last executing test programs: 1m51.68477796s ago: executing program 0 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x3e, 0x107, 0x7, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m51.600802046s ago: executing program 2 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 1m51.476484018s ago: executing program 0 (id=201): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) 1m51.434518057s ago: executing program 2 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="d7488ef46b0b"}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022"], 0x10da) 1m51.10522497s ago: executing program 2 (id=206): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 1m50.645671104s ago: executing program 2 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffffffff}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x16}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1m50.505235203s ago: executing program 0 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010100000000000000000a0000000900010073797a30000000003c000000030a010200000000000000000a0000000900010073797a300000000008000b"], 0x84}}, 0x0) 1m50.475304514s ago: executing program 0 (id=211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x325, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044084}, 0x20040850) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) 1m50.414314032s ago: executing program 0 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}]}, 0x48}}, 0x0) 1m49.441382903s ago: executing program 2 (id=216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070429bd7000fddbdf252800000005002b0000000000060006000200000008000200", @ANYRES32=r2, @ANYBLOB="060004"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) 1m49.377111865s ago: executing program 0 (id=217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 1m48.955069093s ago: executing program 2 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 1m34.352785801s ago: executing program 32 (id=217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r0, 0x0, 0x80000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 1m33.849648829s ago: executing program 33 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 1m18.982053358s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xa01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 1m3.857027956s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xa01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 50.151568743s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xa01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 37.593138049s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xa01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 24.824649502s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xa01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 14.994112999s ago: executing program 4 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x10}], 0x2, 0x10002, 0x0) sendto$unix(r2, &(0x7f00000014c0), 0x0, 0x44810, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x10, 0x80000801, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1042, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000300)=0x3) write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[], 0xffdd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 14.480960754s ago: executing program 4 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 14.229068484s ago: executing program 4 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xfff, 0x0, 0x0, 0x4, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) 13.918278847s ago: executing program 4 (id=951): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x2, 0x4) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000140)={0x80000000}) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x0, 0xfffffffd}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x4000000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c00000005000000000000000f00004000040000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="42742f81dd188f6074582c0f85000000000004000000000000000002000000000000001c0000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.404777328s ago: executing program 4 (id=956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x1ff, 0xffff, 0x8a}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 13.151634329s ago: executing program 4 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) (fail_nth: 8) 10.218035246s ago: executing program 3 (id=174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0xa01, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 4.551252152s ago: executing program 5 (id=1000): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 4.176834907s ago: executing program 5 (id=1002): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000580)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x1008, 0x3, &(0x7f0000000000)="ccf880", 0x9, 0x49, 0x458, 0xa0b, 0x9934, 0x2, 0x7, 'syz1\x00'}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) unshare(0x20000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2c, &(0x7f0000000080)=0x8000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4840}, 0x4000010) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '[,.\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000100)) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.699009363s ago: executing program 1 (id=1005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000000000645a9", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 3.595905956s ago: executing program 1 (id=1006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180aec1340b5556d950000000000000095000000007900"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000002000001811000082b4e5fe3bc12507997052226d9464", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x100000000}, 0x18) tee(r2, 0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000005000000950000000000000051d6848cfe22abe6798853358882383873f92e8c6ec8f484324a9813a0215dd0c3bf215eeec8fb70d8a71bb633561e2b25dd036d5e94cbaf836ce8adcb999d2cf05dd70c5e909deff62fd9be78470b00e67e12a8d35a57b3fb0e33476054855ef06d5703996d99ad0ae5bc365fd988d3fd8222b8f70fda0bbc828e43fa4136003d47e52be16eaec61b637b7d383f84853bddc38de67a71f784667a0bc466cccac2816604d0d0c330bf551aed051bd60edae082454ac91c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x4, 0x200, {0x60, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x10001, 0x80000000, 0x6, 0x8, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x80}]}}}]}, 0x64}}, 0x40) unshare(0x20000400) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={r6, 0x5, 0xb, 0x8fe}) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000006c0)={r6, r7, 0x5, 0x71, &(0x7f00000004c0)="69de81a4477e3e4a83a4e50910ed1e206857127d85cf354f999ea7ca658b935f72080b187733518f56aea31818e68f59c20e293b85ad24b535280df8f69ea92dcd3b79787c6e0403bb34649a336b26f817229f62146d17eb47f3b5c42dcbb9eb00bac27fbfac9f7aff9a52924f66c4672d", 0xff, 0xa, 0xe, 0x6, 0xa, 0x3, 0x400, 'syz1\x00'}) getsockopt$sock_buf(r7, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.290223532s ago: executing program 1 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x8, @private2, 0x988}, 0x1c, &(0x7f0000000880)}}], 0x1, 0x408c0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0xa, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000200)={'vlan0\x00', 0x5}) 3.105072566s ago: executing program 1 (id=1008): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1c8}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000) recvmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r6], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 3.104470679s ago: executing program 5 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1c8}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000) recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r6], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 1.317595287s ago: executing program 6 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db00000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) 1.24903639s ago: executing program 1 (id=1011): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRESDEC, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 1.223051894s ago: executing program 5 (id=1012): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x200, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x4, &(0x7f0000000340)=""/44, 0x2c}, 0x6}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000640)=""/77, 0x4d}], 0x2, &(0x7f0000000580)=""/175, 0xaf}, 0x5}, {{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/25, 0x19}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/55, 0x37}, {&(0x7f0000001b00)=""/134, 0x86}, {&(0x7f0000000940)=""/77, 0x4d}], 0x5, &(0x7f0000000a40)=""/4096, 0x1000}, 0x6}], 0x3, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r2}, 0x38) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800455c00200003000000119078000000000000048a06456f6fe19c907881000000"], 0x0) 1.094512966s ago: executing program 6 (id=1013): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}, 0x308}, 0x0) 999.976766ms ago: executing program 6 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000604000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1], 0x8c}, 0x1, 0xba01}, 0x0) 732.301054ms ago: executing program 6 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r12 = socket$inet6(0xa, 0x5, 0x8) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x1f, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xffe8}}}, 0x24}}, 0x4000) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r10, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050027bd7000080000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0400e2000400d0000a0034000202f80102020001"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40488c0) 260.608105ms ago: executing program 6 (id=1016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000000000645a9", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 259.904301ms ago: executing program 5 (id=1017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1c8}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000) recvmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r6], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 259.515108ms ago: executing program 1 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73) 36.920286ms ago: executing program 6 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400", 0xd, 0x0, &(0x7f0000000140), 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) socket(0xf, 0x6, 0x101) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10262}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000008c0)={0x5ac, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xda3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8, 0x6, 0x5, 0x4}, {0x7, 0x7, 0x4, 0x8ac4}, {0x0, 0x4, 0x7, 0x8}, {0x29, 0x2, 0x4, 0x2}, {0xff, 0x1, 0x7}, {0xe, 0x9, 0x6}, {0x8, 0x7f, 0x0, 0x4}, {0x2, 0x7, 0x5, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6c, 0xb, 0x8, 0x8}, {0x8, 0x5a, 0xab, 0x4}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa000806000100000604"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x59, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000b6110760000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8004745a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000008000010000000000048"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 000000000000293 R12: 0000000000000001 [ 179.912054][ T8052] R13: 0000000000000000 R14: 00007fb2811b5fa0 R15: 00007ffe0ff6ca18 [ 179.912086][ T8052] [ 180.279903][ T7801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.710370][ T8067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.728663][ T8071] syzkaller1: entered promiscuous mode [ 180.743522][ T8071] syzkaller1: entered allmulticast mode [ 180.835818][ T8073] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 180.905015][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.140942][ T7801] veth0_vlan: entered promiscuous mode [ 181.184437][ T7801] veth1_vlan: entered promiscuous mode [ 181.233225][ T8092] netlink: 72 bytes leftover after parsing attributes in process `syz.4.657'. [ 181.283327][ T7801] veth0_macvtap: entered promiscuous mode [ 181.309321][ T8094] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 181.330218][ T7801] veth1_macvtap: entered promiscuous mode [ 181.352158][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 181.402025][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.454403][ T7801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.492228][ T7801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.513174][ T7801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.525819][ T7801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.541356][ T7801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.768237][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.787006][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.844722][ T4575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.853489][ T4575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.396882][ T8123] xt_hashlimit: size too large, truncated to 1048576 [ 182.909910][ T51] Bluetooth: hci0: command tx timeout [ 183.017297][ T180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.118733][ T180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.251284][ T180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.350498][ T180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.627810][ T180] bridge_slave_1: left allmulticast mode [ 183.633513][ T180] bridge_slave_1: left promiscuous mode [ 183.667109][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.717883][ T180] bridge_slave_0: left allmulticast mode [ 183.725701][ T180] bridge_slave_0: left promiscuous mode [ 183.737810][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.746379][ T8147] FAULT_INJECTION: forcing a failure. [ 183.746379][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.819174][ T8151] __nla_validate_parse: 1 callbacks suppressed [ 183.819194][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'. [ 183.823993][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.1.675 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 183.824028][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.824042][ T8147] Call Trace: [ 183.824052][ T8147] [ 183.824061][ T8147] dump_stack_lvl+0x189/0x250 [ 183.824119][ T8147] ? __pfx____ratelimit+0x10/0x10 [ 183.824151][ T8147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.824187][ T8147] ? __pfx__printk+0x10/0x10 [ 183.824225][ T8147] ? __might_fault+0xb0/0x130 [ 183.824262][ T8147] should_fail_ex+0x414/0x560 [ 183.824317][ T8147] _copy_from_iter+0x1db/0x16f0 [ 183.824357][ T8147] ? rcu_is_watching+0x15/0xb0 [ 183.824381][ T8147] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 183.824407][ T8147] ? __pfx__copy_from_iter+0x10/0x10 [ 183.824443][ T8147] ? __build_skb_around+0x257/0x3e0 [ 183.824470][ T8147] ? netlink_sendmsg+0x642/0xb30 [ 183.824490][ T8147] ? skb_put+0x11b/0x210 [ 183.824517][ T8147] netlink_sendmsg+0x6b2/0xb30 [ 183.824550][ T8147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.824596][ T8147] ? aa_sock_msg_perm+0x94/0x160 [ 183.824629][ T8147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.824659][ T8147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.824684][ T8147] __sock_sendmsg+0x219/0x270 [ 183.824721][ T8147] __sys_sendto+0x3bd/0x520 [ 183.824745][ T8147] ? __pfx___sys_sendto+0x10/0x10 [ 183.824781][ T8147] ? count_memcg_event_mm+0x21/0x260 [ 183.824845][ T8147] ? exc_page_fault+0x76/0xf0 [ 183.824878][ T8147] ? do_user_addr_fault+0xc8a/0x1390 [ 183.824915][ T8147] __x64_sys_sendto+0xde/0x100 [ 183.824941][ T8147] do_syscall_64+0xfa/0x3b0 [ 183.824970][ T8147] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.825003][ T8147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.825024][ T8147] ? clear_bhb_loop+0x60/0xb0 [ 183.825052][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.825074][ T8147] RIP: 0033:0x7f10d81907bc [ 183.825100][ T8147] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 183.825120][ T8147] RSP: 002b:00007f10d900bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 183.825151][ T8147] RAX: ffffffffffffffda RBX: 00007f10d900bfc0 RCX: 00007f10d81907bc [ 183.825168][ T8147] RDX: 000000000000001c RSI: 00007f10d900c010 RDI: 0000000000000004 [ 183.825183][ T8147] RBP: 0000000000000000 R08: 00007f10d900bf14 R09: 000000000000000c [ 183.825196][ T8147] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 183.825210][ T8147] R13: 00007f10d900bf68 R14: 00007f10d900c010 R15: 0000000000000000 [ 183.825246][ T8147] [ 184.423244][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.439227][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.448826][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.462475][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.470418][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.763755][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.780284][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.802395][ T180] bond0 (unregistering): Released all slaves [ 185.243533][ T8175] netlink: 72 bytes leftover after parsing attributes in process `syz.4.685'. [ 185.447184][ T8182] syzkaller1: entered promiscuous mode [ 185.483483][ T8182] syzkaller1: entered allmulticast mode [ 185.614976][ T8194] x_tables: duplicate underflow at hook 2 [ 185.765211][ T180] hsr_slave_0: left promiscuous mode [ 185.781302][ T180] hsr_slave_1: left promiscuous mode [ 185.798433][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.806020][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.823044][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.831951][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.869021][ T180] veth1_macvtap: left promiscuous mode [ 185.883621][ T180] veth0_macvtap: left promiscuous mode [ 185.895103][ T180] veth1_vlan: left promiscuous mode [ 185.913560][ T180] veth0_vlan: left promiscuous mode [ 186.486591][ T180] team0 (unregistering): Port device team_slave_1 removed [ 186.510753][ T5834] Bluetooth: hci6: command tx timeout [ 186.550018][ T180] team0 (unregistering): Port device team_slave_0 removed [ 187.142053][ T8220] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 187.383793][ T8157] chnl_net:caif_netlink_parms(): no params data found [ 187.469868][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.701'. [ 187.691064][ T8236] syzkaller1: entered promiscuous mode [ 187.702075][ T8236] syzkaller1: entered allmulticast mode [ 187.887533][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.895076][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.902798][ T8157] bridge_slave_0: entered allmulticast mode [ 187.915548][ T8157] bridge_slave_0: entered promiscuous mode [ 187.947898][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.963671][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.973067][ T8157] bridge_slave_1: entered allmulticast mode [ 187.983583][ T8157] bridge_slave_1: entered promiscuous mode [ 188.187524][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.251065][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.384849][ T8157] team0: Port device team_slave_0 added [ 188.396274][ T8157] team0: Port device team_slave_1 added [ 188.586193][ T8258] FAULT_INJECTION: forcing a failure. [ 188.586193][ T8258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.600176][ T5834] Bluetooth: hci6: command tx timeout [ 188.605852][ T8258] CPU: 1 UID: 0 PID: 8258 Comm: syz.4.711 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 188.605881][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.605893][ T8258] Call Trace: [ 188.605902][ T8258] [ 188.605910][ T8258] dump_stack_lvl+0x189/0x250 [ 188.605947][ T8258] ? __pfx____ratelimit+0x10/0x10 [ 188.605971][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.605997][ T8258] ? __pfx__printk+0x10/0x10 [ 188.606026][ T8258] should_fail_ex+0x414/0x560 [ 188.606062][ T8258] _copy_to_user+0x31/0xb0 [ 188.606082][ T8258] bpf_test_finish+0x24e/0x700 [ 188.606104][ T8258] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 188.606122][ T8258] ? __pfx_bpf_test_finish+0x10/0x10 [ 188.606143][ T8258] ? bpf_test_init+0x133/0x170 [ 188.606171][ T8258] bpf_prog_test_run_xdp+0x79a/0x1000 [ 188.606203][ T8258] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 188.606224][ T8258] ? __fget_files+0x2a/0x420 [ 188.606248][ T8258] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 188.606266][ T8258] bpf_prog_test_run+0x2c7/0x340 [ 188.606294][ T8258] __sys_bpf+0x4a4/0x860 [ 188.606318][ T8258] ? __pfx___sys_bpf+0x10/0x10 [ 188.606353][ T8258] ? ksys_write+0x22a/0x250 [ 188.606371][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 188.606391][ T8258] ? rcu_is_watching+0x15/0xb0 [ 188.606417][ T8258] __x64_sys_bpf+0x7c/0x90 [ 188.606444][ T8258] do_syscall_64+0xfa/0x3b0 [ 188.606470][ T8258] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.606497][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.606516][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 188.606540][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.606558][ T8258] RIP: 0033:0x7f241318e929 [ 188.606573][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.606587][ T8258] RSP: 002b:00007f2410ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.606605][ T8258] RAX: ffffffffffffffda RBX: 00007f24133b5fa0 RCX: 00007f241318e929 [ 188.606618][ T8258] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 188.606628][ T8258] RBP: 00007f2410ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.606639][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.606649][ T8258] R13: 0000000000000000 R14: 00007f24133b5fa0 R15: 00007ffd79943b98 [ 188.606675][ T8258] [ 188.609127][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.919523][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.017537][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.048928][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.712'. [ 189.061956][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.069803][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.116766][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 189.137334][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.164939][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 189.474251][ T8157] hsr_slave_0: entered promiscuous mode [ 189.505175][ T8157] hsr_slave_1: entered promiscuous mode [ 189.515233][ T8157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.524408][ T8157] Cannot create hsr debugfs directory [ 189.653159][ T8276] syzkaller1: entered promiscuous mode [ 189.659046][ T8276] syzkaller1: entered allmulticast mode [ 189.819629][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.720'. [ 189.852713][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 190.044409][ T8294] FAULT_INJECTION: forcing a failure. [ 190.044409][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 190.096599][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.5.723 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 190.096630][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.096643][ T8294] Call Trace: [ 190.096659][ T8294] [ 190.096668][ T8294] dump_stack_lvl+0x189/0x250 [ 190.096704][ T8294] ? __pfx____ratelimit+0x10/0x10 [ 190.096732][ T8294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.096764][ T8294] ? __pfx__printk+0x10/0x10 [ 190.096792][ T8294] ? __pfx___might_resched+0x10/0x10 [ 190.096814][ T8294] should_fail_ex+0x414/0x560 [ 190.096847][ T8294] should_failslab+0xa8/0x100 [ 190.096872][ T8294] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 190.096895][ T8294] ? __alloc_skb+0x112/0x2d0 [ 190.096919][ T8294] __alloc_skb+0x112/0x2d0 [ 190.096943][ T8294] ctrl_getfamily+0x3a1/0x590 [ 190.096973][ T8294] ? __pfx_ctrl_getfamily+0x10/0x10 [ 190.096999][ T8294] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 190.097036][ T8294] genl_family_rcv_msg_doit+0x215/0x300 [ 190.097071][ T8294] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.097126][ T8294] genl_rcv_msg+0x60e/0x790 [ 190.097159][ T8294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.097184][ T8294] ? __pfx_ctrl_getfamily+0x10/0x10 [ 190.097236][ T8294] netlink_rcv_skb+0x205/0x470 [ 190.097256][ T8294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.097281][ T8294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.097320][ T8294] ? down_read+0x1ad/0x2e0 [ 190.097354][ T8294] genl_rcv+0x28/0x40 [ 190.097375][ T8294] netlink_unicast+0x758/0x8d0 [ 190.097435][ T8294] netlink_sendmsg+0x805/0xb30 [ 190.097467][ T8294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.097492][ T8294] ? aa_sock_msg_perm+0x94/0x160 [ 190.097521][ T8294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.097548][ T8294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.097569][ T8294] __sock_sendmsg+0x219/0x270 [ 190.097602][ T8294] __sys_sendto+0x3bd/0x520 [ 190.097625][ T8294] ? __pfx___sys_sendto+0x10/0x10 [ 190.097666][ T8294] ? count_memcg_event_mm+0x21/0x260 [ 190.097711][ T8294] ? exc_page_fault+0x76/0xf0 [ 190.097741][ T8294] ? do_user_addr_fault+0xc8a/0x1390 [ 190.097773][ T8294] __x64_sys_sendto+0xde/0x100 [ 190.097798][ T8294] do_syscall_64+0xfa/0x3b0 [ 190.097824][ T8294] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.097848][ T8294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.097869][ T8294] ? clear_bhb_loop+0x60/0xb0 [ 190.097894][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.097913][ T8294] RIP: 0033:0x7fb280f907bc [ 190.097932][ T8294] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 190.097949][ T8294] RSP: 002b:00007fb281d18ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 190.097971][ T8294] RAX: ffffffffffffffda RBX: 00007fb281d18fc0 RCX: 00007fb280f907bc [ 190.097985][ T8294] RDX: 000000000000001c RSI: 00007fb281d19010 RDI: 0000000000000004 [ 190.097998][ T8294] RBP: 0000000000000000 R08: 00007fb281d18f14 R09: 000000000000000c [ 190.098010][ T8294] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 190.098022][ T8294] R13: 00007fb281d18f68 R14: 00007fb281d19010 R15: 0000000000000000 [ 190.098057][ T8294] [ 190.177138][ T8298] netlink: 168 bytes leftover after parsing attributes in process `syz.1.725'. [ 190.669570][ T5834] Bluetooth: hci6: command tx timeout [ 190.798055][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 191.001647][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.732'. [ 191.145542][ T8325] syzkaller1: entered promiscuous mode [ 191.158940][ T8325] syzkaller1: entered allmulticast mode [ 191.374236][ T8157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.402253][ T8157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.427410][ T8157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.479427][ T8157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.704773][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.774102][ T8157] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.805427][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.812660][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.883857][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.891176][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.024040][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.741'. [ 192.591936][ T8369] netlink: 'syz.5.747': attribute type 3 has an invalid length. [ 192.600833][ T8369] netlink: 'syz.5.747': attribute type 1 has an invalid length. [ 192.627410][ T8369] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.747'. [ 192.749237][ T5834] Bluetooth: hci6: command tx timeout [ 192.787761][ T8372] netlink: 'syz.5.747': attribute type 14 has an invalid length. [ 192.911884][ T8157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.074737][ T8157] veth0_vlan: entered promiscuous mode [ 193.119100][ T8383] syzkaller1: entered promiscuous mode [ 193.124631][ T8383] syzkaller1: entered allmulticast mode [ 193.178189][ T8157] veth1_vlan: entered promiscuous mode [ 193.270745][ T8157] veth0_macvtap: entered promiscuous mode [ 193.314692][ T8157] veth1_macvtap: entered promiscuous mode [ 193.487785][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.507061][ T8396] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.571757][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.593227][ T8157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.634438][ T8157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.661217][ T8402] xt_hashlimit: size too large, truncated to 1048576 [ 193.662422][ T8157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.691907][ T8157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.771976][ T8396] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.853736][ T8408] unsupported nlmsg_type 40 [ 193.914892][ T8411] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.010538][ T8409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.101306][ T8396] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.216708][ T8416] __nla_validate_parse: 5 callbacks suppressed [ 194.216730][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 194.238742][ T8415] netlink: 72 bytes leftover after parsing attributes in process `syz.1.762'. [ 194.273233][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280371][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.320187][ T8396] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.409080][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.435411][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.531724][ T8396] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.555251][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.576564][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.582971][ T8396] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.599058][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 194.619274][ T8421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 194.638494][ T8396] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.659597][ T8421] gretap1: entered promiscuous mode [ 194.695287][ T8396] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.252617][ T6845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.417764][ T6845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.705642][ T6845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.783573][ T6845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.908813][ T6845] bridge_slave_1: left allmulticast mode [ 195.914505][ T6845] bridge_slave_1: left promiscuous mode [ 195.920458][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.931039][ T6845] bridge_slave_0: left allmulticast mode [ 195.937183][ T6845] bridge_slave_0: left promiscuous mode [ 195.942951][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.402217][ T8454] FAULT_INJECTION: forcing a failure. [ 196.402217][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 196.437653][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.4.776 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 196.437688][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.437700][ T8454] Call Trace: [ 196.437708][ T8454] [ 196.437717][ T8454] dump_stack_lvl+0x189/0x250 [ 196.437753][ T8454] ? __pfx____ratelimit+0x10/0x10 [ 196.437779][ T8454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.437810][ T8454] ? __pfx__printk+0x10/0x10 [ 196.437856][ T8454] ? __pfx___might_resched+0x10/0x10 [ 196.437881][ T8454] should_fail_ex+0x414/0x560 [ 196.437914][ T8454] should_failslab+0xa8/0x100 [ 196.437940][ T8454] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 196.437962][ T8454] ? __alloc_skb+0x112/0x2d0 [ 196.437998][ T8454] __alloc_skb+0x112/0x2d0 [ 196.438022][ T8454] netlink_sendmsg+0x5c6/0xb30 [ 196.438053][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.438077][ T8454] ? aa_sock_msg_perm+0x94/0x160 [ 196.438106][ T8454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.438132][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.438153][ T8454] __sock_sendmsg+0x219/0x270 [ 196.438185][ T8454] ____sys_sendmsg+0x505/0x830 [ 196.438231][ T8454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.438263][ T8454] ? import_iovec+0x74/0xa0 [ 196.438288][ T8454] ___sys_sendmsg+0x21f/0x2a0 [ 196.438313][ T8454] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.438376][ T8454] ? __fget_files+0x2a/0x420 [ 196.438398][ T8454] ? __fget_files+0x3a0/0x420 [ 196.438432][ T8454] __x64_sys_sendmsg+0x19b/0x260 [ 196.438457][ T8454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.438490][ T8454] ? __pfx_ksys_write+0x10/0x10 [ 196.438507][ T8454] ? rcu_is_watching+0x15/0xb0 [ 196.438531][ T8454] ? do_syscall_64+0xbe/0x3b0 [ 196.438563][ T8454] do_syscall_64+0xfa/0x3b0 [ 196.438588][ T8454] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.438613][ T8454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.438632][ T8454] ? clear_bhb_loop+0x60/0xb0 [ 196.438657][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.438675][ T8454] RIP: 0033:0x7f241318e929 [ 196.438693][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.438710][ T8454] RSP: 002b:00007f2410ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.438731][ T8454] RAX: ffffffffffffffda RBX: 00007f24133b5fa0 RCX: 00007f241318e929 [ 196.438745][ T8454] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 196.438758][ T8454] RBP: 00007f2410ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.438769][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.438780][ T8454] R13: 0000000000000000 R14: 00007f24133b5fa0 R15: 00007ffd79943b98 [ 196.438812][ T8454] [ 196.455422][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.777'. [ 196.884779][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.894013][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.894796][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.911782][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.925920][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.934352][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.951096][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.966290][ T6845] bond0 (unregistering): Released all slaves [ 196.998882][ T8442] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.015795][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.5.772'. [ 197.886172][ T6845] hsr_slave_0: left promiscuous mode [ 197.908920][ T6845] hsr_slave_1: left promiscuous mode [ 197.918143][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.928937][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 197.946348][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.957650][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.965105][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.050656][ T6845] veth1_macvtap: left promiscuous mode [ 198.056261][ T6845] veth0_macvtap: left promiscuous mode [ 198.076765][ T6845] veth1_vlan: left promiscuous mode [ 198.086665][ T6845] veth0_vlan: left promiscuous mode [ 198.990130][ T5834] Bluetooth: hci6: command tx timeout [ 199.002465][ T6845] team0 (unregistering): Port device team_slave_1 removed [ 199.051938][ T6845] team0 (unregistering): Port device team_slave_0 removed [ 199.703714][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 199.809984][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 200.118050][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.125964][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.135984][ T8459] bridge_slave_0: entered allmulticast mode [ 200.145849][ T8459] bridge_slave_0: entered promiscuous mode [ 200.155269][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.171843][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.180628][ T8459] bridge_slave_1: entered allmulticast mode [ 200.189084][ T8459] bridge_slave_1: entered promiscuous mode [ 200.383816][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.414689][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.594642][ T8459] team0: Port device team_slave_0 added [ 200.624196][ T8459] team0: Port device team_slave_1 added [ 200.648841][ T8536] FAULT_INJECTION: forcing a failure. [ 200.648841][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 200.676547][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.4.800 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 200.676579][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.676591][ T8536] Call Trace: [ 200.676600][ T8536] [ 200.676610][ T8536] dump_stack_lvl+0x189/0x250 [ 200.676646][ T8536] ? __pfx____ratelimit+0x10/0x10 [ 200.676674][ T8536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.676706][ T8536] ? __pfx__printk+0x10/0x10 [ 200.676735][ T8536] ? __pfx___might_resched+0x10/0x10 [ 200.676759][ T8536] ? fs_reclaim_acquire+0x7d/0x100 [ 200.676789][ T8536] should_fail_ex+0x414/0x560 [ 200.676824][ T8536] should_failslab+0xa8/0x100 [ 200.676848][ T8536] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 200.676871][ T8536] ? __alloc_skb+0x112/0x2d0 [ 200.676895][ T8536] __alloc_skb+0x112/0x2d0 [ 200.676920][ T8536] netlink_ack+0x146/0xa50 [ 200.676938][ T8536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.676984][ T8536] netlink_rcv_skb+0x28c/0x470 [ 200.677013][ T8536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.677041][ T8536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.677082][ T8536] ? down_read+0x1ad/0x2e0 [ 200.677116][ T8536] genl_rcv+0x28/0x40 [ 200.677139][ T8536] netlink_unicast+0x758/0x8d0 [ 200.677183][ T8536] netlink_sendmsg+0x805/0xb30 [ 200.677216][ T8536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.677242][ T8536] ? aa_sock_msg_perm+0x94/0x160 [ 200.677271][ T8536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.677298][ T8536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.677320][ T8536] __sock_sendmsg+0x219/0x270 [ 200.677352][ T8536] __sys_sendto+0x3bd/0x520 [ 200.677375][ T8536] ? __pfx___sys_sendto+0x10/0x10 [ 200.677408][ T8536] ? count_memcg_event_mm+0x21/0x260 [ 200.677455][ T8536] ? exc_page_fault+0x76/0xf0 [ 200.677485][ T8536] ? do_user_addr_fault+0xc8a/0x1390 [ 200.677518][ T8536] __x64_sys_sendto+0xde/0x100 [ 200.677543][ T8536] do_syscall_64+0xfa/0x3b0 [ 200.677569][ T8536] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.677595][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.677615][ T8536] ? clear_bhb_loop+0x60/0xb0 [ 200.677640][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.677659][ T8536] RIP: 0033:0x7f24131907bc [ 200.677679][ T8536] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 200.677696][ T8536] RSP: 002b:00007f2410fd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 200.677718][ T8536] RAX: ffffffffffffffda RBX: 00007f2410fd3fc0 RCX: 00007f24131907bc [ 200.677733][ T8536] RDX: 000000000000001c RSI: 00007f2410fd4010 RDI: 0000000000000004 [ 200.677747][ T8536] RBP: 0000000000000000 R08: 00007f2410fd3f14 R09: 000000000000000c [ 200.677760][ T8536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 200.677771][ T8536] R13: 00007f2410fd3f68 R14: 00007f2410fd4010 R15: 0000000000000000 [ 200.677807][ T8536] [ 201.066817][ T5834] Bluetooth: hci6: command tx timeout [ 201.238255][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 201.414709][ T8542] syzkaller1: entered promiscuous mode [ 201.424922][ T8542] syzkaller1: entered allmulticast mode [ 201.461475][ T8541] syzkaller1: entered promiscuous mode [ 201.467271][ T8541] syzkaller1: entered allmulticast mode [ 201.497226][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.511298][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.541213][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.700573][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.723194][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.803258][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.867959][ T8558] syzkaller1: entered promiscuous mode [ 201.873503][ T8558] syzkaller1: entered allmulticast mode [ 201.923971][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.809'. [ 201.957242][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.809'. [ 202.217319][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 202.259617][ T8579] syzkaller1: entered promiscuous mode [ 202.270522][ T8579] syzkaller1: entered allmulticast mode [ 202.310942][ T8459] hsr_slave_0: entered promiscuous mode [ 202.327848][ T8459] hsr_slave_1: entered promiscuous mode [ 202.377481][ T8459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.385102][ T8459] Cannot create hsr debugfs directory [ 202.965615][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'. [ 203.092673][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.146780][ T5834] Bluetooth: hci6: command tx timeout [ 203.435103][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.827'. [ 203.520721][ T8631] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 203.930394][ T8459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.038403][ T8459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.194028][ T8647] netlink: 72 bytes leftover after parsing attributes in process `syz.5.833'. [ 204.199525][ T8459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.245093][ T8459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.639849][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.711167][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.739723][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.746965][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.814695][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.822032][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.848263][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 205.019143][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 205.050518][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.841'. [ 205.093792][ T8674] vlan3: entered allmulticast mode [ 205.228535][ T5834] Bluetooth: hci6: command tx timeout [ 205.418130][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.545817][ T8459] veth0_vlan: entered promiscuous mode [ 205.591623][ T8459] veth1_vlan: entered promiscuous mode [ 205.604390][ T8695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.848'. [ 205.705966][ T8459] veth0_macvtap: entered promiscuous mode [ 205.738489][ T8459] veth1_macvtap: entered promiscuous mode [ 205.791962][ T8698] sctp: [Deprecated]: syz.6.849 (pid 8698) Use of int in max_burst socket option deprecated. [ 205.791962][ T8698] Use struct sctp_assoc_value instead [ 205.821986][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.898445][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.926863][ T8459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.970162][ T8459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.002573][ T8459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.046590][ T8459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.115761][ T8713] x_tables: duplicate underflow at hook 3 [ 206.338800][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.369285][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.416859][ T8723] netlink: 3 bytes leftover after parsing attributes in process `syz.5.856'. [ 206.455202][ T8723] 0ªX¹¦À: renamed from caif0 [ 206.471137][ T8723] 0ªX¹¦À: entered allmulticast mode [ 206.477041][ T8723] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 206.501249][ T8725] 8021q: VLANs not supported on wg0 [ 206.520573][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.538745][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.711073][ T8734] netlink: 332 bytes leftover after parsing attributes in process `syz.5.860'. [ 206.720457][ T8734] netlink: 104 bytes leftover after parsing attributes in process `syz.5.860'. [ 206.731186][ T8734] netlink: 32 bytes leftover after parsing attributes in process `syz.5.860'. [ 206.895627][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.862'. [ 207.293066][ T8752] netlink: 56 bytes leftover after parsing attributes in process `syz.5.866'. [ 207.394264][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 207.425318][ T8754] team0: Port device batadv5 added [ 207.657275][ T8764] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 207.663804][ T8762] syzkaller1: tun_chr_ioctl cmd 1075377419 [ 207.938448][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.496455][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.574090][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.648402][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.795063][ T13] bridge_slave_1: left allmulticast mode [ 208.803948][ T13] bridge_slave_1: left promiscuous mode [ 208.816318][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.825783][ T13] bridge_slave_0: left allmulticast mode [ 208.832699][ T13] bridge_slave_0: left promiscuous mode [ 208.838677][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.188637][ T8793] xt_hashlimit: size too large, truncated to 1048576 [ 209.260360][ T8796] FAULT_INJECTION: forcing a failure. [ 209.260360][ T8796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.293968][ T8796] CPU: 0 UID: 0 PID: 8796 Comm: syz.6.882 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 209.293999][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.294020][ T8796] Call Trace: [ 209.294029][ T8796] [ 209.294038][ T8796] dump_stack_lvl+0x189/0x250 [ 209.294073][ T8796] ? __pfx____ratelimit+0x10/0x10 [ 209.294117][ T8796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.294148][ T8796] ? __pfx__printk+0x10/0x10 [ 209.294169][ T8796] ? __might_fault+0xb0/0x130 [ 209.294201][ T8796] should_fail_ex+0x414/0x560 [ 209.294234][ T8796] _copy_from_user+0x2d/0xb0 [ 209.294257][ T8796] __sys_bpf+0x1ed/0x860 [ 209.294289][ T8796] ? __pfx___sys_bpf+0x10/0x10 [ 209.294333][ T8796] ? ksys_write+0x22a/0x250 [ 209.294365][ T8796] ? __pfx_ksys_write+0x10/0x10 [ 209.294382][ T8796] ? rcu_is_watching+0x15/0xb0 [ 209.294410][ T8796] __x64_sys_bpf+0x7c/0x90 [ 209.294436][ T8796] do_syscall_64+0xfa/0x3b0 [ 209.294463][ T8796] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.294489][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.294509][ T8796] ? clear_bhb_loop+0x60/0xb0 [ 209.294535][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.294555][ T8796] RIP: 0033:0x7fba9ef8e929 [ 209.294573][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.294590][ T8796] RSP: 002b:00007fba9fe3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.294612][ T8796] RAX: ffffffffffffffda RBX: 00007fba9f1b5fa0 RCX: 00007fba9ef8e929 [ 209.294627][ T8796] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 209.294640][ T8796] RBP: 00007fba9fe3a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.294653][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.294665][ T8796] R13: 0000000000000000 R14: 00007fba9f1b5fa0 R15: 00007ffe19921718 [ 209.294699][ T8796] [ 210.050974][ T8805] __nla_validate_parse: 2 callbacks suppressed [ 210.050996][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.6.884'. [ 210.095466][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.6.884'. [ 210.261063][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.272897][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.285069][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.304323][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.325895][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.507908][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.574219][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.621528][ T13] bond0 (unregistering): Released all slaves [ 210.962735][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.886'. [ 211.222685][ T8827] netlink: 'syz.6.891': attribute type 15 has an invalid length. [ 211.222836][ T8828] netlink: 'syz.6.891': attribute type 15 has an invalid length. [ 211.238842][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.891'. [ 211.255305][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.891'. [ 211.332105][ T13] hsr_slave_0: left promiscuous mode [ 211.339807][ T13] hsr_slave_1: left promiscuous mode [ 211.346178][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.354230][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.377815][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.385295][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.431600][ T13] veth1_macvtap: left promiscuous mode [ 211.437807][ T13] veth0_macvtap: left promiscuous mode [ 211.444240][ T13] veth1_vlan: left promiscuous mode [ 211.450282][ T13] veth0_vlan: left promiscuous mode [ 211.690348][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.892'. [ 211.709355][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 211.709712][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 212.040095][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 212.348462][ T5841] Bluetooth: hci6: command tx timeout [ 212.530353][ T13] team0 (unregistering): Port device team_slave_1 removed [ 212.591252][ T13] team0 (unregistering): Port device team_slave_0 removed [ 213.599302][ T8867] netlink: 72 bytes leftover after parsing attributes in process `syz.6.904'. [ 213.622870][ T8864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.668268][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.903'. [ 213.935404][ T8878] netlink: 332 bytes leftover after parsing attributes in process `syz.6.908'. [ 213.983980][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 213.988976][ T8878] netlink: 104 bytes leftover after parsing attributes in process `syz.6.908'. [ 214.210460][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.217908][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.225199][ T8807] bridge_slave_0: entered allmulticast mode [ 214.234397][ T8807] bridge_slave_0: entered promiscuous mode [ 214.244258][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.251961][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.259936][ T8807] bridge_slave_1: entered allmulticast mode [ 214.268226][ T8807] bridge_slave_1: entered promiscuous mode [ 214.413443][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.428682][ T5841] Bluetooth: hci6: command tx timeout [ 214.456726][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.563804][ T8899] FAULT_INJECTION: forcing a failure. [ 214.563804][ T8899] name failslab, interval 1, probability 0, space 0, times 0 [ 214.585871][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.4.915 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 214.585903][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.585916][ T8899] Call Trace: [ 214.585924][ T8899] [ 214.585933][ T8899] dump_stack_lvl+0x189/0x250 [ 214.585971][ T8899] ? __pfx____ratelimit+0x10/0x10 [ 214.586000][ T8899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.586031][ T8899] ? __pfx__printk+0x10/0x10 [ 214.586059][ T8899] ? __pfx___might_resched+0x10/0x10 [ 214.586084][ T8899] should_fail_ex+0x414/0x560 [ 214.586116][ T8899] should_failslab+0xa8/0x100 [ 214.586142][ T8899] __kmalloc_noprof+0xcb/0x4f0 [ 214.586160][ T8899] ? __kasan_kmalloc+0x93/0xb0 [ 214.586178][ T8899] ? nla_strdup+0x9d/0x140 [ 214.586212][ T8899] nla_strdup+0x9d/0x140 [ 214.586244][ T8899] nf_tables_newchain+0x1998/0x2900 [ 214.586286][ T8899] ? __pfx_nf_tables_newchain+0x10/0x10 [ 214.586351][ T8899] ? nfnl_pernet+0x23/0x240 [ 214.586392][ T8899] ? __nla_parse+0x40/0x60 [ 214.586434][ T8899] nfnetlink_rcv+0x112f/0x2520 [ 214.586498][ T8899] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 214.586545][ T8899] ? ref_tracker_free+0x63a/0x7d0 [ 214.586612][ T8899] ? __netlink_deliver_tap+0x807/0x850 [ 214.586644][ T8899] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.586663][ T8899] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.586690][ T8899] netlink_unicast+0x758/0x8d0 [ 214.586731][ T8899] netlink_sendmsg+0x805/0xb30 [ 214.586772][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.586798][ T8899] ? aa_sock_msg_perm+0x94/0x160 [ 214.586827][ T8899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.586855][ T8899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.586877][ T8899] __sock_sendmsg+0x219/0x270 [ 214.586909][ T8899] ____sys_sendmsg+0x505/0x830 [ 214.586939][ T8899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.586974][ T8899] ? import_iovec+0x74/0xa0 [ 214.586999][ T8899] ___sys_sendmsg+0x21f/0x2a0 [ 214.587024][ T8899] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.587090][ T8899] ? __fget_files+0x2a/0x420 [ 214.587114][ T8899] ? __fget_files+0x3a0/0x420 [ 214.587151][ T8899] __x64_sys_sendmsg+0x19b/0x260 [ 214.587178][ T8899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.587223][ T8899] ? __pfx_ksys_write+0x10/0x10 [ 214.587246][ T8899] ? rcu_is_watching+0x15/0xb0 [ 214.587276][ T8899] ? do_syscall_64+0xbe/0x3b0 [ 214.587315][ T8899] do_syscall_64+0xfa/0x3b0 [ 214.587342][ T8899] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.587368][ T8899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.587389][ T8899] ? clear_bhb_loop+0x60/0xb0 [ 214.587414][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.587434][ T8899] RIP: 0033:0x7f241318e929 [ 214.587452][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.587470][ T8899] RSP: 002b:00007f2410ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.587493][ T8899] RAX: ffffffffffffffda RBX: 00007f24133b5fa0 RCX: 00007f241318e929 [ 214.587508][ T8899] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 214.587521][ T8899] RBP: 00007f2410ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.587534][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.587546][ T8899] R13: 0000000000000000 R14: 00007f24133b5fa0 R15: 00007ffd79943b98 [ 214.587581][ T8899] [ 215.003542][ T8807] team0: Port device team_slave_0 added [ 215.013111][ T8807] team0: Port device team_slave_1 added [ 215.129518][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.139398][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.167830][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.192368][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.200686][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.227694][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.237795][ T8913] FAULT_INJECTION: forcing a failure. [ 215.237795][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.285474][ T8913] CPU: 0 UID: 0 PID: 8913 Comm: syz.4.921 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 215.285507][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.285521][ T8913] Call Trace: [ 215.285530][ T8913] [ 215.285540][ T8913] dump_stack_lvl+0x189/0x250 [ 215.285578][ T8913] ? __pfx____ratelimit+0x10/0x10 [ 215.285606][ T8913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.285639][ T8913] ? __pfx__printk+0x10/0x10 [ 215.285662][ T8913] ? __might_fault+0xb0/0x130 [ 215.285696][ T8913] should_fail_ex+0x414/0x560 [ 215.285731][ T8913] _copy_from_user+0x2d/0xb0 [ 215.285754][ T8913] ___sys_recvmsg+0x12e/0x510 [ 215.285785][ T8913] ? __pfx____sys_recvmsg+0x10/0x10 [ 215.285847][ T8913] ? __might_fault+0xb0/0x130 [ 215.285873][ T8913] do_recvmmsg+0x307/0x770 [ 215.285907][ T8913] ? __pfx_do_recvmmsg+0x10/0x10 [ 215.285946][ T8913] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.285996][ T8913] __x64_sys_recvmmsg+0x190/0x240 [ 215.286024][ T8913] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 215.286046][ T8913] ? rcu_is_watching+0x15/0xb0 [ 215.286072][ T8913] ? do_syscall_64+0xbe/0x3b0 [ 215.286103][ T8913] do_syscall_64+0xfa/0x3b0 [ 215.286129][ T8913] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.286155][ T8913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.286175][ T8913] ? clear_bhb_loop+0x60/0xb0 [ 215.286201][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.286221][ T8913] RIP: 0033:0x7f241318e929 [ 215.286240][ T8913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.286257][ T8913] RSP: 002b:00007f2410ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.286280][ T8913] RAX: ffffffffffffffda RBX: 00007f24133b5fa0 RCX: 00007f241318e929 [ 215.286294][ T8913] RDX: 040000000000026c RSI: 00002000000005c0 RDI: 0000000000000003 [ 215.286308][ T8913] RBP: 00007f2410ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.286321][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.286333][ T8913] R13: 0000000000000000 R14: 00007f24133b5fa0 R15: 00007ffd79943b98 [ 215.286367][ T8913] [ 215.521837][ T8914] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 215.532002][ T8910] netlink: 'syz.1.920': attribute type 5 has an invalid length. [ 215.688007][ T8914] team0: Port device wlan1 added [ 215.711314][ T8924] __nla_validate_parse: 1 callbacks suppressed [ 215.711332][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 215.733791][ T8923] netlink: 56 bytes leftover after parsing attributes in process `syz.5.925'. [ 215.755992][ T8807] hsr_slave_0: entered promiscuous mode [ 215.765441][ T8807] hsr_slave_1: entered promiscuous mode [ 215.773106][ T8807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.780928][ T8807] Cannot create hsr debugfs directory [ 216.228006][ T8925] syzkaller1: entered promiscuous mode [ 216.233796][ T8925] syzkaller1: entered allmulticast mode [ 216.308513][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 216.327026][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.926'. [ 216.405456][ T8934] vlan3: entered allmulticast mode [ 216.508221][ T5841] Bluetooth: hci6: command tx timeout [ 216.545876][ T8944] FAULT_INJECTION: forcing a failure. [ 216.545876][ T8944] name failslab, interval 1, probability 0, space 0, times 0 [ 216.604218][ T8944] CPU: 1 UID: 0 PID: 8944 Comm: syz.5.929 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 216.604248][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.604261][ T8944] Call Trace: [ 216.604270][ T8944] [ 216.604278][ T8944] dump_stack_lvl+0x189/0x250 [ 216.604315][ T8944] ? __pfx____ratelimit+0x10/0x10 [ 216.604343][ T8944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.604376][ T8944] ? __pfx__printk+0x10/0x10 [ 216.604410][ T8944] ? __pfx___might_resched+0x10/0x10 [ 216.604430][ T8944] should_fail_ex+0x414/0x560 [ 216.604461][ T8944] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 216.604481][ T8944] should_failslab+0xa8/0x100 [ 216.604505][ T8944] __kvmalloc_node_noprof+0x161/0x5f0 [ 216.604529][ T8944] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 216.604556][ T8944] bpf_test_run_xdp_live+0x18e/0x1b10 [ 216.604582][ T8944] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 216.604618][ T8944] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.604658][ T8944] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 216.604678][ T8944] ? 0xffffffffa0205540 [ 216.604699][ T8944] ? 0xffffffffa0205540 [ 216.604736][ T8944] ? 0xffffffffa0201b54 [ 216.604752][ T8944] ? 0xffffffffa0201c10 [ 216.604767][ T8944] ? 0xffffffffa0201cf0 [ 216.604813][ T8944] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 216.604844][ T8944] ? _copy_from_user+0x94/0xb0 [ 216.604866][ T8944] ? bpf_test_init+0x133/0x170 [ 216.604896][ T8944] ? xdp_convert_md_to_buff+0x5b/0x330 [ 216.604918][ T8944] bpf_prog_test_run_xdp+0x713/0x1000 [ 216.604957][ T8944] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 216.604983][ T8944] ? __fget_files+0x2a/0x420 [ 216.605012][ T8944] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 216.605033][ T8944] bpf_prog_test_run+0x2c7/0x340 [ 216.605064][ T8944] __sys_bpf+0x4a4/0x860 [ 216.605088][ T8944] ? __pfx___sys_bpf+0x10/0x10 [ 216.605122][ T8944] ? ksys_write+0x22a/0x250 [ 216.605139][ T8944] ? __pfx_ksys_write+0x10/0x10 [ 216.605153][ T8944] ? rcu_is_watching+0x15/0xb0 [ 216.605180][ T8944] __x64_sys_bpf+0x7c/0x90 [ 216.605201][ T8944] do_syscall_64+0xfa/0x3b0 [ 216.605222][ T8944] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.605248][ T8944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.605264][ T8944] ? clear_bhb_loop+0x60/0xb0 [ 216.605285][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.605299][ T8944] RIP: 0033:0x7fb280f8e929 [ 216.605314][ T8944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.605328][ T8944] RSP: 002b:00007fb281d3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.605346][ T8944] RAX: ffffffffffffffda RBX: 00007fb2811b5fa0 RCX: 00007fb280f8e929 [ 216.605359][ T8944] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 216.605369][ T8944] RBP: 00007fb281d3b090 R08: 0000000000000000 R09: 0000000000000000 [ 216.605379][ T8944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.605388][ T8944] R13: 0000000000000000 R14: 00007fb2811b5fa0 R15: 00007ffe0ff6ca18 [ 216.605419][ T8944] [ 217.064285][ T8952] netlink: 332 bytes leftover after parsing attributes in process `syz.1.931'. [ 217.073804][ T8952] netlink: 104 bytes leftover after parsing attributes in process `syz.1.931'. [ 217.083528][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.931'. [ 217.360170][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 217.375659][ T8966] xt_hashlimit: size too large, truncated to 1048576 [ 217.632396][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.939'. [ 217.914172][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 218.367675][ T8807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.412697][ T8807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.537735][ T8996] netlink: 'syz.4.945': attribute type 4 has an invalid length. [ 218.573317][ T8807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.580949][ T8996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 218.593092][ T5841] Bluetooth: hci6: command tx timeout [ 218.636312][ T8807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.702436][ T9002] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 218.769946][ T9013] lo speed is unknown, defaulting to 1000 [ 218.804417][ T9013] lo speed is unknown, defaulting to 1000 [ 218.861249][ T9013] lo speed is unknown, defaulting to 1000 [ 218.895687][ T9013] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 218.915008][ T9013] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 218.967840][ T9013] lo speed is unknown, defaulting to 1000 [ 218.978149][ T9013] lo speed is unknown, defaulting to 1000 [ 218.986085][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.006271][ T9013] lo speed is unknown, defaulting to 1000 [ 219.042569][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.057007][ T9013] lo speed is unknown, defaulting to 1000 [ 219.084183][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.091456][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.103525][ T9013] lo speed is unknown, defaulting to 1000 [ 219.116825][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.124073][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.134897][ T9013] lo speed is unknown, defaulting to 1000 [ 219.145324][ T9013] lo speed is unknown, defaulting to 1000 [ 219.649947][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.785902][ T8807] veth0_vlan: entered promiscuous mode [ 219.817662][ T8807] veth1_vlan: entered promiscuous mode [ 219.930926][ T8807] veth0_macvtap: entered promiscuous mode [ 219.953232][ T8807] veth1_macvtap: entered promiscuous mode [ 219.994559][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.042262][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.071617][ T8807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.102755][ T8807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.127355][ T8807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.146138][ T8807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.398030][ T9045] FAULT_INJECTION: forcing a failure. [ 220.398030][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 220.422225][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.431144][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.1.965 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 220.431172][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.431185][ T9045] Call Trace: [ 220.431194][ T9045] [ 220.431202][ T9045] dump_stack_lvl+0x189/0x250 [ 220.431240][ T9045] ? __pfx____ratelimit+0x10/0x10 [ 220.431269][ T9045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.431300][ T9045] ? __pfx__printk+0x10/0x10 [ 220.431330][ T9045] ? __pfx___might_resched+0x10/0x10 [ 220.431356][ T9045] should_fail_ex+0x414/0x560 [ 220.431390][ T9045] should_failslab+0xa8/0x100 [ 220.431415][ T9045] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 220.431439][ T9045] ? __alloc_skb+0x112/0x2d0 [ 220.431464][ T9045] __alloc_skb+0x112/0x2d0 [ 220.431489][ T9045] netlink_sendmsg+0x5c6/0xb30 [ 220.431522][ T9045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.431548][ T9045] ? aa_sock_msg_perm+0x94/0x160 [ 220.431578][ T9045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.431606][ T9045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.431628][ T9045] __sock_sendmsg+0x219/0x270 [ 220.431660][ T9045] ____sys_sendmsg+0x505/0x830 [ 220.431690][ T9045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.431724][ T9045] ? import_iovec+0x74/0xa0 [ 220.431751][ T9045] ___sys_sendmsg+0x21f/0x2a0 [ 220.431776][ T9045] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.431842][ T9045] ? __fget_files+0x2a/0x420 [ 220.431865][ T9045] ? __fget_files+0x3a0/0x420 [ 220.431902][ T9045] __x64_sys_sendmsg+0x19b/0x260 [ 220.431928][ T9045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.431963][ T9045] ? __pfx_ksys_write+0x10/0x10 [ 220.431987][ T9045] ? rcu_is_watching+0x15/0xb0 [ 220.432012][ T9045] ? do_syscall_64+0xbe/0x3b0 [ 220.432046][ T9045] do_syscall_64+0xfa/0x3b0 [ 220.432072][ T9045] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.432098][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.432119][ T9045] ? clear_bhb_loop+0x60/0xb0 [ 220.432145][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.432163][ T9045] RIP: 0033:0x7f10d818e929 [ 220.432181][ T9045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.432198][ T9045] RSP: 002b:00007f10d902e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.432219][ T9045] RAX: ffffffffffffffda RBX: 00007f10d83b5fa0 RCX: 00007f10d818e929 [ 220.432233][ T9045] RDX: 0000000000008004 RSI: 0000200000000900 RDI: 0000000000000004 [ 220.432247][ T9045] RBP: 00007f10d902e090 R08: 0000000000000000 R09: 0000000000000000 [ 220.432259][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.432271][ T9045] R13: 0000000000000000 R14: 00007f10d83b5fa0 R15: 00007ffed7ba1b28 [ 220.432305][ T9045] [ 220.730122][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.870230][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.871224][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.879571][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.888010][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.896292][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.919061][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.927948][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.055455][ T9051] lo speed is unknown, defaulting to 1000 [ 221.220116][ T9064] __nla_validate_parse: 9 callbacks suppressed [ 221.220133][ T9064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.972'. [ 221.384204][ T9059] lo speed is unknown, defaulting to 1000 [ 221.672260][ T9051] chnl_net:caif_netlink_parms(): no params data found [ 221.829930][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.838953][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.846240][ T9051] bridge_slave_0: entered allmulticast mode [ 221.857303][ T9051] bridge_slave_0: entered promiscuous mode [ 221.877102][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.884432][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.891837][ T9051] bridge_slave_1: entered allmulticast mode [ 221.900450][ T9051] bridge_slave_1: entered promiscuous mode [ 222.042701][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.083567][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.259539][ T9079] netlink: 32 bytes leftover after parsing attributes in process `syz.6.975'. [ 222.275974][ T9051] team0: Port device team_slave_0 added [ 222.310324][ T9051] team0: Port device team_slave_1 added [ 222.347959][ T9074] lo speed is unknown, defaulting to 1000 [ 222.425313][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 222.621762][ T180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.671495][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.689276][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.733938][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.779096][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.786080][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.829964][ T9084] trusted_key: syz.5.973 sent an empty control message without MSG_MORE. [ 222.841359][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.888940][ T180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.974684][ T180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.988426][ T5834] Bluetooth: hci1: command tx timeout [ 223.126322][ T180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.152066][ T9051] hsr_slave_0: entered promiscuous mode [ 223.159573][ T9051] hsr_slave_1: entered promiscuous mode [ 223.166152][ T9051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.181339][ T9051] Cannot create hsr debugfs directory [ 223.423086][ T180] bridge_slave_1: left allmulticast mode [ 223.429933][ T180] bridge_slave_1: left promiscuous mode [ 223.435807][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.457836][ T180] bridge_slave_0: left allmulticast mode [ 223.463622][ T180] bridge_slave_0: left promiscuous mode [ 223.483058][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.869649][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.6.980'. [ 224.284735][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.319949][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.334287][ T180] bond0 (unregistering): Released all slaves [ 224.430428][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.6.982'. [ 224.565089][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.565922][ T9094] lo speed is unknown, defaulting to 1000 [ 224.575421][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.588201][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.597406][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.605534][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.629465][ T9051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.734770][ T9051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.888555][ T9051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.922456][ T9110] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 224.931771][ T9111] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 224.956628][ T180] hsr_slave_0: left promiscuous mode [ 224.962878][ T180] hsr_slave_1: left promiscuous mode [ 224.963403][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 224.976068][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.994133][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.006241][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.013966][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.042340][ T180] veth1_macvtap: left promiscuous mode [ 225.048384][ T180] veth0_macvtap: left promiscuous mode [ 225.054007][ T180] veth1_vlan: left promiscuous mode [ 225.059725][ T180] veth0_vlan: left promiscuous mode [ 225.067598][ T5834] Bluetooth: hci1: command tx timeout [ 225.707666][ T180] team0 (unregistering): Port device team_slave_1 removed [ 225.753891][ T180] team0 (unregistering): Port device team_slave_0 removed [ 226.255504][ T9051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.316735][ T9105] lo speed is unknown, defaulting to 1000 [ 226.669375][ T5834] Bluetooth: hci6: command tx timeout [ 226.908503][ T9131] FAULT_INJECTION: forcing a failure. [ 226.908503][ T9131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.921914][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.6.991 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 226.921944][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.921956][ T9131] Call Trace: [ 226.921965][ T9131] [ 226.921973][ T9131] dump_stack_lvl+0x189/0x250 [ 226.922009][ T9131] ? __pfx____ratelimit+0x10/0x10 [ 226.922036][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.922067][ T9131] ? __pfx__printk+0x10/0x10 [ 226.922088][ T9131] ? __might_fault+0xb0/0x130 [ 226.922120][ T9131] should_fail_ex+0x414/0x560 [ 226.922153][ T9131] _copy_from_iter+0x1db/0x16f0 [ 226.922188][ T9131] ? rcu_is_watching+0x15/0xb0 [ 226.922208][ T9131] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 226.922231][ T9131] ? __pfx__copy_from_iter+0x10/0x10 [ 226.922263][ T9131] ? __build_skb_around+0x257/0x3e0 [ 226.922286][ T9131] ? netlink_sendmsg+0x642/0xb30 [ 226.922304][ T9131] ? skb_put+0x11b/0x210 [ 226.922328][ T9131] netlink_sendmsg+0x6b2/0xb30 [ 226.922358][ T9131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.922382][ T9131] ? aa_sock_msg_perm+0x94/0x160 [ 226.922435][ T9131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.922462][ T9131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.922483][ T9131] __sock_sendmsg+0x219/0x270 [ 226.922514][ T9131] ____sys_sendmsg+0x505/0x830 [ 226.922542][ T9131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.922574][ T9131] ? import_iovec+0x74/0xa0 [ 226.922599][ T9131] ___sys_sendmsg+0x21f/0x2a0 [ 226.922623][ T9131] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.922685][ T9131] ? __fget_files+0x2a/0x420 [ 226.922707][ T9131] ? __fget_files+0x3a0/0x420 [ 226.922741][ T9131] __x64_sys_sendmsg+0x19b/0x260 [ 226.922766][ T9131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.922799][ T9131] ? __pfx_ksys_write+0x10/0x10 [ 226.922815][ T9131] ? rcu_is_watching+0x15/0xb0 [ 226.922839][ T9131] ? do_syscall_64+0xbe/0x3b0 [ 226.922870][ T9131] do_syscall_64+0xfa/0x3b0 [ 226.922896][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.922921][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.922941][ T9131] ? clear_bhb_loop+0x60/0xb0 [ 226.922966][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.922985][ T9131] RIP: 0033:0x7fba9ef8e929 [ 226.923003][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.923020][ T9131] RSP: 002b:00007fba9fe3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.923042][ T9131] RAX: ffffffffffffffda RBX: 00007fba9f1b5fa0 RCX: 00007fba9ef8e929 [ 226.923061][ T9131] RDX: 0000000000008004 RSI: 0000200000000900 RDI: 0000000000000004 [ 226.923073][ T9131] RBP: 00007fba9fe3a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.923085][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.923096][ T9131] R13: 0000000000000000 R14: 00007fba9f1b5fa0 R15: 00007ffe19921718 [ 226.923129][ T9131] [ 227.226885][ T5834] Bluetooth: hci1: command tx timeout [ 227.321745][ T9051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.410200][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 227.448282][ T9051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.509289][ T9051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.535069][ T9051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.603028][ T9141] netlink: 'syz.5.993': attribute type 4 has an invalid length. [ 227.739197][ T9160] netlink: 72 bytes leftover after parsing attributes in process `syz.5.997'. [ 227.882789][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.894258][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.901936][ T9105] bridge_slave_0: entered allmulticast mode [ 227.922874][ T9105] bridge_slave_0: entered promiscuous mode [ 227.943403][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.964469][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.972463][ T9105] bridge_slave_1: entered allmulticast mode [ 227.980690][ T9105] bridge_slave_1: entered promiscuous mode [ 228.003658][ T9166] lo speed is unknown, defaulting to 1000 [ 228.081812][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.176943][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.250129][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1000'. [ 228.397777][ T9105] team0: Port device team_slave_0 added [ 228.461221][ T9105] team0: Port device team_slave_1 added [ 228.601212][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 228.642258][ T9185] netlink: 'syz.5.1002': attribute type 11 has an invalid length. [ 228.654146][ T9185] sctp: [Deprecated]: syz.5.1002 (pid 9185) Use of int in max_burst socket option. [ 228.654146][ T9185] Use struct sctp_assoc_value instead [ 228.713196][ T5844] hid-generic 0005:0458:0A0B.0001: item fetching failed at offset 1/3 [ 228.725358][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.736036][ T5844] hid-generic 0005:0458:0A0B.0001: probe with driver hid-generic failed with error -22 [ 228.753181][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.756448][ T5834] Bluetooth: hci6: command tx timeout [ 228.791180][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1003'. [ 228.834516][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.901358][ T9195] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 228.923218][ T9195] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1004'. [ 228.934927][ T9195] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 228.952361][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.967620][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.010009][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.183055][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.307202][ T5834] Bluetooth: hci1: command tx timeout [ 229.351042][ T9199] pim6reg1: entered promiscuous mode [ 229.356721][ T9199] pim6reg1: entered allmulticast mode [ 230.836747][ T5834] Bluetooth: hci6: command tx timeout [ 231.218960][ T9105] hsr_slave_0: entered promiscuous mode [ 231.232932][ T9105] hsr_slave_1: entered promiscuous mode [ 231.239438][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.247384][ T9105] Cannot create hsr debugfs directory [ 231.413139][ T9051] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.514744][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1013'. [ 231.563386][ T9224] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.573685][ T9224] team0: Port device batadv1 added [ 231.581918][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.589170][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.669691][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1014'. [ 231.679255][ T9227] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1014'. [ 231.721200][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.728387][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.755477][ T9227] vlan2: entered allmulticast mode [ 231.762370][ T9227] macvlan1: entered allmulticast mode [ 231.768084][ T9227] veth1_vlan: entered allmulticast mode [ 231.963324][ T9229] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 232.368133][ T9105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.402614][ T9105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.438788][ T9105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.469935][ T9105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.502664][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.907516][ T5834] Bluetooth: hci6: command tx timeout [ 233.026211][ T9261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.051251][ T9261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.071708][ T9261] bond0 (unregistering): Released all slaves [ 233.139849][ T9245] syzkaller1: entered promiscuous mode [ 233.147617][ T9245] syzkaller1: entered allmulticast mode [ 233.177542][ T9258] vxcan3: entered allmulticast mode [ 233.183461][ T9264] pim6reg1: entered promiscuous mode [ 233.192146][ T9264] pim6reg1: entered allmulticast mode [ 233.428364][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.527725][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.571955][ T9280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.599799][ T9276] sctp: [Deprecated]: syz.6.1023 (pid 9276) Use of int in max_burst socket option. [ 233.599799][ T9276] Use struct sctp_assoc_value instead [ 233.654525][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.661803][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.701476][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.708734][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.756528][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 233.919798][ T9286] lo speed is unknown, defaulting to 1000 [ 234.004490][ T9051] veth0_vlan: entered promiscuous mode [ 234.039234][ T9289] IPVS: persistence engine module ip_vs_pe_ not found [ 234.201180][ T9051] veth1_vlan: entered promiscuous mode [ 234.356897][ T9051] veth0_macvtap: entered promiscuous mode [ 234.390598][ T9051] veth1_macvtap: entered promiscuous mode [ 234.563843][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.620899][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.658685][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.695202][ T9051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.704269][ T9051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.725967][ T9051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.737058][ T9051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.918350][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.926222][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.935110][ T9105] veth0_vlan: entered promiscuous mode [ 234.965894][ T9105] veth1_vlan: entered promiscuous mode [ 235.009648][ T4575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.018444][ T4575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.054739][ T9105] veth0_macvtap: entered promiscuous mode [ 235.071716][ T9105] veth1_macvtap: entered promiscuous mode [ 235.152467][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.173292][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.195800][ T9105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.204944][ T9105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.214864][ T9105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.226413][ T9105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.389273][ T6845] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.437365][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.445450][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.501217][ T6845] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.559946][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.571262][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.597610][ T6845] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.763223][ T6845] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.014529][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.023937][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.048591][ T6845] bridge_slave_1: left allmulticast mode [ 236.054294][ T6845] bridge_slave_1: left promiscuous mode [ 236.054710][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.067292][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.079332][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.088110][ T6845] bridge_slave_0: left allmulticast mode [ 236.088283][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.093799][ T6845] bridge_slave_0: left promiscuous mode [ 236.120838][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.534074][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.546942][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.578271][ T6845] bond0 (unregistering): Released all slaves [ 236.693334][ T9303] lo speed is unknown, defaulting to 1000 [ 237.072984][ T6845] hsr_slave_0: left promiscuous mode [ 237.080775][ T6845] hsr_slave_1: left promiscuous mode [ 237.087220][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.094755][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.103702][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.127249][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.159343][ T6845] veth1_macvtap: left promiscuous mode [ 237.166341][ T6845] veth0_macvtap: left promiscuous mode [ 237.173389][ T6845] veth1_vlan: left promiscuous mode [ 237.178819][ T6845] veth0_vlan: left promiscuous mode [ 237.308734][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 237.717098][ T6845] team0 (unregistering): Port device team_slave_1 removed [ 237.760962][ T6845] team0 (unregistering): Port device team_slave_0 removed [ 238.190606][ T5841] Bluetooth: hci1: command tx timeout [ 238.278470][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.294158][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.308269][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.321050][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.335864][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.460409][ T9303] chnl_net:caif_netlink_parms(): no params data found [ 238.515514][ T9309] lo speed is unknown, defaulting to 1000 [ 238.681366][ T9303] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.688971][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.696227][ T9303] bridge_slave_0: entered allmulticast mode [ 238.705887][ T9303] bridge_slave_0: entered promiscuous mode [ 238.722072][ T9303] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.736062][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.743605][ T9303] bridge_slave_1: entered allmulticast mode [ 238.754295][ T9303] bridge_slave_1: entered promiscuous mode [ 238.842869][ T9303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.855586][ T9303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.952920][ T9303] team0: Port device team_slave_0 added [ 238.971320][ T9303] team0: Port device team_slave_1 added [ 239.055764][ T9303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.064797][ T9303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.091655][ T9303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.104379][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 239.121518][ T9303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.128902][ T9303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.155729][ T9303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.201033][ T6845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.312176][ T6845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.364360][ T9303] hsr_slave_0: entered promiscuous mode [ 239.371765][ T9303] hsr_slave_1: entered promiscuous mode [ 239.378489][ T9303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.386075][ T9303] Cannot create hsr debugfs directory [ 239.444958][ T6845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.529455][ T6845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.569916][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.581753][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.589341][ T9309] bridge_slave_0: entered allmulticast mode [ 239.597541][ T9309] bridge_slave_0: entered promiscuous mode [ 239.612546][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.620134][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.628911][ T9309] bridge_slave_1: entered allmulticast mode [ 239.637688][ T9309] bridge_slave_1: entered promiscuous mode [ 239.725273][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.739681][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.832653][ T9309] team0: Port device team_slave_0 added [ 239.878114][ T9309] team0: Port device team_slave_1 added [ 239.947805][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.954796][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.981067][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.994601][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.001791][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.028179][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.059334][ T6845] bridge_slave_1: left allmulticast mode [ 240.065030][ T6845] bridge_slave_1: left promiscuous mode [ 240.071160][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.082294][ T6845] bridge_slave_0: left allmulticast mode [ 240.089813][ T6845] bridge_slave_0: left promiscuous mode [ 240.095601][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.270916][ T51] Bluetooth: hci1: command tx timeout [ 240.427699][ T51] Bluetooth: hci6: command tx timeout [ 240.517679][ T6845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.530687][ T6845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.541468][ T6845] bond0 (unregistering): Released all slaves [ 240.718818][ T9309] hsr_slave_0: entered promiscuous mode [ 240.725368][ T9309] hsr_slave_1: entered promiscuous mode [ 240.734845][ T9309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.742643][ T9309] Cannot create hsr debugfs directory [ 240.926142][ T6845] hsr_slave_0: left promiscuous mode [ 240.944893][ T6845] hsr_slave_1: left promiscuous mode [ 240.953825][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.961525][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.970015][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.978856][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.004665][ T6845] veth1_macvtap: left promiscuous mode [ 241.010498][ T6845] veth0_macvtap: left promiscuous mode [ 241.016118][ T6845] veth1_vlan: left promiscuous mode [ 241.021718][ T6845] veth0_vlan: left promiscuous mode [ 241.545221][ T6845] team0 (unregistering): Port device team_slave_1 removed [ 241.607247][ T6845] team0 (unregistering): Port device team_slave_0 removed [ 242.237988][ T9303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.249382][ T9303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.272964][ T9303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.290986][ T9303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.361828][ T51] Bluetooth: hci1: command tx timeout [ 242.431535][ T9303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.467182][ T9303] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.480607][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.487833][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.513309][ T51] Bluetooth: hci6: command tx timeout [ 242.521382][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.528587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.690816][ T9309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.711472][ T9309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.749309][ T9309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.771430][ T9309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.951355][ T9303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.027634][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.055484][ T9309] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.080850][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.088179][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.103295][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.110519][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.446524][ T9303] veth0_vlan: entered promiscuous mode [ 243.461044][ T9303] veth1_vlan: entered promiscuous mode [ 243.510163][ T9303] veth0_macvtap: entered promiscuous mode [ 243.523438][ T9303] veth1_macvtap: entered promiscuous mode [ 243.545594][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.561467][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.590801][ T9303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.601346][ T9303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.610649][ T9303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.620458][ T9303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.690017][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.741435][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.752483][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.809027][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.826716][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.839097][ T9309] veth0_vlan: entered promiscuous mode [ 243.857630][ T9309] veth1_vlan: entered promiscuous mode [ 243.932313][ T9309] veth0_macvtap: entered promiscuous mode [ 243.981170][ T9309] veth1_macvtap: entered promiscuous mode [ 244.005460][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.029238][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.044854][ T9309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.055185][ T9309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.064444][ T9309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.083191][ T9309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.174551][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.184455][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.234861][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.246444][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.801295][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.291973][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.302874][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.312399][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.320839][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.329199][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.369732][ T9347] lo speed is unknown, defaulting to 1000 [ 245.618527][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.733108][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 245.845726][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.854074][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.861464][ T9347] bridge_slave_0: entered allmulticast mode [ 245.874008][ T9347] bridge_slave_0: entered promiscuous mode [ 245.884493][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.891976][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.900454][ T9347] bridge_slave_1: entered allmulticast mode [ 245.914898][ T9347] bridge_slave_1: entered promiscuous mode [ 245.961869][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.976114][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.039846][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.062126][ T9347] team0: Port device team_slave_0 added [ 246.074814][ T9347] team0: Port device team_slave_1 added [ 246.145013][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.161770][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.169660][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.199523][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.222506][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.230521][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.257948][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.339769][ T9347] hsr_slave_0: entered promiscuous mode [ 246.349494][ T9347] hsr_slave_1: entered promiscuous mode [ 246.356136][ T9347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.364272][ T9347] Cannot create hsr debugfs directory [ 246.450487][ T13] bridge_slave_1: left allmulticast mode [ 246.456179][ T13] bridge_slave_1: left promiscuous mode [ 246.462240][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.473158][ T13] bridge_slave_0: left allmulticast mode [ 246.480288][ T13] bridge_slave_0: left promiscuous mode [ 246.491714][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.879845][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.915791][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.944296][ T13] bond0 (unregistering): Released all slaves [ 247.224611][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.235571][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.249442][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.257613][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.265760][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.385763][ T13] hsr_slave_0: left promiscuous mode [ 247.387122][ T5841] Bluetooth: hci1: command tx timeout [ 247.406546][ T13] hsr_slave_1: left promiscuous mode [ 247.412715][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.427142][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.435225][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.442997][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.466093][ T13] veth1_macvtap: left promiscuous mode [ 247.471966][ T13] veth0_macvtap: left promiscuous mode [ 247.484423][ T13] veth1_vlan: left promiscuous mode [ 247.489981][ T13] veth0_vlan: left promiscuous mode [ 248.035005][ T13] team0 (unregistering): Port device team_slave_1 removed [ 248.083073][ T13] team0 (unregistering): Port device team_slave_0 removed [ 248.573328][ T9356] lo speed is unknown, defaulting to 1000 [ 248.913675][ T9356] chnl_net:caif_netlink_parms(): no params data found [ 248.951387][ T9347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.008973][ T9347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.028432][ T9347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.053102][ T9347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.134407][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.148264][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.155566][ T9356] bridge_slave_0: entered allmulticast mode [ 249.164688][ T9356] bridge_slave_0: entered promiscuous mode [ 249.172889][ T9356] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.191147][ T9356] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.203694][ T9356] bridge_slave_1: entered allmulticast mode [ 249.212117][ T9356] bridge_slave_1: entered promiscuous mode [ 249.290089][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.316772][ T5841] Bluetooth: hci6: command tx timeout [ 249.348190][ T9356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.381166][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.400481][ T9356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.467288][ T5841] Bluetooth: hci1: command tx timeout [ 249.485917][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.510068][ T9356] team0: Port device team_slave_0 added [ 249.525103][ T9356] team0: Port device team_slave_1 added [ 249.581225][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.588673][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.615102][ T9356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.653041][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.681499][ T9356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.695440][ T9356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.722497][ T9356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.824945][ T9356] hsr_slave_0: entered promiscuous mode [ 249.831790][ T9356] hsr_slave_1: entered promiscuous mode [ 249.838815][ T9356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.847601][ T9356] Cannot create hsr debugfs directory [ 250.031190][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.098448][ T13] bridge_slave_1: left allmulticast mode [ 250.104234][ T13] bridge_slave_1: left promiscuous mode [ 250.111985][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.122159][ T13] bridge_slave_0: left allmulticast mode [ 250.128368][ T13] bridge_slave_0: left promiscuous mode [ 250.134152][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.531650][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.542850][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.558511][ T13] bond0 (unregistering): Released all slaves [ 250.620958][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.649817][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.657001][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.718227][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.725419][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.054990][ T13] hsr_slave_0: left promiscuous mode [ 251.077668][ T13] hsr_slave_1: left promiscuous mode [ 251.083871][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.093204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.101912][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.120532][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.145676][ T13] veth1_macvtap: left promiscuous mode [ 251.152005][ T13] veth0_macvtap: left promiscuous mode [ 251.157794][ T13] veth1_vlan: left promiscuous mode [ 251.163182][ T13] veth0_vlan: left promiscuous mode [ 251.387026][ T5841] Bluetooth: hci6: command tx timeout [ 251.546767][ T5841] Bluetooth: hci1: command tx timeout [ 251.695455][ T13] team0 (unregistering): Port device team_slave_1 removed [ 251.744139][ T13] team0 (unregistering): Port device team_slave_0 removed [ 252.203715][ T9356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.231309][ T9356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.299124][ T9356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.311138][ T9356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.429203][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.597607][ T9356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.650953][ T9356] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.687068][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.694231][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.728744][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.735918][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.908685][ T9347] veth0_vlan: entered promiscuous mode [ 252.944939][ T9347] veth1_vlan: entered promiscuous mode [ 252.997480][ T9347] veth0_macvtap: entered promiscuous mode [ 253.012185][ T9347] veth1_macvtap: entered promiscuous mode [ 253.061984][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.090388][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.116797][ T9347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.125628][ T9347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.146345][ T9347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.161333][ T9347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.208984][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.311110][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.323948][ T9356] veth0_vlan: entered promiscuous mode [ 253.326827][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.374683][ T9356] veth1_vlan: entered promiscuous mode [ 253.382785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.393366][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.447938][ T9356] veth0_macvtap: entered promiscuous mode [ 253.463869][ T9356] veth1_macvtap: entered promiscuous mode [ 253.471124][ T5841] Bluetooth: hci6: command tx timeout [ 253.545880][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.570028][ T9356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.591758][ T9356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.601775][ T9356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.610659][ T9356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.619533][ T9356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.717357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.725236][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.766993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.774885][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.339397][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.489146][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.585507][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.734365][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.971256][ T36] bridge_slave_1: left allmulticast mode [ 254.977237][ T36] bridge_slave_1: left promiscuous mode [ 254.985865][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.029185][ T36] bridge_slave_0: left allmulticast mode [ 255.034976][ T36] bridge_slave_0: left promiscuous mode [ 255.055527][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.477721][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.499982][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.510163][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.528970][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.554726][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.702716][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.720232][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.727534][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.727539][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.745428][ T36] bond0 (unregistering): Released all slaves [ 255.811590][ T9391] lo speed is unknown, defaulting to 1000 [ 256.021262][ T36] hsr_slave_0: left promiscuous mode [ 256.036867][ T36] hsr_slave_1: left promiscuous mode [ 256.042923][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.051845][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.060107][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.067704][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.092026][ T36] veth1_macvtap: left promiscuous mode [ 256.097685][ T36] veth0_macvtap: left promiscuous mode [ 256.103253][ T36] veth1_vlan: left promiscuous mode [ 256.110012][ T36] veth0_vlan: left promiscuous mode [ 256.687186][ T36] team0 (unregistering): Port device team_slave_1 removed [ 256.768743][ T36] team0 (unregistering): Port device team_slave_0 removed [ 256.940043][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.948921][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.961770][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.989571][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.997555][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.460141][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 257.500904][ T9395] lo speed is unknown, defaulting to 1000 [ 257.627040][ T51] Bluetooth: hci1: command tx timeout [ 257.664115][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.671905][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.679374][ T9391] bridge_slave_0: entered allmulticast mode [ 257.688580][ T9391] bridge_slave_0: entered promiscuous mode [ 257.710069][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.719026][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.726297][ T9391] bridge_slave_1: entered allmulticast mode [ 257.735866][ T9391] bridge_slave_1: entered promiscuous mode [ 257.803804][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.817623][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.864201][ T9391] team0: Port device team_slave_0 added [ 257.887311][ T9391] team0: Port device team_slave_1 added [ 257.940224][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.948425][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.978371][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.991710][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.998868][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.025086][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.127081][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.211891][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.241102][ T9391] hsr_slave_0: entered promiscuous mode [ 258.248338][ T9391] hsr_slave_1: entered promiscuous mode [ 258.254461][ T9391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.263854][ T9391] Cannot create hsr debugfs directory [ 258.286488][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.309367][ T9395] chnl_net:caif_netlink_parms(): no params data found [ 258.346285][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.576631][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.583779][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.593918][ T9395] bridge_slave_0: entered allmulticast mode [ 258.604373][ T9395] bridge_slave_0: entered promiscuous mode [ 258.632220][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.640441][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.649294][ T9395] bridge_slave_1: entered allmulticast mode [ 258.657726][ T9395] bridge_slave_1: entered promiscuous mode [ 258.753513][ T9395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.764551][ T36] bridge_slave_1: left allmulticast mode [ 258.781379][ T36] bridge_slave_1: left promiscuous mode [ 258.787612][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.797553][ T36] bridge_slave_0: left allmulticast mode [ 258.803209][ T36] bridge_slave_0: left promiscuous mode [ 258.809717][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.077207][ T51] Bluetooth: hci6: command tx timeout [ 259.210263][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.222168][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.233046][ T36] bond0 (unregistering): Released all slaves [ 259.264824][ T9395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.406128][ T9395] team0: Port device team_slave_0 added [ 259.419867][ T9395] team0: Port device team_slave_1 added [ 259.526225][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.537558][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.568452][ T9395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.612222][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.620108][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.646839][ T9395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.677586][ T36] hsr_slave_0: left promiscuous mode [ 259.683708][ T36] hsr_slave_1: left promiscuous mode [ 259.690814][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.698945][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.708290][ T51] Bluetooth: hci1: command tx timeout [ 259.709154][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.721660][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.745979][ T36] veth1_macvtap: left promiscuous mode [ 259.751780][ T36] veth0_macvtap: left promiscuous mode [ 259.757817][ T36] veth1_vlan: left promiscuous mode [ 259.763103][ T36] veth0_vlan: left promiscuous mode [ 260.332639][ T36] team0 (unregistering): Port device team_slave_1 removed [ 260.393009][ T36] team0 (unregistering): Port device team_slave_0 removed [ 260.946100][ T9395] hsr_slave_0: entered promiscuous mode [ 260.953265][ T9395] hsr_slave_1: entered promiscuous mode [ 260.960157][ T9395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.968068][ T9395] Cannot create hsr debugfs directory [ 261.146633][ T5834] Bluetooth: hci6: command tx timeout [ 261.159585][ T9391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.191169][ T9391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.218800][ T9391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.239721][ T9391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.392697][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.434826][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.475616][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.482804][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.525239][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.532493][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.677757][ T9395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.689583][ T9395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.702043][ T9395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.738154][ T9395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.786721][ T5834] Bluetooth: hci1: command tx timeout [ 261.901989][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.018243][ T9395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.065319][ T9395] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.091808][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.099042][ T6845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.141954][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.149195][ T6845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.335391][ T9391] veth0_vlan: entered promiscuous mode [ 262.360158][ T9391] veth1_vlan: entered promiscuous mode [ 262.412730][ T9391] veth0_macvtap: entered promiscuous mode [ 262.423592][ T9391] veth1_macvtap: entered promiscuous mode [ 262.449875][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.466982][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.497217][ T9391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.505995][ T9391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.523922][ T9391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.533050][ T9391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.602986][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.652376][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.670888][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.715627][ T4575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.723749][ T4575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.755223][ T9395] veth0_vlan: entered promiscuous mode [ 262.774805][ T9395] veth1_vlan: entered promiscuous mode [ 262.813131][ T9395] veth0_macvtap: entered promiscuous mode [ 262.839526][ T9395] veth1_macvtap: entered promiscuous mode [ 262.867664][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.883745][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.900691][ T9395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.911374][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 262.917737][ T5850] Bluetooth: hci5: command 0x0405 tx timeout [ 262.924956][ T9395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.934097][ T9395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.943037][ T9395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.063906][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.083133][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.122203][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.135843][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.851760][ T180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.671677][ T180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.801354][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.810364][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.821206][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.831679][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.839745][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.880775][ T9435] lo speed is unknown, defaulting to 1000 [ 265.074004][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 265.175071][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.183579][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.190953][ T9435] bridge_slave_0: entered allmulticast mode [ 265.199967][ T9435] bridge_slave_0: entered promiscuous mode [ 265.209217][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.216516][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.228168][ T9435] bridge_slave_1: entered allmulticast mode [ 265.236152][ T9435] bridge_slave_1: entered promiscuous mode [ 265.281795][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.298712][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.362303][ T9435] team0: Port device team_slave_0 added [ 265.388417][ T180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.408494][ T9435] team0: Port device team_slave_1 added [ 265.455061][ T180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.494452][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.501590][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.529905][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.543591][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.554518][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.580714][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.677834][ T9435] hsr_slave_0: entered promiscuous mode [ 265.684836][ T9435] hsr_slave_1: entered promiscuous mode [ 265.692252][ T9435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.700034][ T9435] Cannot create hsr debugfs directory [ 265.766066][ T180] bridge_slave_1: left allmulticast mode [ 265.772390][ T180] bridge_slave_1: left promiscuous mode [ 265.778410][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.797986][ T180] bridge_slave_0: left allmulticast mode [ 265.803681][ T180] bridge_slave_0: left promiscuous mode [ 265.809573][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.196963][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.214027][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.226754][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.234847][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.244001][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 266.408636][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.422807][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.439713][ T180] bond0 (unregistering): Released all slaves [ 266.603537][ T9444] lo speed is unknown, defaulting to 1000 [ 266.841070][ T180] hsr_slave_0: left promiscuous mode [ 266.849264][ T180] hsr_slave_1: left promiscuous mode [ 266.855249][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.863640][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.873810][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.881374][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.907286][ T5841] Bluetooth: hci1: command tx timeout [ 266.915222][ T180] veth1_macvtap: left promiscuous mode [ 266.921617][ T180] veth0_macvtap: left promiscuous mode [ 266.927382][ T180] veth1_vlan: left promiscuous mode [ 266.932737][ T180] veth0_vlan: left promiscuous mode [ 267.456634][ T180] team0 (unregistering): Port device team_slave_1 removed [ 267.512733][ T180] team0 (unregistering): Port device team_slave_0 removed [ 267.867980][ T31] INFO: task syz.2.218:6679 blocked for more than 143 seconds. [ 267.875615][ T31] Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 [ 267.884952][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.894027][ T31] task:syz.2.218 state:D stack:26888 pid:6679 tgid:6677 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 267.906197][ T31] Call Trace: [ 267.909546][ T31] [ 267.912516][ T31] __schedule+0x16f5/0x4d00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 267.921801][ T31] ? schedule+0x165/0x360 [ 267.926499][ T31] ? __pfx___schedule+0x10/0x10 [ 267.931426][ T31] ? schedule+0x91/0x360 [ 267.935702][ T31] schedule+0x165/0x360 [ 267.940830][ T31] schedule_preempt_disabled+0x13/0x30 [ 267.946336][ T31] __mutex_lock+0x724/0xe80 [ 267.951400][ T31] ? __mutex_lock+0x51b/0xe80 [ 267.956116][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 267.962048][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 267.967300][ T31] ? __nlmsg_put+0xef/0x1b0 [ 267.971849][ T31] ? genlmsg_put+0x137/0x2e0 [ 267.976629][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 267.982204][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.066668][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 268.072831][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 268.116564][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 268.122289][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.166579][ T31] genl_rcv_msg+0x60e/0x790 [ 268.171175][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.176244][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 268.206607][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 268.212757][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 268.246590][ T31] netlink_rcv_skb+0x205/0x470 [ 268.251423][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.276412][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.281798][ T31] ? down_read+0x1ad/0x2e0 [ 268.286261][ T31] genl_rcv+0x28/0x40 [ 268.316425][ T31] netlink_unicast+0x758/0x8d0 [ 268.321297][ T31] netlink_sendmsg+0x805/0xb30 [ 268.326109][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.356458][ T5841] Bluetooth: hci6: command tx timeout [ 268.376435][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 268.381465][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.417696][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.423071][ T31] __sock_sendmsg+0x219/0x270 [ 268.466557][ T31] ____sys_sendmsg+0x505/0x830 [ 268.471576][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.507259][ T31] ? import_iovec+0x74/0xa0 [ 268.511941][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 268.546564][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.551975][ T31] ? __fget_files+0x2a/0x420 [ 268.587669][ T31] ? __fget_files+0x3a0/0x420 [ 268.592434][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 268.598750][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.604784][ T31] ? rcu_is_watching+0x15/0xb0 [ 268.609721][ T31] ? do_syscall_64+0xbe/0x3b0 [ 268.614448][ T31] do_syscall_64+0xfa/0x3b0 [ 268.619188][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.624419][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.634796][ T31] ? clear_bhb_loop+0x60/0xb0 [ 268.655600][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.677710][ T31] RIP: 0033:0x7f83a9f8e929 [ 268.682221][ T31] RSP: 002b:00007f83aaedf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.691121][ T31] RAX: ffffffffffffffda RBX: 00007f83aa1b5fa0 RCX: 00007f83a9f8e929 [ 268.699394][ T31] RDX: 0000000000040040 RSI: 0000200000000540 RDI: 0000000000000003 [ 268.707868][ T31] RBP: 00007f83aa010b39 R08: 0000000000000000 R09: 0000000000000000 [ 268.715874][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.724091][ T31] R13: 0000000000000000 R14: 00007f83aa1b5fa0 R15: 00007ffcf75cd2d8 [ 268.732184][ T31] [ 268.735281][ T31] [ 268.735281][ T31] Showing all locks held in the system: [ 268.743414][ T31] 1 lock held by khungtaskd/31: [ 268.748474][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 268.758671][ T31] 4 locks held by kworker/u8:5/180: [ 268.763900][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 268.774946][ T31] #1: ffffc90002ff7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 268.785691][ T31] #2: ffffffff8f502a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 268.795137][ T31] #3: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 268.805855][ T31] 2 locks held by getty/5593: [ 268.810656][ T31] #0: ffff88802fda40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 268.820612][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 268.831284][ T31] 2 locks held by syz.0.217/6675: [ 268.836308][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 268.844697][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 268.855186][ T31] 2 locks held by syz.2.218/6679: [ 268.860323][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 268.868622][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 268.878880][ T31] 3 locks held by kworker/u8:9/6845: [ 268.884205][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 268.896422][ T31] #1: ffffc9000417fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 268.910773][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 268.920356][ T31] 1 lock held by syz-executor/7049: [ 268.925582][ T31] #0: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 268.936832][ T31] 7 locks held by syz-executor/9435: [ 268.942167][ T31] #0: ffff888035106428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 268.951124][ T31] #1: ffff88805a310c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 268.961253][ T31] #2: ffff8881443280f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 268.971364][ T31] #3: ffffffff8edab208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 268.981907][ T31] #4: ffff888064b030e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 268.992989][ T5841] Bluetooth: hci1: command tx timeout [ 268.994033][ T31] #5: ffff888064b02250 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 269.017349][ T31] #6: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 269.026937][ T31] 1 lock held by syz-executor/9444: [ 269.032166][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 269.041776][ T31] [ 269.044130][ T31] ============================================= [ 269.044130][ T31] [ 269.053242][ T31] NMI backtrace for cpu 1 [ 269.053264][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 269.053288][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.053300][ T31] Call Trace: [ 269.053307][ T31] [ 269.053316][ T31] dump_stack_lvl+0x189/0x250 [ 269.053351][ T31] ? __wake_up_klogd+0xd9/0x110 [ 269.053385][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.053418][ T31] ? __pfx__printk+0x10/0x10 [ 269.053455][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 269.053483][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 269.053503][ T31] ? _printk+0xcf/0x120 [ 269.053530][ T31] ? __pfx__printk+0x10/0x10 [ 269.053555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.053587][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 269.053613][ T31] watchdog+0xfee/0x1030 [ 269.053643][ T31] ? watchdog+0x1de/0x1030 [ 269.053681][ T31] kthread+0x70e/0x8a0 [ 269.053711][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.053737][ T31] ? __pfx_kthread+0x10/0x10 [ 269.053763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.053788][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.053811][ T31] ? __pfx_kthread+0x10/0x10 [ 269.053835][ T31] ret_from_fork+0x3f9/0x770 [ 269.053866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 269.053903][ T31] ? __switch_to_asm+0x39/0x70 [ 269.053924][ T31] ? __switch_to_asm+0x33/0x70 [ 269.053949][ T31] ? __pfx_kthread+0x10/0x10 [ 269.053975][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.054015][ T31] [ 269.054023][ T31] Sending NMI from CPU 1 to CPUs 0: [ 269.218765][ C0] NMI backtrace for cpu 0 [ 269.218783][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 269.218804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.218815][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 269.218843][ C0] RIP: 0010:debug_check_no_obj_freed+0x230/0x470 [ 269.218867][ C0] Code: 08 4c 89 ff e8 31 5a 5c fd 49 8b 07 48 89 44 24 18 4d 8d 67 18 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 e7 e8 06 5a 5c fd 49 8b 2c 24 48 3b 6c 24 50 0f 92 c0 [ 269.218882][ C0] RSP: 0018:ffffc90000127880 EFLAGS: 00000046 [ 269.218895][ C0] RAX: 1ffff1100b59bec0 RBX: 0000000000000002 RCX: dffffc0000000000 [ 269.218916][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000127760 [ 269.218927][ C0] RBP: ffff88807ccc8158 R08: 0000000000000003 R09: 0000000000000004 [ 269.218938][ C0] R10: dffffc0000000000 R11: fffff52000024eec R12: ffff88805acdf600 [ 269.218951][ C0] R13: ffff88805ad68230 R14: 1ffff1100b59bebd R15: ffff88805acdf5e8 [ 269.218964][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 269.218977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.218988][ C0] CR2: 00007fba9fce7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 269.219003][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.219013][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.219023][ C0] Call Trace: [ 269.219029][ C0] [ 269.219048][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 269.219069][ C0] kmem_cache_free+0x113/0x400 [ 269.219090][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 269.219121][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 269.219147][ C0] process_scheduled_works+0xae1/0x17b0 [ 269.219189][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.219224][ C0] worker_thread+0x8a0/0xda0 [ 269.219266][ C0] kthread+0x70e/0x8a0 [ 269.219284][ C0] ? __pfx_worker_thread+0x10/0x10 [ 269.219298][ C0] ? __pfx_kthread+0x10/0x10 [ 269.219316][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.219335][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.219354][ C0] ? __pfx_kthread+0x10/0x10 [ 269.219371][ C0] ret_from_fork+0x3f9/0x770 [ 269.219394][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 269.219419][ C0] ? __switch_to_asm+0x39/0x70 [ 269.219435][ C0] ? __switch_to_asm+0x33/0x70 [ 269.219450][ C0] ? __pfx_kthread+0x10/0x10 [ 269.219468][ C0] ret_from_fork_asm+0x1a/0x30 [ 269.219492][ C0] [ 269.252634][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 269.252660][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12428-gc09ef59e17c6 #0 PREEMPT(full) [ 269.252699][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.252714][ T31] Call Trace: [ 269.252724][ T31] [ 269.252736][ T31] dump_stack_lvl+0x99/0x250 [ 269.252777][ T31] ? __asan_memcpy+0x40/0x70 [ 269.252811][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.252845][ T31] ? __pfx__printk+0x10/0x10 [ 269.252884][ T31] panic+0x2db/0x790 [ 269.252928][ T31] ? __pfx_panic+0x10/0x10 [ 269.252960][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 269.253000][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 269.253029][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 269.253065][ T31] watchdog+0x102d/0x1030 [ 269.253096][ T31] ? watchdog+0x1de/0x1030 [ 269.253136][ T31] kthread+0x70e/0x8a0 [ 269.253166][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.253193][ T31] ? __pfx_kthread+0x10/0x10 [ 269.253222][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.253248][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.253274][ T31] ? __pfx_kthread+0x10/0x10 [ 269.253300][ T31] ret_from_fork+0x3f9/0x770 [ 269.253336][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 269.253372][ T31] ? __switch_to_asm+0x39/0x70 [ 269.253394][ T31] ? __switch_to_asm+0x33/0x70 [ 269.253415][ T31] ? __pfx_kthread+0x10/0x10 [ 269.253441][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.253481][ T31] [ 269.622208][ T31] Kernel Offset: disabled [ 269.626541][ T31] Rebooting in 86400 seconds..