last executing test programs: 33.332827006s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, 0x0, 0x0) 33.210199579s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x11, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 33.185564104s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 33.077495112s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, 0x0, 0x0, 0x1000) 32.939291168s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x578) 32.77908093s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 32.288196114s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bbf8c07", "e0e0ffffff000024"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "687d1f031f0f3df1", "40e3212aaabc72b23eeac9675939f9e6", "9831152a", "205d7440996fe31b"}, 0x28) 32.230912181s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x30, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) 32.204519041s ago: executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) 32.041159348s ago: executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x6f, 0x0, &(0x7f0000000040)) 32.014310485s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x109}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 31.93991993s ago: executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x64, 0x0, 0x601, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}}, 0x0) 31.854505656s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000100), 0x20000000}, 0x20) 31.773395246s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x11, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 31.703377559s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 31.694131287s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000021c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002080)=""/167, 0x44, 0x0, &(0x7f0000002140)=""/99, 0x63}, &(0x7f0000002240)=0x88) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x80fe, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaa50ab7bb127f1adbb0180c200050086dd6028010000a55d00fc00000000000000000000000000b500ff02000000000000000000000000000124208100000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000319560ce7ed773450008"], 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1f, [0x3, 0x80000000, 0x7, 0x7fffffffffffffff, 0x7fff, 0x5]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_int(r4, 0x29, 0x34, &(0x7f0000000080)=0x3, 0x4) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0xc0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a00)="f5", 0x1}], 0x1}}], 0x1, 0x4001) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000001a40)=""/4096, &(0x7f0000000300)=0x1000) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe80000000610320489e15c4150000bbff020000000000018900907800000000ff010000000000000000000000000001fc0100"/94], 0x0) recvfrom(r7, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002123, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r5, 0xd993000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000600)='ext4_es_lookup_extent_exit\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 31.522843838s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bbf8c07", "e0e0ffffff000024"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "687d1f031f0f3df1", "40e3212aaabc72b23eeac9675939f9e6", "9831152a", "205d7440996fe31b"}, 0x28) 31.39687899s ago: executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) 31.335893087s ago: executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xac}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(r0) 31.264354153s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', '', [{0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f|\xa2\x87\xbaC?2\x97\x9e\'(\x0f\xaf\xf1\"\xc4.\xe0\x01\xef,\f\xc1\xf7\t\xab\xb84\xd3\xfae<\xb7\xb0\x043\xd1\x9an\xe91fR(\x8b\xf7?Aev\xec-8\xf5\rwPV\xc1Cd\x90\xf0]J\x8c\bh\xadDO\xaf#\x99\xd1\xc0cn\r\xd8\xf8\xf4\x92\xc5#m\x11\xe3\x94J\x9a\xe1\xa7\xc8\v\x12\x97\xd1\x8f\xaakZ\xce\x9c\xbe\x9d\xf5\x9f\xaf\xc1\xab\xbf\x8dl*\x16\xca\x82K\xefN\xd9\t\x02\xc5\xf1Y8\xd4\xd9\xe6[{sa\xda\xa0\xf6\xa6m8\xc7\x8eg\x7f\xd8r\xce\x0fP?\xdc\x03\xcex\x0e\xee\x9b\xb0\xe1\xbd\x82t\xbd}\xb3\x16\x12\xe0P\xa6{\x8bj\xc9\xc8\v\xf46\xb3CX\xf0\xda\xa0KT\xac\xac\xb1\xd2wg\a\xc3}\xed\xa3\x8a\xb5\xf6T\x9a\n\f>A\xd8\xaf\xa6\xcb e'}, {0x20, 'pids.current\x00'}, {0x20, ':a'}, {}, {0x20, '\a\xa4\xb0\xd5\xf70\x00'}, {0x20, 'lo\x00'}, {0x20, '$\xc4'}]}, 0x10a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x4, 0x0, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000002bbbbbbbb00"], 0x20}}, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000706ff010000000000000000000000000500010006409e0ec907002e000000fae1e0b81b4cf6839f02ad2c9d597f8f70547eecd0532b52e09a1df8a86892b694b451d653c2231c1ff5f2724800b76e636038821ec7d2b7a9db14eb0160bc8d5e6b2d60f4e0b16bd4ab4136f2ba5b0e2e2517f6d26a26de3c6b"], 0x1c}}, 0x0) 31.088039093s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 30.671523893s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000000802110000000000018000000000000064000900001ddaf64774645e74813d173aa3ab10a67bc40af66a00"], 0x4e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xd21, 0x5b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000ac0)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @initial, {0x7, 0x2}}, 0x1, 0x0, 0x69, @void, [{0xdd, 0xb1, "4fcb44700fd1af4e47efa863dd2f1df6886f6e6b2f4722938eb0fac798465062156b4732bcce7d0ba893d82424dc5dc802483d095e4a156f262b5bd70f2fa19612e757ee7560ad479b7531bc45d7a6bbbbefebea349eaa9da7b64e84d96bf212bc410d8bf622dd1f3c8a626f146d40c14136e565bf9e4e620fcdfc5c5cb5a93f77727beac8ba15df676aa157c3217d876b39c1628664b2b38ca9363385a4afcc2ef83d963c5e2cda9dbfa4c5c734e7b0ca"}, {0xdd, 0x32, "2b1aebf0f603b538d3eef13e7de41673d389a8650061ef85d8b760ac5ccd8179595c8a242d34df22248e288f0d13bf31ee17"}, {0xdd, 0x6b, "b3206410e95110ba66fb380a0b3e18b832b521b8d40600ba86ce0334aeba4189c9a006ee17310141367816496eecf91e5579edfaf2a2a187ae7a62f6ee6857f71f44e3c2187fe7b90cafd8ed6a729717b75ab4d91d681b6c68981f2c53d9a785ee425f6761a25abad201a4"}, {0xdd, 0x11, "5e666a0386e3f4ebd26170b8f5f58d88af"}, {0xdd, 0xab, "d1ca45155ebf4dc45f4dc3f33642ed89246a830a54c82e00ec43ab7276117b782a2206c621f0aad4ed67b709223c9b5311272580518eff272dbc07aa1f734971779cc818f392667f82860bc18d92ec4774df034e2e4ff27bdae87cd523559caeeb42157242411a43286e37dae358fb8e00955a7a917b06d7c1bdac36aa744320e76b391cd2c6c3d0915538203dc68db2137af3b28f3ef8e6411feca0cb97592c34810d60fbd3422d038491"}, {0xdd, 0xc6, "90c943fec9c4d7ee07bc3efed1480ad5de90c8adf49128f42b21196919926a701b013b535275fc90b059daf1860cbf11b190036e9bab3c3ef2c834af014d69e397c02e21622ef126ff431175e994df4d0fcde1b601ea7442cfdce73d1720175f82906c181aa72ac9067f812dcbce9bca1a12ad00c84b0c9c06385f37591a99a16c528859c39dd80847984a4d14fea5986e5799e9cee13c407aea5ccb66a452d5c2cd4ae28edbd4359ff175a5632afe17f45c5ce11fc5906434583a7836dee4f052f90aa0eb54"}]}, 0x2fa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x9811e1e6bd76e245, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000300e0808c088f9425147bc841d0cd00317654acd4040f61763697d96f91eaf1ee43eb2d54260838d3067ed81367d1af2694b3d395a29d53160362e93f68956e8d6c8d7a789b12a0b1083f2ef1e1805cea51", @ANYRES32, @ANYBLOB="0a000600ffffffffffff00000800a400020000000500740000000000"], 0x38}}, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 30.436231101s ago: executing program 1: syz_emit_ethernet(0x9e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x1d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@noop, @end, @timestamp={0x44, 0x24, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0]}, @lsrr={0x83, 0x3}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@private}, {@empty}, {@remote}]}, @generic={0x0, 0x8, "c48fb4aa6de3"}]}}}}}}}, 0x0) 30.36661387s ago: executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x64, 0x0, 0x601, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}}, 0x0) 30.014672729s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 1.671183488s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.666789038s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x37e, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) 1.064413229s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x0, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 347.392062ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, 0x0, 0x0, 0x1000) 0s ago: executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. 2024/06/14 10:46:54 fuzzer started 2024/06/14 10:46:54 dialing manager at 10.128.0.169:30018 [ 51.427844][ T5088] cgroup: Unknown subsys name 'net' [ 51.585948][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/14 10:46:56 starting 5 executor processes [ 52.647284][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.659256][ T5097] syz-executor (5097) used greatest stack depth: 18704 bytes left [ 53.753756][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.761512][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.765022][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.770931][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.779491][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.783999][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.790460][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.805470][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.805473][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.808887][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.813306][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.820488][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.827913][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.842376][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.848414][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.854938][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.861451][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.869324][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.877618][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.883034][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.890681][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.896534][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.903398][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.910627][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.931520][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.939139][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.939304][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.955929][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.963367][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.973561][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.558138][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 54.618298][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 54.644795][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 54.712666][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 54.748769][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 54.760266][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.767952][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.775552][ T5111] bridge_slave_0: entered allmulticast mode [ 54.782282][ T5111] bridge_slave_0: entered promiscuous mode [ 54.814457][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.821552][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.828972][ T5111] bridge_slave_1: entered allmulticast mode [ 54.835627][ T5111] bridge_slave_1: entered promiscuous mode [ 54.929215][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.980798][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.988015][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.995658][ T5115] bridge_slave_0: entered allmulticast mode [ 55.002282][ T5115] bridge_slave_0: entered promiscuous mode [ 55.015260][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.039096][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.046605][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.054015][ T5108] bridge_slave_0: entered allmulticast mode [ 55.060608][ T5108] bridge_slave_0: entered promiscuous mode [ 55.067637][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.078046][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.085759][ T5115] bridge_slave_1: entered allmulticast mode [ 55.092876][ T5115] bridge_slave_1: entered promiscuous mode [ 55.131708][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.138861][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.146355][ T5108] bridge_slave_1: entered allmulticast mode [ 55.152983][ T5108] bridge_slave_1: entered promiscuous mode [ 55.192479][ T5111] team0: Port device team_slave_0 added [ 55.201677][ T5111] team0: Port device team_slave_1 added [ 55.236261][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.243608][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.250703][ T5110] bridge_slave_0: entered allmulticast mode [ 55.257580][ T5110] bridge_slave_0: entered promiscuous mode [ 55.266504][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.274050][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.281148][ T5110] bridge_slave_1: entered allmulticast mode [ 55.288553][ T5110] bridge_slave_1: entered promiscuous mode [ 55.302863][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.310257][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.317483][ T5109] bridge_slave_0: entered allmulticast mode [ 55.324296][ T5109] bridge_slave_0: entered promiscuous mode [ 55.332285][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.339450][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.347131][ T5109] bridge_slave_1: entered allmulticast mode [ 55.354404][ T5109] bridge_slave_1: entered promiscuous mode [ 55.362798][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.374618][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.386911][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.416623][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.423746][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.449880][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.472120][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.508252][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.515294][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.541411][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.569240][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.600081][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.612967][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.631234][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.654047][ T5115] team0: Port device team_slave_0 added [ 55.696999][ T5108] team0: Port device team_slave_0 added [ 55.721564][ T5115] team0: Port device team_slave_1 added [ 55.750622][ T5110] team0: Port device team_slave_0 added [ 55.758358][ T5108] team0: Port device team_slave_1 added [ 55.767129][ T5109] team0: Port device team_slave_0 added [ 55.796142][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.803094][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.832422][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.846098][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.853042][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.879138][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.892134][ T5110] team0: Port device team_slave_1 added [ 55.931005][ T5109] team0: Port device team_slave_1 added [ 55.944306][ T5127] Bluetooth: hci1: command tx timeout [ 55.944321][ T5119] Bluetooth: hci3: command tx timeout [ 55.961796][ T5111] hsr_slave_0: entered promiscuous mode [ 55.968372][ T5111] hsr_slave_1: entered promiscuous mode [ 55.996587][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.003765][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.029955][ T5119] Bluetooth: hci2: command tx timeout [ 56.033353][ T5127] Bluetooth: hci4: command tx timeout [ 56.035817][ T5119] Bluetooth: hci0: command tx timeout [ 56.047304][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.059396][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.066684][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.092691][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.105985][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.112944][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.139015][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.183838][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.190841][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.217300][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.233696][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.240660][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.266746][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.309472][ T5115] hsr_slave_0: entered promiscuous mode [ 56.315834][ T5115] hsr_slave_1: entered promiscuous mode [ 56.321840][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.329817][ T5115] Cannot create hsr debugfs directory [ 56.364792][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.371739][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.399225][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.461722][ T5108] hsr_slave_0: entered promiscuous mode [ 56.468672][ T5108] hsr_slave_1: entered promiscuous mode [ 56.474940][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.482476][ T5108] Cannot create hsr debugfs directory [ 56.530739][ T5110] hsr_slave_0: entered promiscuous mode [ 56.537006][ T5110] hsr_slave_1: entered promiscuous mode [ 56.542998][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.550615][ T5110] Cannot create hsr debugfs directory [ 56.612234][ T5109] hsr_slave_0: entered promiscuous mode [ 56.619063][ T5109] hsr_slave_1: entered promiscuous mode [ 56.625302][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.632838][ T5109] Cannot create hsr debugfs directory [ 56.996638][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.010261][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.021319][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.034072][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.094926][ T5109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.112500][ T5109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.128957][ T5109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.138179][ T5109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.208377][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.218972][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.231437][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.241908][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.337543][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.368167][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.378653][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.401571][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.409797][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.490740][ T5110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.516952][ T5110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.547397][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.556408][ T5110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.569718][ T5110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.597852][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.612387][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.619646][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.651293][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.658441][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.690444][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.734997][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.782523][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.789684][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.817058][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.848747][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.855847][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.865813][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.873123][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.882053][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.889141][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.024270][ T5119] Bluetooth: hci3: command tx timeout [ 58.024294][ T5123] Bluetooth: hci1: command tx timeout [ 58.103864][ T5123] Bluetooth: hci4: command tx timeout [ 58.103990][ T5119] Bluetooth: hci0: command tx timeout [ 58.109279][ T5127] Bluetooth: hci2: command tx timeout [ 58.126094][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.183140][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.210616][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.230283][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.237521][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.256979][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.264143][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.284046][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.382030][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.421831][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.429014][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.440847][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.447946][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.526181][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.642562][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.708062][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.747165][ T5109] veth0_vlan: entered promiscuous mode [ 58.828683][ T5109] veth1_vlan: entered promiscuous mode [ 58.861428][ T5115] veth0_vlan: entered promiscuous mode [ 58.918311][ T5115] veth1_vlan: entered promiscuous mode [ 58.984848][ T5111] veth0_vlan: entered promiscuous mode [ 59.007219][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.028776][ T5109] veth0_macvtap: entered promiscuous mode [ 59.048718][ T5111] veth1_vlan: entered promiscuous mode [ 59.066810][ T5109] veth1_macvtap: entered promiscuous mode [ 59.124903][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.139172][ T5111] veth0_macvtap: entered promiscuous mode [ 59.150821][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.161038][ T5115] veth0_macvtap: entered promiscuous mode [ 59.180957][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.197611][ T5110] veth0_vlan: entered promiscuous mode [ 59.207647][ T5115] veth1_macvtap: entered promiscuous mode [ 59.222976][ T5111] veth1_macvtap: entered promiscuous mode [ 59.258503][ T5109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.268026][ T5109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.277328][ T5109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.287148][ T5109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.300794][ T5110] veth1_vlan: entered promiscuous mode [ 59.340765][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.352754][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.365833][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.373221][ T5108] veth0_vlan: entered promiscuous mode [ 59.386801][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.398115][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.408132][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.418596][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.429421][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.452149][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.463011][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.475553][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.485196][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.497236][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.507823][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.518650][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.530197][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.557238][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.566103][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.576257][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.585070][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.598897][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.608275][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.617151][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.627718][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.646851][ T5108] veth1_vlan: entered promiscuous mode [ 59.722727][ T5110] veth0_macvtap: entered promiscuous mode [ 59.734982][ T5110] veth1_macvtap: entered promiscuous mode [ 59.770576][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.787628][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.809553][ T5108] veth0_macvtap: entered promiscuous mode [ 59.823673][ T5108] veth1_macvtap: entered promiscuous mode [ 59.877697][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.881738][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.898014][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.901120][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.908749][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.926806][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.937873][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.948727][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959883][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.980228][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.991399][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.001832][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.012519][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.022445][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.034800][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.045622][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.056100][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.066875][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.096477][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.112885][ T5119] Bluetooth: hci1: command tx timeout [ 60.113121][ T5127] Bluetooth: hci3: command tx timeout [ 60.118917][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.134085][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.146812][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.156891][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.168063][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.179665][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.187127][ T5119] Bluetooth: hci4: command tx timeout [ 60.187219][ T5127] Bluetooth: hci2: command tx timeout [ 60.193610][ T5127] Bluetooth: hci0: command tx timeout [ 60.201375][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.214456][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.224625][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.235318][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.245327][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.256371][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.272122][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.282813][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.295013][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.318818][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.319070][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.330788][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.345340][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.355189][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.357128][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.400702][ T5110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.410290][ T5110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.420444][ T5110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.430870][ T5110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.461561][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.470280][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.625705][ T2484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.658159][ T2484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.704220][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.722707][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.773369][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.781211][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.894287][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.925672][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.964622][ T5204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.047536][ T2455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.051174][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.072340][ T2455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.099499][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.539172][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.856989][ T5236] syzkaller0: entered allmulticast mode [ 62.186113][ T5119] Bluetooth: hci3: command tx timeout [ 62.191856][ T5127] Bluetooth: hci1: command tx timeout [ 62.240251][ T5253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 62.264265][ T5119] Bluetooth: hci2: command tx timeout [ 62.265201][ T5123] Bluetooth: hci4: command tx timeout [ 62.269682][ T5127] Bluetooth: hci0: command tx timeout [ 62.461138][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.969231][ T5280] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.195489][ T5293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.233772][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.848154][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.989539][ T5332] veth0_vlan: entered allmulticast mode [ 64.163880][ T5336] veth0_vlan: left promiscuous mode [ 64.197465][ T5336] veth0_vlan: left allmulticast mode [ 64.229282][ T5336] veth0_vlan: entered promiscuous mode [ 64.440266][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.678717][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.012377][ T5383] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.100229][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.563731][ T5446] __nla_validate_parse: 1 callbacks suppressed [ 66.563749][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.304039][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.982224][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.643843][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.039140][ C1] net_ratelimit: 2 callbacks suppressed [ 69.039160][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 69.227903][ T5574] dccp_invalid_packet: P.Data Offset(3) too small [ 69.349236][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.611361][ T5594] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 69.646957][ T5597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.173014][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.580593][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.616688][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.664314][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.703400][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.131412][ T5663] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 71.352403][ T5669] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 71.411232][ T5669] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 71.634105][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.640700][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.773966][ T5690] Zero length message leads to an empty skb [ 71.797027][ T5691] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 71.823482][ T5689] __nla_validate_parse: 2 callbacks suppressed [ 71.823497][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.985409][ T5691] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 71.999947][ T5695] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.137274][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.251678][ T5703] bond1: entered promiscuous mode [ 72.257553][ T5692] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.273802][ T5699] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.350647][ T5704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.377536][ T5704] bond2: entered promiscuous mode [ 72.393929][ T5704] bond1: (slave bond2): Enslaving as an active interface with an up link [ 72.422320][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.439613][ T5707] bond1 (unregistering): (slave bond2): Releasing backup interface [ 72.458370][ T5707] bond2: left promiscuous mode [ 72.484160][ T5707] bond1 (unregistering): Released all slaves [ 72.508721][ T5701] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.965404][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.052695][ T5745] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.167992][ T5749] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 73.264971][ T5749] bond1: entered promiscuous mode [ 73.411433][ T5753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.426559][ T5753] bond1: (slave bond2): Enslaving as an active interface with a down link [ 73.440937][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.509298][ T5757] bond1 (unregistering): (slave bond2): Releasing active interface [ 73.564382][ T5757] bond1 (unregistering): Released all slaves [ 73.643429][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.772121][ T5762] bond1: entered promiscuous mode [ 73.999372][ T5763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.045349][ T5763] bond2: entered promiscuous mode [ 74.050884][ T5763] bond1: (slave bond2): Enslaving as an active interface with an up link [ 74.067591][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.111959][ T5764] bond1 (unregistering): (slave bond2): Releasing backup interface [ 74.126623][ T5764] bond2: left promiscuous mode [ 74.152795][ T5764] bond1 (unregistering): Released all slaves [ 74.206650][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.068099][ T5825] bond1: entered promiscuous mode [ 75.130913][ T5831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.161971][ T5831] bond3: entered promiscuous mode [ 75.185298][ T5831] bond1: (slave bond3): Enslaving as an active interface with an up link [ 75.199496][ T5834] team_slave_0: entered promiscuous mode [ 75.208352][ T5834] team_slave_0: entered allmulticast mode [ 75.294796][ T5834] team0: Port device team_slave_0 removed [ 75.318617][ T5825] bond1 (unregistering): (slave bond3): Releasing backup interface [ 75.354866][ T5825] bond3: left promiscuous mode [ 75.410576][ T5825] bond1 (unregistering): Released all slaves [ 75.527361][ T5844] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 76.750317][ T929] cfg80211: failed to load regulatory.db [ 77.005740][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.038628][ T5890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.238296][ T5893] dccp_v4_rcv: dropped packet with invalid checksum [ 106.504268][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.511828][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.520761][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.533366][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.540704][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.551250][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.565501][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.578273][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.585437][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.592807][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.600312][ T5119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.608036][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.926001][ T5123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.935493][ T5123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.943103][ T5123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.953432][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.961581][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.969461][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 107.574149][ T5127] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 107.582404][ T5127] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 107.591995][ T5127] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 107.600112][ T5127] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 107.608275][ T5127] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 107.615880][ T5127] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 107.854691][ T5127] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 107.863374][ T5127] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 107.871252][ T5127] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 107.882594][ T5127] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 107.890763][ T5127] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 107.904602][ T5127] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 108.663443][ T5123] Bluetooth: hci5: command tx timeout [ 108.669246][ T5123] Bluetooth: hci6: command tx timeout [ 108.983397][ T5123] Bluetooth: hci7: command tx timeout [ 109.703439][ T5123] Bluetooth: hci8: command tx timeout [ 109.953354][ T5123] Bluetooth: hci9: command tx timeout [ 110.753416][ T5123] Bluetooth: hci6: command tx timeout [ 110.753428][ T5127] Bluetooth: hci5: command tx timeout [ 111.063640][ T5127] Bluetooth: hci7: command tx timeout [ 111.783396][ T5127] Bluetooth: hci8: command tx timeout [ 112.023912][ T5127] Bluetooth: hci9: command tx timeout [ 112.823369][ T5127] Bluetooth: hci6: command tx timeout [ 112.834986][ T5127] Bluetooth: hci5: command tx timeout [ 113.143591][ T5127] Bluetooth: hci7: command tx timeout [ 113.864211][ T5127] Bluetooth: hci8: command tx timeout [ 114.103432][ T5127] Bluetooth: hci9: command tx timeout [ 114.903629][ T5127] Bluetooth: hci5: command tx timeout [ 114.909068][ T5127] Bluetooth: hci6: command tx timeout [ 115.223395][ T5127] Bluetooth: hci7: command tx timeout [ 115.943704][ T5127] Bluetooth: hci8: command tx timeout [ 116.183552][ T5127] Bluetooth: hci9: command tx timeout [ 122.193349][ T5162] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 125.703389][ T8] page_pool_release_retry() stalled pool shutdown: id 24, 1 inflight 60 sec [ 133.068017][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.074533][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.573897][ T5123] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 171.582417][ T5123] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 171.595275][ T5123] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 171.603610][ T5123] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 171.613549][ T5123] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 171.622640][ T5119] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 171.638310][ T5119] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 171.648810][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 171.661161][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 171.674323][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 171.682488][ T5119] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 171.691836][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 172.037641][ T5119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 172.046561][ T5119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 172.056868][ T5119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 172.068227][ T5119] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 172.078707][ T5119] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 172.087823][ T5119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 172.609909][ T5123] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 172.619612][ T5123] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 172.627933][ T5123] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 172.636563][ T5123] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 172.645003][ T5123] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 172.652498][ T5123] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 172.892339][ T5119] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 172.900994][ T5119] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 172.914137][ T5119] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 172.923124][ T5119] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 172.931302][ T5119] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 172.939078][ T5119] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 173.703503][ T5119] Bluetooth: hci10: command tx timeout [ 173.783460][ T5119] Bluetooth: hci11: command tx timeout [ 174.103449][ T5123] Bluetooth: hci12: command tx timeout [ 174.743401][ T5123] Bluetooth: hci13: command tx timeout [ 174.983678][ T5123] Bluetooth: hci14: command tx timeout [ 175.783469][ T5123] Bluetooth: hci10: command tx timeout [ 175.869990][ T5123] Bluetooth: hci11: command tx timeout [ 176.109016][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 176.109247][ T4490] Bluetooth: hci3: command 0x0406 tx timeout [ 176.120961][ T5123] Bluetooth: hci1: command 0x0406 tx timeout [ 176.121832][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 176.138095][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 176.189250][ T5126] Bluetooth: hci12: command tx timeout [ 176.823763][ T5126] Bluetooth: hci13: command tx timeout [ 177.063755][ T5126] Bluetooth: hci14: command tx timeout [ 177.863368][ T5126] Bluetooth: hci10: command tx timeout [ 177.943374][ T5126] Bluetooth: hci11: command tx timeout [ 178.263505][ T5126] Bluetooth: hci12: command tx timeout [ 178.905678][ T5126] Bluetooth: hci13: command tx timeout [ 179.150584][ T5126] Bluetooth: hci14: command tx timeout [ 179.943449][ T5126] Bluetooth: hci10: command tx timeout [ 180.033325][ T5126] Bluetooth: hci11: command tx timeout [ 180.343339][ T5126] Bluetooth: hci12: command tx timeout [ 180.983480][ T5126] Bluetooth: hci13: command tx timeout [ 181.223520][ T5126] Bluetooth: hci14: command tx timeout [ 194.515056][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521370][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.437602][ T5125] Bluetooth: hci6: command 0x0406 tx timeout [ 232.440370][ T5127] Bluetooth: hci9: command 0x0406 tx timeout [ 232.443736][ T5113] Bluetooth: hci5: command 0x0406 tx timeout [ 232.449743][ T5127] Bluetooth: hci8: command 0x0406 tx timeout [ 232.455874][ T4490] Bluetooth: hci7: command 0x0406 tx timeout [ 235.463300][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 235.470893][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 2024/06/14 10:49:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 235.505567][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.519861][ T30] task:kworker/1:0 state:D stack:24720 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 235.530392][ T30] Workqueue: events bpf_prog_free_deferred [ 235.536599][ T30] Call Trace: [ 235.539896][ T30] [ 235.542860][ T30] __schedule+0x17e8/0x4a20 [ 235.547937][ T30] ? __pfx___schedule+0x10/0x10 [ 235.552820][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.559101][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.564526][ T30] ? kick_pool+0x1bd/0x620 [ 235.568972][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.575589][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.580824][ T30] ? schedule+0x90/0x320 [ 235.593311][ T30] schedule+0x14b/0x320 [ 235.597621][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.603103][ T30] __mutex_lock+0x6a4/0xd70 [ 235.613671][ T30] ? __mutex_lock+0x527/0xd70 [ 235.618376][ T30] ? bpf_prog_dev_bound_destroy+0x76/0x590 [ 235.632008][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.637581][ T30] bpf_prog_dev_bound_destroy+0x76/0x590 [ 235.649211][ T30] ? __pfx_bpf_prog_dev_bound_destroy+0x10/0x10 [ 235.655707][ T30] ? bpf_prog_free_deferred+0x375/0x710 [ 235.661270][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.672188][ T30] ? bpf_prog_free_deferred+0x375/0x710 [ 235.678026][ T30] ? kfree+0x4e/0x360 [ 235.682033][ T30] bpf_prog_free_deferred+0x3c5/0x710 [ 235.690720][ T30] ? process_scheduled_works+0x945/0x1830 [ 235.701718][ T30] process_scheduled_works+0xa2c/0x1830 [ 235.708782][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.719505][ T30] ? assign_work+0x364/0x3d0 [ 235.724438][ T30] worker_thread+0x86d/0xd70 [ 235.729061][ T30] ? __kthread_parkme+0x169/0x1d0 [ 235.741868][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.747350][ T30] kthread+0x2f0/0x390 [ 235.751437][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.762507][ T30] ? __pfx_kthread+0x10/0x10 [ 235.767495][ T30] ret_from_fork+0x4b/0x80 [ 235.771933][ T30] ? __pfx_kthread+0x10/0x10 [ 235.799876][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.806479][ T30] [ 235.815814][ T30] INFO: task kworker/0:2:929 blocked for more than 143 seconds. [ 235.843512][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 235.851163][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.883319][ T30] task:kworker/0:2 state:D stack:23440 pid:929 tgid:929 ppid:2 flags:0x00004000 [ 235.907646][ T30] Workqueue: events request_firmware_work_func [ 235.923259][ T30] Call Trace: [ 235.926559][ T30] [ 235.929499][ T30] __schedule+0x17e8/0x4a20 [ 235.943451][ T30] ? __pfx___schedule+0x10/0x10 [ 235.948333][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.963286][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 235.968787][ T30] ? kthread_data+0x52/0xd0 [ 235.