T31] __mutex_lock+0x724/0xe80 [ 613.939918][ T31] ? unwind_get_return_address+0x4d/0x90 [ 613.945703][ T31] ? __mutex_lock+0x51b/0xe80 [ 613.950443][ T31] ? genl_rcv_msg+0x10d/0x790 [ 613.955422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 613.960473][ T31] ? stack_trace_save+0x9c/0xe0 [ 613.965513][ T31] ? radix_tree_lookup+0x240/0x290 [ 613.970679][ T31] genl_rcv_msg+0x10d/0x790 [ 613.975477][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.980366][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.985872][ T31] netlink_rcv_skb+0x208/0x470 [ 613.990686][ T31] ? __lock_acquire+0xaac/0xd20 [ 613.995761][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.000856][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.006664][ T31] ? down_read+0x1ad/0x2e0 [ 614.011217][ T31] genl_rcv+0x28/0x40 [ 614.015285][ T31] netlink_unicast+0x75b/0x8d0 [ 614.020101][ T31] netlink_sendmsg+0x805/0xb30 [ 614.025153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.030484][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 614.035687][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.041013][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.046497][ T31] __sock_sendmsg+0x21c/0x270 [ 614.051217][ T31] __sys_sendto+0x3bd/0x520 [ 614.055802][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 614.060872][ T31] ? fd_install+0x97/0x540 [ 614.065631][ T31] ? fd_install+0x30d/0x540 [ 614.070207][ T31] __x64_sys_sendto+0xde/0x100 [ 614.075166][ T31] do_syscall_64+0xf6/0x210 [ 614.079716][ T31] ? clear_bhb_loop+0x60/0xb0 [ 614.084771][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.090711][ T31] RIP: 0033:0x7f34475907fc [ 614.095205][ T31] RSP: 002b:00007fffb5be36a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 614.103679][ T31] RAX: ffffffffffffffda RBX: 00007f34482e4620 RCX: 00007f34475907fc [ 614.112160][ T31] RDX: 0000000000000020 RSI: 00007f34482e4670 RDI: 0000000000000005 [ 614.120483][ T31] RBP: 0000000000000000 R08: 00007fffb5be36f4 R09: 000000000000000c [ 614.128918][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 614.136989][ T31] R13: 00007fffb5be3748 R14: 00007f34482e4670 R15: 0000000000000000 [ 614.145388][ T31] [ 614.148503][ T31] INFO: task syz-executor:10232 blocked for more than 144 seconds. [ 614.156685][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 614.164986][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 614.173782][ T31] task:syz-executor state:D stack:22600 pid:10232 tgid:10232 ppid:1 task_flags:0x400140 flags:0x00000004 [ 614.185897][ T31] Call Trace: [ 614.189212][ T31] [ 614.192199][ T31] __schedule+0x16e2/0x4cd0 [ 614.196904][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.201805][ T31] ? schedule+0x165/0x360 [ 614.206411][ T31] ? __pfx___schedule+0x10/0x10 [ 614.211942][ T31] ? schedule+0x91/0x360 [ 614.216348][ T31] schedule+0x165/0x360 [ 614.220572][ T31] schedule_preempt_disabled+0x13/0x30 [ 614.226373][ T31] __mutex_lock+0x724/0xe80 [ 614.230935][ T31] ? unwind_get_return_address+0x4d/0x90 [ 614.236804][ T31] ? __mutex_lock+0x51b/0xe80 [ 614.241530][ T31] ? genl_rcv_msg+0x10d/0x790 [ 614.246694][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 614.251921][ T31] ? stack_trace_save+0x9c/0xe0 [ 614.256922][ T31] ? radix_tree_lookup+0x240/0x290 [ 614.262114][ T31] genl_rcv_msg+0x10d/0x790 [ 614.266759][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.271654][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.276857][ T31] netlink_rcv_skb+0x208/0x470 [ 614.281665][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.286747][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.291977][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.297407][ T31] ? down_read+0x1ad/0x2e0 [ 614.301969][ T31] genl_rcv+0x28/0x40 [ 614.306158][ T31] netlink_unicast+0x75b/0x8d0 [ 614.311910][ T31] netlink_sendmsg+0x805/0xb30 [ 614.316880][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.322223][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 614.327298][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.332640][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.338055][ T31] __sock_sendmsg+0x21c/0x270 [ 614.342780][ T31] __sys_sendto+0x3bd/0x520 [ 614.347396][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 614.352476][ T31] ? fd_install+0x97/0x540 [ 614.357039][ T31] ? fd_install+0x30d/0x540 [ 614.361579][ T31] __x64_sys_sendto+0xde/0x100 [ 614.366487][ T31] do_syscall_64+0xf6/0x210 [ 614.371039][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 614.377506][ T31] ? clear_bhb_loop+0x60/0xb0 [ 614.382213][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.388303][ T31] RIP: 0033:0x7fdd2e5907fc [ 614.392852][ T31] RSP: 002b:00007ffcd6dee300 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 614.401409][ T31] RAX: ffffffffffffffda RBX: 00007fdd2f2e4620 RCX: 00007fdd2e5907fc [ 614.409546][ T31] RDX: 0000000000000020 RSI: 00007fdd2f2e4670 RDI: 0000000000000005 [ 614.417949][ T31] RBP: 0000000000000000 R08: 00007ffcd6dee354 R09: 000000000000000c [ 614.426008][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 614.434002][ T31] R13: 00007ffcd6dee3a8 R14: 00007fdd2f2e4670 R15: 0000000000000000 [ 614.442133][ T31] [ 614.445341][ T31] INFO: task syz.0.776:10239 blocked for more than 144 seconds. [ 614.453027][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 614.460890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 614.471417][ T31] task:syz.0.776 state:D stack:24392 pid:10239 tgid:10237 ppid:5835 task_flags:0x400140 flags:0x00004004 [ 614.483505][ T31] Call Trace: [ 614.486898][ T31] [ 614.489867][ T31] __schedule+0x16e2/0x4cd0 [ 614.494637][ T31] ? validate_chain+0x897/0x2140 [ 614.499639][ T31] ? schedule+0x165/0x360 [ 614.504008][ T31] ? __pfx___schedule+0x10/0x10 [ 614.508974][ T31] ? schedule+0x91/0x360 [ 614.513280][ T31] schedule+0x165/0x360 [ 614.517968][ T31] schedule_timeout+0x9a/0x270 [ 614.522787][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 614.528345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 614.533567][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.538897][ T31] ? wait_for_completion+0x267/0x5d0 [ 614.544588][ T31] wait_for_completion+0x2bf/0x5d0 [ 614.549846][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 614.555816][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 614.562593][ T31] ? check_flush_dependency+0x88/0x400 [ 614.568237][ T31] __flush_workqueue+0x6f7/0x14b0 [ 614.573394][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 614.579356][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.584634][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 614.590129][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 614.596108][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 614.601609][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 614.607085][ T31] nbd_genl_disconnect+0x485/0x570 [ 614.612283][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 614.618063][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 614.625316][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 614.631014][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 614.637245][ T31] genl_rcv_msg+0x60e/0x790 [ 614.641843][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.647058][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 614.652746][ T31] netlink_rcv_skb+0x208/0x470 [ 614.657583][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.662579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.667710][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.673144][ T31] ? down_read+0x1ad/0x2e0 [ 614.677731][ T31] genl_rcv+0x28/0x40 [ 614.682030][ T31] netlink_unicast+0x75b/0x8d0 [ 614.687078][ T31] netlink_sendmsg+0x805/0xb30 [ 614.692005][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.698039][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 614.703012][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.708630][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.713965][ T31] __sock_sendmsg+0x21c/0x270 [ 614.718761][ T31] ____sys_sendmsg+0x505/0x830 [ 614.724136][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.729619][ T31] ? import_iovec+0x74/0xa0 [ 614.734195][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 614.738991][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.744405][ T31] ? __fget_files+0x2a/0x420 [ 614.749131][ T31] ? __fget_files+0x3a0/0x420 [ 614.753878][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 614.758909][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.764529][ T31] ? do_syscall_64+0xba/0x210 [ 614.769265][ T31] do_syscall_64+0xf6/0x210 [ 614.773899][ T31] ? clear_bhb_loop+0x60/0xb0 [ 614.778659][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.784798][ T31] RIP: 0033:0x7f7b0738e969 [ 614.789254][ T31] RSP: 002b:00007f7b051d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.797775][ T31] RAX: ffffffffffffffda RBX: 00007f7b075b6080 RCX: 00007f7b0738e969 [ 614.805874][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 614.813871][ T31] RBP: 00007f7b07410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 614.821938][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.830385][ T31] R13: 0000000000000001 R14: 00007f7b075b6080 R15: 00007ffc623a6c78 [ 614.838527][ T31] [ 614.841609][ T31] INFO: task syz.0.776:10242 blocked for more than 145 seconds. [ 614.849492][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 614.857548][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 614.866472][ T31] task:syz.0.776 state:D stack:27336 pid:10242 tgid:10237 ppid:5835 task_flags:0x400040 flags:0x00000004 [ 614.878483][ T31] Call Trace: [ 614.881867][ T31] [ 614.884896][ T31] __schedule+0x16e2/0x4cd0 [ 614.889458][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.894522][ T31] ? schedule+0x165/0x360 [ 614.899069][ T31] ? __pfx___schedule+0x10/0x10 [ 614.904010][ T31] ? schedule+0x91/0x360 [ 614.908606][ T31] schedule+0x165/0x360 [ 614.912824][ T31] schedule_preempt_disabled+0x13/0x30 [ 614.918533][ T31] __mutex_lock+0x724/0xe80 [ 614.923165][ T31] ? unwind_get_return_address+0x4d/0x90 [ 614.929426][ T31] ? __mutex_lock+0x51b/0xe80 [ 614.934163][ T31] ? genl_rcv_msg+0x10d/0x790 [ 614.938935][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 614.944112][ T31] ? stack_trace_save+0x9c/0xe0 [ 614.949491][ T31] ? radix_tree_lookup+0x240/0x290 [ 614.954723][ T31] genl_rcv_msg+0x10d/0x790 [ 614.959451][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.964444][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.969620][ T31] netlink_rcv_skb+0x208/0x470 [ 614.974483][ T31] ? __lock_acquire+0xaac/0xd20 [ 614.979417][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.984568][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.990011][ T31] ? down_read+0x1ad/0x2e0 [ 614.994522][ T31] genl_rcv+0x28/0x40 [ 614.998547][ T31] netlink_unicast+0x75b/0x8d0 [ 615.003357][ T31] netlink_sendmsg+0x805/0xb30 [ 615.008280][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.013684][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 615.018719][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.024054][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.030379][ T31] __sock_sendmsg+0x21c/0x270 [ 615.035424][ T31] __sys_sendto+0x3bd/0x520 [ 615.040008][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 615.045557][ T31] ? fd_install+0x97/0x540 [ 615.050030][ T31] ? fd_install+0x30d/0x540 [ 615.054728][ T31] __x64_sys_sendto+0xde/0x100 [ 615.059546][ T31] do_syscall_64+0xf6/0x210 [ 615.064351][ T31] ? clear_bhb_loop+0x60/0xb0 [ 615.069069][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.075081][ T31] RIP: 0033:0x7f7b073907fc [ 615.079541][ T31] RSP: 002b:00007f7b051b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 615.088087][ T31] RAX: ffffffffffffffda RBX: 00007f7b051b2fc0 RCX: 00007f7b073907fc [ 615.096180][ T31] RDX: 0000000000000020 RSI: 00007f7b051b3010 RDI: 0000000000000012 [ 615.104180][ T31] RBP: 0000000000000000 R08: 00007f7b051b2f14 R09: 000000000000000c [ 615.112370][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000012 [ 615.120582][ T31] R13: 00007f7b051b2f68 R14: 00007f7b051b3010 R15: 0000000000000000 [ 615.128718][ T31] [ 615.132050][ T31] INFO: task syz-executor:10250 blocked for more than 145 seconds. [ 615.140398][ T31] Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 [ 615.149322][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.158093][ T31] task:syz-executor state:D stack:22968 pid:10250 tgid:10250 ppid:1 task_flags:0x400140 flags:0x00000004 [ 615.170260][ T31] Call Trace: [ 615.173634][ T31] [ 615.176690][ T31] __schedule+0x16e2/0x4cd0 [ 615.181356][ T31] ? __lock_acquire+0xaac/0xd20 [ 615.186455][ T31] ? schedule+0x165/0x360 [ 615.190921][ T31] ? __pfx___schedule+0x10/0x10 [ 615.195951][ T31] ? schedule+0x91/0x360 [ 615.200399][ T31] schedule+0x165/0x360 [ 615.204724][ T31] schedule_preempt_disabled+0x13/0x30 [ 615.210218][ T31] __mutex_lock+0x724/0xe80 [ 615.214848][ T31] ? unwind_get_return_address+0x4d/0x90 [ 615.220511][ T31] ? __mutex_lock+0x51b/0xe80 [ 615.225250][ T31] ? genl_rcv_msg+0x10d/0x790 [ 615.229972][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 615.235698][ T31] ? stack_trace_save+0x9c/0xe0 [ 615.240608][ T31] ? radix_tree_lookup+0x240/0x290 [ 615.245817][ T31] genl_rcv_msg+0x10d/0x790 [ 615.250373][ T31] ? __lock_acquire+0xaac/0xd20 [ 615.255316][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 615.260428][ T31] netlink_rcv_skb+0x208/0x470 [ 615.265274][ T31] ? __lock_acquire+0xaac/0xd20 [ 615.270166][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 615.275306][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.280646][ T31] ? down_read+0x1ad/0x2e0 [ 615.285405][ T31] genl_rcv+0x28/0x40 [ 615.289441][ T31] netlink_unicast+0x75b/0x8d0 [ 615.294403][ T31] netlink_sendmsg+0x805/0xb30 [ 615.299228][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.304960][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 615.309940][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.315338][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.320689][ T31] __sock_sendmsg+0x21c/0x270 [ 615.325440][ T31] __sys_sendto+0x3bd/0x520 [ 615.330112][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 615.335671][ T31] ? fd_install+0x97/0x540 [ 615.340144][ T31] ? fd_install+0x30d/0x540 [ 615.344982][ T31] __x64_sys_sendto+0xde/0x100 [ 615.349797][ T31] do_syscall_64+0xf6/0x210 [ 615.354411][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 615.360592][ T31] ? clear_bhb_loop+0x60/0xb0 [ 615.365368][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.371388][ T31] RIP: 0033:0x7f792c5907fc [ 615.376143][ T31] RSP: 002b:00007ffe52e81110 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 615.384657][ T31] RAX: ffffffffffffffda RBX: 00007f792d2e4620 RCX: 00007f792c5907fc [ 615.392686][ T31] RDX: 0000000000000020 RSI: 00007f792d2e4670 RDI: 0000000000000005 [ 615.400766][ T31] RBP: 0000000000000000 R08: 00007ffe52e81164 R09: 000000000000000c [ 615.408919][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 615.417004][ T31] R13: 00007ffe52e811b8 R14: 00007f792d2e4670 R15: 0000000000000000 [ 615.425334][ T31] [ 615.428454][ T31] [ 615.428454][ T31] Showing all locks held in the system: [ 615.436275][ T31] 1 lock held by khungtaskd/31: [ 615.441578][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 615.451602][ T31] 2 locks held by getty/5590: [ 615.456382][ T31] #0: ffff88802fffe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 615.466263][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 615.476491][ T31] 2 locks held by kworker/u9:6/5843: [ 615.481808][ T31] #0: ffff8880250e9948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 615.493137][ T31] #1: ffffc90004a4fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 615.505241][ T31] 3 locks held by kworker/u8:14/6126: [ 615.510654][ T31] 2 locks held by syz-executor/10197: [ 615.516701][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.524990][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.534009][ T31] 2 locks held by syz-executor/10200: [ 615.539448][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.548143][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.557240][ T31] 2 locks held by syz-executor/10208: [ 615.562639][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.570922][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.580018][ T31] 2 locks held by syz-executor/10232: [ 615.586032][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.594413][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.603437][ T31] 3 locks held by syz.0.776/10239: [ 615.608607][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.617002][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.626085][ T31] #2: ffff888024be5998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 615.636677][ T31] 2 locks held by syz.0.776/10242: [ 615.641915][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.650592][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.659707][ T31] 2 locks held by syz-executor/10250: [ 615.665318][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.673785][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.682883][ T31] 2 locks held by syz-executor/10261: [ 615.688347][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.696697][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.705905][ T31] 2 locks held by syz-executor/10271: [ 615.711289][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.719575][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.728848][ T31] 2 locks held by syz-executor/10281: [ 615.734303][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.742637][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.752079][ T31] 2 locks held by syz-executor/10290: [ 615.757626][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.765931][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.775450][ T31] 2 locks held by syz-executor/10299: [ 615.780860][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.789191][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.798290][ T31] 2 locks held by syz-executor/10312: [ 615.803772][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.812007][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.821035][ T31] 2 locks held by syz-executor/10321: [ 615.826572][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.834950][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.843969][ T31] 2 locks held by syz-executor/10330: [ 615.849763][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.858181][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.867330][ T31] 2 locks held by syz-executor/10339: [ 615.872728][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.880997][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.890094][ T31] 2 locks held by syz-executor/10348: [ 615.895513][ T31] #0: ffffffff8f35dc30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.903819][ T31] #1: ffffffff8f35da48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 615.913011][ T31] [ 615.915530][ T31] ============================================= [ 615.915530][ T31] [ 615.923967][ T31] NMI backtrace for cpu 1 [ 615.923982][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 PREEMPT(full) [ 615.923997][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.924005][ T31] Call Trace: [ 615.924013][ T31] [ 615.924020][ T31] dump_stack_lvl+0x189/0x250 [ 615.924041][ T31] ? __wake_up_klogd+0xd9/0x110 [ 615.924058][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.924075][ T31] ? __pfx__printk+0x10/0x10 [ 615.924093][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 615.924115][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 615.924131][ T31] ? _printk+0xcf/0x120 [ 615.924145][ T31] ? __pfx__printk+0x10/0x10 [ 615.924158][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 615.924174][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 615.924194][ T31] watchdog+0xfee/0x1030 [ 615.924211][ T31] ? watchdog+0x1de/0x1030 [ 615.924247][ T31] kthread+0x711/0x8a0 [ 615.924274][ T31] ? __pfx_watchdog+0x10/0x10 [ 615.924298][ T31] ? __pfx_kthread+0x10/0x10 [ 615.924323][ T31] ? __pfx_kthread+0x10/0x10 [ 615.924345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.924365][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.924387][ T31] ? __pfx_kthread+0x10/0x10 [ 615.924409][ T31] ret_from_fork+0x4b/0x80 [ 615.924431][ T31] ? __pfx_kthread+0x10/0x10 [ 615.924455][ T31] ret_from_fork_asm+0x1a/0x30 [ 615.924492][ T31] [ 616.067491][ T31] Sending NMI from CPU 1 to CPUs 0: [ 616.072949][ C0] NMI backtrace for cpu 0 [ 616.072969][ C0] CPU: 0 UID: 0 PID: 6136 Comm: kworker/u8:20 Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 PREEMPT(full) [ 616.072989][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.073000][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 616.073027][ C0] RIP: 0010:unwind_get_return_address+0x6c/0x90 [ 616.073050][ C0] Code: 23 b0 00 48 8b 3b e8 53 b2 1b 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 50 23 b0 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f cc cc cc cc cc 89 d9 80 e1 07 80 c1 03 38 c1 7c a8 48 89 df e8 [ 616.073065][ C0] RSP: 0018:ffffc90005197120 EFLAGS: 00000246 [ 616.073080][ C0] RAX: ffffffff8aa8980f RBX: ffffc900051971e0 RCX: 40eb72f24a238000 [ 616.073092][ C0] RDX: 0000000000000001 RSI: ffffffff8d93f9ce RDI: ffffffff8aa8980f [ 616.073104][ C0] RBP: ffffc900051971b0 R08: ffffc90005197ac0 R09: 0000000000000000 [ 616.073115][ C0] R10: ffffc90005197178 R11: fffff52000a32e31 R12: ffff8880264fbc00 [ 616.073128][ C0] R13: ffff888087f45000 R14: ffffffff81acddf0 R15: ffffc90005197128 [ 616.073140][ C0] FS: 0000000000000000(0000) GS:ffff8881260b5000(0000) knlGS:0000000000000000 [ 616.073177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.073189][ C0] CR2: 00005566b59f7000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 616.073206][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 616.073216][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 616.073227][ C0] Call Trace: [ 616.073234][ C0] [ 616.073241][ C0] arch_stack_walk+0xfc/0x150 [ 616.073267][ C0] ? cfg80211_wiphy_work+0x2df/0x460 [ 616.073291][ C0] stack_trace_save+0x9c/0xe0 [ 616.073309][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 616.073332][ C0] kasan_save_track+0x3e/0x80 [ 616.073351][ C0] ? kasan_save_track+0x3e/0x80 [ 616.073368][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 616.073386][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 616.073406][ C0] ? ieee802_11_parse_elems_full+0x152/0x2b20 [ 616.073425][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0 [ 616.073441][ C0] ? ieee80211_iface_work+0x806/0xfe0 [ 616.073479][ C0] ? __kmalloc_noprof+0xe7/0x4f0 [ 616.073500][ C0] __kasan_kmalloc+0x93/0xb0 [ 616.073519][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 616.073539][ C0] ? ieee802_11_parse_elems_full+0x152/0x2b20 [ 616.073568][ C0] ieee802_11_parse_elems_full+0x152/0x2b20 [ 616.073591][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.073608][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 616.073630][ C0] ? unwind_next_frame+0xa5/0x2390 [ 616.073649][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 616.073668][ C0] ? __lock_acquire+0xaac/0xd20 [ 616.073695][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 616.073718][ C0] ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0 [ 616.073741][ C0] ? __lock_acquire+0xaac/0xd20 [ 616.073765][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 616.073780][ C0] ? __lock_acquire+0xaac/0xd20 [ 616.073804][ C0] ? __lock_acquire+0xaac/0xd20 [ 616.073841][ C0] ieee80211_iface_work+0x806/0xfe0 [ 616.073863][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 616.073883][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 616.073900][ C0] process_scheduled_works+0xade/0x17a0 [ 616.073928][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.073952][ C0] worker_thread+0x8a0/0xda0 [ 616.073969][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 616.073990][ C0] ? __kthread_parkme+0x7b/0x200 [ 616.074012][ C0] kthread+0x711/0x8a0 [ 616.074032][ C0] ? __pfx_worker_thread+0x10/0x10 [ 616.074048][ C0] ? __pfx_kthread+0x10/0x10 [ 616.074067][ C0] ? __pfx_kthread+0x10/0x10 [ 616.074086][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.074101][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.074119][ C0] ? __pfx_kthread+0x10/0x10 [ 616.074137][ C0] ret_from_fork+0x4b/0x80 [ 616.074154][ C0] ? __pfx_kthread+0x10/0x10 [ 616.074173][ C0] ret_from_fork_asm+0x1a/0x30 [ 616.074195][ C0] [ 616.094211][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 616.094239][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-01263-ge6b3527c3b0a #0 PREEMPT(full) [ 616.094263][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.094276][ T31] Call Trace: [ 616.094285][ T31] [ 616.094303][ T31] dump_stack_lvl+0x99/0x250 [ 616.094335][ T31] ? __asan_memcpy+0x40/0x70 [ 616.094357][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.094384][ T31] ? __pfx__printk+0x10/0x10 [ 616.094416][ T31] panic+0x2db/0x790 [ 616.094448][ T31] ? __pfx_panic+0x10/0x10 [ 616.094472][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 616.094498][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 616.094521][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 616.094556][ T31] watchdog+0x102d/0x1030 [ 616.094584][ T31] ? watchdog+0x1de/0x1030 [ 616.094617][ T31] kthread+0x711/0x8a0 [ 616.094644][ T31] ? __pfx_watchdog+0x10/0x10 [ 616.094667][ T31] ? __pfx_kthread+0x10/0x10 [ 616.094692][ T31] ? __pfx_kthread+0x10/0x10 [ 616.094713][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.094733][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.094754][ T31] ? __pfx_kthread+0x10/0x10 [ 616.094777][ T31] ret_from_fork+0x4b/0x80 [ 616.094796][ T31] ? __pfx_kthread+0x10/0x10 [ 616.094819][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.094853][ T31] [ 616.603244][ T31] Kernel Offset: disabled [ 616.607578][ T31] Rebooting in 86400 seconds..